{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "serialNumber": "urn:uuid:f1cb52cf-1b9d-44df-ba98-ecea47297b81",
    "version": 1,
    "metadata": {
        "timestamp": "2026-07-28T13:47:36Z",
        "tools": {
            "components": [
                {
                    "type": "application",
                    "name": "php",
                    "version": "8.6.0alpha3"
                }
            ]
        },
        "component": {
            "type": "application",
            "bom-ref": "pkg:generic/php@8.6.0alpha3",
            "name": "php",
            "version": "8.6.0alpha3",
            "purl": "pkg:generic/php@8.6.0alpha3",
            "cpe": "cpe:2.3:a:php:php:8.6.0:alpha3:*:*:*:*:*:*",
            "supplier": {
                "name": "PHP Group"
            },
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "properties": [
                {
                    "name": "php:dependency-sbom-status",
                    "value": "present"
                },
                {
                    "name": "php:artifact-file-name",
                    "value": "php-8.6.0alpha3-nts-Win32-vs18-x64.zip"
                },
                {
                    "name": "php:artifact-download-location",
                    "value": "https://downloads.php.net/~windows/qa/php-8.6.0alpha3-nts-Win32-vs18-x64.zip"
                },
                {
                    "name": "php:artifact-architecture",
                    "value": "x64"
                },
                {
                    "name": "php:artifact-thread-safety",
                    "value": "nts"
                },
                {
                    "name": "php:artifact-compiler",
                    "value": "vs18"
                }
            ],
            "copyright": "Copyright \u00a9 1999\u20132026, The PHP Group and Contributors.",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ac3a4254be6f1eb0c25aa92e92ba435547472b2bce4bacebfa7d14b783071417"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/qa/php-8.6.0alpha3-nts-Win32-vs18-x64.zip"
                }
            ]
        }
    },
    "components": [
        {
            "type": "library",
            "bom-ref": "pkg:generic/berkeley-uuencode",
            "name": "Berkeley uuencode",
            "version": "snapshot-04139aaa1fc2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/berkeley-uuencode",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause-UC"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "04139aaa1fc203fc491f0fe09927b23ac965215c786801d965d2bf1bffe3a5ff"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/uuencode.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "04139aaa1fc203fc491f0fe09927b23ac965215c786801d965d2bf1bffe3a5ff"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/boost-context-assembly",
            "name": "Boost.Context assembly",
            "version": "snapshot-7f36cd662cc6",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/boost-context-assembly",
            "licenses": [
                {
                    "license": {
                        "id": "BSL-1.0"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7f36cd662cc6ce6bd8fe6ae0e53391dc94483f602a098152f117b5e157016398"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "Zend/asm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "7f36cd662cc6ce6bd8fe6ae0e53391dc94483f602a098152f117b5e157016398"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/crypt_blowfish@1.3",
            "name": "crypt_blowfish",
            "version": "1.3",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/crypt_blowfish@1.3",
            "licenses": [
                {
                    "license": {
                        "id": "bcrypt-Solar-Designer"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_blowfish.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/dynasm@1.5.0",
            "name": "DynASM",
            "version": "1.5.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/dynasm@1.5.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d2d56ba8be243d8330b96f0aaf416dd4f8e153667a9ee07fcfe5cf7cf8e2fa22"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/opcache/jit/ir/dynasm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d2d56ba8be243d8330b96f0aaf416dd4f8e153667a9ee07fcfe5cf7cf8e2fa22"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/freesec-libcrypt",
            "name": "FreeSec libcrypt",
            "version": "snapshot-6b1d1d57b0af",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/freesec-libcrypt",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_freesec.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libarchive-format-octal",
            "name": "libarchive tar format_octal",
            "version": "snapshot-8516108aa5a2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libarchive-format-octal",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "8516108aa5a2518db5a4efa7af6c0eeadd1bd6bb8475b1a194e93b54a6255ea5"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/tar.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "8516108aa5a2518db5a4efa7af6c0eeadd1bd6bb8475b1a194e93b54a6255ea5"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba",
            "name": "libavifinfo",
            "version": "2b924defa4c2cd227540efe164067a8cc913eeba",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "eebfce3dfe05d5173f6c95afcfb780eb4eda76cbff22d7149dffc6fd4590a8a1"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/libavifinfo"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "eebfce3dfe05d5173f6c95afcfb780eb4eda76cbff22d7149dffc6fd4590a8a1"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libbcmath@0.2",
            "name": "libbcmath",
            "version": "0.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libbcmath@0.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "9d59eb15b06da089a4daa67ea3709628bd3537af48a695c1723cc2474e03b79a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/bcmath/libbcmath"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "9d59eb15b06da089a4daa67ea3709628bd3537af48a695c1723cc2474e03b79a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libgd@2.4.0",
            "name": "libgd",
            "version": "2.4.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libgd@2.4.0",
            "licenses": [
                {
                    "license": {
                        "id": "GD"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b4550a06ba9e3d128d9f36686c740baf58290ef6c2110a78489067f58ce4ab38"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/gd/libgd"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "b4550a06ba9e3d128d9f36686c740baf58290ef6c2110a78489067f58ce4ab38"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmagic@5.46",
            "name": "libmagic",
            "version": "5.46",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmagic@5.46",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3b0ae42f72d1aa4674f12e231cc841ac5a45143496e504df9a3bbc0851c5e86d"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/fileinfo/libmagic"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "3b0ae42f72d1aa4674f12e231cc841ac5a45143496e504df9a3bbc0851c5e86d"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmbfl@1.3.2",
            "name": "libmbfl",
            "version": "1.3.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmbfl@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c2f2832fa9321339a5d7ef580c28c7b8888fd76c97b0f2545830fbefd47a241b"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/libmbfl"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "c2f2832fa9321339a5d7ef580c28c7b8888fd76c97b0f2545830fbefd47a241b"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libzip-zip-dirent",
            "name": "libzip zip_dirent",
            "version": "snapshot-9331b07865e2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libzip-zip-dirent",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "9331b07865e2443c75431103f9d6ebdb347f216c169c759f4b8de146c2554628"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/zip.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "9331b07865e2443c75431103f9d6ebdb347f216c169c759f4b8de146c2554628"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/mtrand@1.0",
            "name": "MTRand",
            "version": "1.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/mtrand@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c78ff68e698c49ade13c746b0f28eab77004f73604cb8b5cfb891c2dbbc4798d"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/random/engine_mt19937.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "c78ff68e698c49ade13c746b0f28eab77004f73604cb8b5cfb891c2dbbc4798d"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openldap-ucgendat",
            "name": "OpenLDAP ucgendat",
            "version": "snapshot-572651bf88b0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/openldap-ucgendat",
            "licenses": [
                {
                    "expression": "OLDAP-2.8 AND MIT"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "572651bf88b0d2a10f16ff41191ecb385a37e6102a12117597bc7523e0bad968"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/ucgendat/ucgendat.php"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "572651bf88b0d2a10f16ff41191ecb385a37e6102a12117597bc7523e0bad968"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2@10.44",
            "name": "pcre2lib",
            "version": "10.44",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/pcre2@10.44",
            "licenses": [
                {
                    "expression": "BSD-3-Clause WITH PCRE2-exception"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3d70bac571d2d919c9acaff5f356293262afed68a24e684e21c79ff1bc3f7902"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/pcre/pcre2lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "3d70bac571d2d919c9acaff5f356293262afed68a24e684e21c79ff1bc3f7902"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/snprintf",
            "name": "snprintf",
            "version": "snapshot-01866ebb694c",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/snprintf",
            "licenses": [
                {
                    "expression": "ISC AND Apache-1.0"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "01866ebb694c886f375d08391b875c3d7acf3389d144555ad3a5c78bc3ee77d7"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/snprintf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "01866ebb694c886f375d08391b875c3d7acf3389d144555ad3a5c78bc3ee77d7"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcat",
            "name": "strlcat",
            "version": "snapshot-70a14238b706",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcat",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "70a14238b70655800169c0d5e86fa7f2ab54135cc6f19e1fa083d9c6cd9003ed"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcat.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "70a14238b70655800169c0d5e86fa7f2ab54135cc6f19e1fa083d9c6cd9003ed"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcpy",
            "name": "strlcpy",
            "version": "snapshot-b832da3d29dd",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcpy",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b832da3d29ddc958499fb07f3af35e2b3154ff9aa1aab53b661f4fc1748d7967"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcpy.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "b832da3d29ddc958499fb07f3af35e2b3154ff9aa1aab53b661f4fc1748d7967"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strnatcmp",
            "name": "strnatcmp",
            "version": "snapshot-e14f21965b39",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strnatcmp",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/strnatcmp.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/tcl-scanf@8.3.0",
            "name": "Tcl scanf implementation",
            "version": "8.3.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/tcl-scanf@8.3.0",
            "licenses": [
                {
                    "license": {
                        "id": "TCL"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "877c848062e19f5bbe5f8c4aca8b8b89c011c60b4ef5c009c4637eb230635255"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/scanf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "877c848062e19f5bbe5f8c4aca8b8b89c011c60b4ef5c009c4637eb230635255"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/timelib@2022.17",
            "name": "timelib",
            "version": "2022.17",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/timelib@2022.17",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "2210ee5ba51e09e82e37c7703f661704c412ca918612c9fcb44650dc4e2a873e"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/date/lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "2210ee5ba51e09e82e37c7703f661704c412ca918612c9fcb44650dc4e2a873e"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xkcp-sha3",
            "name": "XKCP SHA-3",
            "version": "snapshot-aba3170bb6e1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xkcp-sha3",
            "licenses": [
                {
                    "expression": "CC0-1.0 AND Brian-Gladman-3-Clause"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/sha3"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xxhash@0.8.2",
            "name": "xxHash",
            "version": "0.8.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xxhash@0.8.2",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "4936a65fac03f41aed5a28eff95e5904b40a73821d02f3b6a408e408b035ea16"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.6.0alpha3 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/xxhash"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "4936a65fac03f41aed5a28eff95e5904b40a73821d02f3b6a408e408b035ea16"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/ICU@77.1-1",
            "name": "ICU",
            "version": "77.1-1",
            "purl": "pkg:generic/icu@77.1",
            "licenses": [
                {
                    "license": {
                        "id": "Unicode-DFS-2016"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/ICU-77.1-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/unicode-org/icu"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/unicode-org/icu/tree/release-77-1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/icu4c.git@11bca20cc331c2ad3d38e240e5921ebfad8fe523"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "icu4c"
                },
                {
                    "name": "php:component",
                    "value": "ICU"
                },
                {
                    "name": "php:version",
                    "value": "77.1-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "77.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "unicode-org/icu"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/unicode-org/icu"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "release-77-1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/icu4c"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/icu4c"
                },
                {
                    "name": "php:source-ref",
                    "value": "icu4c-77.1-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "11bca20cc331c2ad3d38e240e5921ebfad8fe523"
                },
                {
                    "name": "php:input-version",
                    "value": "icu4c-77.1-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "ICU-77.1-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/ICU-77.1-1-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:ICU:77.1",
                        "name": "ICU",
                        "version": "77.1",
                        "purl": "pkg:generic/icu@77.1"
                    }
                ],
                "notes": "Built from winlibs/icu4c ref icu4c-77.1-1 at commit 11bca20cc331c2ad3d38e240e5921ebfad8fe523 with upstream identity unicode-org/icu tag release-77-1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apache@2.4.68",
            "name": "apache",
            "version": "2.4.68",
            "purl": "pkg:generic/apache-httpd@2.4.68",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/apache-2.4.68-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/apache/httpd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/httpd/tree/2.4.68"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/apache/httpd.git@736bb657405eb73fd68a64772c3a908807bdb887"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "apache"
