{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:12147f34-5151-5205-ac46-0344fb32c74a",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-29T00:00:00Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "php-sbom",
          "publisher": "Jorg Sowa"
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "php",
      "name": "php",
      "version": "8.5.12",
      "description": "Official Docker image (Alpine) (php:8.5-cli-alpine), Alpine Linux v3.24, amd64"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "bundled:PCRE2",
      "name": "PCRE2",
      "version": "10.44",
      "purl": "pkg:generic/pcre2@10.44",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "pcre"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:timelib",
      "name": "timelib",
      "version": "2022.17",
      "purl": "pkg:generic/timelib@2022.17",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "date"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:Time zone database",
      "name": "Time zone database",
      "version": "2026.5",
      "purl": "pkg:generic/time-zone-database@2026.5",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "date"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:Lexbor",
      "name": "Lexbor",
      "version": "2.7.0",
      "purl": "pkg:generic/lexbor@2.7.0",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "lexbor"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:uriparser",
      "name": "uriparser",
      "version": "1.0.2",
      "purl": "pkg:generic/uriparser@1.0.2",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "uri"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:libmagic",
      "name": "libmagic",
      "version": "5.46",
      "purl": "pkg:generic/libmagic@5.46",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "fileinfo"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:libmbfl",
      "name": "libmbfl",
      "version": "1.3.2",
      "purl": "pkg:generic/libmbfl@1.3.2",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "mbstring"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:IR JIT framework",
      "name": "IR JIT framework",
      "purl": "pkg:generic/ir-jit-framework",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "opcache"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:xxHash",
      "name": "xxHash",
      "purl": "pkg:generic/xxhash",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "hash"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:Keccak (SHA-3)",
      "name": "Keccak (SHA-3)",
      "purl": "pkg:generic/keccak-(sha-3)",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "hash"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:crypt_blowfish",
      "name": "crypt_blowfish",
      "purl": "pkg:generic/crypt_blowfish",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "standard"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/argon2-libs@20190702-r5?arch=x86_64&distro=3.24",
      "name": "argon2-libs",
      "version": "20190702-r5",
      "purl": "pkg:apk/alpine/argon2-libs@20190702-r5?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "argon2"
        },
        {
          "name": "php:soname",
          "value": "libargon2.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/gnu-libiconv-libs@1.18-r0?arch=x86_64&distro=3.24",
      "name": "gnu-libiconv-libs",
      "version": "1.18-r0",
      "purl": "pkg:apk/alpine/gnu-libiconv-libs@1.18-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "gnu-libiconv"
        },
        {
          "name": "php:soname",
          "value": "libiconv.so.2"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64&distro=3.24",
      "name": "libcrypto3",
      "version": "3.5.9-r0",
      "purl": "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "openssl"
        },
        {
          "name": "php:soname",
          "value": "libcrypto.so.3"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libcurl@8.22.0-r0?arch=x86_64&distro=3.24",
      "name": "libcurl",
      "version": "8.22.0-r0",
      "purl": "pkg:apk/alpine/libcurl@8.22.0-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "curl"
        },
        {
          "name": "php:soname",
          "value": "libcurl.so.4"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libgcc@15.2.0-r5?arch=x86_64&distro=3.24",
      "name": "libgcc",
      "version": "15.2.0-r5",
      "purl": "pkg:apk/alpine/libgcc@15.2.0-r5?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "gcc"
        },
        {
          "name": "php:soname",
          "value": "libgcc_s.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libsodium@1.0.22-r0?arch=x86_64&distro=3.24",
      "name": "libsodium",
      "version": "1.0.22-r0",
      "purl": "pkg:apk/alpine/libsodium@1.0.22-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libsodium"
        },
        {
          "name": "php:soname",
          "value": "libsodium.so.26"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64&distro=3.24",
      "name": "libssl3",
      "version": "3.5.9-r0",
      "purl": "pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "openssl"
        },
        {
          "name": "php:soname",
          "value": "libssl.so.3"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libxml2@2.13.9-r2?arch=x86_64&distro=3.24",
      "name": "libxml2",
      "version": "2.13.9-r2",
      "purl": "pkg:apk/alpine/libxml2@2.13.9-r2?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libxml2"
        },
        {
          "name": "php:soname",
          "value": "libxml2.so.2"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/musl@1.2.6-r3?arch=x86_64&distro=3.24",
      "name": "musl",
      "version": "1.2.6-r3",
      "purl": "pkg:apk/alpine/musl@1.2.6-r3?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "musl"
        },
        {
          "name": "php:soname",
