{ "components": [ { "bom-ref": "pkg:golang/github.com/mgutz/ansi@0.0.0-20200706080929-d51e80ef957d", "description": "Package ansi is a small, fast library to create ANSI colored strings and codes.\n\nInstallation\n\nExample\n\nOther examples\n\nTo view color combinations, from terminal\n\nStyle format\n\nColors\n\nAttributes\n\nWikipedia ANSI escape codes Colors(http://en.wikipedia.org/wiki/ANSI_escape_code#Colors)", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mgutz/ansi" }, { "type": "issue-tracker", "url": "https://github.com/mgutz/ansi/issues" }, { "type": "vcs", "url": "git+https://github.com/mgutz/ansi" }, { "type": "website", "url": "https://github.com/mgutz/ansi" } ], "licenses": [ { "expression": "MIT" } ], "name": "ansi", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mgutz/ansi@0.0.0-20200706080929-d51e80ef957d", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20200706080929-d51e80ef957d" }, { "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@0.0.0-20260414002931-afd174a4e478", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/google.golang.org/genproto/googleapis/api" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/go-genproto/issues" }, { "type": "vcs", "url": "git+https://github.com/googleapis/go-genproto" }, { "type": "website", "url": "https://github.com/googleapis/go-genproto" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "api", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@0.0.0-20260414002931-afd174a4e478", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20260414002931-afd174a4e478" }, { "bom-ref": "pkg:golang/google.golang.org/api@0.271.0", "description": "Package api is the root of the packages used to access Google Cloud\nServices. See https://godoc.org/google.golang.org/api for a full list of\nsub-packages.\n\nWithin api there exist numerous clients which connect to Google APIs,\nand various utility packages.\n\nAll clients in sub-packages are configurable via client options. These\noptions are described here: https://godoc.org/google.golang.org/api/option.\n\nAll the clients in sub-packages support authentication via Google\nApplication Default Credentials (see\nhttps://cloud.google.com/docs/authentication/production), or by providing a\nJSON key file for a Service Account. See the authentication examples in\nhttps://godoc.org/google.golang.org/api/transport for more details.\n\nDue to the auto-generated nature of this collection of libraries, complete\nAPIs or specific versions can appear or go away without notice. As a result,\nyou should always locally vendor any API(s) that your code relies upon.\n\nGoogle APIs follow semver as specified by\nhttps://cloud.google.com/apis/design/versioning. The code generator and\nthe code it produces - the libraries in the google.golang.org/api/...\nsubpackages - are beta.\n\nNote that versioning and stability is strictly not communicated through Go\nmodules. Go modules are used only for dependency management.\n\nMany parameters are specified using ints. However, underlying APIs might\noperate on a finer granularity, expecting int64, int32, uint64, or uint32,\nall of whom have different maximum values. Subsequently, specifying an int\nparameter in one of these clients may result in an error from the API\nbecause the value is too large.\n\nTo see the exact type of int that the API expects, you can inspect the API's\ndiscovery doc. A global catalogue pointing to the discovery doc of APIs can\nbe found at https://www.googleapis.com/discovery/v1/apis.\n\nThis field can be found on all Request/Response structs in the generated\nclients. All of these types have the JSON `omitempty` field tag present on\ntheir fields. This means if a type is set to its default value it will not be\nmarshalled. Sometimes you may actually want to send a default value, for\ninstance sending an int of `0`. In this case you can override the `omitempty`\nfeature by adding the field name to the `ForceSendFields` slice. See docs on\nany struct for more details. This may be used to include empty fields in\nPatch requests.\n\nThis field can be found on all Request/Response structs in the generated\nclients. It can be be used to send JSON null values for the listed fields.\nBy default, fields with empty values are omitted from API requests because of\nthe presence of the `omitempty` field tag on all fields. However, any field\nwith an empty value appearing in NullFields will be sent to the server as\nnull. It is an error if a field in this list has a non-empty value. This may\nbe used to include null fields in Patch requests.\n\nAn error returned by a client's Do method may be cast to a *googleapi.Error\nor unwrapped to an *apierror.APIError.\n\nThe https://pkg.go.dev/google.golang.org/api/googleapi#Error type is useful\nfor getting the HTTP status code:\n\nThe https://pkg.go.dev/github.com/googleapis/gax-go/v2/apierror#APIError type\nis useful for inspecting structured details of the underlying API response,\nsuch as the reason for the error and the error domain, which is typically the\nregistered service name of the tool or product that generated the error:\n\nIf an API call returns an Operation, that means it could take some time to\ncomplete the work initiated by the API call. Applications that are interested\nin the end result of the operation they initiated should wait until the\nOperation.Done field indicates it is finished. To do this, use the service's\nOperation client, and a loop, like so:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/google.golang.org/api" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/google-api-go-client/issues" }, { "type": "website", "url": "https://github.com/googleapis/google-api-go-client" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "api", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/google.golang.org/api@0.271.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.271.0" }, { "bom-ref": "pkg:golang/cloud.google.com/go/auth@0.18.2", "description": "Package auth provides utilities for managing Google Cloud credentials,\nincluding functionality for creating, caching, and refreshing OAuth2 tokens.\nIt offers customizable options for different OAuth2 flows, such as 2-legged\n(2LO) and 3-legged (3LO) OAuth, along with support for PKCE and automatic\ntoken management.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/cloud.google.com/go/auth" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/google-cloud-go/issues" }, { "type": "website", "url": "https://github.com/googleapis/google-cloud-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "auth", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/cloud.google.com/go/auth@0.18.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.18.2" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/exporters/autoexport@0.65.0", "description": "Package autoexport provides OpenTelemetry exporter factory functions\nwith defaults and environment variable support as defined by the\nOpenTelemetry specification.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/exporters/autoexport" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go-contrib" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "autoexport", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/exporters/autoexport@0.65.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.65.0" }, { "bom-ref": "pkg:golang/go.uber.org/automaxprocs@1.6.0", "description": "Package automaxprocs automatically sets GOMAXPROCS to match the Linux\ncontainer CPU quota, if any.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.uber.org/automaxprocs" }, { "type": "issue-tracker", "url": "https://github.com/uber-go/automaxprocs/issues" }, { "type": "website", "url": "https://github.com/uber-go/automaxprocs" } ], "licenses": [ { "expression": "MIT" } ], "name": "automaxprocs", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.uber.org/automaxprocs@1.6.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.6.0" }, { "bom-ref": "pkg:golang/github.com/kimmachinegun/automemlimit@0.7.5", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/kimmachinegun/automemlimit" }, { "type": "issue-tracker", "url": "https://github.com/KimMachineGun/automemlimit/issues" }, { "type": "vcs", "url": "git+https://github.com/kimmachinegun/automemlimit" } ], "licenses": [ { "expression": "MIT" } ], "name": "automemlimit", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/kimmachinegun/automemlimit@0.7.5", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.7.5" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/autoprop@0.65.0", "description": "Package autoprop provides an OpenTelemetry TextMapPropagator creation\nfunction. The OpenTelemetry specification states that the default\nTextMapPropagator needs to be a no-operation implementation. The\nopentelemetry-go project adheres to this requirement. However, for systems\nthat perform propagation this default is not ideal. This package provides a\nTextMapPropagator with useful defaults (a combined TraceContext and Baggage\nTextMapPropagator), and supports environment overrides using the\nOTEL_PROPAGATORS environment variable.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/propagators/autoprop" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "autoprop", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/propagators/autoprop@0.65.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.65.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/aws@1.40.0", "description": "Package aws contains OpenTelemetry propagators that use AWS propagation\nformats.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/propagators/aws" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "aws", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/propagators/aws@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/b3@1.40.0", "description": "Package b3 implements the B3 propagator specification as defined at\nhttps://github.com/openzipkin/b3-propagation", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/propagators/b3" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "b3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/propagators/b3@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/github.com/dgraph-io/badger@1.6.2", "description": "Package badger implements an embeddable, simple and fast key-value database,\nwritten in pure Go. It is designed to be highly performant for both reads and\nwrites simultaneously. Badger uses Multi-Version Concurrency Control (MVCC), and\nsupports transactions. It runs transactions concurrently, with serializable\nsnapshot isolation guarantees.\n\nBadger uses an LSM tree along with a value log to separate keys from values,\nhence reducing both write amplification and the size of the LSM tree. This\nallows LSM tree to be served entirely from RAM, while the values are served\nfrom SSD.\n\nBadger has the following main types: DB, Txn, Item and Iterator. DB contains\nkeys that are associated with values. It must be opened with the appropriate\noptions before it can be accessed.\n\nAll operations happen inside a Txn. Txn represents a transaction, which can\nbe read-only or read-write. Read-only transactions can read values for a\ngiven key (which are returned inside an Item), or iterate over a set of\nkey-value pairs using an Iterator (which are returned as Item type values as\nwell). Read-write transactions can also update and delete keys from the DB.\n\nSee the examples for more usage details.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/dgraph-io/badger" }, { "type": "issue-tracker", "url": "https://github.com/dgraph-io/badger/issues" }, { "type": "vcs", "url": "git+https://github.com/dgraph-io/badger" }, { "type": "website", "url": "https://github.com/dgraph-io/badger" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "badger", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/dgraph-io/badger@1.6.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.6.2" }, { "bom-ref": "pkg:golang/github.com/andreasbriese/bbloom@0.0.0-20190825152654-46b345b51c96", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/andreasbriese/bbloom" }, { "type": "issue-tracker", "url": "https://github.com/AndreasBriese/bbloom/issues" }, { "type": "vcs", "url": "git+https://github.com/andreasbriese/bbloom" }, { "type": "website", "url": "https://github.com/andreasbriese/bbloom" } ], "licenses": [ { "expression": "CC0-1.0 OR MIT" } ], "name": "bbloom", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/andreasbriese/bbloom@0.0.0-20190825152654-46b345b51c96", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20190825152654-46b345b51c96" }, { "bom-ref": "pkg:golang/go.etcd.io/bbolt@1.4.3", "description": "package bbolt implements a low-level key/value store in pure Go. It supports\nfully serializable transactions, ACID semantics, and lock-free MVCC with\nmultiple readers and a single writer. Bolt can be used for projects that\nwant a simple data store without the need to add large dependencies such as\nPostgres or MySQL.\n\nBolt is a single-level, zero-copy, B+tree data store. This means that Bolt is\noptimized for fast read access and does not require recovery in the event of a\nsystem crash. Transactions which have not finished committing will simply be\nrolled back in the event of a crash.\n\nThe design of Bolt is based on Howard Chu's LMDB database project.\n\nBolt currently works on Windows, Mac OS X, and Linux.\n\nThere are only a few types in Bolt: DB, Bucket, Tx, and Cursor. The DB is\na collection of buckets and is represented by a single file on disk. A bucket is\na collection of unique keys that are associated with values.\n\nTransactions provide either read-only or read-write access to the database.\nRead-only transactions can retrieve key/value pairs and can use Cursors to\niterate over the dataset sequentially. Read-write transactions can create and\ndelete buckets and can insert and remove keys. Only one read-write transaction\nis allowed at a time.\n\nThe database uses a read-only, memory-mapped data file to ensure that\napplications cannot corrupt the database, however, this means that keys and\nvalues returned from Bolt cannot be changed. Writing to a read-only byte slice\nwill cause Go to panic.\n\nKeys and values retrieved from the database are only valid for the life of\nthe transaction. When used outside the transaction, these byte slices can\npoint to different data or can point to invalid memory which will cause a panic.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.etcd.io/bbolt" }, { "type": "issue-tracker", "url": "https://github.com/etcd-io/bbolt/issues" }, { "type": "vcs", "url": "git+https://github.com/etcd-io/bbolt" }, { "type": "website", "url": "https://github.com/etcd-io/bbolt" } ], "licenses": [ { "expression": "MIT" } ], "name": "bbolt", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.etcd.io/bbolt@1.4.3", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.4.3" }, { "bom-ref": "pkg:golang/filippo.io/bigmod@0.1.0", "description": "Package bigmod implements constant-time big integer arithmetic modulo large\nodd moduli. Unlike math/big, this package is suitable for implementing\nsecurity-sensitive cryptographic operations. It is a re-exported version the\nstandard library package crypto/internal/bigmod used to implement crypto/rsa\namongst others.\n\nThe API is NOT stable. In particular, its safety is suboptimal, as the caller\nis responsible for ensuring that Nats are reduced modulo the Modulus they are\nused with.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/filippo.io/bigmod" }, { "type": "issue-tracker", "url": "https://github.com/FiloSottile/bigmod/issues" }, { "type": "website", "url": "https://github.com/FiloSottile/bigmod" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "bigmod", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/filippo.io/bigmod@0.1.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.1.0" }, { "bom-ref": "pkg:golang/github.com/zeebo/blake3@0.2.4", "description": "Package blake3 provides an SSE4.1/AVX2 accelerated BLAKE3 implementation.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/zeebo/blake3" }, { "type": "issue-tracker", "url": "https://github.com/zeebo/blake3/issues" }, { "type": "vcs", "url": "git+https://github.com/zeebo/blake3" }, { "type": "website", "url": "https://github.com/zeebo/blake3" } ], "licenses": [ { "expression": "CC0-1.0" } ], "name": "blake3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/zeebo/blake3@0.2.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.2.4" }, { "bom-ref": "pkg:golang/caddyserver/caddy@2.11.2", "externalReferences": [ { "type": "vcs", "url": "https://pkg.go.dev/caddyserver/caddy@2.11.2" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "name": "caddy", "properties": [ { "name": "sbomify:enrichment:source", "value": "clearlydefined.io" } ], "purl": "pkg:golang/caddyserver/caddy@2.11.2", "type": "library", "version": "2.11.2" }, { "bom-ref": "pkg:docker/dhi/caddy@2.11.2-debian13?os_name=debian&os_version=13", "name": "caddy", "purl": "pkg:docker/dhi/caddy@2.11.2-debian13?os_name=debian&os_version=13", "type": "library", "version": "2.11.2-debian13" }, { "bom-ref": "pkg:golang/github.com/spf13/cast@1.7.0", "description": "Copyright © 2014 Steve Francia .\n\nUse of this source code is governed by an MIT-style\nlicense that can be found in the LICENSE file.\n\nPackage cast provides easy and safe casting in Go.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/spf13/cast" }, { "type": "issue-tracker", "url": "https://github.com/spf13/cast/issues" }, { "type": "vcs", "url": "git+https://github.com/spf13/cast" }, { "type": "website", "url": "https://github.com/spf13/cast" } ], "licenses": [ { "expression": "MIT" } ], "name": "cast", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/spf13/cast@1.7.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.7.0" }, { "bom-ref": "pkg:golang/github.com/google/cel-go@0.27.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/google/cel-go" }, { "type": "issue-tracker", "url": "https://github.com/google/cel-go/issues" }, { "type": "vcs", "url": "git+https://github.com/google/cel-go" }, { "type": "website", "url": "https://github.com/google/cel-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "cel-go", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/google/cel-go@0.27.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.27.0" }, { "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@1.1.8-0.20240110162603-74a5dd331745", "description": "Package ct holds core types and utilities for Certificate Transparency.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/google/certificate-transparency-go" }, { "type": "issue-tracker", "url": "https://github.com/google/certificate-transparency-go/issues" }, { "type": "vcs", "url": "git+https://github.com/google/certificate-transparency-go" }, { "type": "website", "url": "https://github.com/google/certificate-transparency-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "certificate-transparency-go", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/google/certificate-transparency-go@1.1.8-0.20240110162603-74a5dd331745", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.1.8-0.20240110162603-74a5dd331745" }, { "bom-ref": "pkg:golang/github.com/smallstep/certificates@0.30.1", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/certificates" }, { "type": "issue-tracker", "url": "https://github.com/smallstep/certificates/issues" }, { "type": "vcs", "url": "git+https://github.com/smallstep/certificates" }, { "type": "website", "url": "https://github.com/smallstep/certificates" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "certificates", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/certificates@0.30.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.30.1" }, { "bom-ref": "pkg:golang/github.com/caddyserver/certmagic@0.25.2", "description": "Package certmagic automates the obtaining and renewal of TLS certificates,\nincluding TLS & HTTPS best practices such as robust OCSP stapling, caching,\nHTTP->HTTPS redirects, and more.\n\nIts high-level API serves your HTTP handlers over HTTPS if you simply give\nthe domain name(s) and the http.Handler; CertMagic will create and run\nthe HTTPS server for you, fully managing certificates during the lifetime\nof the server. Similarly, it can be used to start TLS listeners or return\na ready-to-use tls.Config -- whatever layer you need TLS for, CertMagic\nmakes it easy. See the HTTPS, Listen, and TLS functions for that.\n\nIf you need more control, create a Cache using NewCache() and then make\na Config using New(). You can then call Manage() on the config. But if\nyou use this lower-level API, you'll have to be sure to solve the HTTP\nand TLS-ALPN challenges yourself (unless you disabled them or use the\nDNS challenge) by using the provided Config.GetCertificate function\nin your tls.Config and/or Config.HTTPChallengeHandler in your HTTP\nhandler.