{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:986ee076-dcfa-543f-ae70-021c596e9bcd",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-29T00:00:00Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "php-sbom",
          "publisher": "Jorg Sowa"
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "php",
      "name": "php",
      "version": "8.5.12",
      "description": "Official Docker image (php:8.5-cli), Debian GNU/Linux 13 (trixie), amd64"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "bundled:PCRE2",
      "name": "PCRE2",
      "version": "10.44",
      "purl": "pkg:generic/pcre2@10.44",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "pcre"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:timelib",
      "name": "timelib",
      "version": "2022.17",
      "purl": "pkg:generic/timelib@2022.17",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "date"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:Time zone database",
      "name": "Time zone database",
      "version": "2026.5",
      "purl": "pkg:generic/time-zone-database@2026.5",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "date"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:Lexbor",
      "name": "Lexbor",
      "version": "2.7.0",
      "purl": "pkg:generic/lexbor@2.7.0",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "lexbor"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:uriparser",
      "name": "uriparser",
      "version": "1.0.2",
      "purl": "pkg:generic/uriparser@1.0.2",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "uri"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:libmagic",
      "name": "libmagic",
      "version": "5.46",
      "purl": "pkg:generic/libmagic@5.46",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "fileinfo"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:libmbfl",
      "name": "libmbfl",
      "version": "1.3.2",
      "purl": "pkg:generic/libmbfl@1.3.2",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "mbstring"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:IR JIT framework",
      "name": "IR JIT framework",
      "purl": "pkg:generic/ir-jit-framework",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "opcache"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:xxHash",
      "name": "xxHash",
      "purl": "pkg:generic/xxhash",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "hash"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:Keccak (SHA-3)",
      "name": "Keccak (SHA-3)",
      "purl": "pkg:generic/keccak-(sha-3)",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "hash"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled:crypt_blowfish",
      "name": "crypt_blowfish",
      "purl": "pkg:generic/crypt_blowfish",
      "properties": [
        {
          "name": "php:bundled-in",
          "value": "php-src"
        },
        {
          "name": "php:extension",
          "value": "standard"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libargon2-1@0~20190702%2Bdfsg-4%2Bb2?arch=amd64&distro=debian-13",
      "name": "libargon2-1",
      "version": "0~20190702+dfsg-4+b2",
      "purl": "pkg:deb/debian/libargon2-1@0~20190702%2Bdfsg-4%2Bb2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "argon2"
        },
        {
          "name": "php:soname",
          "value": "libargon2.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64&distro=debian-13",
      "name": "libc6",
      "version": "2.41-12+deb13u4",
      "purl": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "glibc"
        },
        {
          "name": "php:soname",
          "value": "libc.so.6"
        },
        {
          "name": "php:soname",
          "value": "libm.so.6"
        },
        {
          "name": "php:soname",
          "value": "libresolv.so.2"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libcurl4t64@8.14.1-2%2Bdeb13u7?arch=amd64&distro=debian-13",
      "name": "libcurl4t64",
      "version": "8.14.1-2+deb13u7",
      "purl": "pkg:deb/debian/libcurl4t64@8.14.1-2%2Bdeb13u7?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "curl"
        },
        {
          "name": "php:soname",
          "value": "libcurl.so.4"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13",
      "name": "libgcc-s1",
      "version": "14.2.0-19",
      "purl": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "gcc-14"
        },
        {
          "name": "php:soname",
          "value": "libgcc_s.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libonig5@6.9.9-1%2Bb1?arch=amd64&distro=debian-13",
