{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"dcmerge","documentNamespace":"https://anchore.com/syft/file/dcmerge-4aa69009-9ea8-4646-a820-38e2b3c9d60c","creationInfo":{"licenseListVersion":"3.27","creators":["Organization: Anchore, Inc","Tool: syft-1.41.1"],"created":"2026-01-31T22:16:57Z"},"packages":[{"name":"git.cryptic.systems/volker.raschek/dcmerge","SPDXID":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-1d1c5682beeaea57","versionInfo":"UNKNOWN","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"NOASSERTION","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:volker.raschek:dcmerge:*:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/git.cryptic.systems/volker.raschek/dcmerge"}]},{"name":"github.com/spf13/cobra","SPDXID":"SPDXRef-Package-go-module-github.com-spf13-cobra-8984df53ce548e2b","versionInfo":"v1.10.2","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"Apache-2.0","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/cobra@v1.10.2"}]},{"name":"github.com/spf13/pflag","SPDXID":"SPDXRef-Package-go-module-github.com-spf13-pflag-c3bf912da6d9332c","versionInfo":"v1.0.9","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"f5ec5a41a30e0b07df2a28a2624ebf06775406ffa245588d5bee2510c8b43ef6"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"BSD-3-Clause","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/pflag@v1.0.9"}]},{"name":"gopkg.in/yaml.v3","SPDXID":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-3302fafd911fe549","versionInfo":"v3.0.1","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"Apache-2.0 AND MIT","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]},{"name":"stdlib","SPDXID":"SPDXRef-Package-go-module-stdlib-d8748546da68866e","versionInfo":"go1.25.6","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"NOASSERTION","licenseDeclared":"BSD-3-Clause","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:golang:go:1.25.6:-:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/stdlib@1.25.6"}]},{"name":"dcmerge","SPDXID":"SPDXRef-DocumentRoot-File-dcmerge","versionInfo":"sha256:c897011eb636e7c9cdf94f4a356fc88dafdf586a84f8473d0e948beb4a13c206","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"c897011eb636e7c9cdf94f4a356fc88dafdf586a84f8473d0e948beb4a13c206"}],"licenseConcluded":"NOASSERTION","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","primaryPackagePurpose":"FILE"}],"files":[{"fileName":"dcmerge","SPDXID":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","fileTypes":["APPLICATION","BINARY"],"checksums":[{"algorithm":"SHA1","checksumValue":"0047395d1ed5052726729f78b7a0cf90411ae15b"},{"algorithm":"SHA256","checksumValue":"c897011eb636e7c9cdf94f4a356fc88dafdf586a84f8473d0e948beb4a13c206"}],"licenseConcluded":"NOASSERTION","licenseInfoInFiles":["NOASSERTION"],"copyrightText":"NOASSERTION"}],"relationships":[{"spdxElementId":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-1d1c5682beeaea57","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-3302fafd911fe549","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-github.com-spf13-cobra-8984df53ce548e2b","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-github.com-spf13-pflag-c3bf912da6d9332c","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-stdlib-d8748546da68866e","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-1d1c5682beeaea57","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-github.com-spf13-cobra-8984df53ce548e2b","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-github.com-spf13-pflag-c3bf912da6d9332c","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-3302fafd911fe549","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-stdlib-d8748546da68866e","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-DocumentRoot-File-dcmerge","relationshipType":"DESCRIBES"}]}