\n\nSee the package's README for more instruction.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/caddyserver/certmagic" }, { "type": "issue-tracker", "url": "https://github.com/caddyserver/certmagic/issues" }, { "type": "vcs", "url": "git+https://github.com/caddyserver/certmagic" }, { "type": "website", "url": "https://github.com/caddyserver/certmagic" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "certmagic", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/caddyserver/certmagic@0.25.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.25.2" }, { "bom-ref": "pkg:golang/github.com/cloudflare/circl@1.6.3", "description": "Package circl provides a collection of cryptographic primitives. The goal\nof this module is to be used as a tool for experimental deployment of\ncryptographic algorithms targeting Post-Quantum (PQ) and Elliptic\nCurve Cryptography (ECC).\n\nFollowing blog post describes ideas behind CIRCL in more details:\nhttps://blog.cloudflare.com/introducing-circl/", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/cloudflare/circl" }, { "type": "issue-tracker", "url": "https://github.com/cloudflare/circl/issues" }, { "type": "vcs", "url": "git+https://github.com/cloudflare/circl" }, { "type": "website", "url": "https://github.com/cloudflare/circl" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "circl", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/cloudflare/circl@1.6.3", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.6.3" }, { "bom-ref": "pkg:golang/github.com/urfave/cli@1.22.17", "description": "Package cli provides a minimal framework for creating and organizing command line\nGo applications. cli is designed to be easy to understand and write, the most simple\ncli application can be written as follows:\n\nOf course this application does not do much, so let's make this an actual application:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/urfave/cli" }, { "type": "issue-tracker", "url": "https://github.com/urfave/cli/issues" }, { "type": "vcs", "url": "git+https://github.com/urfave/cli" }, { "type": "website", "url": "https://github.com/urfave/cli" } ], "licenses": [ { "expression": "MIT" } ], "name": "cli", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/urfave/cli@1.22.17", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.22.17" }, { "bom-ref": "pkg:golang/github.com/smallstep/cli-utils@0.12.2", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/cli-utils" }, { "type": "issue-tracker", "url": "https://github.com/smallstep/cli-utils/issues" }, { "type": "vcs", "url": "git+https://github.com/smallstep/cli-utils" }, { "type": "website", "url": "https://github.com/smallstep/cli-utils" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "cli-utils", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/cli-utils@0.12.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.12.2" }, { "bom-ref": "pkg:golang/github.com/prometheus/client_golang@1.23.2", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/prometheus/client_golang" }, { "type": "issue-tracker", "url": "https://github.com/prometheus/client_golang/issues" }, { "type": "vcs", "url": "git+https://github.com/prometheus/client_golang" }, { "type": "website", "url": "https://github.com/prometheus/client_golang" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "client_golang", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/prometheus/client_golang@1.23.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.23.2" }, { "bom-ref": "pkg:golang/github.com/prometheus/client_model@0.6.2", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/prometheus/client_model" }, { "type": "issue-tracker", "url": "https://github.com/prometheus/client_model/issues" }, { "type": "vcs", "url": "git+https://github.com/prometheus/client_model" }, { "type": "website", "url": "https://github.com/prometheus/client_model" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "client_model", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/prometheus/client_model@0.6.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.6.2" }, { "bom-ref": "pkg:golang/github.com/spf13/cobra@1.10.2", "description": "Package cobra is a commander providing a simple interface to create powerful modern CLI interfaces.\nIn addition to providing an interface, Cobra simultaneously provides a controller to organize your application code.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/spf13/cobra" }, { "type": "issue-tracker", "url": "https://github.com/spf13/cobra/issues" }, { "type": "vcs", "url": "git+https://github.com/spf13/cobra" }, { "type": "website", "url": "https://github.com/spf13/cobra" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "cobra", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/spf13/cobra@1.10.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.10.2" }, { "bom-ref": "pkg:golang/github.com/prometheus/common@0.67.5", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/prometheus/common" }, { "type": "issue-tracker", "url": "https://github.com/prometheus/common/issues" }, { "type": "vcs", "url": "git+https://github.com/prometheus/common" }, { "type": "website", "url": "https://github.com/prometheus/common" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "common", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/prometheus/common@0.67.5", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.67.5" }, { "bom-ref": "pkg:golang/github.com/klauspost/compress@1.18.4", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/klauspost/compress" }, { "type": "issue-tracker", "url": "https://github.com/klauspost/compress/issues" }, { "type": "vcs", "url": "git+https://github.com/klauspost/compress" }, { "type": "website", "url": "https://github.com/klauspost/compress" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause OR MIT" } ], "name": "compress", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/klauspost/compress@1.18.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.18.4" }, { "bom-ref": "pkg:golang/github.com/mitchellh/copystructure@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mitchellh/copystructure" }, { "type": "issue-tracker", "url": "https://github.com/mitchellh/copystructure/issues" }, { "type": "vcs", "url": "git+https://github.com/mitchellh/copystructure" }, { "type": "website", "url": "https://github.com/mitchellh/copystructure" } ], "licenses": [ { "expression": "MIT" } ], "name": "copystructure", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mitchellh/copystructure@1.2.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.2.0" }, { "bom-ref": "pkg:golang/golang.org/x/crypto@0.50.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/crypto" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/crypto" }, { "type": "website", "url": "https://cs.opensource.google/go/x/crypto" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "crypto", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/crypto@0.50.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.50.0" }, { "bom-ref": "pkg:golang/go.step.sm/crypto@0.77.1", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.step.sm/crypto" }, { "type": "issue-tracker", "url": "https://github.com/smallstep/crypto/issues" }, { "type": "vcs", "url": "https://pkg.go.dev/go.step.sm/crypto@0.77.1" }, { "type": "website", "url": "https://github.com/smallstep/crypto" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "crypto", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.step.sm/crypto@0.77.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.77.1" }, { "bom-ref": "pkg:golang/github.com/shopspring/decimal@1.4.0", "description": "Package decimal implements an arbitrary precision fixed-point decimal.\n\nThe zero-value of a Decimal is 0, as you would expect.\n\nThe best way to create a new Decimal is to use decimal.NewFromString, ex:\n\nTo use Decimal as part of a struct:\n\nNote: This can \"only\" represent numbers with a maximum of 2^31 digits after the decimal point.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/shopspring/decimal" }, { "type": "issue-tracker", "url": "https://github.com/shopspring/decimal/issues" }, { "type": "vcs", "url": "git+https://github.com/shopspring/decimal" }, { "type": "website", "url": "https://github.com/shopspring/decimal" } ], "licenses": [ { "expression": "MIT" } ], "name": "decimal", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/shopspring/decimal@1.4.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.4.0" }, { "bom-ref": "pkg:golang/github.com/aryann/difflib@0.0.0-20210328193216-ff5ff6dc229b", "description": "Package difflib provides functionality for computing the difference\nbetween two sequences of strings.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/aryann/difflib" }, { "type": "issue-tracker", "url": "https://github.com/aryann/difflib/issues" }, { "type": "vcs", "url": "git+https://github.com/aryann/difflib" }, { "type": "website", "url": "https://github.com/aryann/difflib" } ], "licenses": [ { "expression": "MIT" } ], "name": "difflib", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/aryann/difflib@0.0.0-20210328193216-ff5ff6dc229b", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20210328193216-ff5ff6dc229b" }, { "bom-ref": "pkg:golang/github.com/miekg/dns@1.1.72", "description": "Package dns implements a full featured interface to the Domain Name System.\nBoth server- and client-side programming is supported. The package allows\ncomplete control over what is sent out to the DNS. The API follows the\nless-is-more principle, by presenting a small, clean interface.\n\nIt supports (asynchronous) querying/replying, incoming/outgoing zone transfers,\nTSIG, EDNS0, dynamic updates, notifies and DNSSEC validation/signing.\n\nNote that domain names MUST be fully qualified before sending them, unqualified\nnames in a message will result in a packing failure.\n\nResource records are native types. They are not stored in wire format. Basic\nusage pattern for creating a new resource record:\n\nOr directly from a string:\n\nOr when the default origin (.) and TTL (3600) and class (IN) suit you:\n\nOr even:\n\nIn the DNS messages are exchanged, these messages contain resource records\n(sets). Use pattern for creating a message:\n\nOr when not certain if the domain name is fully qualified:\n\nThe message m is now a message with the question section set to ask the MX\nrecords for the miek.nl. zone.\n\nThe following is slightly more verbose, but more flexible:\n\nAfter creating a message it can be sent. Basic use pattern for synchronous\nquerying the DNS at a server configured on 127.0.0.1 and port 53:\n\nSuppressing multiple outstanding queries (with the same question, type and\nclass) is as easy as setting:\n\nMore advanced options are available using a net.Dialer and the corresponding API.\nFor example it is possible to set a timeout, or to specify a source IP address\nand port to use for the connection:\n\nIf these \"advanced\" features are not needed, a simple UDP query can be sent,\nwith:\n\nWhen this functions returns you will get DNS message. A DNS message consists\nout of four sections.\nThe question section: in.Question, the answer section: in.Answer,\nthe authority section: in.Ns and the additional section: in.Extra.\n\nEach of these sections (except the Question section) contain a []RR. Basic\nuse pattern for accessing the rdata of a TXT RR as the first RR in\nthe Answer section:\n\nBoth domain names and TXT character strings are converted to presentation form\nboth when unpacked and when converted to strings.\n\nFor TXT character strings, tabs, carriage returns and line feeds will be\nconverted to \\t, \\r and \\n respectively. Back slashes and quotations marks will\nbe escaped. Bytes below 32 and above 127 will be converted to \\DDD form.\n\nFor domain names, in addition to the above rules brackets, periods, spaces,\nsemicolons and the at symbol are escaped.\n\nDNSSEC (DNS Security Extension) adds a layer of security to the DNS. It uses\npublic key cryptography to sign resource records. The public keys are stored in\nDNSKEY records and the signatures in RRSIG records.\n\nRequesting DNSSEC information for a zone is done by adding the DO (DNSSEC OK)\nbit to a request.\n\nSignature generation, signature verification and key generation are all supported.\n\nDynamic updates reuses the DNS message format, but renames three of the\nsections. Question is Zone, Answer is Prerequisite, Authority is Update, only\nthe Additional is not renamed. See RFC 2136 for the gory details.\n\nYou can set a rather complex set of rules for the existence of absence of\ncertain resource records or names in a zone to specify if resource records\nshould be added or removed. The table from RFC 2136 supplemented with the Go\nDNS function shows which functions exist to specify the prerequisites.\n\nThe prerequisite section can also be left empty. If you have decided on the\nprerequisites you can tell what RRs should be added or deleted. The next table\nshows the options you have and what functions to call.\n\nAn TSIG or transaction signature adds a HMAC TSIG record to each message sent.\nThe supported algorithms include: HmacSHA1, HmacSHA256 and HmacSHA512.\n\nBasic use pattern when querying with a TSIG name \"axfr.\" (note that these key names\nmust be fully qualified - as they are domain names) and the base64 secret\n\"so6ZGir4GPAqINNh9U5c3A==\":\n\nIf an incoming message contains a TSIG record it MUST be the last record in\nthe...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/miekg/dns" }, { "type": "issue-tracker", "url": "https://github.com/miekg/dns/issues" }, { "type": "vcs", "url": "git+https://github.com/miekg/dns" }, { "type": "website", "url": "https://github.com/miekg/dns" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "dns", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/miekg/dns@1.1.72", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.1.72" }, { "bom-ref": "pkg:golang/filippo.io/edwards25519@1.2.0", "description": "Package edwards25519 implements group logic for the twisted Edwards curve\n\nThis is better known as the Edwards curve equivalent to Curve25519, and is\nthe curve used by the Ed25519 signature scheme.\n\nMost users don't need this package, and should instead use crypto/ed25519 for\nsignatures, crypto/ecdh for Diffie-Hellman, or github.com/gtank/ristretto255\nfor prime order group logic.\n\nHowever, developers who do need to interact with low-level edwards25519\noperations can use this package, which is an extended version of\ncrypto/internal/fips140/edwards25519 from the standard library repackaged as\nan importable module.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/filippo.io/edwards25519" }, { "type": "issue-tracker", "url": "https://github.com/FiloSottile/edwards25519/issues" }, { "type": "website", "url": "https://github.com/FiloSottile/edwards25519" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "edwards25519", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/filippo.io/edwards25519@1.2.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.2.0" }, { "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@0.3.14", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/googleapis/enterprise-certificate-proxy" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/enterprise-certificate-proxy/issues" }, { "type": "vcs", "url": "git+https://github.com/googleapis/enterprise-certificate-proxy" }, { "type": "website", "url": "https://github.com/googleapis/enterprise-certificate-proxy" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "enterprise-certificate-proxy", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@0.3.14", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.3.14" }, { "bom-ref": "pkg:golang/github.com/pkg/errors@0.9.1", "description": "Package errors provides simple error handling primitives.\n\nThe traditional error handling idiom in Go is roughly akin to\n\nwhich when applied recursively up the call stack results in error reports\nwithout context or debugging information. The errors package allows\nprogrammers to add context to the failure path in their code in a way\nthat does not destroy the original value of the error.\n\nThe errors.Wrap function returns a new error that adds context to the\noriginal error by recording a stack trace at the point Wrap is called,\ntogether with the supplied message. For example\n\nIf additional control is required, the errors.WithStack and\nerrors.WithMessage functions destructure errors.Wrap into its component\noperations: annotating an error with a stack trace and with a message,\nrespectively.\n\nUsing errors.Wrap constructs a stack of errors, adding context to the\npreceding error. Depending on the nature of the error it may be necessary\nto reverse the operation of errors.Wrap to retrieve the original error\nfor inspection. Any error value which implements this interface\n\ncan be inspected by errors.Cause. errors.Cause will recursively retrieve\nthe topmost error that does not implement causer, which is assumed to be\nthe original cause. For example:\n\nAlthough the causer interface is not exported by this package, it is\nconsidered a part of its stable public interface.\n\nAll error values returned from this package implement fmt.Formatter and can\nbe formatted by the fmt package. The following verbs are supported:\n\nNew, Errorf, Wrap, and Wrapf record a stack trace at the point they are\ninvoked. This information can be retrieved with the following interface:\n\nThe returned errors.StackTrace type is defined as\n\nThe Frame type represents a call site in the stack trace. Frame supports\nthe fmt.Formatter interface that can be used for printing information about\nthe stack trace of this error. For example:\n\nAlthough the stackTracer interface is not exported by this package, it is\nconsidered a part of its stable public interface.\n\nSee the documentation for Frame.Format for more details.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/pkg/errors" }, { "type": "issue-tracker", "url": "https://github.com/pkg/errors/issues" }, { "type": "vcs", "url": "git+https://github.com/pkg/errors" }, { "type": "website", "url": "https://github.com/pkg/errors" } ], "licenses": [ { "expression": "BSD-2-Clause" } ], "name": "errors", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/pkg/errors@0.9.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.9.1" }, { "bom-ref": "pkg:golang/golang.org/x/exp@0.0.0-20251023183803-a4bb9ffd2546", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/exp" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/exp" }, { "type": "website", "url": "https://cs.opensource.google/go/x/exp" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "exp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/exp@0.0.0-20251023183803-a4bb9ffd2546", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20251023183803-a4bb9ffd2546" }, { "bom-ref": "pkg:golang/go.uber.org/zap/exp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.uber.org/zap/exp" }, { "type": "issue-tracker", "url": "https://github.com/uber-go/zap/issues" }, { "type": "vcs", "url": "https://pkg.go.dev/go.uber.org/zap/exp@0.3.0" }, { "type": "website", "url": "https://github.com/uber-go/zap" } ], "licenses": [ { "expression": "MIT" } ], "name": "exp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.uber.org/zap/exp@0.3.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.3.0" }, { "bom-ref": "pkg:golang/cel.dev/expr@0.25.1", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/cel.dev/expr" }, { "type": "issue-tracker", "url": "https://github.com/google/cel-spec/issues" }, { "type": "vcs", "url": "git+https://github.com/google/cel-spec" }, { "type": "website", "url": "https://github.com/google/cel-spec" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "expr", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/cel.dev/expr@0.25.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.25.1" }, { "bom-ref": "pkg:golang/golang.org/x/crypto/x509roots/fallback@0.0.0-20260213171211-a408498e5541", "description": "Package fallback embeds a set of fallback X.509 trusted roots in the\napplication by automatically invoking x509.SetFallbackRoots. This allows\nthe application to work correctly even if the operating system does not\nprovide a verifier or system roots pool.\n\nTo use it, import the package like\n\nIt's recommended that only binaries, and not libraries, import this package.\n\nThis package must be kept up to date for security and compatibility reasons.\nUse govulncheck to be notified of when new versions of the package are\navailable.