diff --git a/sbom/cve-bin-tool-py3.12.json b/sbom/cve-bin-tool-py3.12.json
index b1f4601f31..b56f1af913 100644
--- a/sbom/cve-bin-tool-py3.12.json
+++ b/sbom/cve-bin-tool-py3.12.json
@@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
- "serialNumber": "urn:uuid:1a468904-d4b4-4448-9ff4-2a4c6cda96ce",
+ "serialNumber": "urn:uuid:b1f117ed-2d0e-4be8-99ca-e91c6c6428cc",
"version": 1,
"metadata": {
- "timestamp": "2024-08-26T00:35:14Z",
+ "timestamp": "2024-09-02T00:35:23Z",
"lifecycles": [
{
"phase": "build"
@@ -31,7 +31,7 @@
"type": "application",
"bom-ref": "1-cve-bin-tool",
"name": "cve-bin-tool",
- "version": "3.4rc0",
+ "version": "3.4rc1",
"supplier": {
"name": "Terri Oda",
"contact": [
@@ -40,7 +40,7 @@
}
]
},
- "cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc1:*:*:*:*:*:*:*",
"description": "CVE Binary Checker Tool",
"licenses": [
{
@@ -53,12 +53,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
+ "url": "https://pypi.org/project/cve-bin-tool/3.4rc1",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/cve-bin-tool@3.4rc0",
+ "purl": "pkg:pypi/cve-bin-tool@3.4rc1",
"properties": [
{
"name": "language",
@@ -119,6 +119,12 @@
},
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
"description": "Happy Eyeballs for asyncio",
+ "hashes": [
+ {
+ "alg": "SHA-1",
+ "content": "c31b127a69bdcd7895d1a521985d918061955348"
+ }
+ ],
"licenses": [
{
"license": {
@@ -307,7 +313,7 @@
"type": "library",
"bom-ref": "8-yarl",
"name": "yarl",
- "version": "1.9.4",
+ "version": "1.9.7",
"supplier": {
"name": "Andrew Svetlov",
"contact": [
@@ -316,14 +322,8 @@
}
]
},
- "cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.4:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.7:*:*:*:*:*:*:*",
"description": "Yet another URL library",
- "hashes": [
- {
- "alg": "SHA-1",
- "content": "6362ff155ba02964a5e773927412f7cf4ca23cd1"
- }
- ],
"licenses": [
{
"license": {
@@ -335,12 +335,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/yarl/1.9.4",
+ "url": "https://pypi.org/project/yarl/1.9.7",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/yarl@1.9.4",
+ "purl": "pkg:pypi/yarl@1.9.7",
"properties": [
{
"name": "language",
@@ -367,6 +367,12 @@
},
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
"description": "Internationalized Domain Names in Applications (IDNA)",
+ "hashes": [
+ {
+ "alg": "SHA-1",
+ "content": "784c6f45c162db9709588124f2f1def5b70615ff"
+ }
+ ],
"externalReferences": [
{
"url": "https://pypi.org/project/idna/3.8",
@@ -2023,7 +2029,7 @@
"type": "library",
"bom-ref": "47-lib4sbom",
"name": "lib4sbom",
- "version": "0.7.3",
+ "version": "0.7.4",
"supplier": {
"name": "Anthony Harrison",
"contact": [
@@ -2032,7 +2038,7 @@
}
]
},
- "cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.3:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.4:*:*:*:*:*:*:*",
"description": "Software Bill of Material (SBOM) generator and consumer library",
"licenses": [
{
@@ -2045,12 +2051,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/lib4sbom/0.7.3",
+ "url": "https://pypi.org/project/lib4sbom/0.7.4",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/lib4sbom@0.7.3",
+ "purl": "pkg:pypi/lib4sbom@0.7.4",
"properties": [
{
"name": "language",
@@ -2158,7 +2164,7 @@
"type": "library",
"bom-ref": "50-lib4vex",
"name": "lib4vex",
- "version": "0.1.0",
+ "version": "0.2.0",
"supplier": {
"name": "Anthony Harrison",
"contact": [
@@ -2167,14 +2173,8 @@
}
]
},
- "cpe": "cpe:2.3:a:anthony_harrison:lib4vex:0.1.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:anthony_harrison:lib4vex:0.2.0:*:*:*:*:*:*:*",
"description": "VEX generator and consumer library",
- "hashes": [
- {
- "alg": "SHA-1",
- "content": "84229c7770dd95cf887d6874e0203da4c8aa809b"
- }
- ],
"licenses": [
{
"license": {
@@ -2186,12 +2186,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/lib4vex/0.1.0",
+ "url": "https://pypi.org/project/lib4vex/0.2.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/lib4vex@0.1.0",
+ "purl": "pkg:pypi/lib4vex@0.2.0",
"properties": [
{
"name": "language",