                },
                {
                    "name": "php:component",
                    "value": "apache"
                },
                {
                    "name": "php:version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:source-ref",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-commit",
                    "value": "736bb657405eb73fd68a64772c3a908807bdb887"
                },
                {
                    "name": "php:input-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "apache-2.4.68-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/apache-2.4.68-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:apache:http_server:2.4.68:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-5.5.0.tar.gz@5.5.0",
            "name": "lua-5.5.0.tar.gz",
            "version": "5.5.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Lua.org"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/expat",
            "name": "expat",
            "version": "2.8.2",
            "purl": "pkg:github/microsoft/vcpkg#ports/expat",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-x64-windows@eb697c1f3ed0c727b2685f23716c8d16d2b804be0c6329907842209049c6b9b2",
            "name": "nghttp2:x64-windows",
            "version": "eb697c1f3ed0c727b2685f23716c8d16d2b804be0c6329907842209049c6b9b2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-x64-windows@4b3cb6d932b7cfc582c31b14be1fd99249dfee5a5458fc764f6c3bf3530f0c24",
            "name": "apr-util:x64-windows",
            "version": "4b3cb6d932b7cfc582c31b14be1fd99249dfee5a5458fc764f6c3bf3530f0c24",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-x64-windows@52eb4557428229facfc86cd70b903d948f86c4c07ae9e9a95654f031a9896f34",
            "name": "apr:x64-windows",
            "version": "52eb4557428229facfc86cd70b903d948f86c4c07ae9e9a95654f031a9896f34",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/google-brotli@1.2.0",
            "name": "google/brotli",
            "version": "1.2.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "google"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-x64-windows@878091c12bbbfc80ee9bfb3281ca39eda1ca5648abbeee6072d2a0347d88af0e",
            "name": "lua:x64-windows",
            "version": "878091c12bbbfc80ee9bfb3281ca39eda1ca5648abbeee6072d2a0347d88af0e",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/curl",
            "name": "curl",
            "version": "8.21.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/curl",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/brotli-x64-windows@962a0e4466765d8d763aa59345701e773c1541e1c6a3fc6a5f596f06dd1181b4",
            "name": "brotli:x64-windows",
            "version": "962a0e4466765d8d763aa59345701e773c1541e1c6a3fc6a5f596f06dd1181b4",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/jansson-x64-windows@d5bed9a8ebdc4f983e96cab2f5f90dc293b1ff2d421731fe2da2f4a0b540db00",
            "name": "jansson:x64-windows",
            "version": "d5bed9a8ebdc4f983e96cab2f5f90dc293b1ff2d421731fe2da2f4a0b540db00",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-1.7.6.tar.bz2@1.7.6",
            "name": "apr-1.7.6.tar.bz2",
            "version": "1.7.6",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-x64-windows@0662b8805e90c6c1ebb77cb501c7fc80e152337ffef0b04cd6a244e63cd6516b",
            "name": "curl:x64-windows",
            "version": "0662b8805e90c6c1ebb77cb501c7fc80e152337ffef0b04cd6a244e63cd6516b",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/madler-zlib@1.3.2",
            "name": "madler/zlib",
            "version": "1.3.2",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "madler"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/expat-x64-windows@370567f3ea7c4a538f7748e7da63ba3b0b1a3f734a692a440f7e9d6576f3861e",
            "name": "expat:x64-windows",
            "version": "370567f3ea7c4a538f7748e7da63ba3b0b1a3f734a692a440f7e9d6576f3861e",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/brotli",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/brotli",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/akheron-jansson@2.15.1",
            "name": "akheron/jansson",
            "version": "2.15.1",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "akheron"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr",
            "name": "apr",
            "version": "1.7.6#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/openssl",
            "name": "openssl",
            "version": "3.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/openssl",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "name": "pcre2",
            "version": "10.47#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "name": "nghttp2",
            "version": "1.69.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-1.6.3.tar.bz2@1.6.3",
            "name": "apr-util-1.6.3.tar.bz2",
            "version": "1.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/lua",
            "name": "lua",
            "version": "5.5.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/lua",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zlib-x64-windows@adca1be1c14e8acc55bc6112953ec2c1cf56fc25175646043f00de8a0492f3f4",
            "name": "zlib:x64-windows",
            "version": "adca1be1c14e8acc55bc6112953ec2c1cf56fc25175646043f00de8a0492f3f4",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-nghttp2@1.69.0",
            "name": "nghttp2/nghttp2",
            "version": "1.69.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "nghttp2"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/PCRE2Project-pcre2@10.47",
            "name": "PCRE2Project/pcre2",
            "version": "10.47",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PCRE2Project"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/jansson",
            "name": "jansson",
            "version": "2.15.1",
            "purl": "pkg:github/microsoft/vcpkg#ports/jansson",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2-x64-windows@3819644eb32c505cc4583caeb4fb740b7a8ba8e5f1bae7b7f3684945b40603da",
            "name": "pcre2:x64-windows",
            "version": "3819644eb32c505cc4583caeb4fb740b7a8ba8e5f1bae7b7f3684945b40603da",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "name": "apr-util",
            "version": "1.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/zlib",
            "name": "zlib",
            "version": "1.3.2#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/zlib",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-curl@8.21.0",
            "name": "curl/curl",
            "version": "8.21.0",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "curl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zherczeg-sljit@45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "name": "zherczeg/sljit",
            "version": "45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "licenses": [
                {
                    "expression": "BSD-2-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Zoltan Herczeg"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-x64-windows@7f7d32f6d7825a8953e34d64d708d8c0ff9dc046c56cad386e249bf7d1dee02d",
            "name": "openssl:x64-windows",
            "version": "7f7d32f6d7825a8953e34d64d708d8c0ff9dc046c56cad386e249bf7d1dee02d",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "name": "apr-iconv",
            "version": "1.2.2",
            "purl": "pkg:generic/apr-iconv@1.2.2",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/apache/apr-iconv"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/apr-iconv/tree/1.2.2"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "apr-iconv-source/apr-iconv-1.2.2"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/apr-iconv"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/apr-iconv"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.2.2"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libexpat-libexpat@2.8.2",
            "name": "libexpat/libexpat",
            "version": "2.8.2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "libexpat"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-openssl@3.6.3",
            "name": "openssl/openssl",
            "version": "3.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "openssl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/brotli@1.2.0",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:generic/brotli@1.2.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/brotli-1.2.0-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/google/brotli"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/google/brotli/tree/v1.2.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/google/brotli.git@028fb5a23661f123017c060daa546b55cf4bde29"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "brotli"
                },
                {
                    "name": "php:component",
                    "value": "brotli"
                },
                {
                    "name": "php:version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "028fb5a23661f123017c060daa546b55cf4bde29"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "brotli-1.2.0-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/brotli-1.2.0-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:google:brotli:1.2.0:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/fbclient@4.0.7",
            "name": "fbclient",
            "version": "4.0.7",
            "purl": "pkg:generic/firebird@4.0.7",
            "licenses": [
                {
                    "expression": "Interbase-1.0 AND LicenseRef-fbclient-IDPL-1.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/fbclient-4.0.7-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/FirebirdSQL/firebird/tree/v4.0.7"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "fbclient"
                },
                {
                    "name": "php:component",
                    "value": "fbclient"
                },
                {
                    "name": "php:version",
                    "value": "4.0.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "4.0.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v4.0.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-ref",
                    "value": "v4.0.7"
                },
                {
                    "name": "php:input-version",
                    "value": "v4.0.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "fbclient-4.0.7-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/fbclient-4.0.7-vs18-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/freetype@2.14.3",
            "name": "freetype",
            "version": "2.14.3",
            "purl": "pkg:generic/freetype@2.14.3",
            "licenses": [
                {
                    "expression": "FTL OR GPL-2.0-or-later"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/freetype-2.14.3-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/freetype/freetype"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/freetype/freetype/tree/VER-2-14-3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/freetype.git@3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "freetype"
                },
                {
                    "name": "php:component",
                    "value": "freetype"
                },
                {
                    "name": "php:version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "freetype/freetype"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/freetype/freetype"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "VER-2-14-3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/freetype"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/freetype"
                },
                {
                    "name": "php:source-ref",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                },
                {
                    "name": "php:input-version",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "freetype-2.14.3-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/freetype-2.14.3-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:freetype:freetype:2.14.3:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:freetype:2.14.3",
                        "name": "freetype",
                        "version": "2.14.3",
                        "purl": "pkg:generic/freetype@2.14.3"
                    }
                ],
                "notes": "Built from winlibs/freetype ref freetype-2.14.3 at commit 3d8e776a1f1800dea07d433e20c91e8a9a161c4f with upstream identity freetype/freetype tag VER-2-14-3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/glib@2.88.1-1",
            "name": "glib",
            "version": "2.88.1-1",
            "purl": "pkg:generic/glib@2.88.1",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/glib-2.88.1-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/glib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/glib/tree/2.88.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/glib.git@dd6ae272f882ba3fb195b181827465993831ff83"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "glib"
                },
                {
                    "name": "php:component",
                    "value": "glib"
                },
                {
                    "name": "php:version",
                    "value": "2.88.1-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.88.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/glib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/glib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.88.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/glib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/glib"
                },
                {
                    "name": "php:source-ref",
                    "value": "glib-2.88.1-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "dd6ae272f882ba3fb195b181827465993831ff83"
                },
                {
                    "name": "php:input-version",
                    "value": "glib-2.88.1-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "glib-2.88.1-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/glib-2.88.1-1-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:gnome:glib:2.88.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:glib:2.88.1",
                        "name": "glib",
                        "version": "2.88.1",
                        "purl": "pkg:generic/glib@2.88.1"
                    }
                ],
                "notes": "Built from winlibs/glib ref glib-2.88.1-1 at commit dd6ae272f882ba3fb195b181827465993831ff83 with upstream identity GNOME/glib tag 2.88.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libffi@3.6.0",
            "name": "libffi",
            "version": "3.6.0",
            "purl": "pkg:generic/libffi@3.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libffi-3.6.0-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libffi/libffi"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libffi/libffi/tree/v3.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libffi.git@9f75967331946c3ff827e14d74226c15a162e74e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libffi"
                },
                {
                    "name": "php:component",
                    "value": "libffi"
                },
                {
                    "name": "php:version",
                    "value": "3.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libffi/libffi"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libffi/libffi"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libffi"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libffi"
                },
                {
                    "name": "php:source-ref",
                    "value": "libffi-3.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f75967331946c3ff827e14d74226c15a162e74e"
                },
                {
                    "name": "php:input-version",
                    "value": "libffi-3.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libffi-3.6.0-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libffi-3.6.0-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libffi:3.6.0",
                        "name": "libffi",
                        "version": "3.6.0",
                        "purl": "pkg:generic/libffi@3.6.0"
                    }
                ],
                "notes": "Built from winlibs/libffi ref libffi-3.6.0 at commit 9f75967331946c3ff827e14d74226c15a162e74e with upstream identity libffi/libffi tag v3.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libintl@1.0",