      "name": "libonig5",
      "version": "6.9.9-1+b1",
      "purl": "pkg:deb/debian/libonig5@6.9.9-1%2Bb1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libonig"
        },
        {
          "name": "php:soname",
          "value": "libonig.so.5"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64&distro=debian-13",
      "name": "libreadline8t64",
      "version": "8.2-6",
      "purl": "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "readline"
        },
        {
          "name": "php:soname",
          "value": "libreadline.so.8"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libsodium23@1.0.18-1%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libsodium23",
      "version": "1.0.18-1+deb13u1",
      "purl": "pkg:deb/debian/libsodium23@1.0.18-1%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libsodium"
        },
        {
          "name": "php:soname",
          "value": "libsodium.so.23"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64&distro=debian-13",
      "name": "libsqlite3-0",
      "version": "3.46.1-7+deb13u2",
      "purl": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "sqlite3"
        },
        {
          "name": "php:soname",
          "value": "libsqlite3.so.0"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libssl3t64@3.5.7-1~deb13u3?arch=amd64&distro=debian-13",
      "name": "libssl3t64",
      "version": "3.5.7-1~deb13u3",
      "purl": "pkg:deb/debian/libssl3t64@3.5.7-1~deb13u3?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "openssl"
        },
        {
          "name": "php:soname",
          "value": "libcrypto.so.3"
        },
        {
          "name": "php:soname",
          "value": "libssl.so.3"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64&distro=debian-13",
      "name": "libxml2",
      "version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
      "purl": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libxml2"
        },
        {
          "name": "php:soname",
          "value": "libxml2.so.2"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13",
      "name": "zlib1g",
      "version": "1:1.3.dfsg+really1.3.1-1+b1",
      "purl": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "zlib"
        },
        {
          "name": "php:soname",
          "value": "libz.so.1"
        },
        {
          "name": "php:direct",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libbrotli1@1.1.0-2%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libbrotli1",
      "version": "1.1.0-2+deb13u1",
      "purl": "pkg:deb/debian/libbrotli1@1.1.0-2%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "brotli"
        },
        {
          "name": "php:soname",
          "value": "libbrotlicommon.so.1"
        },
        {
          "name": "php:soname",
          "value": "libbrotlidec.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libcom-err2@1.47.2-3%2Bb12?arch=amd64&distro=debian-13",
      "name": "libcom-err2",
      "version": "1.47.2-3+b12",
      "purl": "pkg:deb/debian/libcom-err2@1.47.2-3%2Bb12?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "e2fsprogs"
        },
        {
          "name": "php:soname",
          "value": "libcom_err.so.2"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libffi8@3.4.8-2?arch=amd64&distro=debian-13",
      "name": "libffi8",
      "version": "3.4.8-2",
      "purl": "pkg:deb/debian/libffi8@3.4.8-2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libffi"
        },
        {
          "name": "php:soname",
          "value": "libffi.so.8"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libgmp10@2%3A6.3.0%2Bdfsg-3?arch=amd64&distro=debian-13",
      "name": "libgmp10",
      "version": "2:6.3.0+dfsg-3",
      "purl": "pkg:deb/debian/libgmp10@2%3A6.3.0%2Bdfsg-3?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "gmp"
        },
        {
          "name": "php:soname",
          "value": "libgmp.so.10"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libgnutls30t64@3.8.9-3%2Bdeb13u4?arch=amd64&distro=debian-13",
      "name": "libgnutls30t64",
      "version": "3.8.9-3+deb13u4",
      "purl": "pkg:deb/debian/libgnutls30t64@3.8.9-3%2Bdeb13u4?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "gnutls28"
        },
        {
          "name": "php:soname",
          "value": "libgnutls.so.30"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libgssapi-krb5-2@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libgssapi-krb5-2",
      "version": "1.21.3-5+deb13u1",
      "purl": "pkg:deb/debian/libgssapi-krb5-2@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "krb5"
