{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-30T23:10:37.385Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "publisher": "CycloneDX",
          "name": "cyclonedx-gomod",
          "version": "v1.9.0",
          "hashes": [
            {
              "alg": "MD5",
              "content": "f1a36dc8e8a26925a0854f6da0d42093"
            },
            {
              "alg": "SHA-1",
              "content": "29927a7d2ebc89ca8c51c6fb7204915a7c8d9853"
            },
            {
              "alg": "SHA-256",
              "content": "80fe16eedf92d95aca82b4a799d846d4b3f11e350888cc13805586380b4ff7fa"
            },
            {
              "alg": "SHA-384",
              "content": "ddbc7edf9c0cfb9d4d5becdcf22265eecf9fee2fc72e3e045ca1fad24751d25aa49eac89365f796f10b2bcd476ea9d95"
            },
            {
              "alg": "SHA-512",
              "content": "920a667cbf38bf143985b822b0bb2c75d1bd343acb254e20d05edf54ad8a0683d135ff04b853cd53c8ec64b6d56ebe4a2a1780710123ea6659192b50da1c7bf4"
            }
          ],
          "externalReferences": [
            {
              "url": "https://github.com/CycloneDX/cyclonedx-gomod",
              "type": "vcs"
            },
            {
              "url": "https://cyclonedx.org",
              "type": "website"
            }
          ]
        },
        {
          "type": "application",
          "publisher": "Fromerica LLC",
          "name": "sbom-enrich.mjs",
          "version": "1.0.0",
          "description": "Completes the SBOM with the CISA 2026 minimum elements (scripts/sbom-enrich.mjs in the Fromerica repository)."
        }
      ]
    },
    "component": {
      "bom-ref": "pkg:golang/usexporthub/backend@v0.0.0-20260930225534-47edb3a3ba61?type=module",
      "type": "application",
      "name": "usexporthub/backend",
      "version": "v0.0.0-20260930225534-47edb3a3ba61",
      "purl": "pkg:golang/usexporthub/backend@v0.0.0-20260930225534-47edb3a3ba61?type=module&goos=linux&goarch=amd64",
      "manufacturer": {
        "name": "Fromerica LLC",
        "url": [
          "https://www.fromerica.com"
        ],
        "contact": [
          {
            "email": "info@fromerica.com"
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "name": "Proprietary - all rights reserved, Fromerica LLC",
            "acknowledgement": "declared"
          }
        }
      ],
      "properties": [
        {
          "name": "fromerica:unknown:hash",
          "value": "Unknown: this SBOM is generated from source before the build; the container image is built by the hosting provider (Railway) at deploy time."
        }
      ]
    },
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "authors": [
      {
        "name": "Fromerica LLC",
        "email": "info@fromerica.com"
      }
    ],
    "manufacturer": {
      "name": "Fromerica LLC",
      "url": [
        "https://www.fromerica.com"
      ],
      "contact": [
        {
          "email": "info@fromerica.com"
        }
      ]
    },
    "supplier": {
      "name": "Fromerica LLC",
      "url": [
        "https://www.fromerica.com"
      ],
      "contact": [
        {
          "email": "info@fromerica.com"
        }
      ]
    },
    "properties": [
      {
        "name": "fromerica:coverage",
        "value": "All Go modules the backend needs to build and run, including transitive dependencies, and the Go standard library. Not listed here: the container base images (golang:1.27 for the build stage, alpine:3.24 at runtime); their SBOMs are published by Docker Official Images."
      },
      {
        "name": "fromerica:withheld",
        "value": "None. No component information has been withheld from this SBOM."
      },
      {
        "name": "fromerica:signature",
        "value": "Detached SSH signature (Ed25519, namespace \"fromerica-sbom\") at https://www.fromerica.com/sbom/backend.cdx.json.sig; signer key at https://www.fromerica.com/sbom/allowed_signers.txt."