          "value": "libc.musl-x86_64.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/oniguruma@6.9.10-r0?arch=x86_64&distro=3.24",
      "name": "oniguruma",
      "version": "6.9.10-r0",
      "purl": "pkg:apk/alpine/oniguruma@6.9.10-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "oniguruma"
        },
        {
          "name": "php:soname",
          "value": "libonig.so.5"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24",
      "name": "readline",
      "version": "8.3.3-r1",
      "purl": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "readline"
        },
        {
          "name": "php:soname",
          "value": "libreadline.so.8"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24",
      "name": "sqlite-libs",
      "version": "3.53.4-r0",
      "purl": "pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "sqlite"
        },
        {
          "name": "php:soname",
          "value": "libsqlite3.so.0"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=3.24",
      "name": "zlib",
      "version": "1.3.2-r1",
      "purl": "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "zlib"
        },
        {
          "name": "php:soname",
          "value": "libz.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/brotli-libs@1.2.0-r1?arch=x86_64&distro=3.24",
      "name": "brotli-libs",
      "version": "1.2.0-r1",
      "purl": "pkg:apk/alpine/brotli-libs@1.2.0-r1?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "brotli"
        },
        {
          "name": "php:soname",
          "value": "libbrotlicommon.so.1"
        },
        {
          "name": "php:soname",
          "value": "libbrotlidec.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/c-ares@1.34.9-r0?arch=x86_64&distro=3.24",
      "name": "c-ares",
      "version": "1.34.9-r0",
      "purl": "pkg:apk/alpine/c-ares@1.34.9-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "c-ares"
        },
        {
          "name": "php:soname",
          "value": "libcares.so.2"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=3.24",
      "name": "libidn2",
      "version": "2.3.8-r0",
      "purl": "pkg:apk/alpine/libidn2@2.3.8-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libidn2"
        },
        {
          "name": "php:soname",
          "value": "libidn2.so.0"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24",
      "name": "libncursesw",
      "version": "6.6_p20260516-r0",
      "purl": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "ncurses"
        },
        {
          "name": "php:soname",
          "value": "libncursesw.so.6"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64&distro=3.24",
      "name": "libpsl",
      "version": "0.21.5-r3",
      "purl": "pkg:apk/alpine/libpsl@0.21.5-r3?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libpsl"
        },
        {
          "name": "php:soname",
          "value": "libpsl.so.5"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/libunistring@1.4.2-r0?arch=x86_64&distro=3.24",
      "name": "libunistring",
      "version": "1.4.2-r0",
      "purl": "pkg:apk/alpine/libunistring@1.4.2-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libunistring"
        },
        {
          "name": "php:soname",
          "value": "libunistring.so.5"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/nghttp2-libs@1.70.0-r0?arch=x86_64&distro=3.24",
      "name": "nghttp2-libs",
      "version": "1.70.0-r0",
      "purl": "pkg:apk/alpine/nghttp2-libs@1.70.0-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "nghttp2"
        },
        {
          "name": "php:soname",
          "value": "libnghttp2.so.14"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/xz-libs@5.8.4-r0?arch=x86_64&distro=3.24",
      "name": "xz-libs",
      "version": "5.8.4-r0",
      "purl": "pkg:apk/alpine/xz-libs@5.8.4-r0?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "xz"
        },
        {
          "name": "php:soname",
          "value": "liblzma.so.5"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=3.24",
      "name": "zstd-libs",
      "version": "1.5.7-r2",
      "purl": "pkg:apk/alpine/zstd-libs@1.5.7-r2?arch=x86_64&distro=3.24",
      "properties": [
        {
          "name": "php:source-package",
          "value": "zstd"
        },
        {
          "name": "php:soname",
          "value": "libzstd.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "extension:sodium",
      "name": "php-ext-sodium",
      "version": "8.5.12",
      "properties": [
        {
          "name": "php:file",
          "value": "/usr/local/lib/php/extensions/no-debug-non-zts-20250925/sodium.so"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "php",
      "dependsOn": [
        "bundled:PCRE2",
        "bundled:timelib",
        "bundled:Time zone database",
        "bundled:Lexbor",
        "bundled:uriparser",
        "bundled:libmagic",
        "bundled:libmbfl",
        "bundled:IR JIT framework",
        "bundled:xxHash",
        "bundled:Keccak (SHA-3)",
        "bundled:crypt_blowfish",
        "extension:sodium",
        "pkg:apk/alpine/argon2-libs@20190702-r5?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/musl@1.2.6-r3?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/libcurl@8.22.0-r0?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/libgcc@15.2.0-r5?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/gnu-libiconv-libs@1.18-r0?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/oniguruma@6.9.10-r0?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/libxml2@2.13.9-r2?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=3.24"
      ]
    },
    {
      "ref": "extension:sodium",
      "dependsOn": [
        "pkg:apk/alpine/musl@1.2.6-r3?arch=x86_64&distro=3.24",
        "pkg:apk/alpine/libsodium@1.0.22-r0?arch=x86_64&distro=3.24"
      ]
    }
  ]
}