sbom.spdx.json

{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "modernc.org/sqlite",
  "documentNamespace": "https://gitlab.com/cznic/sqlite/-/spdx/0738672427d583e06bcafdb35c2c83b9ed165ac2ebd5c2b2188f9e4634e92364",
  "creationInfo": {
    "created": "1970-01-01T00:00:00Z",
    "creators": [
      "Tool: licensegen",
      "Organization: The Sqlite Authors"
    ],
    "comment": "Generated by licensegen in the modernc.org/sqlite repository; run make sbom. The creation timestamp is fixed so that regenerating an unchanged tree is byte-identical and a staleness check is meaningful; the authoritative date is that of the commit which last changed this file. The document namespace is derived from the document's own content. See SBOM.md."
  },
  "documentDescribes": [
    "SPDXRef-Package-modernc.org-sqlite"
  ],
  "packages": [
    {
      "SPDXID": "SPDXRef-Package-modernc.org-sqlite",
      "name": "modernc.org/sqlite",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://gitlab.com/cznic/sqlite",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/sqlite",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2017 The Sqlite Authors. All rights reserved.",
      "comment": "Describes the source tree. The release version is applied by the maintainer when a tag is pushed, so no version is asserted here.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/sqlite"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-Go",
      "name": "Go",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://github.com/golang/go",
      "filesAnalyzed": false,
      "homepage": "https://github.com/golang/go",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "NOASSERTION",
      "comment": "Reached through modernc.org/libc, which carries the upstream notice. That notice does not record the upstream revision, so no version is asserted."
    },
    {
      "SPDXID": "SPDXRef-Package-NixOS-nixpkgs",
      "name": "NixOS/nixpkgs",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://github.com/NixOS/nixpkgs",
      "filesAnalyzed": false,
      "homepage": "https://github.com/NixOS/nixpkgs",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "comment": "Reached through modernc.org/libc, which carries the upstream notice. That notice does not record the upstream revision, so no version is asserted."
    },
    {
      "SPDXID": "SPDXRef-Package-SQLite-3.54.1",
      "name": "SQLite",
      "versionInfo": "3.54.1",
      "downloadLocation": "https://sqlite.org/",
      "filesAnalyzed": false,
      "homepage": "https://sqlite.org/",
      "licenseConcluded": "LicenseRef-SQLite-PublicDomain",
      "licenseDeclared": "LicenseRef-SQLite-PublicDomain",
      "copyrightText": "NOASSERTION",
      "comment": "C source transpiled to Go by modernc.org/ccgo and committed to this repository; it appears in no Go module graph. The SQLite C amalgamation, translated to Go by modernc.org/ccgo. Local copy of the upstream dedication: LICENSE-SQLITE.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:generic/sqlite@3.54.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-SQLite-TCL-test-suite",
      "name": "SQLite TCL test suite",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://sqlite.org/",
      "filesAnalyzed": false,
      "homepage": "https://sqlite.org/",
      "licenseConcluded": "LicenseRef-SQLite-PublicDomain",
      "licenseDeclared": "LicenseRef-SQLite-PublicDomain",
      "copyrightText": "NOASSERTION",
      "comment": "SQLite's own TCL and C test suite, vendored under testdata/. Present in a clone and in the module zip; compiled into nothing."
    },
    {
      "SPDXID": "SPDXRef-Package-SQLite-test-demovfs.c",
      "name": "SQLite `test_demovfs.c`",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://www.sqlite.org/src/doc/trunk/src/test_demovfs.c",
      "filesAnalyzed": false,
      "homepage": "https://www.sqlite.org/src/doc/trunk/src/test_demovfs.c",
      "licenseConcluded": "LicenseRef-SQLite-PublicDomain",
      "licenseDeclared": "LicenseRef-SQLite-PublicDomain",
      "copyrightText": "NOASSERTION",
      "comment": "C source transpiled to Go by modernc.org/ccgo and committed to this repository; it appears in no Go module graph. Starting point of the Go-fs VFS bridge, linked only when modernc.org/sqlite/vfs is imported. Carries SQLite's own copyright disclaimer."
