{ "components": [ { "bom-ref": "Jinja2==3.1.6", "description": "A very fast and expressive template engine.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Chat", "type": "chat", "url": "https://discord.gg/pallets" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://jinja.palletsprojects.com/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pallets/jinja/" }, { "comment": "from packaging metadata Project-URL: Donate", "type": "other", "url": "https://palletsprojects.com/donate" }, { "comment": "from packaging metadata Project-URL: Changes", "type": "release-notes", "url": "https://jinja.palletsprojects.com/changes/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "Jinja2", "purl": "pkg:pypi/jinja2@3.1.6", "type": "library", "version": "3.1.6" }, { "bom-ref": "MarkupSafe==3.0.3", "description": "Safely add untrusted strings to HTML/XML markup.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Chat", "type": "chat", "url": "https://discord.gg/pallets" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://markupsafe.palletsprojects.com/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pallets/markupsafe/" }, { "comment": "from packaging metadata Project-URL: Donate", "type": "other", "url": "https://palletsprojects.com/donate" }, { "comment": "from packaging metadata Project-URL: Changes", "type": "release-notes", "url": "https://markupsafe.palletsprojects.com/page/changes/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "MarkupSafe", "purl": "pkg:pypi/markupsafe@3.0.3", "type": "library", "version": "3.0.3" }, { "bom-ref": "PyYAML==6.0.3", "description": "YAML parser and emitter for Python", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://pypi.org/project/PyYAML/" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pyyaml.org/wiki/PyYAMLDocumentation" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/yaml/pyyaml/issues" }, { "comment": "from packaging metadata Project-URL: Mailing lists", "type": "other", "url": "http://lists.sourceforge.net/lists/listinfo/yaml-core" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/yaml/pyyaml" }, { "comment": "from packaging metadata Project-URL: CI", "type": "other", "url": "https://github.com/yaml/pyyaml/actions" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pyyaml.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "PyYAML", "purl": "pkg:pypi/pyyaml@6.0.3", "type": "library", "version": "6.0.3" }, { "bom-ref": "certifi==2026.7.22", "description": "Python package for providing Mozilla's CA Bundle.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/certifi/python-certifi" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/certifi/python-certifi" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MPL-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)" } } ], "name": "certifi", "purl": "pkg:pypi/certifi@2026.7.22", "type": "library", "version": "2026.7.22" }, { "bom-ref": "charset-normalizer==3.5.1", "description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://charset-normalizer.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/jawah/charset_normalizer/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/jawah/charset_normalizer" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "charset-normalizer", "purl": "pkg:pypi/charset-normalizer@3.5.1", "type": "library", "version": "3.5.1" }, { "bom-ref": "filelock==3.19.1", "description": "A platform independent file lock.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://py-filelock.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/tox-dev/py-filelock/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/tox-dev/py-filelock" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/tox-dev/py-filelock" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Unlicense" } } ], "name": "filelock", "purl": "pkg:pypi/filelock@3.19.1", "type": "library", "version": "3.19.1" }, { "bom-ref": "fsspec==2025.10.0", "description": "File-system specification", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://filesystem-spec.readthedocs.io/en/latest/" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://filesystem-spec.readthedocs.io/en/latest/changelog.html" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/fsspec/filesystem_spec" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "fsspec", "purl": "pkg:pypi/fsspec@2025.10.0", "type": "library", "version": "2025.10.0" }, { "bom-ref": "hf-xet==1.6.0", "description": "Fast transfer of large files with the Hugging Face Hub.