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:golang/filippo.io/edwards25519@v1.2.0?type=module",
      "type": "library",
      "name": "filippo.io/edwards25519",
      "version": "v1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "72b9d5a8e892e23a9895e1ddf6f68a67e1cab477e59678092223a9369a09b23a"
        }
      ],
      "purl": "pkg:golang/filippo.io/edwards25519@v1.2.0?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-3-Clause"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Filippo Valsorda"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module",
      "type": "library",
      "name": "github.com/cespare/xxhash/v2",
      "version": "v2.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb"
        }
      ],
      "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/cespare/xxhash",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Caleb Spare"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?type=module",
      "type": "library",
      "name": "github.com/dustin/go-humanize",
      "version": "v1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1b392163b4f954d8449301f43d52608f3f9f5f5ae106b47ba514f79839297826"
        }
      ],
      "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/dustin/go-humanize",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Dustin Sallings"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0?type=module",
      "type": "library",
      "name": "github.com/go-sql-driver/mysql",
      "version": "v1.10.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "43ed4b57c0e41c9bd2600751f375f3ba10da4f292e0f1d25e9f917c6858259fc"
        }
      ],
      "purl": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/go-sql-driver/mysql",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MPL-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The Go-MySQL-Driver Authors"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?type=module",
      "type": "library",
      "name": "github.com/google/uuid",
      "version": "v1.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d"
        }
      ],
      "purl": "pkg:golang/github.com/google/uuid@v1.6.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/google/uuid",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-3-Clause"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Google LLC"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/joho/godotenv@v1.5.1?type=module",
      "type": "library",
      "name": "github.com/joho/godotenv",
      "version": "v1.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ede2cbffe1d118b63495dcdf18c79091beef31dd1ab3809f62f515ccbab0d0dd"
        }
      ],
      "purl": "pkg:golang/github.com/joho/godotenv@v1.5.1?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/joho/godotenv",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "John Barton"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.19.2?type=module",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.19.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "84c4444e8becfe9bbf75558def3213d4f186f2de74f4cc13e9b3bb5d28b6e91f"
        }
      ],
      "purl": "pkg:golang/github.com/klauspost/compress@v1.19.2?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/klauspost/compress",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Klaus Post"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module",
      "type": "library",
      "name": "github.com/klauspost/cpuid/v2",
      "version": "v2.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "4ba1eb6dcefecb0b2bd2bf912daa5f1811dfc9e7e1093c04877034b55f75dc3c"
        }
      ],
      "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/klauspost/cpuid",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Klaus Post"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/crc32@v1.3.0?type=module",
      "type": "library",
      "name": "github.com/klauspost/crc32",
      "version": "v1.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b12993b77814b7cd513fae795c664f1252343de9554d9e98c024673d2ba9a053"
        }
      ],
      "purl": "pkg:golang/github.com/klauspost/crc32@v1.3.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/klauspost/crc32",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-3-Clause"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Klaus Post"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/minio/crc64nvme@v1.1.1?type=module",
      "type": "library",
      "name": "github.com/minio/crc64nvme",
      "version": "v1.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f1dc31fcfcf8f6cbb2c1b3be6ae1c20690ad956d4e7e970b37bc1881547ac002"
        }
      ],
      "purl": "pkg:golang/github.com/minio/crc64nvme@v1.1.1?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/minio/crc64nvme",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "MinIO, Inc."
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/minio/md5-simd@v1.1.2?type=module",
      "type": "library",
      "name": "github.com/minio/md5-simd",
      "version": "v1.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "19d8b50d92baf7e65532834745727235cc6b300e1d4b1a181d94906e2ac5837e"
        }
      ],
      "purl": "pkg:golang/github.com/minio/md5-simd@v1.1.2?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/minio/md5-simd",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "MinIO, Inc."
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/minio/minio-go/v7@v7.3.0?type=module",
      "type": "library",
      "name": "github.com/minio/minio-go/v7",
      "version": "v7.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1cce29142490abf4cafa3d3fce6a2b4a1e5d761f35883811814d011b4573fd85"
        }
      ],
      "purl": "pkg:golang/github.com/minio/minio-go/v7@v7.3.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-go",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "MinIO, Inc."