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/crypto/x509roots/fallback" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/crypto" }, { "type": "website", "url": "https://cs.opensource.google/go/x/crypto" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "fallback", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/crypto/x509roots/fallback@0.0.0-20260213171211-a408498e5541", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20260213171211-a408498e5541" }, { "bom-ref": "pkg:golang/github.com/x448/float16@0.8.4", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/x448/float16" }, { "type": "issue-tracker", "url": "https://github.com/x448/float16/issues" }, { "type": "vcs", "url": "git+https://github.com/x448/float16" }, { "type": "website", "url": "https://github.com/x448/float16" } ], "licenses": [ { "expression": "MIT" } ], "name": "float16", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/x448/float16@0.8.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.8.4" }, { "bom-ref": "pkg:golang/github.com/smallstep/go-attestation@0.4.4-0.20241119153605-2306d5b464ca", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/go-attestation" }, { "type": "vcs", "url": "git+https://github.com/smallstep/go-attestation" }, { "type": "website", "url": "https://github.com/smallstep/go-attestation" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "go-attestation", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/go-attestation@0.4.4-0.20241119153605-2306d5b464ca", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.4.4-0.20241119153605-2306d5b464ca" }, { "bom-ref": "pkg:golang/github.com/mattn/go-colorable@0.1.14", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mattn/go-colorable" }, { "type": "issue-tracker", "url": "https://github.com/mattn/go-colorable/issues" }, { "type": "vcs", "url": "git+https://github.com/mattn/go-colorable" }, { "type": "website", "url": "https://github.com/mattn/go-colorable" } ], "licenses": [ { "expression": "MIT" } ], "name": "go-colorable", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mattn/go-colorable@0.1.14", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.1.14" }, { "bom-ref": "pkg:golang/github.com/dgryski/go-farm@0.0.0-20200201041132-a6ae2369ad13", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/dgryski/go-farm" }, { "type": "issue-tracker", "url": "https://github.com/dgryski/go-farm/issues" }, { "type": "vcs", "url": "git+https://github.com/dgryski/go-farm" }, { "type": "website", "url": "https://github.com/dgryski/go-farm" } ], "licenses": [ { "expression": "MIT" } ], "name": "go-farm", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/dgryski/go-farm@0.0.0-20200201041132-a6ae2369ad13", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20200201041132-a6ae2369ad13" }, { "bom-ref": "pkg:golang/github.com/dustin/go-humanize@1.0.1", "description": "Package humanize converts boring ugly numbers to human-friendly strings and back.\n\nDurations can be turned into strings such as \"3 days ago\", numbers\nrepresenting sizes like 82854982 into useful strings like, \"83 MB\" or\n\"79 MiB\" (whichever you prefer).", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/dustin/go-humanize" }, { "type": "issue-tracker", "url": "https://github.com/dustin/go-humanize/issues" }, { "type": "vcs", "url": "git+https://github.com/dustin/go-humanize" }, { "type": "website", "url": "https://github.com/dustin/go-humanize" } ], "licenses": [ { "expression": "MIT" } ], "name": "go-humanize", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/dustin/go-humanize@1.0.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.1" }, { "bom-ref": "pkg:golang/github.com/mattn/go-isatty@0.0.20", "description": "Package isatty implements interface to isatty", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mattn/go-isatty" }, { "type": "issue-tracker", "url": "https://github.com/mattn/go-isatty/issues" }, { "type": "vcs", "url": "git+https://github.com/mattn/go-isatty" }, { "type": "website", "url": "https://github.com/mattn/go-isatty" } ], "licenses": [ { "expression": "MIT" } ], "name": "go-isatty", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mattn/go-isatty@0.0.20", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.20" }, { "bom-ref": "pkg:golang/github.com/pires/go-proxyproto@0.11.0", "description": "Package proxyproto implements Proxy Protocol (v1 and v2) parser and writer, as per specification:\nhttps://www.haproxy.org/download/2.3/doc/proxy-protocol.txt", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/pires/go-proxyproto" }, { "type": "issue-tracker", "url": "https://github.com/pires/go-proxyproto/issues" }, { "type": "vcs", "url": "git+https://github.com/pires/go-proxyproto" }, { "type": "website", "url": "https://github.com/pires/go-proxyproto" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "go-proxyproto", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/pires/go-proxyproto@0.11.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.11.0" }, { "bom-ref": "pkg:golang/github.com/mitchellh/go-ps@1.0.0", "description": "ps provides an API for finding and listing processes in a platform-agnostic\nway.\n\nNOTE: If you're reading these docs online via GoDocs or some other system,\nyou might only see the Unix docs. This project makes heavy use of\nplatform-specific implementations. We recommend reading the source if you\nare interested.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mitchellh/go-ps" }, { "type": "issue-tracker", "url": "https://github.com/mitchellh/go-ps/issues" }, { "type": "vcs", "url": "git+https://github.com/mitchellh/go-ps" }, { "type": "website", "url": "https://github.com/mitchellh/go-ps" } ], "licenses": [ { "expression": "MIT" } ], "name": "go-ps", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mitchellh/go-ps@1.0.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.0" }, { "bom-ref": "pkg:golang/github.com/google/go-tpm@0.9.8", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/google/go-tpm" }, { "type": "issue-tracker", "url": "https://github.com/google/go-tpm/issues" }, { "type": "vcs", "url": "git+https://github.com/google/go-tpm" }, { "type": "website", "url": "https://github.com/google/go-tpm" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "go-tpm", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/google/go-tpm@0.9.8", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.9.8" }, { "bom-ref": "pkg:golang/github.com/google/go-tspi@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/google/go-tspi" }, { "type": "issue-tracker", "url": "https://github.com/google/go-tspi/issues" }, { "type": "vcs", "url": "git+https://github.com/google/go-tspi" }, { "type": "website", "url": "https://github.com/google/go-tspi" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "go-tspi", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/google/go-tspi@0.3.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.3.0" }, { "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@0.0.0-20191010083416-a7dc8b61c822", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/munnerz/goautoneg" }, { "type": "issue-tracker", "url": "https://github.com/munnerz/goautoneg/issues" }, { "type": "vcs", "url": "git+https://github.com/munnerz/goautoneg" }, { "type": "website", "url": "https://github.com/munnerz/goautoneg" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "goautoneg", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/munnerz/goautoneg@0.0.0-20191010083416-a7dc8b61c822", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20191010083416-a7dc8b61c822" }, { "bom-ref": "pkg:golang/github.com/yuin/goldmark@1.7.16", "description": "Package goldmark implements functions to convert markdown text to a desired format.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/yuin/goldmark" }, { "type": "issue-tracker", "url": "https://github.com/yuin/goldmark/issues" }, { "type": "vcs", "url": "git+https://github.com/yuin/goldmark" }, { "type": "website", "url": "https://github.com/yuin/goldmark" } ], "licenses": [ { "expression": "MIT" } ], "name": "goldmark", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/yuin/goldmark@1.7.16", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.7.16" }, { "bom-ref": "pkg:golang/github.com/masterminds/goutils@1.1.1", "description": "Package goutils provides utility functions to manipulate strings in various ways.\nThe code snippets below show examples of how to use goutils. Some functions return\nerrors while others do not, so usage would vary as a result.\n\nExample:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/masterminds/goutils" }, { "type": "issue-tracker", "url": "https://github.com/Masterminds/goutils/issues" }, { "type": "vcs", "url": "git+https://github.com/masterminds/goutils" }, { "type": "website", "url": "https://github.com/masterminds/goutils" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "goutils", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/masterminds/goutils@1.1.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.1.1" }, { "bom-ref": "pkg:golang/google.golang.org/grpc@1.80.0", "description": "Package grpc implements an RPC system called gRPC.\n\nSee grpc.io for more information about gRPC.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/google.golang.org/grpc" }, { "type": "issue-tracker", "url": "https://github.com/grpc/grpc-go/issues" }, { "type": "website", "url": "https://github.com/grpc/grpc-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "grpc", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/google.golang.org/grpc@1.80.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.80.0" }, { "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@1.0.4", "description": "Package httpsnoop provides an easy way to capture http related metrics (i.e.\nresponse time, bytes written, and http status code) from your application's\nhttp.Handlers.\n\nDoing this requires non-trivial wrapping of the http.ResponseWriter\ninterface, which is also exposed for users interested in a more low-level\nAPI.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/felixge/httpsnoop" }, { "type": "issue-tracker", "url": "https://github.com/felixge/httpsnoop/issues" }, { "type": "vcs", "url": "git+https://github.com/felixge/httpsnoop" }, { "type": "website", "url": "https://github.com/felixge/httpsnoop" } ], "licenses": [ { "expression": "MIT" } ], "name": "httpsnoop", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/felixge/httpsnoop@1.0.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.4" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/jaeger@1.40.0", "description": "Package jaeger implements the Jaeger propagator specification as defined at\nhttps://www.jaegertracing.io/docs/1.18/client-libraries/#propagation-format", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/propagators/jaeger" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go-contrib" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "jaeger", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/propagators/jaeger@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/github.com/libdns/libdns@1.1.1", "description": "Package libdns defines core interfaces that should be implemented by\npackages that interact with DNS provider clients. These interfaces are\nsmall and idiomatic Go interfaces with well-defined semantics for the\npurposes of reading and manipulating DNS records using DNS provider APIs.\n\nThis documentation uses the definitions for terms from RFC 9499:\nhttps://datatracker.ietf.org/doc/html/rfc9499\n\nThis package represents records with the Record interface, which is any\ntype that can transform itself into the RR struct. This interface is\nimplemented by the various record abstractions this package offers: RR\nstructs, where the data is serialized as a single opaque string as if in\na zone file, being a type-agnostic Resource Record (that is, a name,\ntype, class, TTL, and data); and individual RR-type structures, where the\ndata is parsed into its separate fields for easier manipulation by Go\nprograms (for example: SRV, TXT, and ServiceBinding types). This\nhybrid design grants great flexibility for both DNS provider packages and\nconsumer Go programs.\n\nRecord values should not be primitvely compared (==) unless they are RR,\nbecause other struct types contain maps, for which equality is not defined;\nadditionally, some packages may attach custom data to each RR struct-type's\n`ProviderData` field, whose values might not be comparable either. The\n`ProviderData` field is not portable across providers, or possibly even\nzones. Because it is not portable, and we want to ensure that RR structs\nremain both portable and comparable, the `RR()` method does not preserve\n`ProviderData` in its return value. Users of libdns packages should check\nthe documentation of provider packages, as some may use the `ProviderData`\nfield to reduce API calls / increase effiency. But implementations must\nnever rely on `ProviderData` for correctness if possible (and should\ndocument clearly otherwise).\n\nImplementations of the libdns interfaces should accept as input any Record\nvalue, and should return as output the concrete struct types that implement\nthe Record interface (i.e. Address, TXT, ServiceBinding, etc). This\nis important to ensure the provider libraries are robust and also predictable:\ncallers can reliably type-switch on the output to immediately access structured\ndata about each record without the possibility of errors. Returned values should\nbe of types defined by this package to make type-assertions reliable.\n\nRecords are described independently of any particular zone, a convention that\ngrants records portability across zones. As such, record names are partially\nqualified, i.e. relative to the zone. For example, a record called “sub” in\nzone “example.com.” represents a fully-qualified domain name (FQDN) of\n“sub.example.com.”. Implementations should expect that input records conform\nto this standard, while also ensuring that output records do; adjustments to\nrecord names may need to be made before or after provider API calls, for example,\nto maintain consistency with all other libdns packages. Helper functions are\navailable in this package to convert between relative and absolute names;\nsee RelativeName and AbsoluteName.\n\nAlthough zone names are a required input, libdns does not coerce any\nparticular representation of DNS zones; only records. Since zone name and\nrecords are separate inputs in libdns interfaces, it is up to the caller to\nmaintain the pairing between a zone's name and its records.\n\nAll interface implementations must be safe for concurrent/parallel use,\nmeaning 1) no data races, and 2) simultaneous method calls must result in\neither both their expected outcomes or an error. For example, if\nlibdns.RecordAppender.AppendRecords is called simultaneously, and two API\nrequests are made to the provider at the same time, the result of both requests\nmust be visible after they both complete; if the provider does not synchronize\nthe writing of the zone file and one request overwrites the other, then the\nclient implementation must take care to synchronize on behalf of the incompetent\nprovider. This synchronization need not be global; for example:...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/libdns/libdns" }, { "type": "issue-tracker", "url": "https://github.com/libdns/libdns/issues" }, { "type": "vcs", "url": "git+https://github.com/libdns/libdns" }, { "type": "website", "url": "https://github.com/libdns/libdns" } ], "licenses": [ { "expression": "MIT" } ], "name": "libdns", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/libdns/libdns@1.1.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.1.1" }, { "bom-ref": "pkg:golang/github.com/smallstep/linkedca@0.25.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/linkedca" }, { "type": "issue-tracker", "url": "https://github.com/smallstep/linkedca/issues" }, { "type": "vcs", "url": "git+https://github.com/smallstep/linkedca" }, { "type": "website", "url": "https://github.com/smallstep/linkedca" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "linkedca", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/linkedca@0.25.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.25.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/log@0.19.0", "description": "Package log provides the OpenTelemetry Logs API.\n\nThis package is intended to be used by bridges between existing logging\nlibraries and OpenTelemetry. Users should not directly use this package as a\nlogging library. Instead, install one of the bridges listed in the\nregistry, and use the associated logging library.\n\nThis package does not conform to the standard Go versioning policy, all of its\ninterfaces may have methods added to them without a package major version bump.\nThis non-standard API evolution could surprise an uninformed implementation\nauthor. They could unknowingly build their implementation in a way that would\nresult in a runtime panic for their users that update to the new API.\n\nThe API is designed to help inform an instrumentation author about this\nnon-standard API evolution. It requires them to choose a default behavior for\nunimplemented interface methods. There are three behavior choices they can\nmake:\n\nAll interfaces in this API embed a corresponding interface from\ngo.opentelemetry.io/otel/log/embedded. If an author wants the default\nbehavior of their implementations to be a compilation failure, signaling to\ntheir users they need to update to the latest version of that implementation,\nthey need to embed the corresponding interface from\ngo.opentelemetry.io/otel/log/embedded in their implementation. For example,\n\nIf an author wants the default behavior of their implementations to a panic,\nthey need to embed the API interface directly.\n\nThis is not a recommended behavior as it could lead to publishing packages that\ncontain runtime panics when users update other package that use newer versions\nof go.opentelemetry.io/otel/log.\n\nFinally, an author can embed another implementation in theirs. The embedded\nimplementation will be used for methods not defined by the author. For example,\nan author who wants to default to silently dropping the call can use\ngo.opentelemetry.io/otel/log/noop:\n\nIt is strongly recommended that authors only embed\ngo.opentelemetry.io/otel/log/noop if they choose this default behavior. That\nimplementation is the only one OpenTelemetry authors can guarantee will fully\nimplement all the API interfaces when a user updates their API.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/log" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "log", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/log@0.19.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.19.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk/log@0.19.0", "description": "Package log provides the OpenTelemetry Logs SDK.\n\nSee https://opentelemetry.io/docs/concepts/signals/logs/ for information\nabout the concept of OpenTelemetry Logs and\nhttps://opentelemetry.io/docs/concepts/components/ for more information\nabout OpenTelemetry SDKs.\n\nThe entry point for the log package is NewLoggerProvider.\nLoggerProvider is the object that all Bridge API calls use to create\nLoggers, and ultimately emit log records.\nAlso, it is an object that should be used to\ncontrol the life-cycle (start, flush, and shutdown) of the Logs SDK.\n\nA LoggerProvider needs to be configured to process the log records, this is\ndone by configuring it with a Processor implementation using WithProcessor.\nThe log package provides the BatchProcessor and SimpleProcessor\nthat are configured with an Exporter implementation which\nexports the log records to given destination. See\ngo.opentelemetry.io/otel/exporters for exporters that can be used with these\nProcessors.\n\nThe data generated by a LoggerProvider needs to include information about its\norigin. A LoggerProvider needs to be configured with a Resource, by using\nWithResource, to include this information. This Resource\nshould be used to describe the unique runtime environment instrumented code\nis being run on. That way when multiple instances of the code are collected\nat a single endpoint their origin is decipherable.\n\nSee go.opentelemetry.io/otel/log for more information about\nthe OpenTelemetry Logs API.\n\nInitialize OpenTelemetry Logs SDK and setup logging using a log bridge.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/sdk/log" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "log", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/log@0.19.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.19.0" }, { "bom-ref": "pkg:golang/github.com/go-logr/logr@1.4.3", "description": "Package logr defines a general-purpose logging API and abstract interfaces\nto back that API. Packages in the Go ecosystem can depend on this package,\nwhile callers can implement logging with whatever backend is appropriate.