@@ -2300,7 +2300,7 @@
"type": "library",
"bom-ref": "53-rich",
"name": "rich",
- "version": "13.7.1",
+ "version": "13.8.0",
"supplier": {
"name": "Will McGugan",
"contact": [
@@ -2309,7 +2309,7 @@
}
]
},
- "cpe": "cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:will_mcgugan:rich:13.8.0:*:*:*:*:*:*:*",
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
"licenses": [
{
@@ -2322,12 +2322,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/rich/13.7.1",
+ "url": "https://pypi.org/project/rich/13.8.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/rich@13.7.1",
+ "purl": "pkg:pypi/rich@13.8.0",
"properties": [
{
"name": "language",
@@ -2506,7 +2506,7 @@
"type": "library",
"bom-ref": "58-plotly",
"name": "plotly",
- "version": "5.23.0",
+ "version": "5.24.0",
"supplier": {
"name": "Chris P",
"contact": [
@@ -2515,7 +2515,7 @@
}
]
},
- "cpe": "cpe:2.3:a:chris_p:plotly:5.23.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:chris_p:plotly:5.24.0:*:*:*:*:*:*:*",
"description": "An open-source, interactive data visualization library for Python",
"licenses": [
{
@@ -2528,12 +2528,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/plotly/5.23.0",
+ "url": "https://pypi.org/project/plotly/5.24.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/plotly@5.23.0",
+ "purl": "pkg:pypi/plotly@5.24.0",
"properties": [
{
"name": "language",
@@ -2696,7 +2696,7 @@
"type": "library",
"bom-ref": "62-certifi",
"name": "certifi",
- "version": "2024.7.4",
+ "version": "2024.8.30",
"supplier": {
"name": "Kenneth Reitz",
"contact": [
@@ -2705,7 +2705,7 @@
}
]
},
- "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.7.4:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.8.30:*:*:*:*:*:*:*",
"description": "Python package for providing Mozilla's CA Bundle.",
"licenses": [
{
@@ -2718,12 +2718,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/certifi/2024.7.4",
+ "url": "https://pypi.org/project/certifi/2024.8.30",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/certifi@2024.7.4",
+ "purl": "pkg:pypi/certifi@2024.8.30",
"properties": [
{
"name": "language",
@@ -2871,7 +2871,7 @@
"type": "library",
"bom-ref": "66-setuptools",
"name": "setuptools",
- "version": "73.0.1",
+ "version": "74.0.0",
"supplier": {
"name": "Python Packaging Authority",
"contact": [
@@ -2880,16 +2880,16 @@
}
]
},
- "cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:python_packaging_authority:setuptools:74.0.0:*:*:*:*:*:*:*",
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
"externalReferences": [
{
- "url": "https://pypi.org/project/setuptools/73.0.1",
+ "url": "https://pypi.org/project/setuptools/74.0.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/setuptools@73.0.1",
+ "purl": "pkg:pypi/setuptools@74.0.0",
"properties": [
{
"name": "language",
@@ -3003,7 +3003,7 @@
"type": "library",
"bom-ref": "69-zipp",
"name": "zipp",
- "version": "3.20.0",
+ "version": "3.20.1",
"supplier": {
"name": "Jason R .",
"contact": [
@@ -3012,16 +3012,16 @@
}
]
},
- "cpe": "cpe:2.3:a:jason_r.:zipp:3.20.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:jason_r.:zipp:3.20.1:*:*:*:*:*:*:*",
"description": "Backport of pathlib-compatible object wrapper for zip files",
"externalReferences": [
{
- "url": "https://pypi.org/project/zipp/3.20.0",
+ "url": "https://pypi.org/project/zipp/3.20.1",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/zipp@3.20.0",
+ "purl": "pkg:pypi/zipp@3.20.1",
"properties": [
{
"name": "language",
diff --git a/sbom/cve-bin-tool-py3.12.spdx b/sbom/cve-bin-tool-py3.12.spdx
index 1bc12152d3..961f9fa3a9 100644
--- a/sbom/cve-bin-tool-py3.12.spdx
+++ b/sbom/cve-bin-tool-py3.12.spdx
@@ -2,26 +2,26 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-9d2818ca-979d-421e-8731-e16027125f26
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-ef020a48-2e0c-4106-8ee5-6ade813bf11c
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.11.1
-Created: 2024-08-26T00:33:49Z
+Created: 2024-09-02T00:34:08Z
CreatorComment: This document has been automatically generated.
