THIRD_PARTY_LICENSES.json
Rama master · réplica de lectura del repositorio original.
{
"schemaVersion": "truthward.oss-third-party-license-review.v1",
"reviewStatus": "approved_for_source_export",
"distributionScope": "source_export",
"dependenciesBundled": false,
"binaryDistributionAuthorized": false,
"sbomGeneration": {
"format": "SPDX-2.3-json",
"generator": "tools/build_oss_sbom.py",
"status": "ready_for_exact_export",
"publishable": false,
"approvedExportDocument": null
},
"lockfiles": [
{
"path": "backend/pyproject.toml",
"normalizedSha256": "b4e15321c5de906c918f058fdeb973451db488b6e98c7bbd662e24ec13e098b4"
},
{
"path": "backend/uv.lock",
"normalizedSha256": "48bb8bcb40969368edea35d4085872e1ddbb471756fa81688d3e657901842bf9"
},
{
"path": "frontend/package.json",
"normalizedSha256": "1adf905bcb2a45e2434e30927deb2669993323cd7dd4b2116b7025df0f1119b4"
},
{
"path": "frontend/package-lock.json",
"normalizedSha256": "e62659a6369f6d49c1f2fd9a88e0e36e7c849f5932f151b8b2df6084d29a57b4"
}
],
"directRuntimeDependencies": [
{"ecosystem": "pypi", "name": "celery", "lockedVersion": "5.6.3", "licenseMetadata": "BSD-3-Clause"},
{"ecosystem": "pypi", "name": "fastapi", "lockedVersion": "0.139.2", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "httpx", "lockedVersion": "0.28.1", "licenseMetadata": "BSD-3-Clause"},
{"ecosystem": "pypi", "name": "onnxruntime", "lockedVersion": "1.27.0", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "pillow", "lockedVersion": "12.3.0", "licenseMetadata": "MIT-CMU"},
{"ecosystem": "pypi", "name": "pypdf", "lockedVersion": "6.16.2", "licenseMetadata": "BSD-3-Clause"},
{"ecosystem": "pypi", "name": "pypdfium2", "lockedVersion": "5.12.1", "licenseMetadata": "BSD-3-Clause, Apache-2.0, dependency licenses"},
{"ecosystem": "pypi", "name": "psycopg", "lockedVersion": "3.3.4", "licenseMetadata": "LGPL-3.0-only"},
{"ecosystem": "pypi", "name": "psycopg-binary", "lockedVersion": "3.3.4", "licenseMetadata": "LGPL-3.0-only"},
{"ecosystem": "pypi", "name": "pydantic", "lockedVersion": "2.13.4", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "pydantic-settings", "lockedVersion": "2.14.2", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "pyyaml", "lockedVersion": "6.0.3", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "python-docx", "lockedVersion": "1.2.0", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "python-multipart", "lockedVersion": "0.0.32", "licenseMetadata": "Apache-2.0"},
{"ecosystem": "pypi", "name": "rapidocr", "lockedVersion": "3.9.1", "licenseMetadata": "Apache-2.0"},
{"ecosystem": "pypi", "name": "sqlalchemy", "lockedVersion": "2.0.51", "licenseMetadata": "MIT"},
{"ecosystem": "pypi", "name": "uvicorn", "lockedVersion": "0.51.0", "licenseMetadata": "BSD-3-Clause"},
{"ecosystem": "npm", "name": "react", "lockedVersion": "18.3.1", "licenseMetadata": "MIT"},
{"ecosystem": "npm", "name": "react-dom", "lockedVersion": "18.3.1", "licenseMetadata": "MIT"},
{"ecosystem": "npm", "name": "zustand", "lockedVersion": "5.0.14", "licenseMetadata": "MIT"}
],
"resolvedNoAssertionReview": {
"reviewedCount": 95,
"reviewedAt": "2026-08-31",
"reviewer": "project owner release review",
"scope": "the exact backend/uv.lock and frontend/package-lock.json source-export dependency closure",
"method": [
"exact-version author-declared License-Expression from distribution core metadata when present",
"exact-version PyPI release license metadata and license classifiers when unambiguous",
"SHA-256-verified sdist license files or REUSE.toml for ambiguous and multi-license packages"
],
"pypiJsonApi": "https://docs.pypi.org/api/json/",
"pythonCoreMetadata": "https://packaging.python.org/en/latest/specifications/core-metadata/",
"spdxDeclaredLicenseRule": "https://spdx.github.io/spdx-spec/v2.3/package-information/#715-declared-license-field"
},
"resolvedNoAssertionReviews": [