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/philhofer/fwd@v1.2.0?type=module",
      "type": "library",
      "name": "github.com/philhofer/fwd",
      "version": "v1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7ba0e705397bbc663e1b3df6dbf0122f81b2a7516ca5e32fc7544d0e84e866e3"
        }
      ],
      "purl": "pkg:golang/github.com/philhofer/fwd@v1.2.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/philhofer/fwd",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Philip Hofer"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/rs/xid@v1.6.0?type=module",
      "type": "library",
      "name": "github.com/rs/xid",
      "version": "v1.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7d5e7dd4f69e99194be897d1c460c43e5ebdc080a7808437b2142dcdfcb68315"
        }
      ],
      "purl": "pkg:golang/github.com/rs/xid@v1.6.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/rs/xid",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Olivier Poitrey"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/stripe/stripe-go/v86@v86.4.2?type=module",
      "type": "library",
      "name": "github.com/stripe/stripe-go/v86",
      "version": "v86.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "21315a7642ce5369e53ef54925d4fa5b0a5272c73cabb5f4751e32add12bee8b"
        }
      ],
      "purl": "pkg:golang/github.com/stripe/stripe-go/v86@v86.4.2?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/stripe/stripe-go",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Stripe, Inc."
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/tinylib/msgp@v1.6.4?type=module",
      "type": "library",
      "name": "github.com/tinylib/msgp",
      "version": "v1.6.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "98ec186f26032cf8f7e66900d818e361e8e0264f41b87c4376f4676fabf665c4"
        }
      ],
      "purl": "pkg:golang/github.com/tinylib/msgp@v1.6.4?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/tinylib/msgp",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Philip Hofer"
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/zeebo/xxh3@v1.1.0?type=module",
      "type": "library",
      "name": "github.com/zeebo/xxh3",
      "version": "v1.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b3b0cb1832b8e43c9f83bfbecb1234921adfc2af7aeb5c3d10defc78ffd4655b"
        }
      ],
      "purl": "pkg:golang/github.com/zeebo/xxh3@v1.1.0?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/zeebo/xxh3",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-2-Clause"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "Jeff Wendling"
      }
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5?type=module",
      "type": "library",
      "name": "go.yaml.in/yaml/v3",
      "version": "v3.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "37acbfa4993c6ee5acf4d6391115361d231f9be22e0ff3ad7dd027aba90448fc"
        }
      ],
      "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The YAML Organization"
      }
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.56.0?type=module",
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.56.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "194879222e09e63b5cb1e48c891aabd635c2347a318de57d1667a4736a0bcba6"
        }
      ],
      "purl": "pkg:golang/golang.org/x/crypto@v0.56.0?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-Source-Code"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-Source-Code",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The Go Authors"
      }
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/image@v0.45.0?type=module",
      "type": "library",
      "name": "golang.org/x/image",
      "version": "v0.45.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "14c6f59d36c7e47f6f179e52ae2407805c391a734bf4983a2f6e41c172b3841d"
        }
      ],
      "purl": "pkg:golang/golang.org/x/image@v0.45.0?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-Source-Code"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-Source-Code",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The Go Authors"
      }
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.58.0?type=module",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.58.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ca7586eeba988b871ca5312e3d9d901961e4b5510cf433028fdcb30c4d10ed3a"
        }
      ],
      "purl": "pkg:golang/golang.org/x/net@v0.58.0?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-Source-Code"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-Source-Code",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The Go Authors"
      }
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.47.0?type=module",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.47.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a3b5c63af6500800c1410e18ed536ad9d456411ec998e516f0ac71e19b0d816b"
        }
      ],
      "purl": "pkg:golang/golang.org/x/sys@v0.47.0?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-Source-Code"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-Source-Code",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The Go Authors"
      }
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.41.0?type=module",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.41.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "bf3fec780d259d7f3b3ad86ed9fff42f6e11720ad70fdfd81534ae1a38f7ac7f"
        }
      ],
      "purl": "pkg:golang/golang.org/x/text@v0.41.0?type=module&goos=linux&goarch=amd64",
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "BSD-Source-Code"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "BSD-Source-Code",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The Go Authors"
      }
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.3?type=module",
      "type": "library",
      "name": "gopkg.in/ini.v1",
      "version": "v1.67.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "88cf4b873e4c4521a11d5186c02bb31bd28ef0fa22ac25e3fe6fea4e6389250c"
        }
      ],
      "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3?type=module&goos=linux&goarch=amd64",
      "externalReferences": [
        {
          "url": "https://github.com/go-ini/ini",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "concluded"
          }
        }
      ],
      "manufacturer": {
        "name": "The go-ini project"
      }
    },
    {
      "bom-ref": "pkg:golang/std@go1.27.0?type=module",
      "type": "library",
      "name": "std",
      "version": "go1.27.0",
      "scope": "required",
      "purl": "pkg:golang/std@go1.27.0?type=module&goos=linux&goarch=amd64",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "properties": [
        {
          "name": "fromerica:unknown:hash",
          "value": "Not available: the Go standard library ships inside the Go toolchain, not as a downloaded module."