            "name": "libintl",
            "version": "1.0",
            "purl": "pkg:generic/gettext@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libintl-1.0-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/gettext.git@cd6fcaeffc493305f9c0081310efa0e063060da6"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "gettext"
                },
                {
                    "name": "php:component",
                    "value": "libintl"
                },
                {
                    "name": "php:version",
                    "value": "1.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/gettext"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/gettext"
                },
                {
                    "name": "php:source-ref",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "cd6fcaeffc493305f9c0081310efa0e063060da6"
                },
                {
                    "name": "php:input-version",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libintl-1.0-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libintl-1.0-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libintl:1.0",
                        "name": "libintl",
                        "version": "1.0",
                        "purl": "pkg:generic/gettext@1.0"
                    }
                ],
                "notes": "Built from winlibs/gettext ref libintl-1.0 at commit cd6fcaeffc493305f9c0081310efa0e063060da6 with upstream identity https://git.savannah.gnu.org/git/gettext.git tag v1.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/zlib@1.3.2",
            "name": "zlib",
            "version": "1.3.2",
            "purl": "pkg:generic/zlib@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/zlib-1.3.2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/madler/zlib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/madler/zlib/tree/v1.3.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/zlib.git@0089522e62e6b5d4950e62bd20f0cb06a9288413"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "zlib"
                },
                {
                    "name": "php:component",
                    "value": "zlib"
                },
                {
                    "name": "php:version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "madler/zlib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/madler/zlib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.3.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/zlib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/zlib"
                },
                {
                    "name": "php:source-ref",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "0089522e62e6b5d4950e62bd20f0cb06a9288413"
                },
                {
                    "name": "php:input-version",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "zlib-1.3.2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/zlib-1.3.2-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:zlib:zlib:1.3.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:zlib:1.3.2",
                        "name": "zlib",
                        "version": "1.3.2",
                        "purl": "pkg:generic/zlib@1.3.2"
                    }
                ],
                "notes": "Built from winlibs/zlib ref zlib-1.3.2 at commit 0089522e62e6b5d4950e62bd20f0cb06a9288413 with upstream identity madler/zlib tag v1.3.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libargon2@20190702",
            "name": "libargon2",
            "version": "20190702",
            "purl": "pkg:generic/libargon2@20190702",
            "licenses": [
                {
                    "license": {
                        "id": "CC0-1.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libargon2-20190702-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/P-H-C/phc-winner-argon2/tree/20190702"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/argon2.git@fb53ef37be212380d51877b70f514f3bf2c1ee40"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "argon2"
                },
                {
                    "name": "php:component",
                    "value": "libargon2"
                },
                {
                    "name": "php:version",
                    "value": "20190702"
                },
                {
                    "name": "php:upstream-version",
                    "value": "20190702"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "20190702"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/argon2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/argon2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:source-commit",
                    "value": "fb53ef37be212380d51877b70f514f3bf2c1ee40"
                },
                {
                    "name": "php:input-version",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libargon2-20190702-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libargon2-20190702-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libargon2:20190702",
                        "name": "libargon2",
                        "version": "20190702",
                        "purl": "pkg:generic/libargon2@20190702"
                    }
                ],
                "notes": "Built from winlibs/argon2 ref libargon2-20190702 at commit fb53ef37be212380d51877b70f514f3bf2c1ee40 with upstream identity P-H-C/phc-winner-argon2 tag 20190702."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libavif@1.4.2",
            "name": "libavif",
            "version": "1.4.2",
            "purl": "pkg:generic/libavif@1.4.2",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libavif-1.4.2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AOMediaCodec/libavif/tree/v1.4.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libavif.git@14976153789c7ebf2ca24b22215a964bbc5be213"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libavif"
                },
                {
                    "name": "php:component",
                    "value": "libavif"
                },
                {
                    "name": "php:version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.4.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libavif"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libavif"
                },
                {
                    "name": "php:source-ref",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "14976153789c7ebf2ca24b22215a964bbc5be213"
                },
                {
                    "name": "php:input-version",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libavif-1.4.2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libavif-1.4.2-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libavif:1.4.2",
                        "name": "libavif",
                        "version": "1.4.2",
                        "purl": "pkg:generic/libavif@1.4.2"
                    }
                ],
                "notes": "Built from winlibs/libavif ref libavif-1.4.2 at commit 14976153789c7ebf2ca24b22215a964bbc5be213 with upstream identity AOMediaCodec/libavif tag v1.4.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/aom@3.14.1",
            "name": "aom",
            "version": "3.14.1",
            "purl": "pkg:generic/aom@3.14.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://aomedia.googlesource.com/aom"
                },
                {
                    "type": "vcs",
                    "url": "https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://aomedia.googlesource.com/aom.git@03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "libavif/ext/aom"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libbzip2@1.0.8-1",
            "name": "libbzip2",
            "version": "1.0.8-1",
            "purl": "pkg:generic/bzip2@1.0.8",
            "licenses": [
                {
                    "license": {
                        "id": "bzip2-1.0.6"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libbzip2-1.0.8-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libarchive/bzip2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libarchive/bzip2/tree/bzip2-1.0.8"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libbzip2.git@99d3c4812e2b98bc305ae4b867f35346946717f0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libbzip2"
                },
                {
                    "name": "php:component",
                    "value": "libbzip2"
                },
                {
                    "name": "php:version",
                    "value": "1.0.8-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.8"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libarchive/bzip2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libarchive/bzip2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "bzip2-1.0.8"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libbzip2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libbzip2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libbzip2-1.0.8-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "99d3c4812e2b98bc305ae4b867f35346946717f0"
                },
                {
                    "name": "php:input-version",
                    "value": "libbzip2-1.0.8-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libbzip2-1.0.8-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libbzip2-1.0.8-1-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libbzip2:1.0.8",
                        "name": "libbzip2",
                        "version": "1.0.8",
                        "purl": "pkg:generic/bzip2@1.0.8"
                    }
                ],
                "notes": "Built from winlibs/libbzip2 ref libbzip2-1.0.8-1 at commit 99d3c4812e2b98bc305ae4b867f35346946717f0 with upstream identity libarchive/bzip2 tag bzip2-1.0.8."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libcurl@8.21.0-1",
            "name": "libcurl",
            "version": "8.21.0-1",
            "purl": "pkg:generic/curl@8.21.0",
            "licenses": [
                {
                    "license": {
                        "id": "curl"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libcurl-8.21.0-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/curl/curl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/curl/curl/tree/curl-8_21_0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/curl.git@b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "curl"
                },
                {
                    "name": "php:component",
                    "value": "libcurl"
                },
                {
                    "name": "php:version",
                    "value": "8.21.0-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "8.21.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "curl/curl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/curl/curl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "curl-8_21_0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/curl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/curl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libcurl-8.21.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                },
                {
                    "name": "php:input-version",
                    "value": "libcurl-8.21.0-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libcurl-8.21.0-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libcurl-8.21.0-1-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:haxx:curl:8.21.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libcurl:8.21.0",
                        "name": "libcurl",
                        "version": "8.21.0",
                        "purl": "pkg:generic/curl@8.21.0"
                    }
                ],
                "notes": "Built from winlibs/curl ref libcurl-8.21.0-1 at commit b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0 with upstream identity curl/curl tag curl-8_21_0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libssh2@1.11.1-5",
            "name": "libssh2",
            "version": "1.11.1-5",
            "purl": "pkg:generic/libssh2@1.11.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libssh2-1.11.1-5-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libssh2/libssh2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libssh2/libssh2/tree/libssh2-1.11.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libssh2.git@b47abdf27c93ee1ff4705e88968c5c628a93107a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libssh2"
                },
                {
                    "name": "php:component",
                    "value": "libssh2"
                },
                {
                    "name": "php:version",
                    "value": "1.11.1-5"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libssh2/libssh2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libssh2/libssh2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libssh2-1.11.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libssh2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libssh2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libssh2-1.11.1-5"
                },
                {
                    "name": "php:source-commit",
                    "value": "b47abdf27c93ee1ff4705e88968c5c628a93107a"
                },
                {
                    "name": "php:input-version",
                    "value": "libssh2-1.11.1-5"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libssh2-1.11.1-5-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libssh2-1.11.1-5-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libssh2:libssh2:1.11.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libssh2:1.11.1",
                        "name": "libssh2",
                        "version": "1.11.1",
                        "purl": "pkg:generic/libssh2@1.11.1"
                    }
                ],
                "notes": "Built from winlibs/libssh2 ref libssh2-1.11.1-5 at commit b47abdf27c93ee1ff4705e88968c5c628a93107a with upstream identity libssh2/libssh2 tag libssh2-1.11.1.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-7598",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
                                },
                                "description": "Fixed by backporting upstream username_len bounds checking in src/userauth.c.",
                                "references": [
                                    "https://github.com/libssh2/libssh2/pull/1858",
                                    "https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-15661",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
                                },
                                "description": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/94726036b0d5abec38dfec6202270c5b4d0021dc",
                                    "https://github.com/libssh2/libssh2/commit/2dae3024897e1898d389835151f4e9606227721d",
                                    "https://github.com/libssh2/libssh2/commit/4ed26f5740bdd409269ed9fb48a28bf8f565b681"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55199",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
                                },
                                "description": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f6732df726b0e187f0ab6c4d538b7e5e5307439c",
                                    "https://github.com/libssh2/libssh2/commit/17626857d20b3c9a1addfa45979dadcee1cd84a4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55200",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
                                },
                                "description": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f2abc265e35792e3c86752c9f12682a1fb0d4a01",
                                    "https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58050",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
                                },
                                "description": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/103972c538a11e5ae571f6126657e1baefccc415",
                                    "https://github.com/libssh2/libssh2/commit/34497525929b9a47f03dfb81887ac896202b7e12"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58051",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
                                },
                                "description": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/97e8f0143a55b66df60a695678433ccbe24291f0",
