{
  "SPDXID": "SPDXRef-DOCUMENT",
  "spdxVersion": "SPDX-2.3",
  "name": "SBOM-SPDX-openssl@3-3.5.9",
  "creationInfo": {
    "created": "2026-10-23T22:18:20Z",
    "creators": [
      "Tool: https://github.com/Homebrew/brew@5.1.0"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://formulae.brew.sh/spdx/openssl@3-3.5.9.json",
  "documentDescribes": [
    "SPDXRef-Archive-openssl.40.3-src",
    "SPDXRef-Package-SPDXRef-ca-certificates-2026-09-25",
    "SPDXRef-Compiler",
    "SPDXRef-Bottle-openssl.40.3"
  ],
  "files": [
    {
      "SPDXID": "SPDXRef-File-openssl.40.3",
      "fileName": "openssl-3.5.9.tar.gz",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a"
        }
      ]
    }
  ],
  "packages": [
    {
      "SPDXID": "SPDXRef-Archive-openssl.40.3-src",
      "name": "openssl@3",
      "versionInfo": "3.5.9",
      "filesAnalyzed": false,
      "licenseDeclared": "NOASSERTION",
      "builtDate": "2026-09-29T14:05:00Z",
      "licenseConcluded": "Apache-2.0",
      "downloadLocation": "https://github.com/openssl/openssl/releases/download/openssl-3.5.9/openssl-3.5.9.tar.gz",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:brew/homebrew/core/openssl%403@3.5.9",
          "referenceType": "purl"
        }
      ],
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Package-SPDXRef-ca-certificates-2026-09-25",
      "name": "ca-certificates",
      "versionInfo": "2026-09-25",
      "filesAnalyzed": false,
      "licenseDeclared": "NOASSERTION",
      "licenseConcluded": "MPL-2.0",
      "downloadLocation": "https://ghcr.io/v2/homebrew/core/ca-certificates/blobs/sha256:81804ad8a70a7a8d2a0a964d106765ff88716b310decaeffb4b4895a3252186a",
      "copyrightText": "NOASSERTION",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "81804ad8a70a7a8d2a0a964d106765ff88716b310decaeffb4b4895a3252186a"
        }
      ],
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:brew/ca-certificates@2026-09-25",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-Compiler",
      "name": "clang",
      "versionInfo": "27.0",
      "filesAnalyzed": false,
      "licenseDeclared": "NOASSERTION",
      "licenseConcluded": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "checksums": [],
      "externalRefs": []
    },
    {
      "SPDXID": "SPDXRef-Bottle-openssl.40.3",
      "name": "openssl@3",
      "versionInfo": "3.5.9",
      "filesAnalyzed": false,
      "licenseDeclared": "NOASSERTION",
      "builtDate": "2026-10-12T06:19:58Z",
      "licenseConcluded": "Apache-2.0",
      "downloadLocation": "https://ghcr.io/v2/homebrew/core/openssl/3/blobs/sha256:dcc989315a2efd06ca4a3fac5c33c237897a1059ed74f35c464a8967ffbb8aaf",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:brew/openssl%403@3.5.9",
          "referenceType": "purl"
        }
      ],
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dcc989315a2efd06ca4a3fac5c33c237897a1059ed74f35c464a8967ffbb8aaf"
        }
      ]
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-File-openssl.40.3",
      "relationshipType": "PACKAGE_OF",
      "relatedSpdxElement": "SPDXRef-Archive-openssl.40.3-src"
    },
    {
      "spdxElementId": "SPDXRef-Package-SPDXRef-ca-certificates-2026-09-25",
      "relationshipType": "RUNTIME_DEPENDENCY_OF",
      "relatedSpdxElement": "SPDXRef-Bottle-openssl.40.3"
    },
    {
      "spdxElementId": "SPDXRef-Compiler",
      "relationshipType": "BUILD_TOOL_OF",
      "relatedSpdxElement": "SPDXRef-Archive-openssl.40.3-src"
    }
  ]
}