{"ecosystem":"pypi","name":"amqp","lockedVersion":"5.3.1","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_and_sdist_license","evidenceRef":"https://pypi.org/pypi/amqp/5.3.1/json"},
{"ecosystem":"pypi","name":"annotated-doc","lockedVersion":"0.0.4","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/annotated-doc/0.0.4/json"},
{"ecosystem":"pypi","name":"annotated-types","lockedVersion":"0.7.0","licenseExpression":"MIT","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/annotated-types/0.7.0/json"},
{"ecosystem":"pypi","name":"antlr4-python3-runtime","lockedVersion":"4.9.3","licenseExpression":"BSD-3-Clause","evidenceBasis":"sha256_verified_sdist_license","evidenceRef":"https://files.pythonhosted.org/packages/3e/38/7859ff46355f76f8d19459005ca000b6e7012f2f1ca597746cbcd1fbfe5e/antlr4-python3-runtime-4.9.3.tar.gz"},
{"ecosystem":"pypi","name":"anyio","lockedVersion":"4.14.2","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/anyio/4.14.2/json"},
{"ecosystem":"pypi","name":"async-timeout","lockedVersion":"5.0.1","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/async-timeout/5.0.1/json"},
{"ecosystem":"pypi","name":"billiard","lockedVersion":"4.2.4","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_and_sdist_license","evidenceRef":"https://pypi.org/pypi/billiard/4.2.4/json"},
{"ecosystem":"pypi","name":"boolean-py","lockedVersion":"5.0","licenseExpression":"BSD-2-Clause","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/boolean-py/5.0/json"},
{"ecosystem":"pypi","name":"cachecontrol","lockedVersion":"0.14.4","licenseExpression":"Apache-2.0","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/cachecontrol/0.14.4/json"},
{"ecosystem":"pypi","name":"certifi","lockedVersion":"2026.6.17","licenseExpression":"MPL-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/certifi/2026.6.17/json"},
{"ecosystem":"pypi","name":"chardet","lockedVersion":"7.4.3","licenseExpression":"0BSD","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/chardet/7.4.3/json"},
{"ecosystem":"pypi","name":"charset-normalizer","lockedVersion":"3.4.9","licenseExpression":"MIT","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/charset-normalizer/3.4.9/json"},
{"ecosystem":"pypi","name":"click","lockedVersion":"8.4.2","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/click/8.4.2/json"},
{"ecosystem":"pypi","name":"click-didyoumean","lockedVersion":"0.3.1","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/click-didyoumean/0.3.1/json"},
{"ecosystem":"pypi","name":"click-plugins","lockedVersion":"1.1.1.2","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_and_sdist_license","evidenceRef":"https://pypi.org/pypi/click-plugins/1.1.1.2/json"},
{"ecosystem":"pypi","name":"click-repl","lockedVersion":"0.3.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/click-repl/0.3.0/json"},
{"ecosystem":"pypi","name":"colorama","lockedVersion":"0.4.6","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/colorama/0.4.6/json"},
{"ecosystem":"pypi","name":"colorlog","lockedVersion":"6.11.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/colorlog/6.11.0/json"},
{"ecosystem":"pypi","name":"coverage","lockedVersion":"7.15.2","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/coverage/7.15.2/json"},
{"ecosystem":"pypi","name":"cyclonedx-python-lib","lockedVersion":"11.11.0","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/cyclonedx-python-lib/11.11.0/json"},
{"ecosystem":"pypi","name":"defusedxml","lockedVersion":"0.7.1","licenseExpression":"PSF-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/defusedxml/0.7.1/json"},
{"ecosystem":"pypi","name":"diff-cover","lockedVersion":"9.7.2","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/diff-cover/9.7.2/json"},
{"ecosystem":"pypi","name":"execnet","lockedVersion":"2.1.2","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/execnet/2.1.2/json"},