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://huggingface.co/docs/hub/xet/index" }, { "comment": "from packaging metadata Project-URL: Issues", "type": "issue-tracker", "url": "https://github.com/huggingface/xet-core/issues" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/huggingface/xet-core.git" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/huggingface/xet-core" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "hf-xet", "purl": "pkg:pypi/hf-xet@1.6.0", "type": "library", "version": "1.6.0" }, { "bom-ref": "huggingface_hub==0.36.2", "description": "Client library to download and publish models, datasets and other repos on the huggingface.co hub", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/huggingface/huggingface_hub" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "huggingface_hub", "purl": "pkg:pypi/huggingface-hub@0.36.2", "type": "library", "version": "0.36.2" }, { "bom-ref": "idna==3.19", "description": "Internationalized Domain Names in Applications (IDNA)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/kjd/idna/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/kjd/idna" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/kjd/idna/blob/master/HISTORY.md" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "idna", "purl": "pkg:pypi/idna@3.19", "type": "library", "version": "3.19" }, { "bom-ref": "importlib_metadata==8.7.1", "description": "Read metadata from Python packages", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python/importlib_metadata" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "importlib_metadata", "purl": "pkg:pypi/importlib-metadata@8.7.1", "type": "library", "version": "8.7.1" }, { "bom-ref": "joblib==1.5.3", "description": "Lightweight pipelining with Python functions", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/joblib/joblib" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://joblib.readthedocs.io" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } } ], "name": "joblib", "purl": "pkg:pypi/joblib@1.5.3", "type": "library", "version": "1.5.3" }, { "bom-ref": "mpmath==1.3.0", "description": "Python library for arbitrary-precision floating-point arithmetic", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "http://mpmath.org/doc/current/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/fredrik-johansson/mpmath/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/fredrik-johansson/mpmath" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "http://mpmath.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "mpmath", "purl": "pkg:pypi/mpmath@1.3.0", "type": "library", "version": "1.3.0" }, { "bom-ref": "networkx==3.2.1", "description": "Python package for creating and manipulating graphs and networks", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://networkx.org/documentation/stable/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/networkx/networkx/issues" }, { "comment": "from packaging metadata Project-URL: Source Code", "type": "other", "url": "https://github.com/networkx/networkx" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://networkx.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "networkx", "purl": "pkg:pypi/networkx@3.2.1", "type": "library", "version": "3.2.1" }, { "bom-ref": "numpy==2.0.2", "description": "Fundamental package for array computing in Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Download", "type": "distribution", "url": "https://pypi.org/project/numpy/#files" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://numpy.org/doc/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/numpy/numpy/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/numpy/numpy" }, { "comment": "from packaging metadata Project-URL: Release notes", "type": "other", "url": "https://numpy.org/doc/stable/release" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://numpy.org" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://numpy.