                                    "https://github.com/libssh2/libssh2/commit/a9758da45a52bc8c630ec9493804d0c6ea30b24a"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "name": "libzstd",
            "version": "1.5.7",
            "purl": "pkg:generic/zstd@1.5.7",
            "licenses": [
                {
                    "expression": "BSD-3-Clause OR GPL-2.0-only"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libzstd-1.5.7-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/facebook/zstd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/facebook/zstd/tree/v1.5.7"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/facebook/zstd.git@f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzstd"
                },
                {
                    "name": "php:component",
                    "value": "libzstd"
                },
                {
                    "name": "php:version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-commit",
                    "value": "f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzstd-1.5.7-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libzstd-1.5.7-vs18-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/nghttp2@1.69.0-1",
            "name": "nghttp2",
            "version": "1.69.0-1",
            "purl": "pkg:generic/nghttp2@1.69.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/nghttp2-1.69.0-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nghttp2/nghttp2/tree/v1.69.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/nghttp2.git@2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "nghttp2"
                },
                {
                    "name": "php:component",
                    "value": "nghttp2"
                },
                {
                    "name": "php:version",
                    "value": "1.69.0-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.69.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.69.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/nghttp2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/nghttp2"
                },
                {
                    "name": "php:source-ref",
                    "value": "nghttp2-1.69.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62"
                },
                {
                    "name": "php:input-version",
                    "value": "nghttp2-1.69.0-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "nghttp2-1.69.0-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/nghttp2-1.69.0-1-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:nghttp2:nghttp2:1.69.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:nghttp2:1.69.0",
                        "name": "nghttp2",
                        "version": "1.69.0",
                        "purl": "pkg:generic/nghttp2@1.69.0"
                    }
                ],
                "notes": "Built from winlibs/nghttp2 ref nghttp2-1.69.0-1 at commit 2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62 with upstream identity nghttp2/nghttp2 tag v1.69.0.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-58055",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
                                },
                                "description": "Fixed by backporting the upstream nghttpx request-header validation in winlibs/nghttp2 tag nghttp2-1.69.0-1.",
                                "references": [
                                    "https://github.com/winlibs/nghttp2/commit/2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62",
                                    "https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e",
                                    "https://github.com/nghttp2/nghttp2/pull/2769"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openssl@3.5.7",
            "name": "openssl",
            "version": "3.5.7",
            "purl": "pkg:generic/openssl@3.5.7",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/openssl-3.5.7-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openssl/openssl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openssl/openssl/tree/openssl-3.5.7"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openssl.git@07444295ce1ca3175b58a18c9da732c14393161e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openssl"
                },
                {
                    "name": "php:component",
                    "value": "openssl"
                },
                {
                    "name": "php:version",
                    "value": "3.5.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.5.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openssl/openssl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openssl/openssl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "openssl-3.5.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openssl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openssl"
                },
                {
                    "name": "php:source-ref",
                    "value": "openssl-3.5.7"
                },
                {
                    "name": "php:source-commit",
                    "value": "07444295ce1ca3175b58a18c9da732c14393161e"
                },
                {
                    "name": "php:input-version",
                    "value": "openssl-3.5.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openssl-3.5.7-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/openssl-3.5.7-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openssl:3.5.7",
                        "name": "openssl",
                        "version": "3.5.7",
                        "purl": "pkg:generic/openssl@3.5.7"
                    }
                ],
                "notes": "Built from winlibs/openssl ref openssl-3.5.7 at commit 07444295ce1ca3175b58a18c9da732c14393161e with upstream identity openssl/openssl tag openssl-3.5.7."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libenchant2@2.8.16-1",
            "name": "libenchant2",
            "version": "2.8.16-1",
            "purl": "pkg:generic/enchant@2.8.16",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libenchant2-2.8.16-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AbiWord/enchant"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AbiWord/enchant/tree/v2.8.16"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/enchant.git@306f758741abb4a67b6e7143784d556eaacebdd9"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "enchant"
                },
                {
                    "name": "php:component",
                    "value": "libenchant2"
                },
                {
                    "name": "php:version",
                    "value": "2.8.16-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.8.16"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AbiWord/enchant"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AbiWord/enchant"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.8.16"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/enchant"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/enchant"
                },
                {
                    "name": "php:source-ref",
                    "value": "libenchant2-2.8.16-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "306f758741abb4a67b6e7143784d556eaacebdd9"
                },
                {
                    "name": "php:input-version",
                    "value": "libenchant2-2.8.16-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libenchant2-2.8.16-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libenchant2-2.8.16-1-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libenchant2:2.8.16",
                        "name": "libenchant2",
                        "version": "2.8.16",
                        "purl": "pkg:generic/enchant@2.8.16"
                    }
                ],
                "notes": "Built from winlibs/enchant ref libenchant2-2.8.16-1 at commit 306f758741abb4a67b6e7143784d556eaacebdd9 with upstream identity AbiWord/enchant tag v2.8.16."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libheif@1.23.1",
            "name": "libheif",
            "version": "1.23.1",
            "purl": "pkg:generic/libheif@1.23.1",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-3.0-only"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libheif-1.23.1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/strukturag/libheif"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/strukturag/libheif/tree/v1.23.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libheif.git@2c4bbb54c2738d4a5efbbe3e5fa1d5d76bb88eb0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libheif"
                },
                {
                    "name": "php:component",
                    "value": "libheif"
                },
                {
                    "name": "php:version",
                    "value": "1.23.1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.23.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "strukturag/libheif"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/strukturag/libheif"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.23.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libheif"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libheif"
                },
                {
                    "name": "php:source-ref",
                    "value": "libheif-1.23.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "2c4bbb54c2738d4a5efbbe3e5fa1d5d76bb88eb0"
                },
                {
                    "name": "php:input-version",
                    "value": "libheif-1.23.1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libheif-1.23.1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libheif-1.23.1-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:struktur:libheif:1.23.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libheif:1.23.1",
                        "name": "libheif",
                        "version": "1.23.1",
                        "purl": "pkg:generic/libheif@1.23.1"
                    }
                ],
                "notes": "Built from winlibs/libheif ref libheif-1.23.1 at commit 2c4bbb54c2738d4a5efbbe3e5fa1d5d76bb88eb0 with upstream identity strukturag/libheif tag v1.23.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/dav1d@1.5.3",
            "name": "dav1d",
            "version": "1.5.3",
            "purl": "pkg:generic/dav1d@1.5.3",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://code.videolan.org/videolan/dav1d"
                },
                {
                    "type": "vcs",
                    "url": "https://code.videolan.org/videolan/dav1d/-/tree/1.5.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://code.videolan.org/videolan/dav1d.git@b546257f770768b2c88258c533da38b91a06f737"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "dav1d"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://code.videolan.org/videolan/dav1d"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.5.3"
                },
                {
                    "name": "php:source-url",
                    "value": "https://code.videolan.org/videolan/dav1d"
                },
                {
                    "name": "php:source-ref",
                    "value": "1.5.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "b546257f770768b2c88258c533da38b91a06f737"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libjpeg-turbo@3.2.0",
            "name": "libjpeg-turbo",
            "version": "3.2.0",
            "purl": "pkg:generic/libjpeg-turbo@3.2.0",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND IJG"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/tree/3.2.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/libjpeg-turbo/libjpeg-turbo.git@c85e6b905bf237038faa936dab160ebfc5da0344"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "libjpeg-turbo"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "3.2.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:source-ref",
                    "value": "3.2.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "c85e6b905bf237038faa936dab160ebfc5da0344"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libiconv@1.19-1",
            "name": "libiconv",
            "version": "1.19-1",
            "purl": "pkg:generic/libiconv@1.19",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libiconv-1.19-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libiconv.git@accac417318a3eef7402685a268cab8037e62ba1"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libiconv"
                },
                {
                    "name": "php:component",
                    "value": "libiconv"
                },
                {
                    "name": "php:version",
                    "value": "1.19-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libiconv"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libiconv"
                },
                {
                    "name": "php:source-ref",
                    "value": "libiconv-1.19-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "accac417318a3eef7402685a268cab8037e62ba1"
                },
                {
                    "name": "php:input-version",
                    "value": "libiconv-1.19-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libiconv-1.19-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libiconv-1.19-1-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libiconv:1.19",
                        "name": "libiconv",
                        "version": "1.19",
                        "purl": "pkg:generic/libiconv@1.19"
                    }
                ],
                "notes": "Built from winlibs/libiconv ref libiconv-1.19-1 at commit accac417318a3eef7402685a268cab8037e62ba1 with upstream identity https://git.savannah.gnu.org/git/libiconv.git tag v1.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
            "name": "libjpeg-turbo",
            "version": "3.1.4.1",
            "purl": "pkg:generic/libjpeg-turbo@3.1.4.1",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND IJG"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libjpeg-turbo-3.1.4.1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/tree/3.1.4.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libjpeg.git@ca1aee45c747aaf6f66aada3abe6353306ff502b"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libjpeg"
                },
                {
                    "name": "php:component",
                    "value": "libjpeg-turbo"
                },
                {
                    "name": "php:version",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libjpeg"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libjpeg"
                },
                {
                    "name": "php:source-ref",
                    "value": "libjpeg-turbo-3.1.4.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "ca1aee45c747aaf6f66aada3abe6353306ff502b"
                },
                {
                    "name": "php:input-version",
                    "value": "libjpeg-turbo-3.1.4.1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libjpeg-turbo-3.1.4.1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libjpeg-turbo-3.1.4.1-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:3.1.4.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libjpeg-turbo:3.1.4.1",
                        "name": "libjpeg-turbo",
                        "version": "3.1.4.1",
                        "purl": "pkg:generic/libjpeg-turbo@3.1.4.1"
                    }
                ],
                "notes": "Built from winlibs/libjpeg ref libjpeg-turbo-3.1.4.1 at commit ca1aee45c747aaf6f66aada3abe6353306ff502b with upstream identity libjpeg-turbo/libjpeg-turbo tag 3.1.4.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libjxl@0.11.2",
            "name": "libjxl",
            "version": "0.11.2",
            "purl": "pkg:generic/libjxl@0.11.2",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libjxl-0.11.2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libjxl/libjxl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libjxl/libjxl/tree/v0.11.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libjxl.git@332feb17d17311c748445f7ee75c4fb55cc38530"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libjxl"
                },
                {
                    "name": "php:component",
                    "value": "libjxl"
                },
                {
                    "name": "php:version",
