{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"dcmerge","documentNamespace":"https://anchore.com/syft/file/dcmerge-01579153-b9d4-40ee-9386-c76fbc9b2075","creationInfo":{"licenseListVersion":"3.28","creators":["Organization: Anchore, Inc","Tool: syft-1.44.0"],"created":"2026-05-03T13:50:46Z"},"packages":[{"name":"git.cryptic.systems/volker.raschek/dcmerge","SPDXID":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-195c7a36c965ccf7","versionInfo":"UNKNOWN","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"NOASSERTION","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:volker.raschek:dcmerge:*:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/git.cryptic.systems/volker.raschek/dcmerge"}]},{"name":"github.com/spf13/cobra","SPDXID":"SPDXRef-Package-go-module-github.com-spf13-cobra-2d6b014415e9165e","versionInfo":"v1.10.2","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"Apache-2.0","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/cobra@v1.10.2"}]},{"name":"github.com/spf13/pflag","SPDXID":"SPDXRef-Package-go-module-github.com-spf13-pflag-dd9e243de163696d","versionInfo":"v1.0.9","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"f5ec5a41a30e0b07df2a28a2624ebf06775406ffa245588d5bee2510c8b43ef6"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"BSD-3-Clause","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/pflag@v1.0.9"}]},{"name":"gopkg.in/yaml.v3","SPDXID":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-01c73f18c5fc8cce","versionInfo":"v3.0.1","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"}],"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"Apache-2.0 AND MIT","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]},{"name":"stdlib","SPDXID":"SPDXRef-Package-go-module-stdlib-127611db336fb88e","versionInfo":"go1.26.2","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"sourceInfo":"acquired package info from go module information: /dcmerge","licenseConcluded":"NOASSERTION","licenseDeclared":"BSD-3-Clause","copyrightText":"NOASSERTION","externalRefs":[{"referenceCategory":"SECURITY","referenceType":"cpe23Type","referenceLocator":"cpe:2.3:a:golang:go:1.26.2:-:*:*:*:*:*:*"},{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/stdlib@1.26.2"}]},{"name":"dcmerge","SPDXID":"SPDXRef-DocumentRoot-File-dcmerge","versionInfo":"sha256:e3fb69f31efda4d9ce275ef70d586e3143e0a64c55722cafbfba9d5a68ff78f4","supplier":"NOASSERTION","downloadLocation":"NOASSERTION","filesAnalyzed":false,"checksums":[{"algorithm":"SHA256","checksumValue":"e3fb69f31efda4d9ce275ef70d586e3143e0a64c55722cafbfba9d5a68ff78f4"}],"licenseConcluded":"NOASSERTION","licenseDeclared":"NOASSERTION","copyrightText":"NOASSERTION","primaryPackagePurpose":"FILE"}],"files":[{"fileName":"dcmerge","SPDXID":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","fileTypes":["APPLICATION","BINARY"],"checksums":[{"algorithm":"SHA1","checksumValue":"2d446204249a012d0bf2e987265edfb9e493776f"},{"algorithm":"SHA256","checksumValue":"e3fb69f31efda4d9ce275ef70d586e3143e0a64c55722cafbfba9d5a68ff78f4"}],"licenseConcluded":"NOASSERTION","licenseInfoInFiles":["NOASSERTION"],"copyrightText":"NOASSERTION"}],"relationships":[{"spdxElementId":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-01c73f18c5fc8cce","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-stdlib-127611db336fb88e","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-195c7a36c965ccf7","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-github.com-spf13-cobra-2d6b014415e9165e","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-Package-go-module-github.com-spf13-pflag-dd9e243de163696d","relatedSpdxElement":"SPDXRef-File-dcmerge-1dec379a0f2fb3f7","relationshipType":"OTHER","comment":"evident-by: indicates the package's existence is evident by the given file"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-git.cryptic.systems-volker.raschek-dcmerge-195c7a36c965ccf7","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-github.com-spf13-cobra-2d6b014415e9165e","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-github.com-spf13-pflag-dd9e243de163696d","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-gopkg.in-yaml.v3-01c73f18c5fc8cce","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DocumentRoot-File-dcmerge","relatedSpdxElement":"SPDXRef-Package-go-module-stdlib-127611db336fb88e","relationshipType":"CONTAINS"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-DocumentRoot-File-dcmerge","relationshipType":"DESCRIBES"}]}