        },
        {
          "name": "php:soname",
          "value": "libgssapi_krb5.so.2"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libhogweed6t64@3.10.1-1?arch=amd64&distro=debian-13",
      "name": "libhogweed6t64",
      "version": "3.10.1-1",
      "purl": "pkg:deb/debian/libhogweed6t64@3.10.1-1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "nettle"
        },
        {
          "name": "php:soname",
          "value": "libhogweed.so.6"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libidn2-0@2.3.8-2?arch=amd64&distro=debian-13",
      "name": "libidn2-0",
      "version": "2.3.8-2",
      "purl": "pkg:deb/debian/libidn2-0@2.3.8-2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libidn2"
        },
        {
          "name": "php:soname",
          "value": "libidn2.so.0"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libk5crypto3@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libk5crypto3",
      "version": "1.21.3-5+deb13u1",
      "purl": "pkg:deb/debian/libk5crypto3@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "krb5"
        },
        {
          "name": "php:soname",
          "value": "libk5crypto.so.3"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libkeyutils1@1.6.3-6?arch=amd64&distro=debian-13",
      "name": "libkeyutils1",
      "version": "1.6.3-6",
      "purl": "pkg:deb/debian/libkeyutils1@1.6.3-6?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "keyutils"
        },
        {
          "name": "php:soname",
          "value": "libkeyutils.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libkrb5-3@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libkrb5-3",
      "version": "1.21.3-5+deb13u1",
      "purl": "pkg:deb/debian/libkrb5-3@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "krb5"
        },
        {
          "name": "php:soname",
          "value": "libkrb5.so.3"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libkrb5support0@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libkrb5support0",
      "version": "1.21.3-5+deb13u1",
      "purl": "pkg:deb/debian/libkrb5support0@1.21.3-5%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "krb5"
        },
        {
          "name": "php:soname",
          "value": "libkrb5support.so.0"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libldap2@2.6.10%2Bdfsg-1?arch=amd64&distro=debian-13",
      "name": "libldap2",
      "version": "2.6.10+dfsg-1",
      "purl": "pkg:deb/debian/libldap2@2.6.10%2Bdfsg-1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "openldap"
        },
        {
          "name": "php:soname",
          "value": "liblber.so.2"
        },
        {
          "name": "php:soname",
          "value": "libldap.so.2"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/liblzma5@5.8.1-1%2Bdeb13u2?arch=amd64&distro=debian-13",
      "name": "liblzma5",
      "version": "5.8.1-1+deb13u2",
      "purl": "pkg:deb/debian/liblzma5@5.8.1-1%2Bdeb13u2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "xz-utils"
        },
        {
          "name": "php:soname",
          "value": "liblzma.so.5"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libnettle8t64@3.10.1-1?arch=amd64&distro=debian-13",
      "name": "libnettle8t64",
      "version": "3.10.1-1",
      "purl": "pkg:deb/debian/libnettle8t64@3.10.1-1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "nettle"
        },
        {
          "name": "php:soname",
          "value": "libnettle.so.8"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libnghttp2-14@1.64.0-1.1%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libnghttp2-14",
      "version": "1.64.0-1.1+deb13u1",
      "purl": "pkg:deb/debian/libnghttp2-14@1.64.0-1.1%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "nghttp2"
        },
        {
          "name": "php:soname",
          "value": "libnghttp2.so.14"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libnghttp3-9@1.8.0-1?arch=amd64&distro=debian-13",
      "name": "libnghttp3-9",
      "version": "1.8.0-1",
      "purl": "pkg:deb/debian/libnghttp3-9@1.8.0-1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "nghttp3"
        },
        {
          "name": "php:soname",
          "value": "libnghttp3.so.9"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libp11-kit0@0.25.5-3?arch=amd64&distro=debian-13",
      "name": "libp11-kit0",
      "version": "0.25.5-3",
      "purl": "pkg:deb/debian/libp11-kit0@0.25.5-3?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "p11-kit"
        },
        {