\n\nLogging is done using a Logger instance. Logger is a concrete type with\nmethods, which defers the actual logging to a LogSink interface. The main\nmethods of Logger are Info() and Error(). Arguments to Info() and Error()\nare key/value pairs rather than printf-style formatted strings, emphasizing\n\"structured logging\".\n\nWith Go's standard log package, we might write:\n\nWith logr's structured logging, we'd write:\n\nErrors are much the same. Instead of:\n\nWe'd write:\n\nInfo() and Error() are very similar, but they are separate methods so that\nLogSink implementations can choose to do things like attach additional\ninformation (such as stack traces) on calls to Error(). Error() messages are\nalways logged, regardless of the current verbosity. If there is no error\ninstance available, passing nil is valid.\n\nOften we want to log information only when the application in \"verbose\nmode\". To write log lines that are more verbose, Logger has a V() method.\nThe higher the V-level of a log line, the less critical it is considered.\nLog-lines with V-levels that are not enabled (as per the LogSink) will not\nbe written. Level V(0) is the default, and logger.V(0).Info() has the same\nmeaning as logger.Info(). Negative V-levels have the same meaning as V(0).\nError messages do not have a verbosity level and are always logged.\n\nWhere we might have written:\n\nWe can write:\n\nLogger instances can have name strings so that all messages logged through\nthat instance have additional context. For example, you might want to add\na subsystem name:\n\nThe WithName() method returns a new Logger, which can be passed to\nconstructors or other functions for further use. Repeated use of WithName()\nwill accumulate name \"segments\". These name segments will be joined in some\nway by the LogSink implementation. It is strongly recommended that name\nsegments contain simple identifiers (letters, digits, and hyphen), and do\nnot contain characters that could muddle the log output or confuse the\njoining operation (e.g. whitespace, commas, periods, slashes, brackets,\nquotes, etc).\n\nLogger instances can store any number of key/value pairs, which will be\nlogged alongside all messages logged through that instance. For example,\nyou might want to create a Logger instance per managed object:\n\nWith the standard log package, we might write:\n\nWith logr we'd write:\n\nLogger has very few hard rules, with the goal that LogSink implementations\nmight have a lot of freedom to differentiate. There are, however, some\nthings to consider.\n\nThe log message consists of a constant message attached to the log line.\nThis should generally be a simple description of what's occurring, and should\nnever be a format string. Variable information can then be attached using\nnamed values.\n\nKeys are arbitrary strings, but should generally be constant values. Values\nmay be any Go value, but how the value is formatted is determined by the\nLogSink implementation.\n\nLogger instances are meant to be passed around by value. Code that receives\nsuch a value can call its methods without having to check whether the\ninstance is ready for use.\n\nThe zero logger (= Logger{}) is identical to Discard() and discards all log\nentries. Code that receives a Logger by value can simply call it, the methods\nwill never crash. For cases where passing a logger is optional, a pointer to Logger\nshould be used.\n\nKeys are not strictly required to conform to any specification or regex, but\nit is recommended that they:\n\nThese guidelines help ensure that log data is processed properly regardless\nof the log implementation. For example, log implementations will try to\noutput JSON data or will store data for later database (e.g. SQL) queries.\n\nWhile users are generally free to use key names of their choice, it's\ngenerally best to avoid using the following keys, as they're frequently used\nby...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/go-logr/logr" }, { "type": "issue-tracker", "url": "https://github.com/go-logr/logr/issues" }, { "type": "vcs", "url": "git+https://github.com/go-logr/logr" }, { "type": "website", "url": "https://github.com/go-logr/logr" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "logr", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/go-logr/logr@1.4.3", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.4.3" }, { "bom-ref": "pkg:golang/github.com/sirupsen/logrus@1.9.4", "description": "Package logrus is a structured logger for Go, completely API compatible with the standard library logger.\n\nThe simplest way to use Logrus is simply the package-level exported logger:\n\nOutput:\n\nFor a full guide visit https://github.com/sirupsen/logrus\n\n\nAn example on how to use a hook", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/sirupsen/logrus" }, { "type": "issue-tracker", "url": "https://github.com/sirupsen/logrus/issues" }, { "type": "vcs", "url": "git+https://github.com/sirupsen/logrus" }, { "type": "website", "url": "https://github.com/sirupsen/logrus" } ], "licenses": [ { "expression": "MIT" } ], "name": "logrus", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/sirupsen/logrus@1.9.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.9.4" }, { "bom-ref": "pkg:golang/github.com/pbnjay/memory@0.0.0-20210728143218-7b4eea64cf58", "description": "Package memory provides a single method reporting total system memory\naccessible to the kernel.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/pbnjay/memory" }, { "type": "issue-tracker", "url": "https://github.com/pbnjay/memory/issues" }, { "type": "vcs", "url": "git+https://github.com/pbnjay/memory" }, { "type": "website", "url": "https://github.com/pbnjay/memory" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "memory", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/pbnjay/memory@0.0.0-20210728143218-7b4eea64cf58", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20210728143218-7b4eea64cf58" }, { "bom-ref": "pkg:golang/dario.cat/mergo@1.0.2", "description": "A helper to merge structs and maps in Golang. Useful for configuration default values, avoiding messy if-statements.\n\nMergo merges same-type structs and maps by setting default values in zero-value fields. Mergo won't merge unexported (private) fields. It will do recursively any exported one. It also won't merge structs inside maps (because they are not addressable using Go reflection).\n\nIt is ready for production use. It is used in several projects by Docker, Google, The Linux Foundation, VMWare, Shopify, etc.\n\n1.0.0\n\nIn 1.0.0 Mergo moves to a vanity URL `dario.cat/mergo`.\n\n0.3.9\n\nPlease keep in mind that a problematic PR broke 0.3.9. We reverted it in 0.3.10. We consider 0.3.10 as stable but not bug-free. . Also, this version adds suppot for go modules.\n\nKeep in mind that in 0.3.2, Mergo changed Merge() and Map() signatures to support transformers. We added an optional/variadic argument so that it won't break the existing code.\n\nIf you were using Mergo before April 6th, 2015, please check your project works as intended after updating your local copy with go get -u dario.cat/mergo. I apologize for any issue caused by its previous behavior and any future bug that Mergo could cause in existing projects after the change (release 0.2.0).\n\nDo your usual installation procedure:\n\nYou can only merge same-type structs with exported fields initialized as zero value of their type and same-types maps. Mergo won't merge unexported (private) fields but will do recursively any exported one. It won't merge empty structs value as they are zero values too. Also, maps will be merged recursively except for structs inside maps (because they are not addressable using Go reflection).\n\nAlso, you can merge overwriting values using the transformer WithOverride.\n\nAdditionally, you can map a map[string]interface{} to a struct (and otherwise, from struct to map), following the same restrictions as in Merge(). Keys are capitalized to find each corresponding exported field.\n\nWarning: if you map a struct to map, it won't do it recursively. Don't expect Mergo to map struct members of your struct as map[string]interface{}. They will be just assigned as values.\n\nHere is a nice example:\n\nTransformers allow to merge specific types differently than in the default behavior. In other words, now you can customize how some types are merged. For example, time.Time is a struct; it doesn't have zero value but IsZero can return true because it has fields with zero value. How can we merge a non-zero time.Time?\n\nIf I can help you, you have an idea or you are using Mergo in your projects, don't hesitate to drop me a line (or a pull request): https://twitter.com/im_dario\n\nWritten by Dario Castañé: https://da.rio.hn\n\nBSD 3-Clause license, as Go language.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/dario.cat/mergo" }, { "type": "issue-tracker", "url": "https://github.com/darccio/mergo/issues" }, { "type": "website", "url": "https://github.com/imdario/mergo" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "mergo", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/dario.cat/mergo@1.0.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.2" }, { "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@0.9.0", "description": "Package metadata provides access to Google Compute Engine (GCE)\nmetadata and API service accounts.\n\nThis package is a wrapper around the GCE metadata service,\nas documented at https://cloud.google.com/compute/docs/metadata/overview.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/cloud.google.com/go/compute/metadata" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/google-cloud-go/issues" }, { "type": "website", "url": "https://github.com/googleapis/google-cloud-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "metadata", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/cloud.google.com/go/compute/metadata@0.9.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.9.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@1.43.0", "description": "Package metric provides the OpenTelemetry API used to measure metrics about\nsource code operation.\n\nThis API is separate from its implementation so the instrumentation built from\nit is reusable. See go.opentelemetry.io/otel/sdk/metric for the official\nOpenTelemetry implementation of this API.\n\nAll measurements made with this package are made via instruments. These\ninstruments are created by a Meter which itself is created by a\nMeterProvider. Applications need to accept a MeterProvider implementation\nas a starting point when instrumenting. This can be done directly, or by using\nthe OpenTelemetry global MeterProvider via GetMeterProvider. Using an\nappropriately named Meter from the accepted MeterProvider, instrumentation\ncan then be built from the Meter's instruments.\n\nEach instrument is designed to make measurements of a particular type. Broadly,\nall instruments fall into two overlapping logical categories: asynchronous or\nsynchronous, and int64 or float64.\n\nAll synchronous instruments (Int64Counter, Int64UpDownCounter,\nInt64Histogram, Float64Counter, Float64UpDownCounter, and\nFloat64Histogram) are used to measure the operation and performance of source\ncode during the source code execution. These instruments only make measurements\nwhen the source code they instrument is run.\n\nAll asynchronous instruments (Int64ObservableCounter,\nInt64ObservableUpDownCounter, Int64ObservableGauge,\nFloat64ObservableCounter, Float64ObservableUpDownCounter, and\nFloat64ObservableGauge) are used to measure metrics outside of the execution\nof source code. They are said to make \"observations\" via a callback function\ncalled once every measurement collection cycle.\n\nEach instrument is also grouped by the value type it measures. Either int64 or\nfloat64. The value being measured will dictate which instrument in these\ncategories to use.\n\nOutside of these two broad categories, instruments are described by the\nfunction they are designed to serve. All Counters (Int64Counter,\nFloat64Counter, Int64ObservableCounter, and Float64ObservableCounter) are\ndesigned to measure values that never decrease in value, but instead only\nincrementally increase in value. UpDownCounters (Int64UpDownCounter,\nFloat64UpDownCounter, Int64ObservableUpDownCounter, and\nFloat64ObservableUpDownCounter) on the other hand, are designed to measure\nvalues that can increase and decrease. When more information needs to be\nconveyed about all the synchronous measurements made during a collection cycle,\na Histogram (Int64Histogram and Float64Histogram) should be used. Finally,\nwhen just the most recent measurement needs to be conveyed about an\nasynchronous measurement, a Gauge (Int64ObservableGauge and\nFloat64ObservableGauge) should be used.\n\nSee the OpenTelemetry documentation for more information about instruments\nand their intended use.\n\nOpenTelemetry defines an instrument name syntax that restricts what\ninstrument names are allowed.\n\nInstrument names should ...\n\nTo ensure compatibility with observability platforms, all instruments created\nneed to conform to this syntax. Not all implementations of the API will validate\nthese names, it is the callers responsibility to ensure compliance.\n\nMeasurements are made by recording values and information about the values with\nan instrument. How these measurements are recorded depends on the instrument.\n\nMeasurements for synchronous instruments (Int64Counter, Int64UpDownCounter,\nInt64Histogram, Float64Counter, Float64UpDownCounter, and\nFloat64Histogram) are recorded using the instrument methods directly. All\ncounter instruments have an Add method that is used to measure an increment\nvalue, and all histogram instruments have a Record method to measure a data\npoint.\n\nAsynchronous instruments (Int64ObservableCounter,\nInt64ObservableUpDownCounter, Int64ObservableGauge,\nFloat64ObservableCounter, Float64ObservableUpDownCounter, and\nFloat64ObservableGauge) record measurements within a callback function. The\ncallback is registered with the Meter which ensures the callback is called once\nper collection cycle. A callback can be registered two ways: during...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/metric" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "metric", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/metric@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@1.43.0", "description": "Package metric provides an implementation of the OpenTelemetry metrics SDK.\n\nSee https://opentelemetry.io/docs/concepts/signals/metrics/ for information\nabout the concept of OpenTelemetry metrics and\nhttps://opentelemetry.io/docs/concepts/components/ for more information\nabout OpenTelemetry SDKs.\n\nThe entry point for the metric package is the MeterProvider. It is the\nobject that all API calls use to create Meters, instruments, and ultimately\nmake metric measurements. Also, it is an object that should be used to\ncontrol the life-cycle (start, flush, and shutdown) of the SDK.\n\nA MeterProvider needs to be configured to export the measured data, this is\ndone by configuring it with a Reader implementation (using the WithReader\nMeterProviderOption). Readers take two forms: ones that push to an endpoint\n(NewPeriodicReader), and ones that an endpoint pulls from. See\ngo.opentelemetry.io/otel/exporters for exporters that can be used as\nor with these Readers.\n\nEach Reader, when registered with the MeterProvider, can be augmented with a\nView. Views allow users that run OpenTelemetry instrumented code to modify\nthe generated data of that instrumentation.\n\nThe data generated by a MeterProvider needs to include information about its\norigin. A MeterProvider needs to be configured with a Resource, using the\nWithResource MeterProviderOption, to include this information. This Resource\nshould be used to describe the unique runtime environment instrumented code\nis being run on. That way when multiple instances of the code are collected\nat a single endpoint their origin is decipherable.\n\nTo avoid leaking memory, the SDK returns the same instrument for calls to\ncreate new instruments with the same Name, Unit, and Description.\nImportantly, callbacks provided using metric.WithFloat64Callback or\nmetric.WithInt64Callback will only apply for the first instrument created\nwith a given Name, Unit, and Description. Instead, use\nMeter.RegisterCallback and Registration.Unregister to add and remove\ncallbacks without leaking memory.\n\nCardinality refers to the number of unique attributes collected. High cardinality can lead to\nexcessive memory usage, increased storage costs, and backend performance issues.\n\nCurrently, the OpenTelemetry Go Metric SDK does not enforce a cardinality limit by default\n(note that this may change in a future release). Use WithCardinalityLimit to set the\ncardinality limit as desired.\n\nNew attribute sets are dropped when the cardinality limit is reached. The measurement of\nthese sets are aggregated into\na special attribute set containing attribute.Bool(\"otel.metric.overflow\", true).\nThis ensures total metric values (e.g., Sum, Count) remain correct for the\ncollection cycle, but information about the specific dropped sets\nis not preserved.\n\nRecommendations:\n\nFor performance reasons, the SDK does not guarantee that the order in which\nsynchronous measurements are made to the SDK is reflected in the collected\nmetric data. This means that even when a single goroutine makes sequential\nsynchronous measurements, it is possible for a later measurement to be\nincluded in the collected metric data when an earlier measurement is not.\nThis applies to measurements made to different instruments, or to different\nattribute sets on the same instrument. Sequential measurements made to the\nsame instrument and with the same attributes are guaranteed to preserve\nordering with respect to collection.\n\nAdditionally, the SDK does not guarantee that exemplars are always included\nin the same batch of metric data as the measurement they are associated\nwith.\n\nSee go.opentelemetry.io/otel/metric for more information about\nthe metric API.\n\nSee go.opentelemetry.io/otel/sdk/metric/internal/x for information about\nthe experimental features.\n\nTo enable metrics in your application using the SDK,\nyou'll need to have an initialized MeterProvider\nthat will let you create a go.opentelemetry.io/otel/metric.Meter.\n\nHere's how you might initialize a metrics provider.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/sdk/metric" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "metric", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/go.uber.org/multierr@1.11.0", "description": "Package multierr allows combining one or more errors together.\n\nErrors can be combined with the use of the Combine function.\n\nIf only two errors are being combined, the Append function may be used\ninstead.\n\nThe underlying list of errors for a returned error object may be retrieved\nwith the Errors function.\n\nYou sometimes need to append into an error from a loop.\n\nCases like this may require knowledge of whether an individual instance\nfailed. This usually requires introduction of a new variable.\n\nmultierr includes AppendInto to simplify cases like this.\n\nThis will append the error into the err variable, and return true if that\nindividual error was non-nil.\n\nSee AppendInto for more information.\n\nGo makes it possible to modify the return value of a function in a defer\nblock if the function was using named returns. This makes it possible to\nrecord resource cleanup failures from deferred blocks.\n\nmultierr provides the Invoker type and AppendInvoke function to make cases\nlike the above simpler and obviate the need for a closure. The following is\nroughly equivalent to the example above.\n\nSee AppendInvoke and Invoker for more information.\n\nNOTE: If you're modifying an error from inside a defer, you MUST use a named\nreturn value for that function.\n\nErrors returned by Combine and Append MAY implement the following\ninterface.\n\nNote that if you need access to list of errors behind a multierr error, you\nshould prefer using the Errors function. That said, if you need cheap\nread-only access to the underlying errors slice, you can attempt to cast\nthe error to this interface. You MUST handle the failure case gracefully\nbecause errors returned by Combine and Append are not guaranteed to\nimplement this interface.