{"ecosystem":"pypi","name":"filelock","lockedVersion":"3.32.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/filelock/3.32.0/json"},
{"ecosystem":"pypi","name":"flatbuffers","lockedVersion":"25.12.19","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/flatbuffers/25.12.19/json"},
{"ecosystem":"pypi","name":"greenlet","lockedVersion":"3.5.3","licenseExpression":"MIT AND PSF-2.0","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/greenlet/3.5.3/json"},
{"ecosystem":"pypi","name":"h11","lockedVersion":"0.16.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/h11/0.16.0/json"},
{"ecosystem":"pypi","name":"httpcore","lockedVersion":"1.0.9","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/httpcore/1.0.9/json"},
{"ecosystem":"pypi","name":"httpcore2","lockedVersion":"2.12.0","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/httpcore2/2.12.0/json"},
{"ecosystem":"pypi","name":"httptools","lockedVersion":"0.8.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/httptools/0.8.0/json"},
{"ecosystem":"pypi","name":"httpx2","lockedVersion":"2.12.0","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/httpx2/2.12.0/json"},
{"ecosystem":"pypi","name":"httpx2-jsfetch","lockedVersion":"1.0","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/httpx2-jsfetch/1.0/json"},
{"ecosystem":"pypi","name":"idna","lockedVersion":"3.18","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/idna/3.18/json"},
{"ecosystem":"pypi","name":"iniconfig","lockedVersion":"2.3.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/iniconfig/2.3.0/json"},
{"ecosystem":"pypi","name":"jinja2","lockedVersion":"3.1.6","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/jinja2/3.1.6/json"},
{"ecosystem":"pypi","name":"kombu","lockedVersion":"5.6.2","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/kombu/5.6.2/json"},
{"ecosystem":"pypi","name":"librt","lockedVersion":"0.13.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/librt/0.13.0/json"},
{"ecosystem":"pypi","name":"license-expression","lockedVersion":"30.4.4","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/license-expression/30.4.4/json"},
{"ecosystem":"pypi","name":"lxml","lockedVersion":"6.1.1","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/lxml/6.1.1/json"},
{"ecosystem":"pypi","name":"markdown-it-py","lockedVersion":"4.2.0","licenseExpression":"MIT","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/markdown-it-py/4.2.0/json"},
{"ecosystem":"pypi","name":"markupsafe","lockedVersion":"3.0.3","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/markupsafe/3.0.3/json"},
{"ecosystem":"pypi","name":"mdurl","lockedVersion":"0.1.2","licenseExpression":"MIT","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/mdurl/0.1.2/json"},
{"ecosystem":"pypi","name":"msgpack","lockedVersion":"1.2.1","licenseExpression":"Apache-2.0","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/msgpack/1.2.1/json"},
{"ecosystem":"pypi","name":"mypy","lockedVersion":"1.20.2","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/mypy/1.20.2/json"},
{"ecosystem":"pypi","name":"mypy-extensions","lockedVersion":"1.1.0","licenseExpression":"MIT","evidenceBasis":"sha256_verified_sdist_core_metadata","evidenceRef":"https://files.pythonhosted.org/packages/a2/6e/371856a3fb9d31ca8dac321cda606860fa4548858c0cc45d9d1d4ca2628b/mypy_extensions-1.1.0.tar.gz"},
{"ecosystem":"pypi","name":"numpy","lockedVersion":"2.4.6","licenseExpression":"BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/numpy/2.4.6/json"},
{"ecosystem":"pypi","name":"numpy","lockedVersion":"2.5.1","licenseExpression":"BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/numpy/2.5.1/json"},
{"ecosystem":"pypi","name":"omegaconf","lockedVersion":"2.3.1","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/omegaconf/2.3.1/json"},
{"ecosystem":"pypi","name":"opencv-python","lockedVersion":"5.0.0.93","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/opencv-python/5.0.0.93/json"},