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "numpy", "purl": "pkg:pypi/numpy@2.0.2", "type": "library", "version": "2.0.2" }, { "bom-ref": "nvidia-cublas-cu12==12.8.4.1", "description": "CUBLAS native runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cublas-cu12", "purl": "pkg:pypi/nvidia-cublas-cu12@12.8.4.1", "type": "library", "version": "12.8.4.1" }, { "bom-ref": "nvidia-cuda-cupti-cu12==12.8.90", "description": "CUDA profiling tools runtime libs.", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cuda-cupti-cu12", "purl": "pkg:pypi/nvidia-cuda-cupti-cu12@12.8.90", "type": "library", "version": "12.8.90" }, { "bom-ref": "nvidia-cuda-nvrtc-cu12==12.8.93", "description": "NVRTC native runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cuda-nvrtc-cu12", "purl": "pkg:pypi/nvidia-cuda-nvrtc-cu12@12.8.93", "type": "library", "version": "12.8.93" }, { "bom-ref": "nvidia-cuda-runtime-cu12==12.8.90", "description": "CUDA Runtime native Libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cuda-runtime-cu12", "purl": "pkg:pypi/nvidia-cuda-runtime-cu12@12.8.90", "type": "library", "version": "12.8.90" }, { "bom-ref": "nvidia-cudnn-cu12==9.10.2.21", "description": "cuDNN runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cudnn-cu12", "purl": "pkg:pypi/nvidia-cudnn-cu12@9.10.2.21", "type": "library", "version": "9.10.2.21" }, { "bom-ref": "nvidia-cufft-cu12==11.3.3.83", "description": "CUFFT native runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cufft-cu12", "purl": "pkg:pypi/nvidia-cufft-cu12@11.3.3.83", "type": "library", "version": "11.3.3.83" }, { "bom-ref": "nvidia-cufile-cu12==1.13.1.3", "description": "cuFile GPUDirect libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cufile-cu12", "purl": "pkg:pypi/nvidia-cufile-cu12@1.13.1.3", "type": "library", "version": "1.13.1.3" }, { "bom-ref": "nvidia-curand-cu12==10.3.9.90", "description": "CURAND native runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-curand-cu12", "purl": "pkg:pypi/nvidia-curand-cu12@10.3.9.90", "type": "library", "version": "10.3.9.90" }, { "bom-ref": "nvidia-cusolver-cu12==11.7.3.90", "description": "CUDA solver native runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cusolver-cu12", "purl": "pkg:pypi/nvidia-cusolver-cu12@11.7.3.90", "type": "library", "version": "11.7.3.90" }, { "bom-ref": "nvidia-cusparse-cu12==12.5.8.93", "description": "CUSPARSE native runtime libraries", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-cusparse-cu12", "purl": "pkg:pypi/nvidia-cusparse-cu12@12.5.8.93", "type": "library", "version": "12.5.8.93" }, { "bom-ref": "nvidia-cusparselt-cu12==0.7.1", "description": "NVIDIA cuSPARSELt", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cusparselt" } ], "name": "nvidia-cusparselt-cu12", "purl": "pkg:pypi/nvidia-cusparselt-cu12@0.7.1", "type": "library", "version": "0.7.1" }, { "bom-ref": "nvidia-nccl-cu12==2.27.3", "description": "NVIDIA Collective Communication Library (NCCL) Runtime", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-nccl-cu12", "purl": "pkg:pypi/nvidia-nccl-cu12@2.27.3", "type": "library", "version": "2.27.3" }, { "bom-ref": "nvidia-nvjitlink-cu12==12.8.93", "description": "Nvidia JIT LTO Library", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-nvjitlink-cu12", "purl": "pkg:pypi/nvidia-nvjitlink-cu12@12.8.93", "type": "library", "version": "12.8.93" }, { "bom-ref": "nvidia-nvtx-cu12==12.8.90", "description": "NVIDIA Tools Extension", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://developer.nvidia.com/cuda-zone" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: Other/Proprietary License" } } ], "name": "nvidia-nvtx-cu12", "purl": "pkg:pypi/nvidia-nvtx-cu12@12.8.90", "type": "library", "version": "12.8.90" }, { "bom-ref": "packaging==26.3", "description": "Core utilities for Python packages", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://packaging.pypa.io/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/packaging" } ], "licenses": [ { "acknowledgement": "declared", "expression": "Apache-2.0 OR BSD-2-Clause" } ], "name": "packaging", "purl": "pkg:pypi/packaging@26.3", "type": "library", "version": "26.3" }, { "bom-ref": "pillow==11.3.0.post4+tuxcare", "description": "Python Imaging Library (Fork)", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pillow.