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-chzyer-readline-v1.5.1",
      "name": "github.com/chzyer/readline",
      "versionInfo": "v1.5.1",
      "downloadLocation": "https://proxy.golang.org/github.com/chzyer/readline/@v/v1.5.1.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/chzyer/readline",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright (c) 2015 Chzyer",
      "comment": "Reached via github.com/google/pprof.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-dustin-go-humanize-v1.1.0",
      "name": "github.com/dustin/go-humanize",
      "versionInfo": "v1.1.0",
      "downloadLocation": "https://proxy.golang.org/github.com/dustin/go-humanize/@v/v1.1.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/dustin/go-humanize",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright (c) 2005-2008  Dustin Sallings \u003cdustin@spy.net\u003e",
      "comment": "Reached via modernc.org/libc, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.1.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-google-pprof-v0.0.0-20261016150608-1facf8f91b50",
      "name": "github.com/google/pprof",
      "versionInfo": "v0.0.0-20261016150608-1facf8f91b50",
      "downloadLocation": "https://proxy.golang.org/github.com/google/pprof/@v/v0.0.0-20261016150608-1facf8f91b50.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/google/pprof",
      "licenseConcluded": "Apache-2.0 AND BSD-3-Clause",
      "licenseDeclared": "Apache-2.0 AND BSD-3-Clause",
      "copyrightText": "Copyright [yyyy] [name of copyright owner]\nCopyright 2009-2017 Andrea Leofreddi \u003ca.leofreddi@vleo.net\u003e. All rights reserved.",
      "comment": "Reached via go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20261016150608-1facf8f91b50"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-google-uuid-v1.6.0",
      "name": "github.com/google/uuid",
      "versionInfo": "v1.6.0",
      "downloadLocation": "https://proxy.golang.org/github.com/google/uuid/@v/v1.6.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/google/uuid",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2009,2014 Google Inc. All rights reserved.",
      "comment": "Reached via modernc.org/libc, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-hashicorp-golang-lru-v2-v2.0.7",
      "name": "github.com/hashicorp/golang-lru/v2",
      "versionInfo": "v2.0.7",
      "downloadLocation": "https://proxy.golang.org/github.com/hashicorp/golang-lru/v2/@v/v2.0.7.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/hashicorp/golang-lru/v2",
      "licenseConcluded": "MPL-2.0 AND BSD-3-Clause",
      "licenseDeclared": "MPL-2.0 AND BSD-3-Clause",
      "copyrightText": "Copyright (c) 2014 HashiCorp, Inc.\nCopyright (c) 2009 The Go Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-ianlancetaylor-demangle-v0.0.0-20250417193237-f615e6bd150b",
      "name": "github.com/ianlancetaylor/demangle",
      "versionInfo": "v0.0.0-20250417193237-f615e6bd150b",
      "downloadLocation": "https://proxy.golang.org/github.com/ianlancetaylor/demangle/@v/v0.0.0-20250417193237-f615e6bd150b.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/ianlancetaylor/demangle",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2015 The Go Authors. All rights reserved.",
      "comment": "Reached via github.com/google/pprof.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20250417193237-f615e6bd150b"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-mattn-go-isatty-v0.0.24",
      "name": "github.com/mattn/go-isatty",
      "versionInfo": "v0.0.24",
      "downloadLocation": "https://proxy.golang.org/github.com/mattn/go-isatty/@v/v0.0.24.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/mattn/go-isatty",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright (c) Yasuhiro MATSUMOTO \u003cmattn.jp@gmail.com\u003e",
      "comment": "Reached via modernc.org/libc, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-ncruces-go-strftime-v1.1.0",
      "name": "github.com/ncruces/go-strftime",
      "versionInfo": "v1.1.0",
      "downloadLocation": "https://proxy.golang.org/github.com/ncruces/go-strftime/@v/v1.1.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/ncruces/go-strftime",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright (c) 2022 Nuno Cruces",
      "comment": "Reached via modernc.org/libc, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/ncruces/go-strftime@v1.1.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-github.com-remyoudompheng-bigfft-v0.0.0-20230129092748-24d4a6f8daec",
      "name": "github.com/remyoudompheng/bigfft",
      "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec",
      "downloadLocation": "https://proxy.golang.org/github.com/remyoudompheng/bigfft/@v/v0.0.0-20230129092748-24d4a6f8daec.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/github.com/remyoudompheng/bigfft",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2012 The Go Authors. All rights reserved.",
      "comment": "Reached via modernc.org/fileutil, modernc.org/libc, modernc.org/mathutil, modernc.org/memory, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-go-netdb",
      "name": "go-netdb",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://github.com/dominikh/go-netdb",
      "filesAnalyzed": false,
      "homepage": "https://github.com/dominikh/go-netdb",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "comment": "Reached through modernc.org/libc, which carries the upstream notice. That notice does not record the upstream revision, so no version is asserted."