                    "value": "0.11.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "0.11.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libjxl/libjxl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libjxl/libjxl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v0.11.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libjxl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libjxl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libjxl-0.11.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "332feb17d17311c748445f7ee75c4fb55cc38530"
                },
                {
                    "name": "php:input-version",
                    "value": "libjxl-0.11.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libjxl-0.11.2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libjxl-0.11.2-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libjxl:0.11.2",
                        "name": "libjxl",
                        "version": "0.11.2",
                        "purl": "pkg:generic/libjxl@0.11.2"
                    }
                ],
                "notes": "Built from winlibs/libjxl ref libjxl-0.11.2 at commit 332feb17d17311c748445f7ee75c4fb55cc38530 with upstream identity libjxl/libjxl tag v0.11.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/highway@457c891775a7397bdb0376bb1031e6e027af1c48",
            "name": "highway",
            "version": "457c891775a7397bdb0376bb1031e6e027af1c48",
            "purl": "pkg:generic/highway@457c891775a7397bdb0376bb1031e6e027af1c48",
            "licenses": [
                {
                    "expression": "Apache-2.0 OR BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/google/highway"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/google/highway/tree/457c891775a7397bdb0376bb1031e6e027af1c48"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/google/highway.git@457c891775a7397bdb0376bb1031e6e027af1c48"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "libjxl/third_party/highway"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "google/highway"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/google/highway"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "457c891775a7397bdb0376bb1031e6e027af1c48"
                },
                {
                    "name": "php:source-repository",
                    "value": "google/highway"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/google/highway"
                },
                {
                    "name": "php:source-commit",
                    "value": "457c891775a7397bdb0376bb1031e6e027af1c48"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "name": "liblmdb",
            "version": "0.9.35",
            "purl": "pkg:generic/lmdb@0.9.35",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/liblmdb-0.9.35-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/LMDB/lmdb"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/LMDB/lmdb/tree/LMDB_0.9.35"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/lmdb.git@337459047d55fbf52e634bc26285195d06ac145d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "lmdb"
                },
                {
                    "name": "php:component",
                    "value": "liblmdb"
                },
                {
                    "name": "php:version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:upstream-version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "LMDB/lmdb"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/LMDB/lmdb"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "LMDB_0.9.35"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/lmdb"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/lmdb"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:source-commit",
                    "value": "337459047d55fbf52e634bc26285195d06ac145d"
                },
                {
                    "name": "php:input-version",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblmdb-0.9.35-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/liblmdb-0.9.35-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblmdb:0.9.35",
                        "name": "liblmdb",
                        "version": "0.9.35",
                        "purl": "pkg:generic/lmdb@0.9.35"
                    }
                ],
                "notes": "Built from winlibs/lmdb ref liblmdb-0.9.35 at commit 337459047d55fbf52e634bc26285195d06ac145d with upstream identity LMDB/lmdb tag LMDB_0.9.35."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblzma@5.8.3",
            "name": "liblzma",
            "version": "5.8.3",
            "purl": "pkg:generic/xz@5.8.3",
            "licenses": [
                {
                    "license": {
                        "id": "0BSD"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/liblzma-5.8.3-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/tukaani-project/xz"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/tukaani-project/xz/tree/v5.8.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/liblzma.git@debf994b6385f384f01815eaac4597e3c2e2cc4e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "liblzma"
                },
                {
                    "name": "php:component",
                    "value": "liblzma"
                },
                {
                    "name": "php:version",
                    "value": "5.8.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "tukaani-project/xz"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/tukaani-project/xz"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.8.3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/liblzma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/liblzma"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblzma-5.8.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "debf994b6385f384f01815eaac4597e3c2e2cc4e"
                },
                {
                    "name": "php:input-version",
                    "value": "liblzma-5.8.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblzma-5.8.3-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/liblzma-5.8.3-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblzma:5.8.3",
                        "name": "liblzma",
                        "version": "5.8.3",
                        "purl": "pkg:generic/xz@5.8.3"
                    }
                ],
                "notes": "Built from winlibs/liblzma ref liblzma-5.8.3 at commit debf994b6385f384f01815eaac4597e3c2e2cc4e with upstream identity tukaani-project/xz tag v5.8.3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libonig@6.9.10",
            "name": "libonig",
            "version": "6.9.10",
            "purl": "pkg:generic/oniguruma@6.9.10",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libonig-6.9.10-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/kkos/oniguruma"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/kkos/oniguruma/tree/v6.9.10"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/oniguruma.git@fceeeffdb609661ffaea9be4075c6ff4d6696611"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "oniguruma"
                },
                {
                    "name": "php:component",
                    "value": "libonig"
                },
                {
                    "name": "php:version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:upstream-version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "kkos/oniguruma"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/kkos/oniguruma"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v6.9.10"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/oniguruma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/oniguruma"
                },
                {
                    "name": "php:source-ref",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:source-commit",
                    "value": "fceeeffdb609661ffaea9be4075c6ff4d6696611"
                },
                {
                    "name": "php:input-version",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libonig-6.9.10-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libonig-6.9.10-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libonig:6.9.10",
                        "name": "libonig",
                        "version": "6.9.10",
                        "purl": "pkg:generic/oniguruma@6.9.10"
                    }
                ],
                "notes": "Built from winlibs/oniguruma ref libonig-6.9.10 at commit fceeeffdb609661ffaea9be4075c6ff4d6696611 with upstream identity kkos/oniguruma tag v6.9.10."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpng@1.6.58",
            "name": "libpng",
            "version": "1.6.58",
            "purl": "pkg:generic/libpng@1.6.58",
            "licenses": [
                {
                    "license": {
                        "id": "libpng-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libpng-1.6.58-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/pnggroup/libpng"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/pnggroup/libpng/tree/v1.6.58"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libpng.git@5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libpng"
                },
                {
                    "name": "php:component",
                    "value": "libpng"
                },
                {
                    "name": "php:version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "pnggroup/libpng"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/pnggroup/libpng"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.58"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libpng"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libpng"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:source-commit",
                    "value": "5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                },
                {
                    "name": "php:input-version",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpng-1.6.58-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libpng-1.6.58-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libpng:libpng:1.6.58:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpng:1.6.58",
                        "name": "libpng",
                        "version": "1.6.58",
                        "purl": "pkg:generic/libpng@1.6.58"
                    }
                ],
                "notes": "Built from winlibs/libpng ref libpng-1.6.58 at commit 5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896 with upstream identity pnggroup/libpng tag v1.6.58."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpq@16.14",
            "name": "libpq",
            "version": "16.14",
            "purl": "pkg:generic/postgresql@16.14",
            "licenses": [
                {
                    "license": {
                        "id": "PostgreSQL"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libpq-16.14-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/postgres/postgres"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/postgres/postgres/tree/REL_16_14"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/postgresql.git@1d21b9597f8b7a6c5a96435408e3a61e16b68191"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "postgresql"
                },
                {
                    "name": "php:component",
                    "value": "libpq"
                },
                {
                    "name": "php:version",
                    "value": "16.14"
                },
                {
                    "name": "php:upstream-version",
                    "value": "16.14"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "postgres/postgres"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/postgres/postgres"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "REL_16_14"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/postgresql"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/postgresql"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpq-16.14"
                },
                {
                    "name": "php:source-commit",
                    "value": "1d21b9597f8b7a6c5a96435408e3a61e16b68191"
                },
                {
                    "name": "php:input-version",
                    "value": "libpq-16.14"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpq-16.14-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libpq-16.14-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:postgresql:postgresql:16.14:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpq:16.14",
                        "name": "libpq",
                        "version": "16.14",
                        "purl": "pkg:generic/postgresql@16.14"
                    }
                ],
                "notes": "Built from winlibs/postgresql ref libpq-16.14 at commit 1d21b9597f8b7a6c5a96435408e3a61e16b68191 with upstream identity postgres/postgres tag REL_16_14."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "name": "libqdbm",
            "version": "1.8.78",
            "purl": "pkg:generic/qdbm@1.8.78",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libqdbm-1.8.78-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/qdbm.git@586aa477ff42f0d307dc26adada275642630b28f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "qdbm"
                },
                {
                    "name": "php:component",
                    "value": "libqdbm"
                },
                {
                    "name": "php:version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://dbmx.net/qdbm/"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "qdbm-1.8.78"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/qdbm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/qdbm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:source-commit",
                    "value": "586aa477ff42f0d307dc26adada275642630b28f"
                },
                {
                    "name": "php:input-version",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libqdbm-1.8.78-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libqdbm-1.8.78-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libqdbm:1.8.78",
                        "name": "libqdbm",
                        "version": "1.8.78",
                        "purl": "pkg:generic/qdbm@1.8.78"
                    }
                ],
                "notes": "Built from winlibs/qdbm ref libqdbm-1.8.78 at commit 586aa477ff42f0d307dc26adada275642630b28f with upstream identity https://dbmx.net/qdbm/ tag qdbm-1.8.78."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "name": "libsasl",
            "version": "2.1.28",
            "purl": "pkg:generic/cyrus-sasl@2.1.28",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libsasl-2.1.28-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/cyrusimap/cyrus-sasl/tree/cyrus-sasl-2.1.28"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/cyrus-sasl.git@63a75ce9293206aea981e9f3edcd96645bafd677"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "cyrus-sasl"
                },
                {
                    "name": "php:component",
                    "value": "libsasl"
                },
                {
                    "name": "php:version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "cyrus-sasl-2.1.28"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:source-commit",
                    "value": "63a75ce9293206aea981e9f3edcd96645bafd677"
                },
                {
                    "name": "php:input-version",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsasl-2.1.28-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libsasl-2.1.28-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsasl:2.1.28",
                        "name": "libsasl",
                        "version": "2.1.28",
                        "purl": "pkg:generic/cyrus-sasl@2.1.28"
                    }
                ],
                "notes": "Built from winlibs/cyrus-sasl ref libsasl-2.1.28 at commit 63a75ce9293206aea981e9f3edcd96645bafd677 with upstream identity cyrusimap/cyrus-sasl tag cyrus-sasl-2.1.28."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/sqlite3@3.53.2",
            "name": "sqlite3",
            "version": "3.53.2",
            "purl": "pkg:generic/sqlite@3.53.2",
            "licenses": [
                {
                    "license": {
                        "id": "blessing"
                    }
                }
            ],