#####
PackageName: cve-bin-tool
SPDXID: SPDXRef-Package-1-cve-bin-tool
-PackageVersion: 3.4rc0
+PackageVersion: 3.4rc1
PrimaryPackagePurpose: APPLICATION
PackageSupplier: Person: Terri Oda (terri.oda@intel.com)
-PackageDownloadLocation: https://pypi.org/project/cve-bin-tool/3.4rc0
+PackageDownloadLocation: https://pypi.org/project/cve-bin-tool/3.4rc1
FilesAnalyzed: false
PackageLicenseDeclared: GPL-3.0-or-later
PackageLicenseConcluded: GPL-3.0-or-later
PackageCopyrightText: NOASSERTION
PackageSummary: CVE Binary Checker Tool
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/cve-bin-tool@3.4rc0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/cve-bin-tool@3.4rc1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc1:*:*:*:*:*:*:*
#####
PackageName: aiohttp
@@ -46,6 +46,7 @@ PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: J. Nick Koston (nick@koston.org)
PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.0
FilesAnalyzed: false
+PackageChecksum: SHA1: c31b127a69bdcd7895d1a521985d918061955348
PackageLicenseDeclared: Python-2.0.1
PackageLicenseConcluded: Python-2.0.1
PackageCopyrightText: NOASSERTION
@@ -118,18 +119,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:multidict:6.0.5:*:*:*:*
PackageName: yarl
SPDXID: SPDXRef-Package-8-yarl
-PackageVersion: 1.9.4
+PackageVersion: 1.9.7
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Andrew Svetlov (andrew.svetlov@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/yarl/1.9.4
+PackageDownloadLocation: https://pypi.org/project/yarl/1.9.7
FilesAnalyzed: false
-PackageChecksum: SHA1: 6362ff155ba02964a5e773927412f7cf4ca23cd1
PackageLicenseDeclared: Apache-2.0
PackageLicenseConcluded: Apache-2.0
PackageCopyrightText: NOASSERTION
PackageSummary: Yet another URL library
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/yarl@1.9.4
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:yarl:1.9.4:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/yarl@1.9.7
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:yarl:1.9.7:*:*:*:*:*:*:*
#####
PackageName: idna
@@ -139,6 +139,7 @@ PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kim Davies (kim+pypi@gumleaf.org)
PackageDownloadLocation: https://pypi.org/project/idna/3.8
FilesAnalyzed: false
+PackageChecksum: SHA1: 784c6f45c162db9709588124f2f1def5b70615ff
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
@@ -739,17 +740,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.20.0:*:*:*:*:*
PackageName: lib4sbom
SPDXID: SPDXRef-Package-47-lib4sbom
-PackageVersion: 0.7.3
+PackageVersion: 0.7.4
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Anthony Harrison (anthony.p.harrison@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.7.3
+PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.7.4
FilesAnalyzed: false
PackageLicenseDeclared: Apache-2.0
PackageLicenseConcluded: Apache-2.0
PackageCopyrightText: NOASSERTION
PackageSummary: Software Bill of Material (SBOM) generator and consumer library
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/lib4sbom@0.7.3
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.7.3:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/lib4sbom@0.7.4
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.7.4:*:*:*:*:*:*:*
#####
PackageName: pyyaml
@@ -786,18 +787,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:raphael_barrois:semantic-version:2.10.