    },
    {
      "SPDXID": "SPDXRef-Package-golang.org-x-mod-v0.42.0",
      "name": "golang.org/x/mod",
      "versionInfo": "v0.42.0",
      "downloadLocation": "https://proxy.golang.org/golang.org/x/mod/@v/v0.42.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/golang.org/x/mod",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright 2009 The Go Authors.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/mod@v0.42.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-golang.org-x-sync-v0.24.0",
      "name": "golang.org/x/sync",
      "versionInfo": "v0.24.0",
      "downloadLocation": "https://proxy.golang.org/golang.org/x/sync/@v/v0.24.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/golang.org/x/sync",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright 2009 The Go Authors.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/sync@v0.24.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-golang.org-x-sys-v0.49.0",
      "name": "golang.org/x/sys",
      "versionInfo": "v0.49.0",
      "downloadLocation": "https://proxy.golang.org/golang.org/x/sys/@v/v0.49.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/golang.org/x/sys",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright 2009 The Go Authors.",
      "comment": "Reached via github.com/google/pprof, github.com/mattn/go-isatty, modernc.org/libc, modernc.org/memory, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/sys@v0.49.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-golang.org-x-tools-v0.52.0",
      "name": "golang.org/x/tools",
      "versionInfo": "v0.52.0",
      "downloadLocation": "https://proxy.golang.org/golang.org/x/tools/@v/v0.52.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/golang.org/x/tools",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright 2009 The Go Authors.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/tools@v0.52.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-cc-v4-v4.30.3",
      "name": "modernc.org/cc/v4",
      "versionInfo": "v4.30.3",
      "downloadLocation": "https://proxy.golang.org/modernc.org/cc/v4/@v/v4.30.3.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/cc/v4",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2014 The CC Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/cc/v4@v4.30.3"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-ccgo-v4-v4.37.0",
      "name": "modernc.org/ccgo/v4",
      "versionInfo": "v4.37.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/ccgo/v4/@v/v4.37.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/ccgo/v4",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2017 The CCGO Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/ccgo/v4@v4.37.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-fileutil-v1.4.0",
      "name": "modernc.org/fileutil",
      "versionInfo": "v1.4.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/fileutil/@v/v1.4.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/fileutil",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2014 The fileutil Authors. All rights reserved.\nCopyright (c) 2011 CZ.NIC z.s.p.o. All rights reserved.",
      "comment": "Reached via modernc.org/libc, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/fileutil@v1.4.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-gc-v2-v2.6.5",
      "name": "modernc.org/gc/v2",
      "versionInfo": "v2.6.5",
      "downloadLocation": "https://proxy.golang.org/modernc.org/gc/v2/@v/v2.6.5.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/gc/v2",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2016 The GC Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/gc/v2@v2.6.5"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-gc-v3-v3.2.0",
      "name": "modernc.org/gc/v3",
      "versionInfo": "v3.2.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/gc/v3/@v/v3.2.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/gc/v3",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2016 The GC Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/gc/v3@v3.2.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-goabi0-v0.2.0",
      "name": "modernc.org/goabi0",
