{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"dcmerge","documentNamespace":"https://anchore.com/syft/file/dcmerge-1110ee06-5981-4eba-9ffb-86701d9ee004","creationInfo":{"licenseListVersion":"3.27","creators":["Organization: Anchore, Inc","Tool: syft-1.41.1"],"created":"2026-01-31T22:16:59Z"},"packages":[{"name":"git.cryptic.systems/volker.raschek/dcmerge","SPDXID":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-acd97798fdaf4148","versionInfo":"UNKNOWN","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"NOASSERTION","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:volker.raschek:dcmerge:*:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/git.cryptic.systems/volker.raschek/dcmerge"}]},{"name":"github.com/spf13/cobra","SPDXID":"SPDXRef-Package-go-module-github.com-spf13-cobra-e3ea739347f54102","versionInfo":"v1.10.2","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"Apache-2.0","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/cobra@v1.10.2"}]},{"name":"github.com/spf13/pflag","SPDXID":"SPDXRef-Package-go-module-github.com-spf13-pflag-a4b8992a1c6ad4d7","versionInfo":"v1.0.9","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"f5ec5a41a30e0b07df2a28a2624ebf06775406ffa245588d5bee2510c8b43ef6"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"BSD-3-Clause","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/pflag@v1.0.9"}]},{"name":"gopkg.in/yaml.v3","SPDXID":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-b8968cfb1e583023","versionInfo":"v3.0.1","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"Apache-2.0 AND MIT","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]},{"name":"stdlib","SPDXID":"SPDXRef-Package-go-module-stdlib-d8748546da68866e","versionInfo":"go1.25.6","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"NOASSERTION","licenseDeclared":"BSD-3-Clause","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:golang:go:1.25.6:-:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/stdlib@1.25.6"}]},{"name":"dcmerge","SPDXID":"SPDXRef-DocumentRoot-File-dcmerge","versionInfo":"sha256:28e15f7df9eb50cea8815a424e5410a717923aa889af13e0a52477d078ae1cf7","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"28e15f7df9eb50cea8815a424e5410a717923aa889af13e0a52477d078ae1cf7"}],"licenseConcluded":"NOASSERTION","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","primaryPackagePurpose":"FILE"}],"files":[{"fileName":"dcmerge","SPDXID":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","fileTypes":["APPLICATION","BINARY"],"checksums":[{"algorithm":"SHA1","checksumValue":"f57d9ce2398df25eef70bb53ec6cde184227f0bb"},{"algorithm":"SHA256","checksumValue":"28e15f7df9eb50cea8815a424e5410a717923aa889af13e0a52477d078ae1cf7"}],"licenseConcluded":"NOASSERTION","licenseInfoInFiles":["NOASSERTION"],"copyrightText":"NOASSERTION"}],"relationships":[{"spdxElementId":"SPDXRef-Package-go-module-github.com-spf13-pflag-a4b8992a1c6ad4d7","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-acd97798fdaf4148","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-b8968cfb1e583023","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-stdlib-d8748546da68866e","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-github.com-spf13-cobra-e3ea739347f54102","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-acd97798fdaf4148","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-github.com-spf13-cobra-e3ea739347f54102","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-github.com-spf13-pflag-a4b8992a1c6ad4d7","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-b8968cfb1e583023","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-stdlib-d8748546da68866e","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-DocumentRoot-File-dcmerge","relationshipType":"DESCRIBES"}]}