{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.pixee/codemodder-python","documentNamespace":"https://spdx.org/spdxdocs/protobom/f996ffd2-5e1e-4ae4-92a1-c884c4dbb81b","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260409125808-b30cb6032525+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-04-10T01:09:21Z"},"packages":[{"name":"pixee/upload-tool-results-action","SPDXID":"SPDXRef-githubactions-pixee-upload-tool-results-action-2.5.0-75c946","versionInfo":"2.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pixee/upload-tool-results-action@2.5.0"}]},{"name":"codecov/codecov-action","SPDXID":"SPDXRef-githubactions-codecov-codecov-action-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/codecov/codecov-action@5.%2A.%2A"}]},{"name":"gitpython","SPDXID":"SPDXRef-pypi-gitpython-75c946","versionInfo":"\u003c 4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/gitpython"}]},{"name":"packaging","SPDXID":"SPDXRef-pypi-packaging-75c946","versionInfo":"\u003e= 24.2,\u003c 25.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/packaging"}]},{"name":"setuptools","SPDXID":"SPDXRef-pypi-setuptools-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/setuptools"}]},{"name":"pylint","SPDXID":"SPDXRef-pypi-pylint-75c946","versionInfo":"\u003e= 4,\u003c 4.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pylint"}]},{"name":"pydantic","SPDXID":"SPDXRef-pypi-pydantic-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pydantic"}]},{"name":"chardet","SPDXID":"SPDXRef-pypi-chardet-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/chardet"}]},{"name":"boltons","SPDXID":"SPDXRef-pypi-boltons-75c946","versionInfo":"\u003e= 21.0,\u003c 25.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/boltons"}]},{"name":"pyyaml","SPDXID":"SPDXRef-pypi-pyyaml-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyyaml"}]},{"name":"toml","SPDXID":"SPDXRef-pypi-toml-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/toml"}]},{"name":"sarif-pydantic","SPDXID":"SPDXRef-pypi-sarif-pydantic-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sarif-pydantic"}]},{"name":"libcst","SPDXID":"SPDXRef-pypi-libcst-75c946","versionInfo":"\u003e= 1.8,\u003c 1.9","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/libcst"}]},{"name":"isort","SPDXID":"SPDXRef-pypi-isort-75c946","versionInfo":"\u003e= 6.1,\u003c 7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/isort"}]},{"name":"python-json-logger","SPDXID":"SPDXRef-pypi-python-json-logger-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/python-json-logger"}]},{"name":"wrapt","SPDXID":"SPDXRef-pypi-wrapt-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/wrapt"}]},{"name":"tomlkit","SPDXID":"SPDXRef-pypi-tomlkit-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tomlkit"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@6.%2A.%2A"}]},{"name":"stefanzweifel/git-auto-commit-action","SPDXID":"SPDXRef-githubactions-stefanzweifel-git-auto-commit-action-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/stefanzweifel/git-auto-commit-action@7.%2A.%2A"}]},{"name":"pre-commit/action","SPDXID":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","versionInfo":"3.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pre-commit/action@3.0.1"}]},{"name":"peter-evans/create-pull-request","SPDXID":"SPDXRef-githubactions-peter-evans-create-pull-request-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/peter-evans/create-pull-request@7.%2A.%2A"}]},{"name":"browniebroke/pre-commit-autoupdate-action","SPDXID":"SPDXRef-githubactions-browniebroke-pre-commit-autoupdate-action-main-75c946","versionInfo":"main","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/browniebroke/pre-commit-autoupdate-action@main"}]},{"name":"com.github.pixee/codemodder-python","SPDXID":"SPDXRef-github-pixee-codemodder-python-main-a4c594","versionInfo":"main","downloadLocation":"git+https://github.com/pixee/codemodder-python","filesAnalyzed":false,"licenseDeclared":"AGPL-3.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/pixee/codemodder-python@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-libcst-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-codecov-codecov-action-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-pydantic-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-boltons-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-tomlkit-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-peter-evans-create-pull-request-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-pixee-upload-tool-results-action-2.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-pylint-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-pyyaml-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-wrapt-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-isort-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-gitpython-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-packaging-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-chardet-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-toml-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-sarif-pydantic-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-stefanzweifel-git-auto-commit-action-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-setuptools-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-pypi-python-json-logger-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relatedSpdxElement":"SPDXRef-githubactions-browniebroke-pre-commit-autoupdate-action-main-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-pixee-codemodder-python-main-a4c594","relationshipType":"DESCRIBES"}]}