{"SPDXID":"SPDXRef-DOCUMENT","creationInfo":{"created":"2026-09-01T10:42:02Z","creators":["Person: Python Release Managers","Tool: ReleaseTools-375621b4573d9fc5bdc30491d400512fb1633bb5"],"licenseListVersion":"3.22"},"dataLicense":"CC0-1.0","documentNamespace":"https:\/\/www.python.org\/ftp\/python\/3.15.0\/python-3.15.0rc2-embed-arm64.zip.spdx.json","files":[],"name":"CPython SBOM","packages":[{"SPDXID":"SPDXRef-PACKAGE-bzip2","checksums":[{"algorithm":"SHA256","checksumValue":"ab8d1b0cc087c20d4c32c0e4fcf7d0c733a95da12cedc6d63b3f0a9af07427e2"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/bzip2-1.0.8.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:bzip:bzip2:1.0.8:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"bzip2","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"1.0.8"},{"SPDXID":"SPDXRef-PACKAGE-cpython","checksums":[{"algorithm":"SHA256","checksumValue":"053372ed98223ade7817e65d8c7e89aae2749c1e3439443c72bedd6f4e329fa2"}],"downloadLocation":"https:\/\/www.python.org\/ftp\/python\/3.15.0\/python-3.15.0rc2-embed-arm64.zip","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:python:python:3.15.0rc2:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"PSF-2.0","name":"CPython","originator":"Organization: Python Software Foundation","packageFileName":"python-3.15.0rc2-embed-arm64.zip","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"3.15.0rc2"},{"SPDXID":"SPDXRef-PACKAGE-expat-2.8.4","checksums":[{"algorithm":"SHA256","checksumValue":"b8ece2437692dad44d851c4532723390a5a330990007706be9c8d2b90d294f36"}],"downloadLocation":"https:\/\/github.com\/libexpat\/libexpat\/releases\/download\/R_2_8_4\/expat-2.8.4.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:libexpat_project:libexpat:2.8.4:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"expat","originator":"Organization: Expat development team","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"2.8.4"},{"SPDXID":"SPDXRef-PACKAGE-hacl-star-8ba599b2f6c9701b3dc961db895b0856a2210f76","checksums":[{"algorithm":"SHA256","checksumValue":"61e48893f37cb2280d106cefacf6fb5afe84edf625fec39572d0ee94e1018f26"}],"downloadLocation":"https:\/\/github.com\/hacl-star\/hacl-star\/archive\/8ba599b2f6c9701b3dc961db895b0856a2210f76.zip","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:hacl-star:hacl-star:8ba599b2f6c9701b3dc961db895b0856a2210f76:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"hacl-star","originator":"Organization: HACL* Developers","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"8ba599b2f6c9701b3dc961db895b0856a2210f76"},{"SPDXID":"SPDXRef-PACKAGE-libffi","checksums":[{"algorithm":"SHA256","checksumValue":"9d802681adfea27d84cae0487a785fb9caa925bdad44c401b364c59ab2b8edda"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/libffi-3.4.4.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:libffi_project:libffi:3.4.4:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"libffi","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"3.4.4"},{"SPDXID":"SPDXRef-PACKAGE-macholib-1.0","checksums":[{"algorithm":"SHA256","checksumValue":"c76f268f5054024e962f2515a0e522baf85313064f6740d80375afc850787a38"}],"downloadLocation":"https:\/\/files.pythonhosted.org\/packages\/ec\/57\/f0a712efc3ed982cf4038a3cee172057303b9be914c32c93b2fbec27f785\/macholib-1.0.tar.gz","externalRefs":[{"referenceCategory":"PACKAGE_MANAGER","referenceLocator":"pkg:pypi\/macholib@1.0","referenceType":"purl"}],"licenseConcluded":"NOASSERTION","name":"macholib","originator":"Person: Ronald Oussoren (ronaldoussoren@mac.com)","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"1.0"},{"SPDXID":"SPDXRef-PACKAGE-mpdecimal","checksums":[{"algorithm":"SHA256","checksumValue":"338fac3fb8cdd60f406b6326431338756f58a8af94229ffd9bf1e7c2b1ad71ca"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/mpdecimal-4.0.0.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:bytereef:mpdecimal:4.0.0:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"mpdecimal","originator":"Organization: bytereef.org","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"4.0.0"},{"SPDXID":"SPDXRef-PACKAGE-mpdecimal-2.5.1","checksums":[{"algorithm":"SHA256","checksumValue":"9f9cd4c041f99b5c49ffb7b59d9f12d95b683d88585608aa56a6307667b2b21f"}],"downloadLocation":"https:\/\/www.bytereef.org\/software\/mpdecimal\/releases\/mpdecimal-2.5.1.