{"ecosystem":"pypi","name":"packageurl-python","lockedVersion":"0.17.6","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/packageurl-python/0.17.6/json"},
{"ecosystem":"pypi","name":"packaging","lockedVersion":"26.2","licenseExpression":"Apache-2.0 OR BSD-2-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/packaging/26.2/json"},
{"ecosystem":"pypi","name":"pathspec","lockedVersion":"1.1.1","licenseExpression":"MPL-2.0","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/pathspec/1.1.1/json"},
{"ecosystem":"pypi","name":"pip","lockedVersion":"26.2.1","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/pip/26.2.1/json"},
{"ecosystem":"pypi","name":"pip-api","lockedVersion":"0.0.34","licenseExpression":"Apache-2.0","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/pip-api/0.0.34/json"},
{"ecosystem":"pypi","name":"pip-audit","lockedVersion":"2.10.1","licenseExpression":"Apache-2.0","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/pip-audit/2.10.1/json"},
{"ecosystem":"pypi","name":"pip-requirements-parser","lockedVersion":"32.0.1","licenseExpression":"MIT","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/pip-requirements-parser/32.0.1/json"},
{"ecosystem":"pypi","name":"platformdirs","lockedVersion":"4.11.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/platformdirs/4.11.0/json"},
{"ecosystem":"pypi","name":"pluggy","lockedVersion":"1.6.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/pluggy/1.6.0/json"},
{"ecosystem":"pypi","name":"prompt-toolkit","lockedVersion":"3.0.52","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/prompt-toolkit/3.0.52/json"},
{"ecosystem":"pypi","name":"protobuf","lockedVersion":"7.35.1","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/protobuf/7.35.1/json"},
{"ecosystem":"pypi","name":"py-serializable","lockedVersion":"2.1.0","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/py-serializable/2.1.0/json"},
{"ecosystem":"pypi","name":"pyclipper","lockedVersion":"1.4.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/pyclipper/1.4.0/json"},
{"ecosystem":"pypi","name":"pydantic-core","lockedVersion":"2.46.4","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/pydantic-core/2.46.4/json"},
{"ecosystem":"pypi","name":"pygments","lockedVersion":"2.20.0","licenseExpression":"BSD-2-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/pygments/2.20.0/json"},
{"ecosystem":"pypi","name":"pyparsing","lockedVersion":"3.3.2","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/pyparsing/3.3.2/json"},
{"ecosystem":"pypi","name":"pypdfium2","lockedVersion":"5.12.1","licenseExpression":"(BSD-3-Clause OR Apache-2.0) AND CC-BY-4.0 AND MPL-2.0 AND LGPL-3.0-or-later AND MIT","evidenceBasis":"sha256_verified_sdist_reuse_manifest","evidenceRef":"https://files.pythonhosted.org/packages/db/42/0b51bdf50ccf13f3deb3209ca996179a49761dc191748469cf0de55b0055/pypdfium2-5.12.1.tar.gz"},
{"ecosystem":"pypi","name":"pytest","lockedVersion":"9.1.1","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/pytest/9.1.1/json"},
{"ecosystem":"pypi","name":"pytest-cov","lockedVersion":"6.3.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/pytest-cov/6.3.0/json"},
{"ecosystem":"pypi","name":"pytest-randomly","lockedVersion":"3.16.0","licenseExpression":"MIT","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/pytest-randomly/3.16.0/json"},
{"ecosystem":"pypi","name":"pytest-timeout","lockedVersion":"2.4.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/pytest-timeout/2.4.0/json"},
{"ecosystem":"pypi","name":"pytest-xdist","lockedVersion":"3.8.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/pytest-xdist/3.8.0/json"},
{"ecosystem":"pypi","name":"python-dateutil","lockedVersion":"2.9.0.post0","licenseExpression":"Apache-2.0 OR BSD-3-Clause","evidenceBasis":"release_metadata_and_classifiers","evidenceRef":"https://pypi.org/pypi/python-dateutil/2.9.0.post0/json"},