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.uber.org/multierr" }, { "type": "issue-tracker", "url": "https://github.com/uber-go/multierr/issues" }, { "type": "website", "url": "https://github.com/uber-go/multierr" } ], "licenses": [ { "expression": "MIT" } ], "name": "multierr", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.uber.org/multierr@1.11.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.11.0" }, { "bom-ref": "pkg:golang/github.com/slackhq/nebula@1.10.3", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/slackhq/nebula" }, { "type": "issue-tracker", "url": "https://github.com/slackhq/nebula/issues" }, { "type": "vcs", "url": "git+https://github.com/slackhq/nebula" }, { "type": "website", "url": "https://github.com/slackhq/nebula" } ], "licenses": [ { "expression": "MIT" } ], "name": "nebula", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/slackhq/nebula@1.10.3", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.10.3" }, { "bom-ref": "pkg:golang/golang.org/x/net@0.53.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/net" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/net" }, { "type": "website", "url": "https://cs.opensource.google/go/x/net" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "net", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/net@0.53.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.53.0" }, { "bom-ref": "pkg:golang/github.com/smallstep/nosql@0.8.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/nosql" }, { "type": "issue-tracker", "url": "https://github.com/smallstep/nosql/issues" }, { "type": "vcs", "url": "git+https://github.com/smallstep/nosql" }, { "type": "website", "url": "https://github.com/smallstep/nosql" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "nosql", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/nosql@0.8.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.8.0" }, { "bom-ref": "pkg:golang/golang.org/x/oauth2@0.36.0", "description": "Package oauth2 provides support for making\nOAuth2 authorized and authenticated HTTP requests,\nas specified in RFC 6749.\nIt can additionally grant authorization with Bearer JWT.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/oauth2" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/oauth2" }, { "type": "website", "url": "https://cs.opensource.google/go/x/oauth2" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "oauth2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/oauth2@0.36.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.36.0" }, { "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@0.2.8", "description": "Package oauth2adapt helps converts types used in cloud.google.com/go/auth\nand golang.org/x/oauth2.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/cloud.google.com/go/auth/oauth2adapt" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/google-cloud-go/issues" }, { "type": "website", "url": "https://github.com/googleapis/google-cloud-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "oauth2adapt", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@0.2.8", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.2.8" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/ot@1.40.0", "description": "Package ot implements the ot-tracer-* propagator used by the default Tracer\nimplementation from the OpenTracing project.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/propagators/ot" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go-contrib" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "ot", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/propagators/ot@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel@1.43.0", "description": "Package otel provides global access to the OpenTelemetry API. The subpackages of\nthe otel package provide an implementation of the OpenTelemetry API.\n\nThe provided API is used to instrument code and measure data about that code's\nperformance and operation. The measured data, by default, is not processed or\ntransmitted anywhere. An implementation of the OpenTelemetry SDK, like the\ndefault SDK implementation (go.opentelemetry.io/otel/sdk), and associated\nexporters are used to process and transport this data.\n\nTo read the getting started guide, see https://opentelemetry.io/docs/languages/go/getting-started/.\n\nTo read more about tracing, see go.opentelemetry.io/otel/trace.\n\nTo read more about metrics, see go.opentelemetry.io/otel/metric.\n\nTo read more about logs, see go.opentelemetry.io/otel/log.\n\nTo read more about propagation, see go.opentelemetry.io/otel/propagation and\ngo.opentelemetry.io/otel/baggage.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otel", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@0.65.0", "description": "Package otelhttp provides an http.Handler and functions that are intended\nto be used to add tracing by wrapping existing handlers.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go-contrib" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otelhttp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@0.65.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.65.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@1.10.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/proto/otlp" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-proto-go/issues" }, { "type": "vcs", "url": "https://pkg.go.dev/go.opentelemetry.io/proto/otlp@1.10.0" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-proto-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "otlp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@1.10.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.10.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@0.16.0", "description": "Package otlploggrpc provides an OTLP log exporter using gRPC. The exporter uses gRPC to\ntransport OTLP protobuf payloads.\n\nAll Exporters must be created with New.\n\nThe environment variables described below can be used for configuration.\n\nOTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_LOGS_ENDPOINT (default: \"https://localhost:4317\") -\ntarget to which the exporter sends telemetry.\nThe target syntax is defined in https://github.com/grpc/grpc/blob/master/doc/naming.md.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port, and a path.\nThe value should not contain a query string or fragment.\nOTEL_EXPORTER_OTLP_LOGS_ENDPOINT takes precedence over OTEL_EXPORTER_OTLP_ENDPOINT.\nThe configuration can be overridden by WithEndpoint, WithEndpointURL, WithInsecure, and WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_INSECURE, OTEL_EXPORTER_OTLP_LOGS_INSECURE (default: \"false\") -\nsetting \"true\" disables client transport security for the exporter's gRPC connection.\nYou can use this only when an endpoint is provided without scheme.\nOTEL_EXPORTER_OTLP_LOGS_INSECURE takes precedence over OTEL_EXPORTER_OTLP_INSECURE.\nThe configuration can be overridden by WithInsecure, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_LOGS_HEADERS (default: none) -\nkey-value pairs used as gRPC metadata associated with gRPC requests.\nThe value is expected to be represented in a format matching the W3C Baggage HTTP Header Content Format,\nexcept that additional semi-colon delimited metadata is not supported.\nExample value: \"key1=value1,key2=value2\".\nOTEL_EXPORTER_OTLP_LOGS_HEADERS takes precedence over OTEL_EXPORTER_OTLP_HEADERS.\nThe configuration can be overridden by WithHeaders option.\n\nOTEL_EXPORTER_OTLP_TIMEOUT, OTEL_EXPORTER_OTLP_LOGS_TIMEOUT (default: \"10000\") -\nmaximum time in milliseconds the OTLP exporter waits for each batch export.\nOTEL_EXPORTER_OTLP_LOGS_TIMEOUT takes precedence over OTEL_EXPORTER_OTLP_TIMEOUT.\nThe configuration can be overridden by WithTimeout option.\n\nOTEL_EXPORTER_OTLP_COMPRESSION, OTEL_EXPORTER_OTLP_LOGS_COMPRESSION (default: none) -\nthe gRPC compressor the exporter uses.\nSupported value: \"gzip\".\nOTEL_EXPORTER_OTLP_LOGS_COMPRESSION takes precedence over OTEL_EXPORTER_OTLP_COMPRESSION.\nThe configuration can be overridden by WithCompressor, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CERTIFICATE, OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE (default: none) -\nthe filepath to the trusted certificate to use when verifying a server's TLS credentials.\nOTEL_EXPORTER_OTLP_LOGS_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CERTIFICATE.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE, OTEL_EXPORTER_OTLP_LOGS_CLIENT_CERTIFICATE (default: none) -\nthe filepath to the client certificate/chain trust for client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_LOGS_CLIENT_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CLIENT_KEY, OTEL_EXPORTER_OTLP_LOGS_CLIENT_KEY (default: none) -\nthe filepath to the client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_LOGS_CLIENT_KEY takes precedence over OTEL_EXPORTER_OTLP_CLIENT_KEY.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn option.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "otlploggrpc", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@0.16.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.16.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@0.19.0", "description": "Package otlploghttp provides an OTLP log exporter. The exporter uses HTTP to\ntransport OTLP protobuf payloads.\n\nExporter should be created using New.\n\nThe environment variables described below can be used for configuration.\n\nOTEL_EXPORTER_OTLP_ENDPOINT (default: \"https://localhost:4318\") -\ntarget base URL (\"/v1/logs\" is appended) to which the exporter sends telemetry.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port and a path.\nThe value should not contain a query string or fragment.\nThe configuration can be overridden by OTEL_EXPORTER_OTLP_LOGS_ENDPOINT\nenvironment variable and by WithEndpoint, WithEndpointURL, WithInsecure options.\n\nOTEL_EXPORTER_OTLP_LOGS_ENDPOINT (default: \"https://localhost:4318/v1/logs\") -\ntarget URL to which the exporter sends telemetry.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port and a path.\nThe value should not contain a query string or fragment.\nThe configuration can be overridden by WithEndpoint, WithEndpointURL, WithInsecure, and WithURLPath options.\n\nOTEL_EXPORTER_OTLP_INSECURE, OTEL_EXPORTER_OTLP_LOGS_INSECURE (default: \"false\") -\nsetting \"true\" disables client transport security for the exporter's HTTP connection.\nOTEL_EXPORTER_OTLP_LOGS_INSECURE takes precedence over OTEL_EXPORTER_OTLP_INSECURE.\nThe configuration can be overridden by WithInsecure and WithTLSClientConfig options.\n\nOTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_LOGS_HEADERS (default: none) -\nkey-value pairs used as headers associated with HTTP requests.\nThe value is expected to be represented in a format matching the W3C Baggage HTTP Header Content Format,\nexcept that additional semi-colon delimited metadata is not supported.\nExample value: \"key1=value1,key2=value2\".\nOTEL_EXPORTER_OTLP_LOGS_HEADERS takes precedence over OTEL_EXPORTER_OTLP_HEADERS.\nThe configuration can be overridden by WithHeaders option.\n\nOTEL_EXPORTER_OTLP_TIMEOUT, OTEL_EXPORTER_OTLP_LOGS_TIMEOUT (default: \"10000\") -\nmaximum time in milliseconds the OTLP exporter waits for each batch export.\nOTEL_EXPORTER_OTLP_LOGS_TIMEOUT takes precedence over OTEL_EXPORTER_OTLP_TIMEOUT.\nThe configuration can be overridden by WithTimeout option.\n\nOTEL_EXPORTER_OTLP_COMPRESSION, OTEL_EXPORTER_OTLP_LOGS_COMPRESSION (default: none) -\nthe compression strategy the exporter uses to compress the HTTP body.\nSupported value: \"gzip\".\nOTEL_EXPORTER_OTLP_LOGS_COMPRESSION takes precedence over OTEL_EXPORTER_OTLP_COMPRESSION.\nThe configuration can be overridden by WithCompression option.\n\nOTEL_EXPORTER_OTLP_CERTIFICATE, OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE (default: none) -\nthe filepath to the trusted certificate to use when verifying a server's TLS credentials.\nOTEL_EXPORTER_OTLP_LOGS_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CERTIFICATE.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE, OTEL_EXPORTER_OTLP_LOGS_CLIENT_CERTIFICATE (default: none) -\nthe filepath to the client certificate/chain trust for client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_LOGS_CLIENT_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_CLIENT_KEY, OTEL_EXPORTER_OTLP_LOGS_CLIENT_KEY (default: none) -\nthe filepath to the client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_LOGS_CLIENT_KEY takes precedence over OTEL_EXPORTER_OTLP_CLIENT_KEY.\nThe configuration can be overridden by WithTLSClientConfig option.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otlploghttp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@0.19.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.19.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@1.40.0", "description": "Package otlpmetricgrpc provides an OTLP metrics exporter using gRPC.\nBy default the telemetry is sent to https://localhost:4317.\n\nExporter should be created using New and used with a metric.PeriodicReader.\n\nThe environment variables described below can be used for configuration.\n\nOTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_METRICS_ENDPOINT (default: \"https://localhost:4317\") -\ntarget to which the exporter sends telemetry.\nThe target syntax is defined in https://github.com/grpc/grpc/blob/master/doc/naming.md.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port, and a path.\nThe value should not contain a query string or fragment.\nOTEL_EXPORTER_OTLP_METRICS_ENDPOINT takes precedence over OTEL_EXPORTER_OTLP_ENDPOINT.\nThe configuration can be overridden by WithEndpoint, WithEndpointURL, WithInsecure, and WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_INSECURE, OTEL_EXPORTER_OTLP_METRICS_INSECURE (default: \"false\") -\nsetting \"true\" disables client transport security for the exporter's gRPC connection.\nYou can use this only when an endpoint is provided without the http or https scheme.\nOTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_METRICS_ENDPOINT setting overrides\nthe scheme defined via OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_METRICS_ENDPOINT.\nOTEL_EXPORTER_OTLP_METRICS_INSECURE takes precedence over OTEL_EXPORTER_OTLP_INSECURE.\nThe configuration can be overridden by WithInsecure, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_METRICS_HEADERS (default: none) -\nkey-value pairs used as gRPC metadata associated with gRPC requests.\nThe value is expected to be represented in a format matching the W3C Baggage HTTP Header Content Format,\nexcept that additional semi-colon delimited metadata is not supported.\nExample value: \"key1=value1,key2=value2\".\nOTEL_EXPORTER_OTLP_METRICS_HEADERS takes precedence over OTEL_EXPORTER_OTLP_HEADERS.\nThe configuration can be overridden by WithHeaders option.\n\nOTEL_EXPORTER_OTLP_TIMEOUT, OTEL_EXPORTER_OTLP_METRICS_TIMEOUT (default: \"10000\") -\nmaximum time in milliseconds the OTLP exporter waits for each batch export.\nOTEL_EXPORTER_OTLP_METRICS_TIMEOUT takes precedence over OTEL_EXPORTER_OTLP_TIMEOUT.\nThe configuration can be overridden by WithTimeout option.\n\nOTEL_EXPORTER_OTLP_COMPRESSION, OTEL_EXPORTER_OTLP_METRICS_COMPRESSION (default: none) -\nthe gRPC compressor the exporter uses.\nSupported value: \"gzip\".\nOTEL_EXPORTER_OTLP_METRICS_COMPRESSION takes precedence over OTEL_EXPORTER_OTLP_COMPRESSION.\nThe configuration can be overridden by WithCompressor, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CERTIFICATE, OTEL_EXPORTER_OTLP_METRICS_CERTIFICATE (default: none) -\nthe filepath to the trusted certificate to use when verifying a server's TLS credentials.\nOTEL_EXPORTER_OTLP_METRICS_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CERTIFICATE.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE, OTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATE (default: none) -\nthe filepath to the client certificate/chain trust for client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CLIENT_KEY, OTEL_EXPORTER_OTLP_METRICS_CLIENT_KEY (default: none) -\nthe filepath to the client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_METRICS_CLIENT_KEY takes precedence over OTEL_EXPORTER_OTLP_CLIENT_KEY.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn option.\n\nOTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE (default: \"cumulative\") -\naggregation temporality to use on the basis of instrument kind. Supported values:\n\nThe configuration can be overridden by WithTemporalitySelector option.\n\nOTEL_EXPORTER_OTLP_METRICS_DEFAULT_HISTOGRAM_AGGREGATION (default: \"explicit_bucket_histogram\") -\ndefault aggregation to use...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otlpmetricgrpc", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@1.43.0", "description": "Package otlpmetrichttp provides an OTLP metrics exporter using HTTP with protobuf payloads.\nBy default the telemetry is sent to https://localhost:4318/v1/metrics.\n\nExporter should be created using New and used with a metric.PeriodicReader.\n\nThe environment variables described below can be used for configuration.\n\nOTEL_EXPORTER_OTLP_ENDPOINT (default: \"https://localhost:4318\") -\ntarget base URL (\"/v1/metrics\" is appended) to which the exporter sends telemetry.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port and a path.\nThe value should not contain a query string or fragment.\nThe configuration can be overridden by OTEL_EXPORTER_OTLP_METRICS_ENDPOINT\nenvironment variable and by WithEndpoint, WithEndpointURL, and WithInsecure options.\n\nOTEL_EXPORTER_OTLP_METRICS_ENDPOINT (default: \"https://localhost:4318/v1/metrics\") -\ntarget URL to which the exporter sends telemetry.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port and a path.\nThe value should not contain a query string or fragment.\nThe configuration can be overridden by WithEndpoint, WithEndpointURL, WithInsecure, and WithURLPath options.\n\nOTEL_EXPORTER_OTLP_INSECURE, OTEL_EXPORTER_OTLP_METRICS_INSECURE (default: \"false\") -\nsetting \"true\" disables client transport security for the exporter's HTTP connection.\nOTEL_EXPORTER_OTLP_METRICS_INSECURE takes precedence over OTEL_EXPORTER_OTLP_INSECURE.\nThe configuration can be overridden by WithInsecure and WithTLSClientConfig options.\n\nOTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_METRICS_HEADERS (default: none) -\nkey-value pairs used as headers associated with HTTP requests.\nThe value is expected to be represented in a format matching the W3C Baggage HTTP Header Content Format,\nexcept that additional semi-colon delimited metadata is not supported.\nExample value: \"key1=value1,key2=value2\".\nOTEL_EXPORTER_OTLP_METRICS_HEADERS takes precedence over OTEL_EXPORTER_OTLP_HEADERS.\nThe configuration can be overridden by WithHeaders option.\n\nOTEL_EXPORTER_OTLP_TIMEOUT, OTEL_EXPORTER_OTLP_METRICS_TIMEOUT (default: \"10000\") -\nmaximum time in milliseconds the OTLP exporter waits for each batch export.\nOTEL_EXPORTER_OTLP_METRICS_TIMEOUT takes precedence over OTEL_EXPORTER_OTLP_TIMEOUT.\nThe configuration can be overridden by WithTimeout option.\n\nOTEL_EXPORTER_OTLP_COMPRESSION, OTEL_EXPORTER_OTLP_METRICS_COMPRESSION (default: none) -\ncompression strategy the exporter uses to compress the HTTP body.\nSupported values: \"gzip\".\nOTEL_EXPORTER_OTLP_METRICS_COMPRESSION takes precedence over OTEL_EXPORTER_OTLP_COMPRESSION.\nThe configuration can be overridden by WithCompression option.\n\nOTEL_EXPORTER_OTLP_CERTIFICATE, OTEL_EXPORTER_OTLP_METRICS_CERTIFICATE (default: none) -\nfilepath to the trusted certificate to use when verifying a server's TLS credentials.\nOTEL_EXPORTER_OTLP_METRICS_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CERTIFICATE.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE, OTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATE (default: none) -\nfilepath to the client certificate/chain trust for client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_CLIENT_KEY, OTEL_EXPORTER_OTLP_METRICS_CLIENT_KEY (default: none) -\nfilepath to the client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_METRICS_CLIENT_KEY takes precedence over OTEL_EXPORTER_OTLP_CLIENT_KEY.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE (default: \"cumulative\") -\naggregation temporality to use on the basis of instrument kind. Supported values:\n\nThe configuration can be overridden by WithTemporalitySelector option.\n\nOTEL_EXPORTER_OTLP_METRICS_DEFAULT_HISTOGRAM_AGGREGATION (default:...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otlpmetrichttp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@1.43.0", "description": "Package otlptrace contains abstractions for OTLP span exporters.