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Mastodon", "type": "other", "url": "https://fosstodon.org/@pillow" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/python-pillow/Pillow" }, { "comment": "from packaging metadata Project-URL: Release notes", "type": "other", "url": "https://pillow.readthedocs.io/en/stable/releasenotes/index.html" }, { "comment": "from packaging metadata Project-URL: Funding", "type": "other", "url": "https://tidelift.com/subscription/pkg/pypi-pillow?utm_source=pypi-pillow&utm_medium=pypi" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/python-pillow/Pillow/releases" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://python-pillow.github.io" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT-CMU" } } ], "name": "pillow", "purl": "pkg:pypi/pillow@11.3.0.post4%2Btuxcare", "type": "library", "version": "11.3.0.post4+tuxcare" }, { "bom-ref": "pip==23.0.1", "description": "The PyPA recommended tool for installing Python packages.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pip.pypa.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pypa/pip" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://pip.pypa.io/en/stable/news/" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pip.pypa.io/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "pip", "purl": "pkg:pypi/pip@23.0.1", "type": "library", "version": "23.0.1" }, { "bom-ref": "regex==2026.1.15", "description": "Alternative regular expression module, to replace re.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/mrabarnett/mrab-regex" } ], "licenses": [ { "acknowledgement": "declared", "expression": "Apache-2.0 AND CNRI-Python" } ], "name": "regex", "purl": "pkg:pypi/regex@2026.1.15", "type": "library", "version": "2026.1.15" }, { "bom-ref": "requests==2.32.5", "description": "Python HTTP for Humans.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://requests.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/psf/requests" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://requests.readthedocs.io" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "requests", "purl": "pkg:pypi/requests@2.32.5", "type": "library", "version": "2.32.5" }, { "bom-ref": "safetensors==0.7.0", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/huggingface/safetensors" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/huggingface/safetensors" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "safetensors", "properties": [ { "name": "cdx:python:package:required-extra", "value": "torch" } ], "purl": "pkg:pypi/safetensors@0.7.0", "type": "library", "version": "0.7.0" }, { "bom-ref": "scikit-learn==1.6.1", "description": "A set of python modules for machine learning and data mining", "externalReferences": [ { "comment": "from packaging metadata Project-URL: download", "type": "distribution", "url": "https://pypi.org/project/scikit-learn/#files" }, { "comment": "from packaging metadata Project-URL: tracker", "type": "issue-tracker", "url": "https://github.com/scikit-learn/scikit-learn/issues" }, { "comment": "from packaging metadata Project-URL: source", "type": "other", "url": "https://github.com/scikit-learn/scikit-learn" }, { "comment": "from packaging metadata Project-URL: release notes", "type": "other", "url": "https://scikit-learn.org/stable/whats_new" }, { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://scikit-learn.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "scikit-learn", "purl": "pkg:pypi/scikit-learn@1.6.1", "type": "library", "version": "1.6.1" }, { "bom-ref": "scipy==1.13.1", "description": "Fundamental algorithms for scientific computing in Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Download", "type": "distribution", "url": "https://github.com/scipy/scipy/releases" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://docs.scipy.org/doc/scipy/" }, { "comment": "from packaging metadata Project-URL: Tracker", "type": "issue-tracker", "url": "https://github.com/scipy/scipy/issues" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/scipy/scipy" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://scipy.org/" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://scipy.