{"ecosystem":"pypi","name":"python-dotenv","lockedVersion":"1.2.2","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/python-dotenv/1.2.2/json"},
{"ecosystem":"pypi","name":"redis","lockedVersion":"6.4.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/redis/6.4.0/json"},
{"ecosystem":"pypi","name":"requests","lockedVersion":"2.34.2","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/requests/2.34.2/json"},
{"ecosystem":"pypi","name":"rich","lockedVersion":"15.0.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/rich/15.0.0/json"},
{"ecosystem":"pypi","name":"ruff","lockedVersion":"0.16.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/ruff/0.16.0/json"},
{"ecosystem":"pypi","name":"shapely","lockedVersion":"2.1.2","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/shapely/2.1.2/json"},
{"ecosystem":"pypi","name":"six","lockedVersion":"1.17.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/six/1.17.0/json"},
{"ecosystem":"pypi","name":"sortedcontainers","lockedVersion":"2.4.0","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/sortedcontainers/2.4.0/json"},
{"ecosystem":"pypi","name":"starlette","lockedVersion":"1.3.1","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/starlette/1.3.1/json"},
{"ecosystem":"pypi","name":"tomli","lockedVersion":"2.4.1","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/tomli/2.4.1/json"},
{"ecosystem":"pypi","name":"tomli-w","lockedVersion":"1.2.0","licenseExpression":"MIT","evidenceBasis":"pypi_classifier_and_sdist_license","evidenceRef":"https://pypi.org/pypi/tomli-w/1.2.0/json"},
{"ecosystem":"pypi","name":"tqdm","lockedVersion":"4.69.0","licenseExpression":"MPL-2.0 AND MIT","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/tqdm/4.69.0/json"},
{"ecosystem":"pypi","name":"truststore","lockedVersion":"0.10.4","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/truststore/0.10.4/json"},
{"ecosystem":"pypi","name":"typing-extensions","lockedVersion":"4.16.0","licenseExpression":"PSF-2.0","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/typing-extensions/4.16.0/json"},
{"ecosystem":"pypi","name":"typing-inspection","lockedVersion":"0.4.2","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/typing-inspection/0.4.2/json"},
{"ecosystem":"pypi","name":"tzdata","lockedVersion":"2026.3","licenseExpression":"Apache-2.0","evidenceBasis":"release_metadata_license_field","evidenceRef":"https://pypi.org/pypi/tzdata/2026.3/json"},
{"ecosystem":"pypi","name":"tzlocal","lockedVersion":"5.4.4","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/tzlocal/5.4.4/json"},
{"ecosystem":"pypi","name":"urllib3","lockedVersion":"2.7.0","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/urllib3/2.7.0/json"},
{"ecosystem":"pypi","name":"uvloop","lockedVersion":"0.22.1","licenseExpression":"MIT AND (MIT OR Apache-2.0)","evidenceBasis":"sha256_verified_sdist_license_files","evidenceRef":"https://files.pythonhosted.org/packages/06/f0/18d39dbd1971d6d62c4629cc7fa67f74821b0dc1f5a77af43719de7936a7/uvloop-0.22.1.tar.gz"},
{"ecosystem":"pypi","name":"vine","lockedVersion":"5.1.0","licenseExpression":"BSD-3-Clause","evidenceBasis":"release_metadata_and_sdist_license","evidenceRef":"https://pypi.org/pypi/vine/5.1.0/json"},
{"ecosystem":"pypi","name":"watchfiles","lockedVersion":"1.2.0","licenseExpression":"MIT","evidenceBasis":"release_metadata_and_classifier","evidenceRef":"https://pypi.org/pypi/watchfiles/1.2.0/json"},
{"ecosystem":"pypi","name":"wcwidth","lockedVersion":"0.8.2","licenseExpression":"MIT","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/wcwidth/0.8.2/json"},
{"ecosystem":"pypi","name":"websockets","lockedVersion":"16.1.1","licenseExpression":"BSD-3-Clause","evidenceBasis":"pypi_license_expression","evidenceRef":"https://pypi.org/pypi/websockets/16.1.1/json"}
],
"manualReviewRequired": []
}