{
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
        "created": "2026-10-01T07:13:10Z",
        "creators": [
            "Tool: dd-license-attribution-0.7.1"
        ]
    },
    "dataLicense": "CC0-1.0",
    "name": "github.com/DataDog/datadog-sbom-generator/pkg/reachability/codefile@v1.18.3",
    "spdxVersion": "SPDX-2.3",
    "documentNamespace": "https://datadoghq.com/spdx/github.com-DataDog-datadog-sbom-generator-pkg-reachability-codefile-v1.18.3-d2f63eb3-6f1e-4500-aeb0-f30df32fb3ad",
    "packages": [
        {
            "SPDXID": "SPDXRef-Package-github.com-CycloneDX-cyclonedx-go-1",
            "copyrightText": "OWASP Foundation",
            "downloadLocation": "https://github.com/CycloneDX/cyclonedx-go",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/CycloneDX/cyclonedx-go",
            "versionInfo": "v0.9.2"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-datadog-sbom-generator-2",
            "copyrightText": "Datadog, Inc.\nGoogle LLC.",
            "downloadLocation": "https://github.com/DataDog/datadog-sbom-generator",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/datadog-sbom-generator",
            "versionInfo": "v1.18.3"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-cpuguy83-go-md2man-v2-3",
            "copyrightText": "Brian Goff",
            "downloadLocation": "https://github.com/cpuguy83/go-md2man",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/cpuguy83/go-md2man/v2",
            "versionInfo": "v2.0.6"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-mattn-go-pointer-4",
            "copyrightText": "Yasuhiro Matsumoto",
            "downloadLocation": "https://github.com/mattn/go-pointer",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/mattn/go-pointer",
            "versionInfo": "v0.0.1"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-package-url-packageurl-go-5",
            "copyrightText": "package-url",
            "downloadLocation": "https://github.com/package-url/packageurl-go",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/package-url/packageurl-go",
            "versionInfo": "v0.1.3"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-russross-blackfriday-v2-6",
            "copyrightText": "Russ Ross",
            "downloadLocation": "https://github.com/russross/blackfriday",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-2-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/russross/blackfriday/v2",
            "versionInfo": "v2.1.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-tree-sitter-go-tree-sitter-7",
            "copyrightText": "Amaan Qureshi\nBrian Eugene Wilson, Robert Martin Campbell\nChih-Hao Tsai @ Beckman Institute, University of Illinois\nComputer Systems and Communication Lab, Institute of Information Science, Academia Sinica\nGoogle Inc.\nInternational Business Machines Corporation and others\nLeRoy Benjamin Sharon\nNara Institute of Science and Technology\nPai-Hsiang Hsiao\nTaBE Project\nUnicode, Inc.\nthe V8 project authors",
            "downloadLocation": "https://github.com/tree-sitter/go-tree-sitter",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/tree-sitter/go-tree-sitter",
            "versionInfo": "v0.25.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-tree-sitter-tree-sitter-go-8",
            "copyrightText": "Max Brunsfeld",
            "downloadLocation": "https://github.com/tree-sitter/tree-sitter-go",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/tree-sitter/tree-sitter-go",
            "versionInfo": "v0.25.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-tree-sitter-tree-sitter-java-9",
            "copyrightText": "Ayman Nadeem",
            "downloadLocation": "https://github.com/tree-sitter/tree-sitter-java",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/tree-sitter/tree-sitter-java",
            "versionInfo": "v0.23.5"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-urfave-cli-v2-10",
            "copyrightText": "urfave/cli maintainers",
            "downloadLocation": "https://github.com/urfave/cli",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/urfave/cli/v2",
            "versionInfo": "v2.27.6"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-xrash-smetrics-11",
            "copyrightText": "Felipe da Cunha Goncalves",
            "downloadLocation": "https://github.com/xrash/smetrics",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/xrash/smetrics",
            "versionInfo": "v0.0.0-20240521201337-686a1a2994c1"
        },
        {
            "SPDXID": "SPDXRef-Package-go.uber.org-mock-12",
            "copyrightText": "NOASSERTION",
            "downloadLocation": "https://go.uber.org/mock",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "go.uber.org/mock",
            "versionInfo": "v0.5.2"
        }
    ],
    "relationships": [
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-CycloneDX-cyclonedx-go-1",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-datadog-sbom-generator-2",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-cpuguy83-go-md2man-v2-3",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-mattn-go-pointer-4",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-package-url-packageurl-go-5",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-russross-blackfriday-v2-6",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-tree-sitter-go-tree-sitter-7",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-tree-sitter-tree-sitter-go-8",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-tree-sitter-tree-sitter-java-9",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-urfave-cli-v2-10",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-xrash-smetrics-11",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-go.uber.org-mock-12",
            "relationshipType": "DESCRIBES"
        }
    ]
}