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:bytereef:mpdecimal:2.5.1:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"mpdecimal","originator":"Organization: bytereef.org","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"2.5.1"},{"SPDXID":"SPDXRef-PACKAGE-openssl","checksums":[{"algorithm":"SHA256","checksumValue":"36af13403a6f34251c875946d1d524c228cbf7b82fd54dd13d9019fbc37da87e"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/openssl-3.5.8.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"openssl","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"3.5.8"},{"SPDXID":"SPDXRef-PACKAGE-sqlite","checksums":[{"algorithm":"SHA256","checksumValue":"53f8711811090cc4d9ffc624c360f81e7b409763b145ab2e948998f1a0d6a612"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/sqlite-3.53.2.0.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:sqlite:sqlite:3.53.2.0:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"sqlite","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"3.53.2.0"},{"SPDXID":"SPDXRef-PACKAGE-tcl","checksums":[{"algorithm":"SHA256","checksumValue":"3ac2acd65ddaaac0b2b8df321b558419d21da20bf67ab39149b8248c85f0d214"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/tcl-9.0.4.0.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:tcl_tk:tcl_tk:9.0.4.0:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"tcl","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"9.0.4.0"},{"SPDXID":"SPDXRef-PACKAGE-tk","checksums":[{"algorithm":"SHA256","checksumValue":"66048966cfa88989333ff1632f454e10e9248516bb45efda7b4d2ae5a61642cb"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/tk-9.0.4.1.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:tcl_tk:tcl_tk:9.0.4.1:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"tk","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"9.0.4.1"},{"SPDXID":"SPDXRef-PACKAGE-xz","checksums":[{"algorithm":"SHA256","checksumValue":"1bfaba0ccacc6681d3ba85335cc7f49c24cf6f9d16f848cbd153b896d8a7d631"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/xz-5.8.1.1.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:tukaani:xz:5.8.1.1:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"xz","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"5.8.1.1"},{"SPDXID":"SPDXRef-PACKAGE-zlib-ng","checksums":[{"algorithm":"SHA256","checksumValue":"00bbd88709bc416cb96160ab61d3e1c8f76e106799af7328d0fe434dc7dd5004"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/zlib-ng-2.2.4.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:zlib-ng:zlib-ng:2.2.4:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"zlib-ng","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"2.2.4"},{"SPDXID":"SPDXRef-PACKAGE-zstd","checksums":[{"algorithm":"SHA256","checksumValue":"f24b52470d12f466e9fa4fcc94e6c530625ada51d7b36de7fdc6ed7e6f499c8e"}],"downloadLocation":"https:\/\/github.com\/python\/cpython-source-deps\/archive\/refs\/tags\/zstd-1.5.7.tar.gz","externalRefs":[{"referenceCategory":"SECURITY","referenceLocator":"cpe:2.3:a:facebook:zstandard:1.5.7:*:*:*:*:*:*:*","referenceType":"cpe23Type"}],"licenseConcluded":"NOASSERTION","name":"zstd","primaryPackagePurpose":"LIBRARY","supplier":"Organization: Python Software Foundation","versionInfo":"1.5.7"}],"relationships":[{"relatedSpdxElement":"SPDXRef-PACKAGE-bzip2","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-cpython","relationshipType":"DESCRIBES","spdxElementId":"SPDXRef-DOCUMENT"},{"relatedSpdxElement":"SPDXRef-PACKAGE-expat-2.8.4","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-hacl-star-8ba599b2f6c9701b3dc961db895b0856a2210f76","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-libffi","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-macholib-1.0","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-mpdecimal","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-mpdecimal-2.5.1","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-openssl","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-sqlite","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-tcl","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-tk","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-xz","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-zlib-ng","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"},{"relatedSpdxElement":"SPDXRef-PACKAGE-zstd","relationshipType":"DEPENDS_ON","spdxElementId":"SPDXRef-PACKAGE-cpython"}],"spdxVersion":"SPDX-2.3"}