PackageName: lib4vex
SPDXID: SPDXRef-Package-50-lib4vex
-PackageVersion: 0.1.0
+PackageVersion: 0.2.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Anthony Harrison (anthony.p.harrison@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/lib4vex/0.1.0
+PackageDownloadLocation: https://pypi.org/project/lib4vex/0.2.0
FilesAnalyzed: false
-PackageChecksum: SHA1: 84229c7770dd95cf887d6874e0203da4c8aa809b
PackageLicenseDeclared: Apache-2.0
PackageLicenseConcluded: Apache-2.0
PackageCopyrightText: NOASSERTION
PackageSummary: VEX generator and consumer library
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/lib4vex@0.1.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4vex:0.1.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/lib4vex@0.2.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4vex:0.2.0:*:*:*:*:*:*:*
#####
PackageName: csaf-tool
@@ -834,17 +834,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.1
PackageName: rich
SPDXID: SPDXRef-Package-53-rich
-PackageVersion: 13.7.1
+PackageVersion: 13.8.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/rich/13.7.1
+PackageDownloadLocation: https://pypi.org/project/rich/13.8.0
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.7.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.8.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.8.0:*:*:*:*:*:*:*
#####
PackageName: markdown-it-py
@@ -912,17 +912,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft:packaging:24.1:*:*:*:*:*
PackageName: plotly
SPDXID: SPDXRef-Package-58-plotly
-PackageVersion: 5.23.0
+PackageVersion: 5.24.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Chris P (chris@plot.ly)
-PackageDownloadLocation: https://pypi.org/project/plotly/5.23.0
+PackageDownloadLocation: https://pypi.org/project/plotly/5.24.0
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: An open-source, interactive data visualization library for Python
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/plotly@5.23.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.23.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/plotly@5.24.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.24.0:*:*:*:*:*:*:*
#####
PackageName: tenacity
@@ -977,17 +977,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.3:*:*:*:*:
PackageName: certifi
SPDXID: SPDXRef-Package-62-certifi
-PackageVersion: 2024.7.4
+PackageVersion: 2024.8.30
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.com)
-PackageDownloadLocation: https://pypi.org/project/certifi/2024.7.4
+PackageDownloadLocation: https://pypi.org/project/certifi/2024.8.30
FilesAnalyzed: false
PackageLicenseDeclared: MPL-2.0
PackageLicenseConcluded: MPL-2.0
PackageCopyrightText: NOASSERTION
PackageSummary: Python package for providing Mozilla's CA Bundle.
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/certifi@2024.7.4
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.7.4:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/certifi@2024.8.30
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.8.30:*:*:*:*:*:*:*
#####
PackageName: charset-normalizer
@@ -1039,17 +1039,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:2.1.0:*:*:*:*:*:*:*
PackageName: setuptools
SPDXID: SPDXRef-Package-66-setuptools
-PackageVersion: 73.0.1
+PackageVersion: 74.0.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Python Packaging Authority (distutils-sig@python.org)
-PackageDownloadLocation: https://pypi.org/project/setuptools/73.0.1
+PackageDownloadLocation: https://pypi.org/project/setuptools/74.0.0
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: Easily download, build, install, upgrade, and uninstall Python packages
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/setuptools@73.0.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/setuptools@74.0.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:python_packaging_authority:setuptools:74.0.0:*:*:*:*:*:*:*
#####
PackageName: xmlschema
@@ -1086,17 +1086,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:elementpath:4.4.0:*:*:*
PackageName: zipp
SPDXID: SPDXRef-Package-69-zipp
-PackageVersion: 3.20.0
+PackageVersion: 3.20.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Jason R. (jaraco@jaraco.com)
-PackageDownloadLocation: https://pypi.org/project/zipp/3.20.0
+PackageDownloadLocation: https://pypi.org/project/zipp/3.20.1
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: Backport of pathlib-compatible object wrapper for zip files
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/zipp@3.20.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:zipp:3.20.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/zipp@3.20.1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:zipp:3.20.1:*:*:*:*:*:*:*
#####
PackageName: zstandard