\nSee the official OTLP span exporter implementations:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlptrace" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otlptrace", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.40.0", "description": "Package otlptracegrpc provides an OTLP span exporter using gRPC.\nBy default the telemetry is sent to https://localhost:4317.\n\nExporter should be created using New.\n\nThe environment variables described below can be used for configuration.\n\nOTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_TRACES_ENDPOINT (default: \"https://localhost:4317\") -\ntarget to which the exporter sends telemetry.\nThe target syntax is defined in https://github.com/grpc/grpc/blob/master/doc/naming.md.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port, and a path.\nThe value should not contain a query string or fragment.\nOTEL_EXPORTER_OTLP_TRACES_ENDPOINT takes precedence over OTEL_EXPORTER_OTLP_ENDPOINT.\nThe configuration can be overridden by WithEndpoint, WithEndpointURL, WithInsecure, and WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_INSECURE, OTEL_EXPORTER_OTLP_TRACES_INSECURE (default: \"false\") -\nsetting \"true\" disables client transport security for the exporter's gRPC connection.\nYou can use this only when an endpoint is provided without the http or https scheme.\nOTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_TRACES_ENDPOINT setting overrides\nthe scheme defined via OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_TRACES_ENDPOINT.\nOTEL_EXPORTER_OTLP_TRACES_INSECURE takes precedence over OTEL_EXPORTER_OTLP_INSECURE.\nThe configuration can be overridden by WithInsecure, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_TRACES_HEADERS (default: none) -\nkey-value pairs used as gRPC metadata associated with gRPC requests.\nThe value is expected to be represented in a format matching the W3C Baggage HTTP Header Content Format,\nexcept that additional semi-colon delimited metadata is not supported.\nExample value: \"key1=value1,key2=value2\".\nOTEL_EXPORTER_OTLP_TRACES_HEADERS takes precedence over OTEL_EXPORTER_OTLP_HEADERS.\nThe configuration can be overridden by WithHeaders option.\n\nOTEL_EXPORTER_OTLP_TIMEOUT, OTEL_EXPORTER_OTLP_TRACES_TIMEOUT (default: \"10000\") -\nmaximum time in milliseconds the OTLP exporter waits for each batch export.\nOTEL_EXPORTER_OTLP_TRACES_TIMEOUT takes precedence over OTEL_EXPORTER_OTLP_TIMEOUT.\nThe configuration can be overridden by WithTimeout option.\n\nOTEL_EXPORTER_OTLP_COMPRESSION, OTEL_EXPORTER_OTLP_TRACES_COMPRESSION (default: none) -\nthe gRPC compressor the exporter uses.\nSupported value: \"gzip\".\nOTEL_EXPORTER_OTLP_TRACES_COMPRESSION takes precedence over OTEL_EXPORTER_OTLP_COMPRESSION.\nThe configuration can be overridden by WithCompressor, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CERTIFICATE, OTEL_EXPORTER_OTLP_TRACES_CERTIFICATE (default: none) -\nthe filepath to the trusted certificate to use when verifying a server's TLS credentials.\nOTEL_EXPORTER_OTLP_TRACES_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CERTIFICATE.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE, OTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATE (default: none) -\nthe filepath to the client certificate/chain trust for client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn options.\n\nOTEL_EXPORTER_OTLP_CLIENT_KEY, OTEL_EXPORTER_OTLP_TRACES_CLIENT_KEY (default: none) -\nthe filepath to the client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_TRACES_CLIENT_KEY takes precedence over OTEL_EXPORTER_OTLP_CLIENT_KEY.\nThe configuration can be overridden by WithTLSCredentials, WithGRPCConn option.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otlptracegrpc", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.43.0", "description": "Package otlptracehttp provides an OTLP span exporter using HTTP with protobuf payloads.\nBy default the telemetry is sent to https://localhost:4318/v1/traces.\n\nExporter should be created using New.\n\nThe environment variables described below can be used for configuration.\n\nOTEL_EXPORTER_OTLP_ENDPOINT (default: \"https://localhost:4318\") -\ntarget base URL (\"/v1/traces\" is appended) to which the exporter sends telemetry.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port and a path.\nThe value should not contain a query string or fragment.\nThe configuration can be overridden by OTEL_EXPORTER_OTLP_TRACES_ENDPOINT\nenvironment variable and by WithEndpoint, WithEndpointURL, WithInsecure options.\n\nOTEL_EXPORTER_OTLP_TRACES_ENDPOINT (default: \"https://localhost:4318/v1/traces\") -\ntarget URL to which the exporter sends telemetry.\nThe value must contain a scheme (\"http\" or \"https\") and host.\nThe value may additionally contain a port and a path.\nThe value should not contain a query string or fragment.\nThe configuration can be overridden by WithEndpoint, WithEndpointURL, WithInsecure, and WithURLPath options.\n\nOTEL_EXPORTER_OTLP_INSECURE, OTEL_EXPORTER_OTLP_TRACES_INSECURE (default: \"false\") -\nsetting \"true\" disables client transport security for the exporter's HTTP connection.\nOTEL_EXPORTER_OTLP_TRACES_INSECURE takes precedence over OTEL_EXPORTER_OTLP_INSECURE.\nThe configuration can be overridden by WithInsecure and WithTLSClientConfig options.\n\nOTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_TRACES_HEADERS (default: none) -\nkey-value pairs used as headers associated with HTTP requests.\nThe value is expected to be represented in a format matching the W3C Baggage HTTP Header Content Format,\nexcept that additional semi-colon delimited metadata is not supported.\nExample value: \"key1=value1,key2=value2\".\nOTEL_EXPORTER_OTLP_TRACES_HEADERS takes precedence over OTEL_EXPORTER_OTLP_HEADERS.\nThe configuration can be overridden by WithHeaders option.\n\nOTEL_EXPORTER_OTLP_TIMEOUT, OTEL_EXPORTER_OTLP_TRACES_TIMEOUT (default: \"10000\") -\nmaximum time in milliseconds the OTLP exporter waits for each batch export.\nOTEL_EXPORTER_OTLP_TRACES_TIMEOUT takes precedence over OTEL_EXPORTER_OTLP_TIMEOUT.\nThe configuration can be overridden by WithTimeout option.\n\nOTEL_EXPORTER_OTLP_COMPRESSION, OTEL_EXPORTER_OTLP_TRACES_COMPRESSION (default: none) -\nthe compression strategy the exporter uses to compress the HTTP body.\nSupported value: \"gzip\".\nOTEL_EXPORTER_OTLP_TRACES_COMPRESSION takes precedence over OTEL_EXPORTER_OTLP_COMPRESSION.\nThe configuration can be overridden by WithCompression option.\n\nOTEL_EXPORTER_OTLP_CERTIFICATE, OTEL_EXPORTER_OTLP_TRACES_CERTIFICATE (default: none) -\nthe filepath to the trusted certificate to use when verifying a server's TLS credentials.\nOTEL_EXPORTER_OTLP_TRACES_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CERTIFICATE.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE, OTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATE (default: none) -\nthe filepath to the client certificate/chain trust for client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATE takes precedence over OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE.\nThe configuration can be overridden by WithTLSClientConfig option.\n\nOTEL_EXPORTER_OTLP_CLIENT_KEY, OTEL_EXPORTER_OTLP_TRACES_CLIENT_KEY (default: none) -\nthe filepath to the client's private key to use in mTLS communication in PEM format.\nOTEL_EXPORTER_OTLP_TRACES_CLIENT_KEY takes precedence over OTEL_EXPORTER_OTLP_CLIENT_KEY.\nThe configuration can be overridden by WithTLSClientConfig option.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "vcs", "url": "git+https://github.com/open-telemetry/opentelemetry-go" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "otlptracehttp", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/github.com/prometheus/otlptranslator@1.0.0", "description": "Copyright 2025 The Prometheus Authors\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\nhttp://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n\nPackage otlptranslator provides utilities for converting OpenTelemetry Protocol (OTLP)\nmetric and attribute names to Prometheus-compliant formats.\n\nThis package is designed to help users translate OpenTelemetry metrics to Prometheus\nmetrics while following the official OpenTelemetry to Prometheus compatibility specification.\n\nMain components:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/prometheus/otlptranslator" }, { "type": "issue-tracker", "url": "https://github.com/prometheus/otlptranslator/issues" }, { "type": "vcs", "url": "git+https://github.com/prometheus/otlptranslator" }, { "type": "website", "url": "https://github.com/prometheus/otlptranslator" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "otlptranslator", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/prometheus/otlptranslator@1.0.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.0" }, { "bom-ref": "pkg:golang/github.com/beorn7/perks@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/beorn7/perks" }, { "type": "vcs", "url": "git+https://github.com/beorn7/perks" }, { "type": "website", "url": "https://github.com/beorn7/perks" } ], "licenses": [ { "expression": "MIT" } ], "name": "perks", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/beorn7/perks@1.0.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.1" }, { "bom-ref": "pkg:golang/github.com/spf13/pflag@1.0.10", "description": "Package pflag is a drop-in replacement for Go's flag package, implementing\nPOSIX/GNU-style --flags.\n\npflag is compatible with the GNU extensions to the POSIX recommendations\nfor command-line options. See\nhttp://www.gnu.org/software/libc/manual/html_node/Argument-Syntax.html\n\nUsage:\n\npflag is a drop-in replacement of Go's native flag package. If you import\npflag under the name \"flag\" then all code should continue to function\nwith no changes.\n\nThere is one exception to this: if you directly instantiate the Flag struct\nthere is one more field \"Shorthand\" that you will need to set.\nMost code never instantiates this struct directly, and instead uses\nfunctions such as String(), BoolVar(), and Var(), and is therefore\nunaffected.\n\nDefine flags using flag.String(), Bool(), Int(), etc.\n\nThis declares an integer flag, -flagname, stored in the pointer ip, with type *int.\n\nIf you like, you can bind the flag to a variable using the Var() functions.\n\nOr you can create custom flags that satisfy the Value interface (with\npointer receivers) and couple them to flag parsing by\n\nFor such flags, the default value is just the initial value of the variable.\n\nAfter all flags are defined, call\n\nto parse the command line into the defined flags.\n\nFlags may then be used directly. If you're using the flags themselves,\nthey are all pointers; if you bind to variables, they're values.\n\nAfter parsing, the arguments after the flag are available as the\nslice flag.Args() or individually as flag.Arg(i).\nThe arguments are indexed from 0 through flag.NArg()-1.\n\nThe pflag package also defines some new functions that are not in flag,\nthat give one-letter shorthands for flags. You can use these by appending\n'P' to the name of any function that defines a flag.\n\nShorthand letters can be used with single dashes on the command line.\nBoolean shorthand flags can be combined with other shorthand flags.\n\nCommand line flag syntax:\n\nUnlike the flag package, a single dash before an option means something\ndifferent than a double dash. Single dashes signify a series of shorthand\nletters for flags. All but the last shorthand letter must be boolean flags.\n\nFlag parsing stops after the terminator \"--\". Unlike the flag package,\nflags can be interspersed with arguments anywhere on the command line\nbefore this terminator.\n\nInteger flags accept 1234, 0664, 0x1234 and may be negative.\nBoolean flags (in their long form) accept 1, 0, t, f, true, false,\nTRUE, FALSE, True, False.\nDuration flags accept any input valid for time.ParseDuration.\n\nThe default set of command-line flags is controlled by\ntop-level functions. The FlagSet type allows one to define\nindependent sets of flags, such as to implement subcommands\nin a command-line interface. The methods of FlagSet are\nanalogous to the top-level functions for the command-line\nflag set.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/spf13/pflag" }, { "type": "issue-tracker", "url": "https://github.com/spf13/pflag/issues" }, { "type": "vcs", "url": "git+https://github.com/spf13/pflag" }, { "type": "website", "url": "https://github.com/spf13/pflag" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "pflag", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/spf13/pflag@1.0.10", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.10" }, { "bom-ref": "pkg:golang/github.com/jackc/pgpassfile@1.0.0", "description": "Package pgpassfile is a parser PostgreSQL .pgpass files.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/jackc/pgpassfile" }, { "type": "issue-tracker", "url": "https://github.com/jackc/pgpassfile/issues" }, { "type": "vcs", "url": "git+https://github.com/jackc/pgpassfile" }, { "type": "website", "url": "https://github.com/jackc/pgpassfile" } ], "licenses": [ { "expression": "MIT" } ], "name": "pgpassfile", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/jackc/pgpassfile@1.0.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.0" }, { "bom-ref": "pkg:golang/github.com/jackc/pgservicefile@0.0.0-20240606120523-5a60cdf6a761", "description": "Package pgservicefile is a parser for PostgreSQL service files (e.g. .pg_service.conf).", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/jackc/pgservicefile" }, { "type": "issue-tracker", "url": "https://github.com/jackc/pgservicefile/issues" }, { "type": "vcs", "url": "git+https://github.com/jackc/pgservicefile" }, { "type": "website", "url": "https://github.com/jackc/pgservicefile" } ], "licenses": [ { "expression": "MIT" } ], "name": "pgservicefile", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/jackc/pgservicefile@0.0.0-20240606120523-5a60cdf6a761", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20240606120523-5a60cdf6a761" }, { "bom-ref": "pkg:golang/github.com/smallstep/pkcs7@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/pkcs7" }, { "type": "vcs", "url": "https://pkg.go.dev/github.com/smallstep/pkcs7@0.2.1" } ], "name": "pkcs7", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/pkcs7@0.2.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.2.1" }, { "bom-ref": "pkg:golang/github.com/prometheus/procfs@0.19.2", "description": "Package procfs provides functions to retrieve system, kernel and process\nmetrics from the pseudo-filesystem proc.\n\nExample:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/prometheus/procfs" }, { "type": "issue-tracker", "url": "https://github.com/prometheus/procfs/issues" }, { "type": "vcs", "url": "git+https://github.com/prometheus/procfs" }, { "type": "website", "url": "https://github.com/prometheus/procfs" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "procfs", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/prometheus/procfs@0.19.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.19.2" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/prometheus@0.62.0", "description": "Package prometheus provides a Prometheus Exporter that converts\nOTLP metrics into the Prometheus exposition format and implements\nprometheus.Collector to provide a handler for these metrics.\n\nThe Prometheus exporter ignores metrics from the Prometheus bridge. To\nexport these metrics, simply register them directly with the Prometheus\nHandler.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/prometheus" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "prometheus", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/prometheus@0.62.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.62.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/bridges/prometheus@0.65.0", "description": "Package prometheus provides a bridge from Prometheus to OpenTelemetry.\n\nThe Prometheus Bridge allows using the Prometheus Golang client library\nwith the OpenTelemetry SDK. This enables prometheus instrumentation libraries\nto be used with OpenTelemetry exporters, including OTLP.\n\nPrometheus histograms are translated to OpenTelemetry exponential histograms\nwhen native histograms are enabled in the Prometheus client. To enable\nPrometheus native histograms, set the (currently experimental) NativeHistogram...\noptions of the prometheus HistogramOpts when creating prometheus histograms.\n\nWhile the Prometheus Bridge has some overhead, it can significantly reduce the\ncombined overall CPU and Memory footprint when sending to an OpenTelemetry\nCollector. See the benchmarks for more details.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/contrib/bridges/prometheus" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-contrib" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "prometheus", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/contrib/bridges/prometheus@0.65.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.65.0" }, { "bom-ref": "pkg:golang/github.com/manifoldco/promptui@0.9.0", "description": "Package promptui is a library providing a simple interface to create command-line prompts for go.\nIt can be easily integrated into spf13/cobra, urfave/cli or any cli go application.\n\npromptui has two main input modes:\n\nPrompt provides a single line for user input. It supports optional live validation,\nconfirmation and masking the input.\n\nSelect provides a list of options to choose from. It supports pagination, search,\ndetailed view and custom templates.\n\nThis is an example for the Prompt mode of promptui. In this example, a prompt is created\nwith a validator function that validates the given value to make sure its a number.\nIf successful, it will output the chosen number in a formatted message.\n\nThis is an example for the Select mode of promptui. In this example, a select is created with\nthe days of the week as its items. When an item is selected, the selected day will be displayed\nin a formatted message.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/manifoldco/promptui" }, { "type": "issue-tracker", "url": "https://github.com/manifoldco/promptui/issues" }, { "type": "vcs", "url": "git+https://github.com/manifoldco/promptui" }, { "type": "website", "url": "https://github.com/manifoldco/promptui" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "promptui", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/manifoldco/promptui@0.9.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.9.0" }, { "bom-ref": "pkg:golang/google.golang.org/protobuf@1.36.11", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/google.golang.org/protobuf" }, { "type": "vcs", "url": "https://pkg.go.dev/google.golang.org/protobuf@1.36.11" }, { "type": "website", "url": "https://github.com/protocolbuffers/protobuf-go" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "protobuf", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/google.golang.org/protobuf@1.36.11", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.36.11" }, { "bom-ref": "pkg:golang/github.com/golang/protobuf@1.5.4", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/golang/protobuf" }, { "type": "issue-tracker", "url": "https://github.com/golang/protobuf/issues" }, { "type": "vcs", "url": "git+https://github.com/golang/protobuf" }, { "type": "website", "url": "https://github.com/golang/protobuf" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "protobuf", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/golang/protobuf@1.5.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.5.4" }, { "bom-ref": "pkg:golang/github.com/quic-go/qpack@0.6.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/quic-go/qpack" }, { "type": "issue-tracker", "url": "https://github.com/quic-go/qpack/issues" }, { "type": "vcs", "url": "git+https://github.com/quic-go/qpack" }, { "type": "website", "url": "https://github.com/quic-go/qpack" } ], "licenses": [ { "expression": "MIT" } ], "name": "qpack", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/quic-go/qpack@0.6.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.6.0" }, { "bom-ref": "pkg:golang/github.com/quic-go/quic-go@0.59.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/quic-go/quic-go" }, { "type": "issue-tracker", "url": "https://github.com/quic-go/quic-go/issues" }, { "type": "vcs", "url": "git+https://github.com/quic-go/quic-go" }, { "type": "website", "url": "https://github.com/quic-go/quic-go" } ], "licenses": [ { "expression": "MIT" } ], "name": "quic-go", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/quic-go/quic-go@0.59.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.59.0" }, { "bom-ref": "pkg:golang/github.com/chzyer/readline@1.5.1", "description": "Readline is a pure go implementation for GNU-Readline kind library.\n\nexample:\n\nPackage terminal provides support functions for dealing with terminals, as\ncommonly found on UNIX systems.