{
  "kind": "source-module-sbom",
  "sourceRevision": "562ad9549eaafb7ffb8de44588f8bee331ffbe1a",
  "generatedAt": "2026-09-16T20:53:37.546603Z",
  "sourceArchiveSha256": "792413b4be51725726a4fec112f472f497b68f0e8c28f99bd04de642b21307f1",
  "generator": {
    "name": "cyclonedx-gomod",
    "version": "v1.12.0"
  },
  "analysisToolchain": "go1.25.12 X:nodwarf5",
  "goModSha256": "d3dd6c68f490388d88efcd21f9e5edaa84d49766f67e717ac96391a09bff022d",
  "goSumSha256": "aa701ed163aabd53037f732dca18be17941ee5374eb2490de04b21e4f2da73f4",
  "file": "source.cdx.json",
  "sha256": "adc12e3e4d9281fe2d995aaf6159df2128d7df84c0b89d75da87b9fca60216c7",
  "scope": "Committed Go module aggregate, including test dependencies and analysis Go standard library; build constraints are not evaluated.",
  "exclusions": [
    "OS and container packages",
    "runtime CDN services and scripts",
    "per-platform release binaries",
    "deployed production artifact inventory"
  ],
  "limitations": [
    "Not a vulnerability scan, license approval or conformity assessment",
    "Detected licenses are evidence, not legal assertions",
    "Unsigned; timestamps and serial identifiers can vary on regeneration"
  ]
}