            "copyright": "NONE",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/sqlite3-3.53.2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/sqlite/sqlite"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/sqlite/sqlite/tree/version-3.53.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/sqlite3.git@1317473784d608cfe3193628ccbe27ed2dedc3fe"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "sqlite3"
                },
                {
                    "name": "php:component",
                    "value": "sqlite3"
                },
                {
                    "name": "php:version",
                    "value": "3.53.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.53.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "sqlite/sqlite"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/sqlite/sqlite"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "version-3.53.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/sqlite3"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/sqlite3"
                },
                {
                    "name": "php:source-ref",
                    "value": "sqlite3-3.53.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "1317473784d608cfe3193628ccbe27ed2dedc3fe"
                },
                {
                    "name": "php:input-version",
                    "value": "sqlite3-3.53.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "sqlite3-3.53.2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/sqlite3-3.53.2-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:sqlite:sqlite:3.53.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:sqlite3:3.53.2",
                        "name": "sqlite3",
                        "version": "3.53.2",
                        "purl": "pkg:generic/sqlite@3.53.2"
                    }
                ],
                "notes": "Built from winlibs/sqlite3 ref sqlite3-3.53.2 at commit 1317473784d608cfe3193628ccbe27ed2dedc3fe with upstream identity sqlite/sqlite tag version-3.53.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "name": "libsodium",
            "version": "1.0.22",
            "purl": "pkg:generic/libsodium@1.0.22",
            "licenses": [
                {
                    "license": {
                        "id": "ISC"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libsodium-1.0.22-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/jedisct1/libsodium"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/jedisct1/libsodium/tree/1.0.22-RELEASE"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libsodium.git@1777bbc853d2aeb124e7b842a11b916193db7bdf"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libsodium"
                },
                {
                    "name": "php:component",
                    "value": "libsodium"
                },
                {
                    "name": "php:version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.0.22-RELEASE"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libsodium"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libsodium"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:source-commit",
                    "value": "1777bbc853d2aeb124e7b842a11b916193db7bdf"
                },
                {
                    "name": "php:input-version",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsodium-1.0.22-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libsodium-1.0.22-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsodium:1.0.22",
                        "name": "libsodium",
                        "version": "1.0.22",
                        "purl": "pkg:generic/libsodium@1.0.22"
                    }
                ],
                "notes": "Built from winlibs/libsodium ref libsodium-1.0.22 at commit 1777bbc853d2aeb124e7b842a11b916193db7bdf with upstream identity jedisct1/libsodium tag 1.0.22-RELEASE."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "name": "libtidy",
            "version": "5.8.0",
            "purl": "pkg:generic/libtidy@5.8.0",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libtidy-5.8.0-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/htacg/tidy-html5"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/htacg/tidy-html5/tree/5.8.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libtidy.git@8b6229fd70409656257a6446a254fd62fde8a03a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libtidy"
                },
                {
                    "name": "php:component",
                    "value": "libtidy"
                },
                {
                    "name": "php:version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libtidy"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libtidy"
                },
                {
                    "name": "php:source-ref",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "8b6229fd70409656257a6446a254fd62fde8a03a"
                },
                {
                    "name": "php:input-version",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libtidy-5.8.0-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libtidy-5.8.0-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libtidy:5.8.0",
                        "name": "libtidy",
                        "version": "5.8.0",
                        "purl": "pkg:generic/libtidy@5.8.0"
                    }
                ],
                "notes": "Built from winlibs/libtidy ref libtidy-5.8.0 at commit 8b6229fd70409656257a6446a254fd62fde8a03a with upstream identity htacg/tidy-html5 tag 5.8.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libtiff@4.7.2",
            "name": "libtiff",
            "version": "4.7.2",
            "purl": "pkg:generic/libtiff@4.7.2",
            "licenses": [
                {
                    "license": {
                        "id": "libtiff"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libtiff-4.7.2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://libtiff.gitlab.io/libtiff/"
                },
                {
                    "type": "vcs",
                    "url": "https://gitlab.com/libtiff/libtiff/-/tree/v4.7.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libtiff.git@d01a94be176f5f6a87f7ee1c0b32e65416aa2b4d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libtiff"
                },
                {
                    "name": "php:component",
                    "value": "libtiff"
                },
                {
                    "name": "php:version",
                    "value": "4.7.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "4.7.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://gitlab.com/libtiff/libtiff"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v4.7.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libtiff"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libtiff"
                },
                {
                    "name": "php:source-ref",
                    "value": "libtiff-4.7.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "d01a94be176f5f6a87f7ee1c0b32e65416aa2b4d"
                },
                {
                    "name": "php:input-version",
                    "value": "libtiff-4.7.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libtiff-4.7.2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libtiff-4.7.2-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libtiff:libtiff:4.7.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libtiff:4.7.2",
                        "name": "libtiff",
                        "version": "4.7.2",
                        "purl": "pkg:generic/libtiff@4.7.2"
                    }
                ],
                "notes": "Built from winlibs/libtiff ref libtiff-4.7.2 at commit d01a94be176f5f6a87f7ee1c0b32e65416aa2b4d with upstream identity https://gitlab.com/libtiff/libtiff tag v4.7.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "name": "libwebp",
            "version": "1.6.0",
            "purl": "pkg:generic/libwebp@1.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libwebp-1.6.0-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/webmproject/libwebp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/webmproject/libwebp/tree/v1.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libwebp.git@1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libwebp"
                },
                {
                    "name": "php:component",
                    "value": "libwebp"
                },
                {
                    "name": "php:version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "webmproject/libwebp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/webmproject/libwebp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libwebp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libwebp"
                },
                {
                    "name": "php:source-ref",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                },
                {
                    "name": "php:input-version",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libwebp-1.6.0-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libwebp-1.6.0-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libwebp:1.6.0",
                        "name": "libwebp",
                        "version": "1.6.0",
                        "purl": "pkg:generic/libwebp@1.6.0"
                    }
                ],
                "notes": "Built from winlibs/libwebp ref libwebp-1.6.0 at commit 1b7801dd9a59c1dc5bda38895d8f94c815732a9f with upstream identity webmproject/libwebp tag v1.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libultrahdr@1.4.0-1",
            "name": "libultrahdr",
            "version": "1.4.0-1",
            "purl": "pkg:generic/libultrahdr@1.4.0",
            "licenses": [
                {
                    "expression": "Apache-2.0 AND MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libultrahdr-1.4.0-1-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/google/libultrahdr"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/google/libultrahdr/tree/v1.4.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libultrahdr.git@97dd52a529caedde0e7136e57a0e9f2be9d2252d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libultrahdr"
                },
                {
                    "name": "php:component",
                    "value": "libultrahdr"
                },
                {
                    "name": "php:version",
                    "value": "1.4.0-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.4.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "google/libultrahdr"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/google/libultrahdr"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.4.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libultrahdr"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libultrahdr"
                },
                {
                    "name": "php:source-ref",
                    "value": "libultrahdr-1.4.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "97dd52a529caedde0e7136e57a0e9f2be9d2252d"
                },
                {
                    "name": "php:input-version",
                    "value": "libultrahdr-1.4.0-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libultrahdr-1.4.0-1-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libultrahdr-1.4.0-1-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libultrahdr:1.4.0",
                        "name": "libultrahdr",
                        "version": "1.4.0",
                        "purl": "pkg:generic/libultrahdr@1.4.0"
                    }
                ],
                "notes": "Built from winlibs/libultrahdr ref libultrahdr-1.4.0-1 at commit 97dd52a529caedde0e7136e57a0e9f2be9d2252d with upstream identity google/libultrahdr tag v1.4.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxml2@2.11.9-7",
            "name": "libxml2",
            "version": "2.11.9-7",
            "purl": "pkg:generic/libxml2@2.11.9",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libxml2-2.11.9-7-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxml2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxml2/tree/v2.11.9"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxml2.git@f06d784607050c08a9b28b1fce2faa4236c052cf"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxml2"
                },
                {
                    "name": "php:component",
                    "value": "libxml2"
                },
                {
                    "name": "php:version",
                    "value": "2.11.9-7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.11.9"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxml2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxml2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.11.9"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxml2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxml2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxml2-2.11.9-7"
                },
                {
                    "name": "php:source-commit",
                    "value": "f06d784607050c08a9b28b1fce2faa4236c052cf"
                },
                {
                    "name": "php:input-version",
                    "value": "libxml2-2.11.9-7"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxml2-2.11.9-7-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libxml2-2.11.9-7-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.11.9:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxml2:2.11.9",
                        "name": "libxml2",
                        "version": "2.11.9",
                        "purl": "pkg:generic/libxml2@2.11.9"
                    }
                ],
                "notes": "Built from winlibs/libxml2 ref libxml2-2.11.9-7 at commit f06d784607050c08a9b28b1fce2faa4236c052cf with upstream identity GNOME/libxml2 tag v2.11.9.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2024-56171",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/3e2239c54bcc20495bd9dc35f80d3402179b6809"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-24928",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/f4646b65a167bcdf3f18246772b12415172545a8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-27113",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
                                },
                                "description": "Fixed by winlibs/libxml2 backport in tag libxml2-2.11.9-1."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32414",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/220875f30a741ee7a4dbd3aa4cfa1e4569573ea9"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32415",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
                                },
                                "description": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/bcaa5c4af33b2648371b1fff3059bf0c51abe6bd"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49794",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
                                },
                                "description": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/781345c83817681e35f201892d3befc6b63d6129"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49795",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
                                },
                                "description": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/21afa4ccaf8fcf64f03fc0e8fd0c65ef9770c902"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49796",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
                                },
                                "description": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/781345c83817681e35f201892d3befc6b63d6129"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6021",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1aaac89c3c076a72c61263e279be47ee9e016a09"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6170",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
                                },
                                "description": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/f7f4f1cdc447df9b0d4621ebb84fb2c690cecef4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7425",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
                                },
                                "description": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxslt/-/issues/140",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/f1e1f13b766eb580a8dcc0c4e7a447346dfd862e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-8732",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
