{
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
        "created": "2026-10-15T07:51:29Z",
        "creators": [
            "Tool: dd-license-attribution-0.7.1"
        ]
    },
    "dataLicense": "CC0-1.0",
    "name": "github.com/DataDog/dd-trace-go/v2/instrumentation/appsec/emitter/graphqlsec@v2.11.2",
    "spdxVersion": "SPDX-2.3",
    "documentNamespace": "https://datadoghq.com/spdx/github.com-DataDog-dd-trace-go-v2-instrumentation-appsec-emitter-graphqlsec-v2.11.2-b988e6ec-ecfa-453f-9d33-4d9f3f215ba0",
    "packages": [
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-datadog-agent-pkg-remoteconfig-state-1",
            "copyrightText": "Datadog, Inc.",
            "downloadLocation": "https://github.com/DataDog/datadog-agent",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/datadog-agent/pkg/remoteconfig/state",
            "versionInfo": "v0.82.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-datadog-agent-pkg-trace-traceutil-2",
            "copyrightText": "Datadog, Inc.",
            "downloadLocation": "https://github.com/DataDog/datadog-agent",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/datadog-agent/pkg/trace/traceutil",
            "versionInfo": "v0.82.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-datadog-go-v5-3",
            "copyrightText": "Datadog, Inc",
            "downloadLocation": "https://github.com/DataDog/datadog-go",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/datadog-go/v5",
            "versionInfo": "v5.9.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-dd-trace-go-v2-4",
            "copyrightText": "Datadog\nDatadog, Inc.",
            "downloadLocation": "https://github.com/DataDog/dd-trace-go",
            "filesAnalyzed": false,
            "licenseConcluded": "(Apache-2.0 AND (Apache-2.0 OR BSD-3-Clause)) AND BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/dd-trace-go/v2",
            "versionInfo": "v2.11.2"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-go-libddwaf-v5-5",
            "copyrightText": "Datadog, Inc.",
            "downloadLocation": "https://github.com/DataDog/go-libddwaf",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/go-libddwaf/v5",
            "versionInfo": "v5.0.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-DataDog-go-tuf-6",
            "copyrightText": "Justin Samuel and Justin Cappos\nPrime\nThe Tor Project, Inc.",
            "downloadLocation": "https://github.com/DataDog/go-tuf",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/DataDog/go-tuf",
            "versionInfo": "v1.1.1-0.5.2"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-ebitengine-purego-7",
            "copyrightText": "ebitengine",
            "downloadLocation": "https://github.com/ebitengine/purego",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/ebitengine/purego",
            "versionInfo": "v0.10.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-google-uuid-8",
            "copyrightText": "Google Inc.",
            "downloadLocation": "https://github.com/google/uuid",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/google/uuid",
            "versionInfo": "v1.6.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-hashicorp-go-version-9",
            "copyrightText": "IBM Corp. Mozilla",
            "downloadLocation": "https://github.com/hashicorp/go-version",
            "filesAnalyzed": false,
            "licenseConcluded": "MPL-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/hashicorp/go-version",
            "versionInfo": "v1.9.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-json-iterator-go-10",
            "copyrightText": "json-iterator",
            "downloadLocation": "https://github.com/json-iterator/go",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/json-iterator/go",
            "versionInfo": "v1.1.12"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-modern-go-concurrent-11",
            "copyrightText": "modern-go",
            "downloadLocation": "https://github.com/modern-go/concurrent",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/modern-go/concurrent",
            "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-modern-go-reflect2-12",
            "copyrightText": "modern-go",
            "downloadLocation": "https://github.com/modern-go/reflect2",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/modern-go/reflect2",
            "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-philhofer-fwd-13",
            "copyrightText": "Philip Hofer",
            "downloadLocation": "https://github.com/philhofer/fwd",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/philhofer/fwd",
            "versionInfo": "v1.2.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-puzpuzpuz-xsync-v4-14",
            "copyrightText": "puzpuzpuz",
            "downloadLocation": "https://github.com/puzpuzpuz/xsync",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/puzpuzpuz/xsync/v4",
            "versionInfo": "v4.5.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-secure-systems-lab-go-securesystemslib-15",
            "copyrightText": "NYU Secure Systems Lab",
            "downloadLocation": "https://github.com/secure-systems-lab/go-securesystemslib",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/secure-systems-lab/go-securesystemslib",
            "versionInfo": "v0.11.0"
        },
        {
            "SPDXID": "SPDXRef-Package-github.com-tinylib-msgp-16",