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "scipy", "purl": "pkg:pypi/scipy@1.13.1", "type": "library", "version": "1.13.1" }, { "bom-ref": "sentence-transformers==2.7.0.post2+tuxcare", "description": "Multilingual text embeddings", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://github.com/UKPLab/sentence-transformers/" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://www.SBERT.net" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "sentence-transformers", "purl": "pkg:pypi/sentence-transformers@2.7.0.post2%2Btuxcare", "type": "library", "version": "2.7.0.post2+tuxcare" }, { "bom-ref": "setuptools==58.1.0", "description": "Easily download, build, install, upgrade, and uninstall Python packages", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://setuptools.readthedocs.io/" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/pypa/setuptools" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "setuptools", "purl": "pkg:pypi/setuptools@58.1.0", "type": "library", "version": "58.1.0" }, { "bom-ref": "sympy==1.14.0", "description": "Computer algebra system (CAS) in Python", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/sympy/sympy" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://sympy.org" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "sympy", "purl": "pkg:pypi/sympy@1.14.0", "type": "library", "version": "1.14.0" }, { "bom-ref": "threadpoolctl==3.6.0", "description": "threadpoolctl", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/joblib/threadpoolctl" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "threadpoolctl", "purl": "pkg:pypi/threadpoolctl@3.6.0", "type": "library", "version": "3.6.0" }, { "bom-ref": "tokenizers==0.22.2", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/huggingface/tokenizers" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://github.com/huggingface/tokenizers" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "tokenizers", "purl": "pkg:pypi/tokenizers@0.22.2", "type": "library", "version": "0.22.2" }, { "bom-ref": "torch==2.8.0", "description": "Tensors and Dynamic neural networks in Python with strong GPU acceleration", "externalReferences": [ { "comment": "from packaging metadata: Download-URL", "type": "distribution", "url": "https://github.com/pytorch/pytorch/tags" }, { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://pytorch.org/docs/" }, { "comment": "from packaging metadata Project-URL: Forum", "type": "other", "url": "https://discuss.pytorch.org/" }, { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/pytorch/pytorch" }, { "comment": "from packaging metadata Project-URL: Homepage", "type": "website", "url": "https://pytorch.org/" }, { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://pytorch.org/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "BSD-3-Clause" } }, { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: BSD License" } } ], "name": "torch", "purl": "pkg:pypi/torch@2.8.0", "type": "library", "version": "2.8.0" }, { "bom-ref": "tqdm==4.70.0", "description": "Fast, Extensible Progress Meter", "externalReferences": [ { "comment": "from packaging metadata Project-URL: wiki", "type": "other", "url": "https://github.com/tqdm/tqdm/wiki" }, { "comment": "from packaging metadata Project-URL: changelog", "type": "release-notes", "url": "https://tqdm.github.io/releases" }, { "comment": "from packaging metadata Project-URL: repository", "type": "vcs", "url": "https://github.com/tqdm/tqdm" }, { "comment": "from packaging metadata Project-URL: homepage", "type": "website", "url": "https://tqdm.github.io" } ], "licenses": [ { "acknowledgement": "declared", "expression": "MPL-2.0 AND MIT" } ], "name": "tqdm", "purl": "pkg:pypi/tqdm@4.70.0", "type": "library", "version": "4.70.0" }, { "bom-ref": "transformers==4.57.6.post4+tuxcare", "description": "State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/huggingface/transformers" } ], "licenses": [ { "license": { "acknowledgement": "declared", "name": "License :: OSI Approved :: Apache Software License" } } ], "name": "transformers", "purl": "pkg:pypi/transformers@4.57.6.post4%2Btuxcare", "type": "library", "version": "4.57.6.post4+tuxcare" }, { "bom-ref": "triton==3.4.0", "description": "A language and compiler for custom Deep Learning operations", "externalReferences": [ { "comment": "from packaging metadata: Home-page", "type": "website", "url": "https://github.com/triton-lang/triton/" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "triton", "purl": "pkg:pypi/triton@3.4.0", "type": "library", "version": "3.4.0" }, { "bom-ref": "typing_extensions==4.16.0", "description": "Backported and Experimental Type Hints for Python 3.9+", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://typing-extensions.readthedocs.io/" }, { "comment": "from packaging metadata Project-URL: Bug Tracker", "type": "issue-tracker", "url": "https://github.com/python/typing_extensions/issues" }, { "comment": "from packaging metadata Project-URL: Q & A", "type": "other", "url": "https://github.com/python/typing/discussions" }, { "comment": "from packaging metadata Project-URL: Changes", "type": "release-notes", "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md" }, { "comment": "from packaging metadata Project-URL: Repository", "type": "vcs", "url": "https://github.com/python/typing_extensions" }, { "comment": "from packaging metadata Project-URL: Home", "type": "website", "url": "https://github.com/python/typing_extensions" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "PSF-2.0" } } ], "name": "typing_extensions", "purl": "pkg:pypi/typing-extensions@4.16.0", "type": "library", "version": "4.16.0" }, { "bom-ref": "urllib3==2.6.3", "description": "HTTP library with thread-safe connection pooling, file post, and more.", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Documentation", "type": "documentation", "url": "https://urllib3.readthedocs.io" }, { "comment": "from packaging metadata Project-URL: Issue tracker", "type": "issue-tracker", "url": "https://github.com/urllib3/urllib3/issues" }, { "comment": "from packaging metadata Project-URL: Code", "type": "other", "url": "https://github.com/urllib3/urllib3" }, { "comment": "from packaging metadata Project-URL: Changelog", "type": "release-notes", "url": "https://github.com/urllib3/urllib3/blob/main/CHANGES.rst" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "urllib3", "purl": "pkg:pypi/urllib3@2.6.3", "type": "library", "version": "2.6.3" }, { "bom-ref": "zipp==3.23.1", "description": "Backport of pathlib-compatible object wrapper for zip files", "externalReferences": [ { "comment": "from packaging metadata Project-URL: Source", "type": "other", "url": "https://github.com/jaraco/zipp" } ], "licenses": [ { "license": { "acknowledgement": "declared", "id": "MIT" } } ], "name": "zipp", "purl": "pkg:pypi/zipp@3.23.1", "type": "library", "version": "3.23.1" } ], "dependencies": [ { "dependsOn": [ "MarkupSafe==3.0.3" ], "ref": "Jinja2==3.1.6" }, { "ref": "MarkupSafe==3.0.3" }, { "ref": "PyYAML==6.0.3" }, { "ref": "certifi==2026.7.22" }, { "ref": "charset-normalizer==3.5.1" }, { "ref": "filelock==3.19.1" }, { "dependsOn": [ "Jinja2==3.1.6", "numpy==2.0.2", "requests==2.32.5", "tqdm==4.70.0", "urllib3==2.6.3" ], "ref": "fsspec==2025.10.0" }, { "ref": "hf-xet==1.6.0" }, { "dependsOn": [ "Jinja2==3.1.6", "PyYAML==6.0.3", "filelock==3.19.1", "fsspec==2025.10.0", "hf-xet==1.6.0", "numpy==2.0.2", "packaging==26.3", "pillow==11.3.0.post4+tuxcare", "requests==2.32.5", "safetensors==0.7.0", "torch==2.8.0", "tqdm==4.70.0", "typing_extensions==4.16.0", "urllib3==2.6.3" ], "ref": "huggingface_hub==0.36.2" }, { "ref": "idna==3.19" }, { "dependsOn": [ "packaging==26.3", "zipp==3.23.1" ], "ref": "importlib_metadata==8.7.1" }, { "ref": "joblib==1.5.3" }, { "ref": "mpmath==1.3.0" }, { "dependsOn": [ "numpy==2.0.2", "pillow==11.3.0.post4+tuxcare", "scipy==1.13.1", "sympy==1.14.0" ], "ref": "networkx==3.2.1" }, { "ref": "numpy==2.0.2" }, { "ref": "nvidia-cublas-cu12==12.8.4.1" }, { "ref": "nvidia-cuda-cupti-cu12==12.8.90" }, { "ref": "nvidia-cuda-nvrtc-cu12==12.8.93" }, { "ref": "nvidia-cuda-runtime-cu12==12.8.90" }, { "dependsOn": [ "nvidia-cublas-cu12==12.8.4.1" ], "ref": "nvidia-cudnn-cu12==9.10.2.21" }, { "dependsOn": [ "nvidia-nvjitlink-cu12==12.8.93" ], "ref": "nvidia-cufft-cu12==11.3.3.83" }, { "ref": "nvidia-cufile-cu12==1.13.1.3" }, { "ref": "nvidia-curand-cu12==10.3.9.90" }, { "dependsOn": [ "nvidia-cublas-cu12==12.8.4.1", "nvidia-cusparse-cu12==12.5.8.93", "nvidia-nvjitlink-cu12==12.8.93" ], "ref": "nvidia-cusolver-cu12==11.7.3.90" }, { "dependsOn": [ "nvidia-nvjitlink-cu12==12.8.93" ], "ref": "nvidia-cusparse-cu12==12.5.8.93" }, { "ref": "nvidia-cusparselt-cu12==0.7.1" }, { "ref": "nvidia-nccl-cu12==2.27.3" }, { "ref": "nvidia-nvjitlink-cu12==12.8.93" }, { "ref": "nvidia-nvtx-cu12==12.8.90" }, { "ref": "packaging==26.3" }, { "dependsOn": [ "packaging==26.3", "typing_extensions==4.16.0" ], "ref": "pillow==11.3.0.post4+tuxcare" }, { "ref": "pip==23.0.1" }, { "ref": "regex==2026.1.15" }, { "dependsOn": [ "certifi==2026.7.22", "charset-normalizer==3.5.1", "idna==3.19", "urllib3==2.6.3" ], "ref": "requests==2.32.5" }, { "dependsOn": [ "huggingface_hub==0.36.2", "numpy==2.0.2", "packaging==26.3", "torch==2.8.0" ], "ref": "safetensors==0.7.0" }, { "dependsOn": [ "joblib==1.5.3", "numpy==2.0.2", "pillow==11.3.0.post4+tuxcare", "scipy==1.13.1", "threadpoolctl==3.6.0" ], "ref": "scikit-learn==1.6.1" }, { "dependsOn": [ "mpmath==1.3.0", "numpy==2.0.2", "threadpoolctl==3.6.0", "typing_extensions==4.16.0" ], "ref": "scipy==1.13.1" }, { "dependsOn": [ "huggingface_hub==0.36.2", "numpy==2.0.2", "pillow==11.3.0.post4+tuxcare", "scikit-learn==1.6.1", "scipy==1.13.1", "torch==2.8.0", "tqdm==4.70.0", "transformers==4.57.6.post4+tuxcare" ], "ref": "sentence-transformers==2.7.0.post2+tuxcare" }, { "dependsOn": [ "pip==23.0.1" ], "ref": "setuptools==58.1.0" }, { "dependsOn": [ "mpmath==1.3.0" ], "ref": "sympy==1.14.0" }, { "ref": "threadpoolctl==3.6.0" }, { "dependsOn": [ "huggingface_hub==0.36.2", "numpy==2.0.2", "requests==2.32.5" ], "ref": "tokenizers==0.22.2" }, { "dependsOn": [ "Jinja2==3.1.6", "PyYAML==6.0.3", "filelock==3.19.1", "fsspec==2025.10.0", "networkx==3.2.1", "nvidia-cublas-cu12==12.8.4.1", "nvidia-cuda-cupti-cu12==12.8.90", "nvidia-cuda-nvrtc-cu12==12.8.93", "nvidia-cuda-runtime-cu12==12.8.90", "nvidia-cudnn-cu12==9.10.2.21", "nvidia-cufft-cu12==11.3.3.83", "nvidia-cufile-cu12==1.13.1.3", "nvidia-curand-cu12==10.3.9.90", "nvidia-cusolver-cu12==11.7.3.90", "nvidia-cusparse-cu12==12.5.8.93", "nvidia-cusparselt-cu12==0.7.1", "nvidia-nccl-cu12==2.27.3", "nvidia-nvjitlink-cu12==12.8.93", "nvidia-nvtx-cu12==12.8.90", "setuptools==58.1.0", "sympy==1.14.0", "triton==3.4.0", "typing_extensions==4.16.0" ], "ref": "torch==2.8.0" }, { "dependsOn": [ "requests==2.32.5" ], "ref": "tqdm==4.70.0" }, { "dependsOn": [ "Jinja2==3.1.6", "PyYAML==6.0.3", "filelock==3.19.1", "hf-xet==1.6.0", "huggingface_hub==0.36.2", "importlib_metadata==8.7.1", "numpy==2.0.2", "packaging==26.3", "pillow==11.3.0.post4+tuxcare", "regex==2026.1.15", "requests==2.32.5", "safetensors==0.7.0", "scikit-learn==1.6.1", "scipy==1.13.1", "tokenizers==0.22.2", "torch==2.8.0", "tqdm==4.70.0", "urllib3==2.6.3" ], "ref": "transformers==4.57.6.post4+tuxcare" }, { "dependsOn": [ "importlib_metadata==8.7.1", "numpy==2.0.2", "scipy==1.13.1", "setuptools==58.1.0" ], "ref": "triton==3.4.0" }, { "ref": "typing_extensions==4.16.0" }, { "ref": "urllib3==2.6.3" }, { "ref": "zipp==3.23.1" } ], "metadata": { "timestamp": "2026-09-09T15:56:17.369887+00:00", "tools": { "components": [ { "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-bom/" }, { "type": "documentation", "url": "https://cyclonedx-bom-tool.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python/" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-py", "type": "application", "version": "7.3.1" }, { "description": "Python library for CycloneDX", "externalReferences": [ { "type": "build-system", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions" }, { "type": "distribution", "url": "https://pypi.org/project/cyclonedx-python-lib/" }, { "type": "documentation", "url": "https://cyclonedx-python-library.readthedocs.io/" }, { "type": "issue-tracker", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues" }, { "type": "license", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE" }, { "type": "release-notes", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md" }, { "type": "vcs", "url": "https://github.com/CycloneDX/cyclonedx-python-lib" }, { "type": "website", "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme" } ], "group": "CycloneDX", "licenses": [ { "license": { "acknowledgement": "declared", "id": "Apache-2.0" } } ], "name": "cyclonedx-python-lib", "type": "library", "version": "11.12.0" } ] } }, "serialNumber": "urn:uuid:10fab68c-c9f2-4e92-8059-33857c365d58", "version": 1, "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6" }