                                },
                                "description": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.11.9-5.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/eae9291aa73907694dd3a4274d306e31217e746e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0989",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/561fa6aa2df56372746029e027125634008c6f2e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0990",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d26c645cd83ae7c8d1439a696a54730af7630ff4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0992",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/850597a70a2ff93de74b0be9e378f6bb4f11ade6",
                                    "https://github.com/winlibs/libxml2/commit/04c5570aa73c0c1938ee9e256dbda7649dd7c479"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-1757",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/ca4540f6dcc6cb583c0835dbd5ce4dd76d1d8741"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2023-45322",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
                                },
                                "description": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/8af91ce979a7478c852a67a450774b0b3d374308",
                                    "https://github.com/winlibs/libxml2/commit/f06d784607050c08a9b28b1fce2faa4236c052cf",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/d39f78069dff496ec865c73aa44d7110e429bce9",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/8707838e69f9c6e729c1d1d46bb3681d9e622be5"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-11979",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
                                },
                                "description": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/8abcf2bca49fe3ad8618d356536dc7b0cb3b3225",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "name": "libxpm",
            "version": "3.5.19",
            "purl": "pkg:generic/libxpm@3.5.19",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libxpm-3.5.19-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "type": "vcs",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm/-/tree/libXpm-3.5.19"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxpm.git@90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxpm"
                },
                {
                    "name": "php:component",
                    "value": "libxpm"
                },
                {
                    "name": "php:version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libXpm-3.5.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxpm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxpm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                },
                {
                    "name": "php:input-version",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxpm-3.5.19-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libxpm-3.5.19-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxpm:3.5.19",
                        "name": "libxpm",
                        "version": "3.5.19",
                        "purl": "pkg:generic/libxpm@3.5.19"
                    }
                ],
                "notes": "Built from winlibs/libxpm ref libxpm-3.5.19 at commit 90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099 with upstream identity https://gitlab.freedesktop.org/xorg/lib/libxpm tag libXpm-3.5.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "name": "libxslt",
            "version": "1.1.43-2",
            "purl": "pkg:generic/libxslt@1.1.43",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libxslt-1.1.43-2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxslt"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxslt/tree/v1.1.43"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxslt.git@9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxslt"
                },
                {
                    "name": "php:component",
                    "value": "libxslt"
                },
                {
                    "name": "php:version",
                    "value": "1.1.43-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.1.43"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxslt"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxslt"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.1.43"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxslt"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxslt"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                },
                {
                    "name": "php:input-version",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxslt-1.1.43-2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libxslt-1.1.43-2-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxslt:1.1.43:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxslt:1.1.43",
                        "name": "libxslt",
                        "version": "1.1.43",
                        "purl": "pkg:generic/libxslt@1.1.43"
                    }
                ],
                "notes": "Built from winlibs/libxslt ref libxslt-1.1.43-2 at commit 9f399f8d223ddddeaeacd15285a2e993ec326c0f with upstream identity GNOME/libxslt tag v1.1.43.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2025-10911",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-11731",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/7b6b3c1b3abc2d4c4332496d44979b8a1933dd1b"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7424",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/f32502000e6e6404125988d67cd9503ef8677e43"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzip@1.11.4",
            "name": "libzip",
            "version": "1.11.4",
            "purl": "pkg:generic/libzip@1.11.4",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libzip-1.11.4-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nih-at/libzip"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nih-at/libzip/tree/v1.11.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libzip.git@94b3e6583c6ddf77d3fef95699310818a91bc23a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzip"
                },
                {
                    "name": "php:component",
                    "value": "libzip"
                },
                {
                    "name": "php:version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nih-at/libzip"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nih-at/libzip"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.11.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libzip"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libzip"
                },
                {
                    "name": "php:source-ref",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "94b3e6583c6ddf77d3fef95699310818a91bc23a"
                },
                {
                    "name": "php:input-version",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzip-1.11.4-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/libzip-1.11.4-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libzip:1.11.4",
                        "name": "libzip",
                        "version": "1.11.4",
                        "purl": "pkg:generic/libzip@1.11.4"
                    }
                ],
                "notes": "Built from winlibs/libzip ref libzip-1.11.4 at commit 94b3e6583c6ddf77d3fef95699310818a91bc23a with upstream identity nih-at/libzip tag v1.11.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "name": "mpir",
            "version": "3.0.0-2",
            "purl": "pkg:generic/mpir@3.0.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-3.0-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/mpir-3.0.0-2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/wbhart/mpir"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/wbhart/mpir/tree/mpir-3.0.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/mpir.git@796ed2cee089c96dc254caec624fe9084c3a68c3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "mpir"
                },
                {
                    "name": "php:component",
                    "value": "mpir"
                },
                {
                    "name": "php:version",
                    "value": "3.0.0-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "wbhart/mpir"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/wbhart/mpir"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "mpir-3.0.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/mpir"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/mpir"
                },
                {
                    "name": "php:source-ref",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "796ed2cee089c96dc254caec624fe9084c3a68c3"
                },
                {
                    "name": "php:input-version",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "mpir-3.0.0-2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/mpir-3.0.0-2-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:mpir:3.0.0",
                        "name": "mpir",
                        "version": "3.0.0",
                        "purl": "pkg:generic/mpir@3.0.0"
                    }
                ],
                "notes": "Built from winlibs/mpir ref mpir-3.0.0-2 at commit 796ed2cee089c96dc254caec624fe9084c3a68c3 with upstream identity wbhart/mpir tag mpir-3.0.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/net-snmp@5.9.4",
            "name": "net-snmp",
            "version": "5.9.4",
            "purl": "pkg:generic/net-snmp@5.9.4",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/net-snmp-5.9.4-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/net-snmp/net-snmp/tree/v5.9.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/net-snmp.git@0c478089ece16d6346fbf464a9ef00d17f123fc3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "net-snmp"
                },
                {
                    "name": "php:component",
                    "value": "net-snmp"
                },
                {
                    "name": "php:version",
                    "value": "5.9.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.9.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.9.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/net-snmp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/net-snmp"
                },
                {
                    "name": "php:source-ref",
                    "value": "net-snmp-5.9.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "0c478089ece16d6346fbf464a9ef00d17f123fc3"
                },
                {
                    "name": "php:input-version",
                    "value": "net-snmp-5.9.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "net-snmp-5.9.4-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/net-snmp-5.9.4-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:net-snmp:5.9.4",
                        "name": "net-snmp",
                        "version": "5.9.4",
                        "purl": "pkg:generic/net-snmp@5.9.4"
                    }
                ],
                "notes": "Built from winlibs/net-snmp ref net-snmp-5.9.4 at commit 0c478089ece16d6346fbf464a9ef00d17f123fc3 with upstream identity net-snmp/net-snmp tag v5.9.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openldap@2.6.13-2",
            "name": "openldap",
            "version": "2.6.13-2",
            "purl": "pkg:generic/openldap@2.6.13",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/openldap-2.6.13-2-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openldap/openldap"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openldap/openldap/tree/OPENLDAP_REL_ENG_2_6_13"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openldap.git@006411230eaf28f3201362f18a0e5903f9772f5c"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openldap"
                },
                {
                    "name": "php:component",
                    "value": "openldap"
                },
                {
                    "name": "php:version",
                    "value": "2.6.13-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.6.13"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openldap/openldap"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openldap/openldap"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "OPENLDAP_REL_ENG_2_6_13"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openldap"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openldap"
                },
                {
                    "name": "php:source-ref",
                    "value": "openldap-2.6.13-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "006411230eaf28f3201362f18a0e5903f9772f5c"
                },
                {
                    "name": "php:input-version",
                    "value": "openldap-2.6.13-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openldap-2.6.13-2-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/openldap-2.6.13-2-vs18-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openldap:openldap:2.6.13:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openldap:2.6.13",
                        "name": "openldap",
                        "version": "2.6.13",
                        "purl": "pkg:generic/openldap@2.6.13"
                    }
                ],
                "notes": "Built from winlibs/openldap ref openldap-2.6.13-2 at commit 006411230eaf28f3201362f18a0e5903f9772f5c with upstream identity openldap/openldap tag OPENLDAP_REL_ENG_2_6_13."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "name": "rxspencer",
            "version": "3.9.0",
            "purl": "pkg:generic/rxspencer@3.9.0",
            "licenses": [
                {
                    "license": {
                        "id": "Spencer-94"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/garyhouston/rxspencer/tree/v3.9.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/garyhouston/rxspencer.git@9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "rxspencer"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/wineditline@2.208",
            "name": "wineditline",
            "version": "2.208",
            "purl": "pkg:generic/wineditline@2.208",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/wineditline-2.208-vs18-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/ptosco/wineditline"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/ptosco/wineditline/tree/wineditline-2.208"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/wineditline.git@39ae4ff02a06c97f804833844b767777d6625fb8"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "wineditline"
                },
                {
                    "name": "php:component",
                    "value": "wineditline"
                },
                {
                    "name": "php:version",
                    "value": "2.208"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.208"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "ptosco/wineditline"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/ptosco/wineditline"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "wineditline-2.208"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/wineditline"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/wineditline"
                },
                {
                    "name": "php:source-ref",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:source-commit",
                    "value": "39ae4ff02a06c97f804833844b767777d6625fb8"
                },
                {
                    "name": "php:input-version",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:vs",
                    "value": "vs18"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.6"
                },
                {
                    "name": "php:package-file-name",
                    "value": "wineditline-2.208-vs18-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs18/x64/wineditline-2.208-vs18-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:wineditline:2.208",
                        "name": "wineditline",
                        "version": "2.208",
                        "purl": "pkg:generic/wineditline@2.208"
                    }
                ],
                "notes": "Built from winlibs/wineditline ref WinEditLine-2.208 at commit 39ae4ff02a06c97f804833844b767777d6625fb8 with upstream identity ptosco/wineditline tag wineditline-2.208."