            "copyrightText": "Philip Hofer\nThe Go Authors license at",
            "downloadLocation": "https://github.com/tinylib/msgp",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause AND MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "github.com/tinylib/msgp",
            "versionInfo": "v1.6.4"
        },
        {
            "SPDXID": "SPDXRef-Package-go.opentelemetry.io-collector-featuregate-17",
            "copyrightText": "NOASSERTION",
            "downloadLocation": "https://go.opentelemetry.io/collector/featuregate",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "go.opentelemetry.io/collector/featuregate",
            "versionInfo": "v1.61.0"
        },
        {
            "SPDXID": "SPDXRef-Package-go.opentelemetry.io-collector-pdata-18",
            "copyrightText": "NOASSERTION",
            "downloadLocation": "https://go.opentelemetry.io/collector/pdata",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "go.opentelemetry.io/collector/pdata",
            "versionInfo": "v1.61.0"
        },
        {
            "SPDXID": "SPDXRef-Package-go.opentelemetry.io-collector-pdata-pprofile-19",
            "copyrightText": "NOASSERTION",
            "downloadLocation": "https://go.opentelemetry.io/collector/pdata/pprofile",
            "filesAnalyzed": false,
            "licenseConcluded": "Apache-2.0",
            "licenseDeclared": "NOASSERTION",
            "name": "go.opentelemetry.io/collector/pdata/pprofile",
            "versionInfo": "v0.155.0"
        },
        {
            "SPDXID": "SPDXRef-Package-go.uber.org-multierr-20",
            "copyrightText": "Uber Technologies, Inc.",
            "downloadLocation": "https://go.uber.org/multierr",
            "filesAnalyzed": false,
            "licenseConcluded": "MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "go.uber.org/multierr",
            "versionInfo": "v1.11.0"
        },
        {
            "SPDXID": "SPDXRef-Package-go.yaml.in-yaml-v3-21",
            "copyrightText": "Canonical Ltd\nCanonical Ltd.\nKirill Simonov",
            "downloadLocation": "https://go.yaml.in/yaml/v3",
            "filesAnalyzed": false,
            "licenseConcluded": "(MIT AND Apache-2.0) AND MIT",
            "licenseDeclared": "NOASSERTION",
            "name": "go.yaml.in/yaml/v3",
            "versionInfo": "v3.0.4"
        },
        {
            "SPDXID": "SPDXRef-Package-golang.org-x-mod-22",
            "copyrightText": "The Go Authors",
            "downloadLocation": "https://golang.org/x/mod",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "golang.org/x/mod",
            "versionInfo": "v0.41.0"
        },
        {
            "SPDXID": "SPDXRef-Package-golang.org-x-sys-23",
            "copyrightText": "The Go Authors",
            "downloadLocation": "https://golang.org/x/sys",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "golang.org/x/sys",
            "versionInfo": "v0.48.0"
        },
        {
            "SPDXID": "SPDXRef-Package-golang.org-x-time-24",
            "copyrightText": "The Go Authors",
            "downloadLocation": "https://golang.org/x/time",
            "filesAnalyzed": false,
            "licenseConcluded": "BSD-3-Clause",
            "licenseDeclared": "NOASSERTION",
            "name": "golang.org/x/time",
            "versionInfo": "v0.15.0"
        }
    ],
    "relationships": [
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-datadog-agent-pkg-remoteconfig-state-1",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-datadog-agent-pkg-trace-traceutil-2",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-datadog-go-v5-3",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-dd-trace-go-v2-4",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-go-libddwaf-v5-5",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-DataDog-go-tuf-6",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-ebitengine-purego-7",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-google-uuid-8",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-hashicorp-go-version-9",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-json-iterator-go-10",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-modern-go-concurrent-11",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-modern-go-reflect2-12",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-philhofer-fwd-13",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-puzpuzpuz-xsync-v4-14",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-secure-systems-lab-go-securesystemslib-15",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-github.com-tinylib-msgp-16",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-go.opentelemetry.io-collector-featuregate-17",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-go.opentelemetry.io-collector-pdata-18",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-go.opentelemetry.io-collector-pdata-pprofile-19",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-go.uber.org-multierr-20",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-go.yaml.in-yaml-v3-21",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-golang.org-x-mod-22",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-golang.org-x-sys-23",
            "relationshipType": "DESCRIBES"
        },
        {
            "spdxElementId": "SPDXRef-DOCUMENT",
            "relatedSpdxElement": "SPDXRef-Package-golang.org-x-time-24",
            "relationshipType": "DESCRIBES"
        }
    ]
}