          "name": "php:soname",
          "value": "libp11-kit.so.0"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libpsl5t64@0.21.2-1.1%2Bb1?arch=amd64&distro=debian-13",
      "name": "libpsl5t64",
      "version": "0.21.2-1.1+b1",
      "purl": "pkg:deb/debian/libpsl5t64@0.21.2-1.1%2Bb1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libpsl"
        },
        {
          "name": "php:soname",
          "value": "libpsl.so.5"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/librtmp1@2.4%2B20151223.gitfa8646d.1-2%2Bb5?arch=amd64&distro=debian-13",
      "name": "librtmp1",
      "version": "2.4+20151223.gitfa8646d.1-2+b5",
      "purl": "pkg:deb/debian/librtmp1@2.4%2B20151223.gitfa8646d.1-2%2Bb5?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "rtmpdump"
        },
        {
          "name": "php:soname",
          "value": "librtmp.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libsasl2-2@2.1.28%2Bdfsg1-9?arch=amd64&distro=debian-13",
      "name": "libsasl2-2",
      "version": "2.1.28+dfsg1-9",
      "purl": "pkg:deb/debian/libsasl2-2@2.1.28%2Bdfsg1-9?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "cyrus-sasl2"
        },
        {
          "name": "php:soname",
          "value": "libsasl2.so.2"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libssh2-1t64@1.11.1-1%2Bdeb13u2?arch=amd64&distro=debian-13",
      "name": "libssh2-1t64",
      "version": "1.11.1-1+deb13u2",
      "purl": "pkg:deb/debian/libssh2-1t64@1.11.1-1%2Bdeb13u2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libssh2"
        },
        {
          "name": "php:soname",
          "value": "libssh2.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libtasn1-6@4.20.0-2%2Bdeb13u1?arch=amd64&distro=debian-13",
      "name": "libtasn1-6",
      "version": "4.20.0-2+deb13u1",
      "purl": "pkg:deb/debian/libtasn1-6@4.20.0-2%2Bdeb13u1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libtasn1-6"
        },
        {
          "name": "php:soname",
          "value": "libtasn1.so.6"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64&distro=debian-13",
      "name": "libtinfo6",
      "version": "6.5+20250216-2",
      "purl": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "ncurses"
        },
        {
          "name": "php:soname",
          "value": "libtinfo.so.6"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libunistring5@1.3-2?arch=amd64&distro=debian-13",
      "name": "libunistring5",
      "version": "1.3-2",
      "purl": "pkg:deb/debian/libunistring5@1.3-2?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libunistring"
        },
        {
          "name": "php:soname",
          "value": "libunistring.so.5"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64&distro=debian-13",
      "name": "libzstd1",
      "version": "1.5.7+dfsg-1",
      "purl": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64&distro=debian-13",
      "properties": [
        {
          "name": "php:source-package",
          "value": "libzstd"
        },
        {
          "name": "php:soname",
          "value": "libzstd.so.1"
        },
        {
          "name": "php:direct",
          "value": "false"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "extension:sodium",
      "name": "php-ext-sodium",
      "version": "8.5.12",
      "properties": [
        {
          "name": "php:file",
          "value": "/usr/local/lib/php/extensions/no-debug-non-zts-20250925/sodium.so"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "php",
      "dependsOn": [
        "bundled:PCRE2",
        "bundled:timelib",
        "bundled:Time zone database",
        "bundled:Lexbor",
        "bundled:uriparser",
        "bundled:libmagic",
        "bundled:libmbfl",
        "bundled:IR JIT framework",
        "bundled:xxHash",
        "bundled:Keccak (SHA-3)",
        "bundled:crypt_blowfish",
        "extension:sodium",
        "pkg:deb/debian/libargon2-1@0~20190702%2Bdfsg-4%2Bb2?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libssl3t64@3.5.7-1~deb13u3?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libcurl4t64@8.14.1-2%2Bdeb13u7?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libonig5@6.9.9-1%2Bb1?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64&distro=debian-13",
        "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13"
      ]
    },
    {
      "ref": "extension:sodium",
      "dependsOn": [
        "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64&distro=debian-13",
        "pkg:deb/debian/libsodium23@1.0.18-1%2Bdeb13u1?arch=amd64&distro=debian-13"
      ]
    }
  ]
}