            }
        }
    ],
    "dependencies": [
        {
            "ref": "pkg:php-windows-deps/ICU@77.1-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/apache@2.4.68",
            "dependsOn": [
                "pkg:php-windows-deps/apr-iconv@1.2.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/brotli@1.2.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/fbclient@4.0.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/freetype@2.14.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/glib@2.88.1-1",
            "dependsOn": [
                "pkg:php-windows-deps/libffi@3.6.0",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libffi@3.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libintl@1.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/zlib@1.3.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libargon2@20190702",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/aom@3.14.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libavif@1.4.2",
            "dependsOn": [
                "pkg:php-windows-deps/aom@3.14.1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libbzip2@1.0.8-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libcurl@8.21.0-1",
            "dependsOn": [
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/libssh2@1.11.1-5",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/nghttp2@1.69.0-1",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libssh2@1.11.1-5",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/nghttp2@1.69.0-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/openssl@3.5.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libenchant2@2.8.16-1",
            "dependsOn": [
                "pkg:php-windows-deps/glib@2.88.1-1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/dav1d@1.5.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libheif@1.23.1",
            "dependsOn": [
                "pkg:php-windows-deps/aom@3.14.1",
                "pkg:php-windows-deps/dav1d@1.5.3",
                "pkg:php-windows-deps/libjpeg-turbo@3.2.0"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libjpeg-turbo@3.2.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libiconv@1.19-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/highway@457c891775a7397bdb0376bb1031e6e027af1c48",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libjxl@0.11.2",
            "dependsOn": [
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/highway@457c891775a7397bdb0376bb1031e6e027af1c48"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblzma@5.8.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libonig@6.9.10",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libpng@1.6.58",
            "dependsOn": [
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libpq@16.14",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.5.7"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "dependsOn": [
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/sqlite3@3.53.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/sqlite3@3.53.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libtiff@4.7.2",
            "dependsOn": [
                "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/libwebp@1.6.0",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libultrahdr@1.4.0-1",
            "dependsOn": [
                "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libxml2@2.11.9-7",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19-1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19-1",
                "pkg:php-windows-deps/libxml2@2.11.9-7"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzip@1.11.4",
            "dependsOn": [
                "pkg:php-windows-deps/libbzip2@1.0.8-1",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/net-snmp@5.9.4",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.5.7"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/openldap@2.6.13-2",
            "dependsOn": [
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/rxspencer@3.9.0"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/wineditline@2.208",
            "dependsOn": []
        },
        {
            "ref": "pkg:generic/php@8.6.0alpha3",
            "dependsOn": [
                "pkg:generic/berkeley-uuencode",
                "pkg:generic/boost-context-assembly",
                "pkg:generic/crypt_blowfish@1.3",
                "pkg:generic/dynasm@1.5.0",
                "pkg:generic/freesec-libcrypt",
                "pkg:generic/libarchive-format-octal",
                "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba",
                "pkg:generic/libbcmath@0.2",
                "pkg:generic/libgd@2.4.0",
                "pkg:generic/libmagic@5.46",
                "pkg:generic/libmbfl@1.3.2",
                "pkg:generic/libzip-zip-dirent",
                "pkg:generic/mtrand@1.0",
                "pkg:generic/openldap-ucgendat",
                "pkg:generic/pcre2@10.44",
                "pkg:generic/snprintf",
                "pkg:generic/strlcat",
                "pkg:generic/strlcpy",
                "pkg:generic/strnatcmp",
                "pkg:generic/tcl-scanf@8.3.0",
                "pkg:generic/timelib@2022.17",
                "pkg:generic/xkcp-sha3",
                "pkg:generic/xxhash@0.8.2",
                "pkg:php-windows-deps/ICU@77.1-1",
                "pkg:php-windows-deps/apache@2.4.68",
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/fbclient@4.0.7",
                "pkg:php-windows-deps/freetype@2.14.3",
                "pkg:php-windows-deps/glib@2.88.1-1",
                "pkg:php-windows-deps/libargon2@20190702",
                "pkg:php-windows-deps/libavif@1.4.2",
                "pkg:php-windows-deps/libbzip2@1.0.8-1",
                "pkg:php-windows-deps/libcurl@8.21.0-1",
                "pkg:php-windows-deps/libenchant2@2.8.16-1",
                "pkg:php-windows-deps/libffi@3.6.0",
                "pkg:php-windows-deps/libheif@1.23.1",
                "pkg:php-windows-deps/libiconv@1.19-1",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
                "pkg:php-windows-deps/libjxl@0.11.2",
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/libonig@6.9.10",
                "pkg:php-windows-deps/libpng@1.6.58",
                "pkg:php-windows-deps/libpq@16.14",
                "pkg:php-windows-deps/libqdbm@1.8.78",
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/libsodium@1.0.22",
                "pkg:php-windows-deps/libssh2@1.11.1-5",
                "pkg:php-windows-deps/libtidy@5.8.0",
                "pkg:php-windows-deps/libtiff@4.7.2",
                "pkg:php-windows-deps/libultrahdr@1.4.0-1",
                "pkg:php-windows-deps/libwebp@1.6.0",
                "pkg:php-windows-deps/libxml2@2.11.9-7",
                "pkg:php-windows-deps/libxpm@3.5.19",
                "pkg:php-windows-deps/libxslt@1.1.43-2",
                "pkg:php-windows-deps/libzip@1.11.4",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/mpir@3.0.0-2",
                "pkg:php-windows-deps/net-snmp@5.9.4",
                "pkg:php-windows-deps/nghttp2@1.69.0-1",
                "pkg:php-windows-deps/openldap@2.6.13-2",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/sqlite3@3.53.2",
                "pkg:php-windows-deps/wineditline@2.208",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        }
    ],
    "vulnerabilities": [
        {
            "id": "CVE-1999-0289",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0289"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The affected legacy Win32 path handling is not present in Apache HTTP Server 2.4 builds."
            }
        },
        {
            "id": "CVE-1999-0678",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0678"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE concerns a Debian default ServerRoot configuration; Debian packaging and configuration are not present in the Windows artifact."
            }
        },
        {
            "id": "CVE-2025-3891",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3891"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects mod_auth_openidc, which is a separate module and is not included in the Apache dependency artifact."
            }
        },
        {
            "id": "CVE-2025-15661",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix."
            }
        },
        {
            "id": "CVE-2026-55199",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c."
            }
        },
        {
            "id": "CVE-2026-55200",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c."
            }
        },
        {
            "id": "CVE-2026-58050",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58051",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58055",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/nghttp2@1.69.0-1"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream nghttpx request-header validation in winlibs/nghttp2 tag nghttp2-1.69.0-1."
            }
        },
        {
            "id": "CVE-2026-7598",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting upstream username_len bounds checking in src/userauth.c."
            }
        },
        {
            "id": "CVE-2017-8806",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8806"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libpq@16.14"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects Debian and Ubuntu postgresql-common cluster scripts, which are not included in the Windows libpq artifact."
            }
        },
        {
            "id": "CVE-2023-52356",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52356"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libtiff@4.7.2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The upstream TIFFReadRGBATileExt validation fix is included in libtiff 4.7.2; Grype matches this CVE without a version constraint."
            }
        },
        {
            "id": "CVE-2023-6228",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6228"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libtiff@4.7.2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects the tiffcp command-line utility, which is not included in the Winlibs libtiff dependency artifact."
            }
        },
        {
            "id": "CVE-2023-6277",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6277"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libtiff@4.7.2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The upstream memory-allocation validation fix is included in libtiff 4.7.2; Grype matches this CVE without a version constraint."
            }
        },
        {
            "id": "CVE-2026-4775",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libtiff@4.7.2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The upstream integer-overflow fix is included in libtiff 4.7.2; Grype matches this CVE without a version constraint."
            }
        },
        {
            "id": "CVE-2023-45322",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2024-56171",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-24928",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-27113",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 backport in tag libxml2-2.11.9-1."
            }
        },
        {
            "id": "CVE-2025-32414",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-32415",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-49794",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-49795",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-49796",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-6021",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-6170",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-8732",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.11.9-5."
            }
        },
        {
            "id": "CVE-2026-0989",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-0990",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-0992",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-11979",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-1757",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-10911",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-11731",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7424",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "protected_by_mitigating_control",
                "detail": "The patched libxml2 dependency shipped with this Winlibs build preserves the private atype flag bits, preventing the corruption in libxslt."
            }
        }
    ]
}