\n\nPutting a terminal into raw mode is the most common requirement:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/chzyer/readline" }, { "type": "issue-tracker", "url": "https://github.com/chzyer/readline/issues" }, { "type": "vcs", "url": "git+https://github.com/chzyer/readline" }, { "type": "website", "url": "https://github.com/chzyer/readline" } ], "licenses": [ { "expression": "MIT" } ], "name": "readline", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/chzyer/readline@1.5.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.5.1" }, { "bom-ref": "pkg:golang/github.com/mitchellh/reflectwalk@1.0.2", "description": "reflectwalk is a package that allows you to \"walk\" complex structures\nsimilar to how you may \"walk\" a filesystem: visiting every element one\nby one and calling callback functions allowing you to handle and manipulate\nthose elements.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mitchellh/reflectwalk" }, { "type": "issue-tracker", "url": "https://github.com/mitchellh/reflectwalk/issues" }, { "type": "vcs", "url": "git+https://github.com/mitchellh/reflectwalk" }, { "type": "website", "url": "https://github.com/mitchellh/reflectwalk" } ], "licenses": [ { "expression": "MIT" } ], "name": "reflectwalk", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mitchellh/reflectwalk@1.0.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.2" }, { "bom-ref": "pkg:golang/github.com/dlclark/regexp2@1.11.5", "description": "Package regexp2 is a regexp package that has an interface similar to Go's framework regexp engine but uses a\nmore feature full regex engine behind the scenes.\n\nIt doesn't have constant time guarantees, but it allows backtracking and is compatible with Perl5 and .NET.\nYou'll likely be better off with the RE2 engine from the regexp package and should only use this if you\nneed to write very complex patterns or require compatibility with .NET.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/dlclark/regexp2" }, { "type": "issue-tracker", "url": "https://github.com/dlclark/regexp2/issues" }, { "type": "vcs", "url": "git+https://github.com/dlclark/regexp2" }, { "type": "website", "url": "https://github.com/dlclark/regexp2" } ], "licenses": [ { "expression": "MIT" } ], "name": "regexp2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/dlclark/regexp2@1.11.5", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.11.5" }, { "bom-ref": "pkg:golang/github.com/dgraph-io/ristretto@0.2.0", "description": "Ristretto is a fast, fixed size, in-memory cache with a dual focus on\nthroughput and hit ratio performance. You can easily add Ristretto to an\nexisting system and keep the most valuable data where you need it.\n\nThis package includes multiple probabalistic data structures needed for\nadmission/eviction metadata. Most are Counting Bloom Filter variations, but\na caching-specific feature that is also required is a \"freshness\" mechanism,\nwhich basically serves as a \"lifetime\" process. This freshness mechanism\nwas described in the original TinyLFU paper 1, but other mechanisms may\nbe better suited for certain data distributions.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/dgraph-io/ristretto" }, { "type": "issue-tracker", "url": "https://github.com/dgraph-io/ristretto/issues" }, { "type": "vcs", "url": "git+https://github.com/dgraph-io/ristretto" }, { "type": "website", "url": "https://github.com/dgraph-io/ristretto" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "ristretto", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/dgraph-io/ristretto@0.2.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.2.0" }, { "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@0.0.0-20260414002931-afd174a4e478", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/google.golang.org/genproto/googleapis/rpc" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/go-genproto/issues" }, { "type": "vcs", "url": "git+https://github.com/googleapis/go-genproto" }, { "type": "website", "url": "https://github.com/googleapis/go-genproto" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "rpc", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@0.0.0-20260414002931-afd174a4e478", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20260414002931-afd174a4e478" }, { "bom-ref": "pkg:golang/github.com/google/s2a-go@0.1.9", "description": "Package s2a provides the S2A transport credentials used by a gRPC\napplication.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/google/s2a-go" }, { "type": "issue-tracker", "url": "https://github.com/google/s2a-go/issues" }, { "type": "vcs", "url": "git+https://github.com/google/s2a-go" }, { "type": "website", "url": "https://github.com/google/s2a-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "s2a-go", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/google/s2a-go@0.1.9", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.1.9" }, { "bom-ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@1.0.0", "description": "Package sanitized_anchor_name provides a func to create sanitized anchor names.\n\nIts logic can be reused by multiple packages to create interoperable anchor names\nand links to those anchors.\n\nAt this time, it does not try to ensure that generated anchor names\nare unique, that responsibility falls on the caller.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/shurcool/sanitized_anchor_name" }, { "type": "issue-tracker", "url": "https://github.com/shurcooL/sanitized_anchor_name/issues" }, { "type": "vcs", "url": "git+https://github.com/shurcool/sanitized_anchor_name" }, { "type": "website", "url": "https://github.com/shurcool/sanitized_anchor_name" } ], "licenses": [ { "expression": "MIT" } ], "name": "sanitized_anchor_name", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/shurcool/sanitized_anchor_name@1.0.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.0.0" }, { "bom-ref": "pkg:golang/github.com/smallstep/scep@0.0.0-20250318231241-a25cabb69492", "description": "Package scep provides common functionality for encoding and decoding\nSimple Certificate Enrolment Protocol pki messages as defined by\nhttps://tools.ietf.org/html/draft-gutmann-scep-02", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/scep" }, { "type": "vcs", "url": "git+https://github.com/smallstep/scep" }, { "type": "website", "url": "https://github.com/smallstep/scep" } ], "licenses": [ { "expression": "MIT" } ], "name": "scep", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/scep@0.0.0-20250318231241-a25cabb69492", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20250318231241-a25cabb69492" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@1.2.1", "description": "Package sdk provides an auto-instrumentable OpenTelemetry SDK.\n\nAn go.opentelemetry.io/auto.Instrumentation can be configured to target the\nprocess running this SDK. In that case, all telemetry the SDK produces will be\nprocessed and handled by that go.opentelemetry.io/auto.Instrumentation.\n\nBy default, if there is no go.opentelemetry.io/auto.Instrumentation set to\nauto-instrument the SDK, the SDK will not generate any telemetry.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/auto/sdk" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go-instrumentation/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go-instrumentation" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "sdk", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@1.2.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.2.1" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk@1.43.0", "description": "Package sdk provides the OpenTelemetry default SDK for Go.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/sdk" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "sdk", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/github.com/golang/snappy@0.0.4", "description": "Package snappy implements the Snappy compression format. It aims for very\nhigh speeds and reasonable compression.\n\nThere are actually two Snappy formats: block and stream. They are related,\nbut different: trying to decompress block-compressed data as a Snappy stream\nwill fail, and vice versa. The block format is the Decode and Encode\nfunctions and the stream format is the Reader and Writer types.\n\nThe block format, the more common case, is used when the complete size (the\nnumber of bytes) of the original data is known upfront, at the time\ncompression starts. The stream format, also known as the framing format, is\nfor when that isn't always true.\n\nThe canonical, C++ implementation is at https://github.com/google/snappy and\nit only implements the block format.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/golang/snappy" }, { "type": "issue-tracker", "url": "https://github.com/golang/snappy/issues" }, { "type": "vcs", "url": "git+https://github.com/golang/snappy" }, { "type": "website", "url": "https://github.com/golang/snappy" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "snappy", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/golang/snappy@0.0.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.4" }, { "bom-ref": "pkg:golang/stdlib@1.26.2", "externalReferences": [ { "type": "vcs", "url": "https://pkg.go.dev/stdlib@1.26.2" } ], "name": "stdlib", "properties": [ { "name": "sbomify:enrichment:source", "value": "clearlydefined.io" } ], "purl": "pkg:golang/stdlib@1.26.2", "type": "library", "version": "1.26.2" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutlog@0.16.0", "description": "Package stdoutlog provides an exporter for OpenTelemetry log\ntelemetry.\n\nThe exporter is intended to be used for testing and debugging, it is not\nmeant for production use. Additionally, it does not provide an interchange\nformat for OpenTelemetry that is supported with any stability or\ncompatibility guarantees. If these are needed features, please use the OTLP\nexporter instead.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/stdout/stdoutlog" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "stdoutlog", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutlog@0.16.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.16.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutmetric@1.40.0", "description": "Package stdoutmetric provides an exporter for OpenTelemetry metric\ntelemetry.\n\nThe exporter is intended to be used for testing and debugging, it is not\nmeant for production use. Additionally, it does not provide an interchange\nformat for OpenTelemetry that is supported with any stability or\ncompatibility guarantees. If these are needed features, please use the OTLP\nexporter instead.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/stdout/stdoutmetric" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "stdoutmetric", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutmetric@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@1.40.0", "description": "Package stdouttrace contains an OpenTelemetry exporter for tracing\ntelemetry to be written to an output destination as JSON.\n\nSee go.opentelemetry.io/otel/exporters/stdout/stdouttrace/internal/x for information about\nthe experimental features.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/exporters/stdout/stdouttrace" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "stdouttrace", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@1.40.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.40.0" }, { "bom-ref": "pkg:golang/github.com/go-logr/stdr@1.2.2", "description": "Package stdr implements github.com/go-logr/logr.Logger in terms of\nGo's standard log package.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/go-logr/stdr" }, { "type": "issue-tracker", "url": "https://github.com/go-logr/stdr/issues" }, { "type": "vcs", "url": "git+https://github.com/go-logr/stdr" }, { "type": "website", "url": "https://github.com/go-logr/stdr" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "stdr", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/go-logr/stdr@1.2.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.2.2" }, { "bom-ref": "pkg:golang/golang.org/x/sync@0.20.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/sync" }, { "type": "vcs", "url": "https://pkg.go.dev/golang.org/x/sync@0.20.0" }, { "type": "website", "url": "https://cs.opensource.google/go/x/sync" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "sync", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/sync@0.20.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.20.0" }, { "bom-ref": "pkg:golang/golang.org/x/sys@0.43.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/sys" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/sys" }, { "type": "website", "url": "https://cs.opensource.google/go/x/sys" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "sys", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/sys@0.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.43.0" }, { "bom-ref": "pkg:golang/golang.org/x/term@0.42.0", "description": "Package term provides support functions for dealing with terminals, as\ncommonly found on UNIX systems.\n\nPutting a terminal into raw mode is the most common requirement:\n\nNote that on non-Unix systems os.Stdin.Fd() may not be 0.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/term" }, { "type": "website", "url": "https://cs.opensource.google/go/x/term" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "term", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/term@0.42.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.42.0" }, { "bom-ref": "pkg:golang/golang.org/x/text@0.36.0", "description": "text is a repository of text-related packages related to internationalization\n(i18n) and localization (l10n), such as character encodings, text\ntransformations, and locale-specific text handling.\n\nThere is a 30 minute video, recorded on 2017-11-30, on the \"State of\ngolang.org/x/text\" at https://www.youtube.com/watch?v=uYrDrMEGu58", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/text" }, { "type": "vcs", "url": "https://cs.opensource.google/go/x/text" }, { "type": "website", "url": "https://cs.opensource.google/go/x/text" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "text", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/text@0.36.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.36.0" }, { "bom-ref": "pkg:golang/github.com/deruina/timberjack@1.3.9", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/deruina/timberjack" }, { "type": "issue-tracker", "url": "https://github.com/DeRuina/timberjack/issues" }, { "type": "vcs", "url": "git+https://github.com/deruina/timberjack" } ], "licenses": [ { "expression": "MIT" } ], "name": "timberjack", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/deruina/timberjack@1.3.9", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.3.9" }, { "bom-ref": "pkg:golang/golang.org/x/time@0.15.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/golang.org/x/time" }, { "type": "vcs", "url": "https://pkg.go.dev/golang.org/x/time@0.15.0" }, { "type": "website", "url": "https://cs.opensource.google/go/x/time" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "time", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/golang.org/x/time@0.15.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.15.0" }, { "bom-ref": "pkg:golang/github.com/burntsushi/toml@1.6.0", "description": "Package toml provides facilities for decoding and encoding TOML configuration\nfiles via reflection. There is also support for delaying decoding with\nthe Primitive type, and querying the set of keys in a TOML document with the\nMetaData type.\n\nThe specification implemented: https://github.com/toml-lang/toml\n\nThe sub-command github.com/BurntSushi/toml/cmd/tomlv can be used to verify\nwhether a file is a valid TOML document. It can also be used to print the\ntype of each key in a TOML document.\n\nThere are two important types of tests used for this package. The first is\ncontained inside '*_test.go' files and uses the standard Go unit testing\nframework. These tests are primarily devoted to holistically testing the\ndecoder and encoder.\n\nThe second type of testing is used to verify the implementation's adherence\nto the TOML specification. These tests have been factored into their own\nproject: https://github.com/BurntSushi/toml-test\n\nThe reason the tests are in a separate project is so that they can be used by\nany implementation of TOML. Namely, it is language agnostic.\n\nExample StrictDecoding shows how to detect whether there are keys in the\nTOML document that weren't decoded into the value given. This is useful\nfor returning an error to the user if they've included extraneous fields\nin their configuration.\n\nExample UnmarshalTOML shows how to implement a struct type that knows how to\nunmarshal itself. The struct must take full responsibility for mapping the\nvalues passed into the struct. The method may be used with interfaces in a\nstruct in cases where the actual type is not known until the data is\nexamined.\n\nExample Unmarshaler shows how to decode TOML strings into your own\ncustom data type.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/burntsushi/toml" }, { "type": "issue-tracker", "url": "https://github.com/BurntSushi/toml/issues" }, { "type": "vcs", "url": "git+https://github.com/burntsushi/toml" }, { "type": "website", "url": "https://github.com/burntsushi/toml" } ], "licenses": [ { "expression": "MIT" } ], "name": "toml", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/burntsushi/toml@1.6.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.6.0" }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@1.43.0", "description": "Package trace provides an implementation of the tracing part of the\nOpenTelemetry API.\n\nTo participate in distributed traces a Span needs to be created for the\noperation being performed as part of a traced workflow. In its simplest form:\n\nA Tracer is unique to the instrumentation and is used to create Spans.\nInstrumentation should be designed to accept a TracerProvider from which it\ncan create its own unique Tracer. Alternatively, the registered global\nTracerProvider from the go.opentelemetry.io/otel package can be used as\na default.\n\nThis package does not conform to the standard Go versioning policy; all of its\ninterfaces may have methods added to them without a package major version bump.\nThis non-standard API evolution could surprise an uninformed implementation\nauthor. They could unknowingly build their implementation in a way that would\nresult in a runtime panic for their users that update to the new API.\n\nThe API is designed to help inform an instrumentation author about this\nnon-standard API evolution. It requires them to choose a default behavior for\nunimplemented interface methods. There are three behavior choices they can\nmake:\n\nAll interfaces in this API embed a corresponding interface from\ngo.opentelemetry.io/otel/trace/embedded. If an author wants the default\nbehavior of their implementations to be a compilation failure, signaling to\ntheir users they need to update to the latest version of that implementation,\nthey need to embed the corresponding interface from\ngo.opentelemetry.io/otel/trace/embedded in their implementation. For\nexample,\n\nIf an author wants the default behavior of their implementations to panic, they\ncan embed the API interface directly.\n\nThis option is not recommended. It will lead to publishing packages that\ncontain runtime panics when users update to newer versions of\ngo.opentelemetry.io/otel/trace, which may be done with a transitive\ndependency.\n\nFinally, an author can embed another implementation in theirs. The embedded\nimplementation will be used for methods not defined by the author. For example,\nan author who wants to default to silently dropping the call can use\ngo.opentelemetry.io/otel/trace/noop:\n\nIt is strongly recommended that authors only embed\ngo.opentelemetry.io/otel/trace/noop if they choose this default behavior.\nThat implementation is the only one OpenTelemetry authors can guarantee will\nfully implement all the API interfaces when a user updates their API.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.opentelemetry.io/otel/trace" }, { "type": "issue-tracker", "url": "https://github.com/open-telemetry/opentelemetry-go/issues" }, { "type": "website", "url": "https://github.com/open-telemetry/opentelemetry-go" } ], "licenses": [ { "expression": "Apache-2.0 OR BSD-3-Clause" } ], "name": "trace", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.opentelemetry.io/otel/trace@1.43.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.43.0" }, { "bom-ref": "pkg:golang/github.com/smallstep/truststore@0.13.