      "versionInfo": "v0.2.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/goabi0/@v/v0.2.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/goabi0",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2025 The goabi0 Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/goabi0@v0.2.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-libc-v1.79.0",
      "name": "modernc.org/libc",
      "versionInfo": "v1.79.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/libc/@v/v1.79.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/libc",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2017 The Libc Authors. All rights reserved.",
      "comment": "Reached via go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/libc@v1.79.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-mathutil-v1.7.1",
      "name": "modernc.org/mathutil",
      "versionInfo": "v1.7.1",
      "downloadLocation": "https://proxy.golang.org/modernc.org/mathutil/@v/v1.7.1.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/mathutil",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2014 The mathutil Authors. All rights reserved.\nCopyright (c) 2014 The mersenne Authors. All rights reserved.",
      "comment": "Reached via modernc.org/fileutil, modernc.org/libc, modernc.org/memory, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-memory-v1.12.1",
      "name": "modernc.org/memory",
      "versionInfo": "v1.12.1",
      "downloadLocation": "https://proxy.golang.org/modernc.org/memory/@v/v1.12.1.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/memory",
      "licenseConcluded": "BSD-3-Clause AND LicenseRef-L5",
      "licenseDeclared": "BSD-3-Clause AND LicenseRef-L5",
      "copyrightText": "Copyright (c) 2017 The Memory Authors. All rights reserved.\nCopyright (c) 2009 The Go Authors. All rights reserved.\nCopyright (c) 2011, Evan Shaw \u003cedsrzf@gmail.com\u003e\nAll rights reserved.",
      "comment": "Reached via modernc.org/libc, go.mod.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-opt-v0.2.0",
      "name": "modernc.org/opt",
      "versionInfo": "v0.2.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/opt/@v/v0.2.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/opt",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2019 The Opt Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/opt@v0.2.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-sortutil-v1.2.1",
      "name": "modernc.org/sortutil",
      "versionInfo": "v1.2.1",
      "downloadLocation": "https://proxy.golang.org/modernc.org/sortutil/@v/v1.2.1.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/sortutil",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2014 The sortutil Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/sortutil@v1.2.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-strutil-v1.2.1",
      "name": "modernc.org/strutil",
      "versionInfo": "v1.2.1",
      "downloadLocation": "https://proxy.golang.org/modernc.org/strutil/@v/v1.2.1.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/strutil",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2014 The strutil Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/strutil@v1.2.1"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-modernc.org-token-v1.1.0",
      "name": "modernc.org/token",
      "versionInfo": "v1.1.0",
      "downloadLocation": "https://proxy.golang.org/modernc.org/token/@v/v1.1.0.zip",
      "filesAnalyzed": false,
      "homepage": "https://pkg.go.dev/modernc.org/token",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright (c) 2009 The Go Authors. All rights reserved.",
      "comment": "Reached via modernc.org/libc.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/modernc.org/token@v1.1.0"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-musl-libc",
      "name": "musl libc",
      "versionInfo": "NOASSERTION",
      "downloadLocation": "https://musl.libc.org/",
      "filesAnalyzed": false,
      "homepage": "https://musl.libc.org/",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "NOASSERTION",
      "comment": "Reached through modernc.org/libc, which carries the upstream notice. That notice does not record the upstream revision, so no version is asserted."