        }
      ],
      "manufacturer": {
        "name": "The Go Authors"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/usexporthub/backend@v0.0.0-20260930225534-47edb3a3ba61?type=module",
      "dependsOn": [
        "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0?type=module",
        "pkg:golang/github.com/joho/godotenv@v1.5.1?type=module",
        "pkg:golang/github.com/minio/minio-go/v7@v7.3.0?type=module",
        "pkg:golang/github.com/stripe/stripe-go/v86@v86.4.2?type=module",
        "pkg:golang/golang.org/x/crypto@v0.56.0?type=module",
        "pkg:golang/golang.org/x/image@v0.45.0?type=module",
        "pkg:golang/std@go1.27.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/filippo.io/edwards25519@v1.2.0?type=module"
    },
    {
      "ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module"
    },
    {
      "ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?type=module"
    },
    {
      "ref": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0?type=module",
      "dependsOn": [
        "pkg:golang/filippo.io/edwards25519@v1.2.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/google/uuid@v1.6.0?type=module"
    },
    {
      "ref": "pkg:golang/github.com/joho/godotenv@v1.5.1?type=module"
    },
    {
      "ref": "pkg:golang/github.com/klauspost/compress@v1.19.2?type=module"
    },
    {
      "ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/klauspost/crc32@v1.3.0?type=module",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/minio/crc64nvme@v1.1.1?type=module",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module",
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/minio/md5-simd@v1.1.2?type=module",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/minio/minio-go/v7@v7.3.0?type=module",
      "dependsOn": [
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1?type=module",
        "pkg:golang/github.com/google/uuid@v1.6.0?type=module",
        "pkg:golang/github.com/klauspost/compress@v1.19.2?type=module",
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module",
        "pkg:golang/github.com/klauspost/crc32@v1.3.0?type=module",
        "pkg:golang/github.com/minio/crc64nvme@v1.1.1?type=module",
        "pkg:golang/github.com/minio/md5-simd@v1.1.2?type=module",
        "pkg:golang/github.com/philhofer/fwd@v1.2.0?type=module",
        "pkg:golang/github.com/rs/xid@v1.6.0?type=module",
        "pkg:golang/github.com/tinylib/msgp@v1.6.4?type=module",
        "pkg:golang/github.com/zeebo/xxh3@v1.1.0?type=module",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.5?type=module",
        "pkg:golang/golang.org/x/crypto@v0.56.0?type=module",
        "pkg:golang/golang.org/x/net@v0.58.0?type=module",
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module",
        "pkg:golang/golang.org/x/text@v0.41.0?type=module",
        "pkg:golang/gopkg.in/ini.v1@v1.67.3?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/philhofer/fwd@v1.2.0?type=module"
    },
    {
      "ref": "pkg:golang/github.com/rs/xid@v1.6.0?type=module"
    },
    {
      "ref": "pkg:golang/github.com/stripe/stripe-go/v86@v86.4.2?type=module"
    },
    {
      "ref": "pkg:golang/github.com/tinylib/msgp@v1.6.4?type=module",
      "dependsOn": [
        "pkg:golang/github.com/philhofer/fwd@v1.2.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/zeebo/xxh3@v1.1.0?type=module",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?type=module",
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5?type=module"
    },
    {
      "ref": "pkg:golang/golang.org/x/crypto@v0.56.0?type=module",
      "dependsOn": [
        "pkg:golang/golang.org/x/net@v0.58.0?type=module",
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module",
        "pkg:golang/golang.org/x/text@v0.41.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/image@v0.45.0?type=module",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module",
        "pkg:golang/golang.org/x/text@v0.41.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/net@v0.58.0?type=module",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.56.0?type=module",
        "pkg:golang/golang.org/x/sys@v0.47.0?type=module",
        "pkg:golang/golang.org/x/text@v0.41.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/sys@v0.47.0?type=module"
    },
    {
      "ref": "pkg:golang/golang.org/x/text@v0.41.0?type=module"
    },
    {
      "ref": "pkg:golang/gopkg.in/ini.v1@v1.67.3?type=module"
    },
    {
      "ref": "pkg:golang/std@go1.27.0?type=module"
    }
  ]
}