    },
    {
      "SPDXID": "SPDXRef-Package-sqlite-vec-v0.1.9",
      "name": "sqlite-vec",
      "versionInfo": "v0.1.9",
      "downloadLocation": "https://github.com/asg017/sqlite-vec",
      "filesAnalyzed": false,
      "homepage": "https://github.com/asg017/sqlite-vec",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "copyrightText": "Copyright (c) 2024 Alex Garcia",
      "comment": "C source transpiled to Go by modernc.org/ccgo and committed to this repository; it appears in no Go module graph. Vector-search extension, linked only when modernc.org/sqlite/vec is imported. Local copy: LICENSE-SQLITE_VEC.",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:github/asg017/sqlite-vec@v0.1.9"
        }
      ]
    }
  ],
  "hasExtractedLicensingInfos": [
    {
      "licenseId": "LicenseRef-L5",
      "name": "attribution reference (L5 in LICENSE-3RD-PARTY.md)",
      "extractedText": "https://commons.wikimedia.org/wiki/File:Memory_infra_logo.png"
    },
    {
      "licenseId": "LicenseRef-SQLite-PublicDomain",
      "name": "public domain (L7 in LICENSE-3RD-PARTY.md)",
      "extractedText": "SQLite Is Public Domain\n\nAll of the code and documentation in SQLite has been dedicated to the public\ndomain by the authors. All code authors, and representatives of the companies\nthey work for, have signed affidavits dedicating their contributions to the\npublic domain and originals of those signed affidavits are stored in a firesafe\nat the main offices of Hwaci. Anyone is free to copy, modify, publish, use,\ncompile, sell, or distribute the original SQLite code, either in source code\nform or as a compiled binary, for any purpose, commercial or non-commercial,\nand by any means.\n\nThe previous paragraph applies to the deliverable code and documentation in\nSQLite - those parts of the SQLite library that you actually bundle and ship\nwith a larger application. Some scripts used as part of the build process (for\nexample the \"configure\" scripts generated by autoconf) might fall under other\nopen-source licenses. Nothing from these build scripts ever reaches the final\ndeliverable SQLite library, however, and so the licenses associated with those\nscripts should not be a factor in assessing your rights to copy and use the\nSQLite library.\n\nAll of the deliverable code in SQLite has been written from scratch. No code\nhas been taken from other projects or from the open internet. Every line of\ncode can be traced back to its original author, and all of those authors have\npublic domain dedications on file. So the SQLite code base is clean and is\nuncontaminated with licensed code from other projects."
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-libc-v1.79.0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-Go"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-libc-v1.79.0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-NixOS-nixpkgs"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-SQLite-3.54.1"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-SQLite-TCL-test-suite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-SQLite-test-demovfs.c"
    },
    {
      "spdxElementId": "SPDXRef-Package-github.com-chzyer-readline-v1.5.1",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-github.com-dustin-go-humanize-v1.1.0"
    },
    {
      "spdxElementId": "SPDXRef-Package-github.com-google-pprof-v0.0.0-20261016150608-1facf8f91b50",
      "relationshipType": "TEST_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-github.com-google-uuid-v1.6.0"
    },
    {
      "spdxElementId": "SPDXRef-Package-github.com-hashicorp-golang-lru-v2-v2.0.7",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-github.com-ianlancetaylor-demangle-v0.0.0-20250417193237-f615e6bd150b",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-github.com-mattn-go-isatty-v0.0.24",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-github.com-ncruces-go-strftime-v1.1.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-github.com-remyoudompheng-bigfft-v0.0.0-20230129092748-24d4a6f8daec"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-libc-v1.79.0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-go-netdb"
    },
    {
      "spdxElementId": "SPDXRef-Package-golang.org-x-mod-v0.42.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-golang.org-x-sync-v0.24.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-golang.org-x-sys-v0.49.0"
    },
    {
      "spdxElementId": "SPDXRef-Package-golang.org-x-tools-v0.52.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-cc-v4-v4.30.3",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-ccgo-v4-v4.37.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-fileutil-v1.4.0",
      "relationshipType": "TEST_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-gc-v2-v2.6.5",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-gc-v3-v3.2.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-goabi0-v0.2.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-libc-v1.79.0"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-mathutil-v1.7.1"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-memory-v1.12.1"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-opt-v0.2.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sortutil-v1.2.1",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-strutil-v1.2.1",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-token-v1.1.0",
      "relationshipType": "OPTIONAL_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Package-modernc.org-sqlite"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-libc-v1.79.0",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-musl-libc"
    },
    {
      "spdxElementId": "SPDXRef-Package-modernc.org-sqlite",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-sqlite-vec-v0.1.9"
    }
  ]
}