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/smallstep/truststore" }, { "type": "issue-tracker", "url": "https://github.com/smallstep/truststore/issues" }, { "type": "vcs", "url": "git+https://github.com/smallstep/truststore" }, { "type": "website", "url": "https://github.com/smallstep/truststore" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "truststore", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/smallstep/truststore@0.13.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.13.0" }, { "bom-ref": "pkg:golang/github.com/tailscale/tscert@0.0.0-20251216020129-aea342f6d747", "description": "Package tscert fetches HTTPS certs from the local machine's\nTailscale daemon (tailscaled).", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/tailscale/tscert" }, { "type": "issue-tracker", "url": "https://github.com/tailscale/tscert/issues" }, { "type": "vcs", "url": "git+https://github.com/tailscale/tscert" }, { "type": "website", "url": "https://github.com/tailscale/tscert" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "tscert", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/tailscale/tscert@0.0.0-20251216020129-aea342f6d747", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.0.0-20251216020129-aea342f6d747" }, { "bom-ref": "pkg:golang/github.com/google/uuid@1.6.0", "description": "Package uuid generates and inspects UUIDs.\n\nUUIDs are based on RFC 4122 and DCE 1.1: Authentication and Security\nServices.\n\nA UUID is a 16 byte (128 bit) array. UUIDs may be used as keys to\nmaps or compared directly.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/google/uuid" }, { "type": "issue-tracker", "url": "https://github.com/google/uuid/issues" }, { "type": "vcs", "url": "git+https://github.com/google/uuid" }, { "type": "website", "url": "https://github.com/google/uuid" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "uuid", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/google/uuid@1.6.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.6.0" }, { "bom-ref": "pkg:golang/github.com/ccoveille/go-safecast/v2@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/ccoveille/go-safecast/v2" }, { "type": "vcs", "url": "git+https://github.com/ccoveille/go-safecast" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/ccoveille/go-safecast/v2@2.0.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.0.0" }, { "bom-ref": "pkg:golang/github.com/yuin/goldmark-highlighting/v2@2.0.0-20230729083705-37449abec8cc", "description": "package highlighting is a extension for the goldmark(http://github.com/yuin/goldmark).\n\nThis extension adds syntax-highlighting to the fenced code blocks using\nchroma(https://github.com/alecthomas/chroma).", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/yuin/goldmark-highlighting/v2" }, { "type": "issue-tracker", "url": "https://github.com/yuin/goldmark-highlighting/issues" }, { "type": "vcs", "url": "git+https://github.com/yuin/goldmark-highlighting" }, { "type": "website", "url": "https://github.com/yuin/goldmark-highlighting" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/yuin/goldmark-highlighting/v2@2.0.0-20230729083705-37449abec8cc", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.0.0-20230729083705-37449abec8cc" }, { "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@2.0.7", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/cpuguy83/go-md2man/v2" }, { "type": "issue-tracker", "url": "https://github.com/cpuguy83/go-md2man/issues" }, { "type": "vcs", "url": "git+https://github.com/cpuguy83/go-md2man" }, { "type": "website", "url": "https://github.com/cpuguy83/go-md2man" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@2.0.7", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.0.7" }, { "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@2.1.0", "description": "Package blackfriday is a markdown processor.\n\nIt translates plain text with simple formatting rules into an AST, which can\nthen be further processed to HTML (provided by Blackfriday itself) or other\nformats (provided by the community).\n\nThe simplest way to invoke Blackfriday is to call the Run function. It will\ntake a text input and produce a text output in HTML (or other format).\n\nA slightly more sophisticated way to use Blackfriday is to create a Markdown\nprocessor and to call Parse, which returns a syntax tree for the input\ndocument. You can leverage Blackfriday's parsing for content extraction from\nmarkdown documents. You can assign a custom renderer and set various options\nto the Markdown processor.\n\nIf you're interested in calling Blackfriday from command line, see\nhttps://github.com/russross/blackfriday-tool.\n\nBlackfriday includes an algorithm for creating sanitized anchor names\ncorresponding to a given input text. This algorithm is used to create\nanchors for headings when AutoHeadingIDs extension is enabled. The\nalgorithm is specified below, so that other packages can create\ncompatible anchor names and links to those anchors.\n\nThe algorithm iterates over the input text, interpreted as UTF-8,\none Unicode code point (rune) at a time. All runes that are letters (category L)\nor numbers (category N) are considered valid characters. They are mapped to\nlower case, and included in the output. All other runes are considered\ninvalid characters. Invalid characters that precede the first valid character,\nas well as invalid character that follow the last valid character\nare dropped completely. All other sequences of invalid characters\nbetween two valid characters are replaced with a single dash character '-'.\n\nSanitizedAnchorName exposes this functionality, and can be used to\ncreate compatible links to the anchor names generated by blackfriday.\nThis algorithm is also implemented in a small standalone package at\ngithub.com/shurcooL/sanitized_anchor_name. It can be useful for clients\nthat want a small package and don't need full functionality of blackfriday.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/russross/blackfriday/v2" }, { "type": "issue-tracker", "url": "https://github.com/russross/blackfriday/issues" }, { "type": "vcs", "url": "git+https://github.com/russross/blackfriday" }, { "type": "website", "url": "https://github.com/russross/blackfriday" } ], "licenses": [ { "expression": "BSD-2-Clause" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/russross/blackfriday/v2@2.1.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.1.0" }, { "bom-ref": "pkg:golang/github.com/caddyserver/caddy/v2@2.11.2%2Bdirty", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/caddyserver/caddy/v2" }, { "type": "issue-tracker", "url": "https://github.com/caddyserver/caddy/issues" }, { "type": "vcs", "url": "git+https://github.com/caddyserver/caddy" }, { "type": "website", "url": "https://github.com/caddyserver/caddy" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/caddyserver/caddy/v2@2.11.2%2Bdirty", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.11.2+dirty" }, { "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@2.18.0", "description": "Package gax contains a set of modules which aid the development of APIs\nfor clients and servers based on gRPC and Google API conventions.\n\nApplication code will rarely need to use this library directly.\nHowever, code generated automatically from API definition files can use it\nto simplify code generation and to provide more convenient and idiomatic API surfaces.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/googleapis/gax-go/v2" }, { "type": "issue-tracker", "url": "https://github.com/googleapis/gax-go/issues" }, { "type": "vcs", "url": "git+https://github.com/googleapis/gax-go" }, { "type": "website", "url": "https://github.com/googleapis/gax-go" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/googleapis/gax-go/v2@2.18.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.18.0" }, { "bom-ref": "pkg:golang/github.com/jackc/puddle/v2@2.2.2", "description": "Package puddle is a generic resource pool with type-parametrized api.\n\nPuddle is a tiny generic resource pool library for Go that uses the standard\ncontext library to signal cancellation of acquires. It is designed to contain\nthe minimum functionality a resource pool needs that cannot be implemented\nwithout concurrency concerns. For example, a database connection pool may use\npuddle internally and implement health checks and keep-alive behavior without\nneeding to implement any concurrent code of its own.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/jackc/puddle/v2" }, { "type": "issue-tracker", "url": "https://github.com/jackc/puddle/issues" }, { "type": "vcs", "url": "git+https://github.com/jackc/puddle" }, { "type": "website", "url": "https://github.com/jackc/puddle" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/jackc/puddle/v2@2.2.2", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.2.2" }, { "bom-ref": "pkg:golang/github.com/dgraph-io/badger/v2@2.2007.4", "description": "Package badger implements an embeddable, simple and fast key-value database,\nwritten in pure Go. It is designed to be highly performant for both reads and\nwrites simultaneously. Badger uses Multi-Version Concurrency Control (MVCC), and\nsupports transactions. It runs transactions concurrently, with serializable\nsnapshot isolation guarantees.\n\nBadger uses an LSM tree along with a value log to separate keys from values,\nhence reducing both write amplification and the size of the LSM tree. This\nallows LSM tree to be served entirely from RAM, while the values are served\nfrom SSD.\n\nBadger has the following main types: DB, Txn, Item and Iterator. DB contains\nkeys that are associated with values. It must be opened with the appropriate\noptions before it can be accessed.\n\nAll operations happen inside a Txn. Txn represents a transaction, which can\nbe read-only or read-write. Read-only transactions can read values for a\ngiven key (which are returned inside an Item), or iterate over a set of\nkey-value pairs using an Iterator (which are returned as Item type values as\nwell). Read-write transactions can also update and delete keys from the DB.\n\nSee the examples for more usage details.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/dgraph-io/badger/v2" }, { "type": "issue-tracker", "url": "https://github.com/dgraph-io/badger/issues" }, { "type": "vcs", "url": "git+https://github.com/dgraph-io/badger" }, { "type": "website", "url": "https://github.com/dgraph-io/badger" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/dgraph-io/badger/v2@2.2007.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.2007.4" }, { "bom-ref": "pkg:golang/github.com/alecthomas/chroma/v2@2.23.1", "description": "Package chroma takes source code and other structured text and converts it into syntax highlighted HTML, ANSI-\ncoloured text, etc.\n\nChroma is based heavily on Pygments, and includes translators for Pygments lexers and styles.\n\nFor more information, go here: https://github.com/alecthomas/chroma", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/alecthomas/chroma/v2" }, { "type": "issue-tracker", "url": "https://github.com/alecthomas/chroma/issues" }, { "type": "vcs", "url": "git+https://github.com/alecthomas/chroma" }, { "type": "website", "url": "https://github.com/alecthomas/chroma" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/alecthomas/chroma/v2@2.23.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.23.1" }, { "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@2.29.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/grpc-ecosystem/grpc-gateway/v2" }, { "type": "issue-tracker", "url": "https://github.com/grpc-ecosystem/grpc-gateway/issues" }, { "type": "vcs", "url": "git+https://github.com/grpc-ecosystem/grpc-gateway" }, { "type": "website", "url": "https://github.com/grpc-ecosystem/grpc-gateway" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@2.29.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.29.0" }, { "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@2.3.0", "description": "Package xxhash implements the 64-bit variant of xxHash (XXH64) as described\nat http://cyan4973.github.io/xxHash/.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/cespare/xxhash/v2" }, { "type": "issue-tracker", "url": "https://github.com/cespare/xxhash/issues" }, { "type": "vcs", "url": "git+https://github.com/cespare/xxhash" }, { "type": "website", "url": "https://github.com/cespare/xxhash" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/cespare/xxhash/v2@2.3.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.3.0" }, { "bom-ref": "pkg:golang/github.com/klauspost/cpuid/v2@2.3.0", "description": "Package cpuid provides information about the CPU running the current program.\n\nCPU features are detected on startup, and kept for fast access through the life of the application.\nCurrently x86 / x64 (AMD64) as well as arm64 is supported.\n\nYou can access the CPU information by accessing the shared CPU variable of the cpuid library.\n\nPackage home: https://github.com/klauspost/cpuid", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/klauspost/cpuid/v2" }, { "type": "issue-tracker", "url": "https://github.com/klauspost/cpuid/issues" }, { "type": "vcs", "url": "git+https://github.com/klauspost/cpuid" }, { "type": "website", "url": "https://github.com/klauspost/cpuid" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/klauspost/cpuid/v2@2.3.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.3.0" }, { "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@2.4.3", "description": "Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.yaml.in/yaml/v2" }, { "type": "vcs", "url": "git+https://github.com/yaml/go-yaml" }, { "type": "website", "url": "https://github.com/yaml/go-yaml" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.yaml.in/yaml/v2@2.4.3", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.4.3" }, { "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@2.9.0", "description": "Package cbor is a modern CBOR codec (RFC 8949 & RFC 8742) with CBOR tags,\nGo struct tag options (toarray/keyasint/omitempty/omitzero), Core Deterministic Encoding,\nCTAP2, Canonical CBOR, float64->32->16, and duplicate map key detection.\n\nEncoding options allow \"preferred serialization\" by encoding integers and floats\nto their smallest forms (e.g. float16) when values fit.\n\nStruct tag options \"keyasint\", \"toarray\", \"omitempty\", and \"omitzero\" reduce encoding size\nand reduce programming effort.\n\nFor example, \"toarray\" tag makes struct fields encode to CBOR array elements. And\n\"keyasint\" makes a field encode to an element of CBOR map with specified int key.\n\nLatest docs can be viewed at https://github.com/fxamacker/cbor#cbor-library-in-go\n\nThe Quick Start guide is at https://github.com/fxamacker/cbor#quick-start\n\nFunction signatures identical to encoding/json include:\n\nStandard interfaces include:\n\nDiagnostic functions translate CBOR data item into Diagnostic Notation:\n\nFunctions that simplify using CBOR Sequences (RFC 8742) include:\n\nCustom encoding and decoding is possible by implementing standard interfaces for\nuser-defined Go types.\n\nCodec functions are available at package-level (using defaults options) or by\ncreating modes from options at runtime.\n\n\"Mode\" in this API means definite way of encoding (EncMode) or decoding (DecMode).\n\nEncMode and DecMode interfaces are created from EncOptions or DecOptions structs.\n\nModes use immutable options to avoid side-effects and simplify concurrency. Behavior of\nmodes won't accidentally change at runtime after they're created.\n\nModes are intended to be reused and are safe for concurrent use.\n\nEncMode and DecMode Interfaces\n\nUsing Default Encoding Mode\n\nUsing Default Decoding Mode\n\nUsing Default Mode of UnmarshalFirst to Decode CBOR Sequences\n\nUsing Extended Diagnostic Notation (EDN) to represent CBOR data\n\nCreating and Using Encoding Modes\n\nPredefined Encoding Options: https://github.com/fxamacker/cbor#predefined-encoding-options\n\nEncoding Options: https://github.com/fxamacker/cbor#encoding-options\n\nDecoding Options: https://github.com/fxamacker/cbor#decoding-options\n\nStruct tags like `cbor:\"name,omitempty\"` and `json:\"name,omitempty\"` work as expected.\nIf both struct tags are specified then `cbor` is used.\n\nStruct tag options like \"keyasint\", \"toarray\", \"omitempty\", and \"omitzero\" make it easy to use\nvery compact formats like COSE and CWT (CBOR Web Tokens) with structs.\n\nThe \"omitzero\" option omits zero values from encoding, matching\n[stdlib encoding/json behavior](https://pkg.go.dev/encoding/json#Marshal).\nWhen specified in the `cbor` tag, the option is always honored.\nWhen specified in the `json` tag, the option is honored when building with Go 1.24+.\n\nFor example, \"toarray\" makes struct fields encode to array elements. And \"keyasint\"\nmakes struct fields encode to elements of CBOR map with int keys.\n\nhttps://raw.githubusercontent.com/fxamacker/images/master/cbor/v2.0.0/cbor_easy_api.png\n\nStruct tag options are listed at https://github.com/fxamacker/cbor#struct-tags-1\n\nOver 375 tests are included in this package. Cover-guided fuzzing is handled by\na private fuzzer that replaced fxamacker/cbor-fuzz years ago.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/fxamacker/cbor/v2" }, { "type": "issue-tracker", "url": "https://github.com/fxamacker/cbor/issues" }, { "type": "vcs", "url": "git+https://github.com/fxamacker/cbor" }, { "type": "website", "url": "https://github.com/fxamacker/cbor" } ], "licenses": [ { "expression": "MIT" } ], "name": "v2", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/fxamacker/cbor/v2@2.9.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "2.9.0" }, { "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@3.0.4", "description": "Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.yaml.in/yaml/v3" }, { "type": "vcs", "url": "git+https://github.com/yaml/go-yaml" }, { "type": "website", "url": "https://github.com/yaml/go-yaml" } ], "licenses": [ { "expression": "Apache-2.0 OR MIT" } ], "name": "v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.yaml.in/yaml/v3@3.0.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.0.4" }, { "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v3@3.0.5", "description": "Package jose aims to provide an implementation of the Javascript Object Signing\nand Encryption set of standards. It implements encryption and signing based on\nthe JSON Web Encryption and JSON Web Signature standards, with optional JSON Web\nToken support available in a sub-package. The library supports both the compact\nand JWS/JWE JSON Serialization formats, and has optional support for multiple\nrecipients.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v3" }, { "type": "issue-tracker", "url": "https://github.com/go-jose/go-jose/issues" }, { "type": "vcs", "url": "git+https://github.com/go-jose/go-jose" }, { "type": "website", "url": "https://github.com/go-jose/go-jose" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/go-jose/go-jose/v3@3.0.5", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.0.5" }, { "bom-ref": "pkg:golang/github.com/mholt/acmez/v3@3.1.6", "description": "Package acmez implements the higher-level flow of the ACME specification,\nRFC 8555: https://tools.ietf.org/html/rfc8555, specifically the sequence\nin Section 7.1 (page 21).\n\nIt makes it easy to obtain certificates with various challenge types\nusing pluggable challenge solvers, and provides some handy utilities for\nimplementing solvers and using the certificates. It DOES NOT manage\ncertificates, it only gets them from the ACME server.\n\nNOTE: This package's primary purpose is to get a certificate, not manage it.\nMost users actually want to *manage* certificates over the lifetime of\nlong-running programs such as HTTPS or TLS servers, and should use CertMagic\ninstead: https://github.com/caddyserver/certmagic.\n\nCOMPATIBILITY: Exported identifiers that are related to draft specifications\nare subject to change or removal without a major version bump.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/mholt/acmez/v3" }, { "type": "issue-tracker", "url": "https://github.com/mholt/acmez/issues" }, { "type": "vcs", "url": "git+https://github.com/mholt/acmez" }, { "type": "website", "url": "https://github.com/mholt/acmez" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/mholt/acmez/v3@3.1.6", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.1.6" }, { "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@3.17.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/coreos/go-oidc/v3" }, { "type": "issue-tracker", "url": "https://github.com/coreos/go-oidc/issues" }, { "type": "vcs", "url": "git+https://github.com/coreos/go-oidc" }, { "type": "website", "url": "https://github.com/coreos/go-oidc" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/coreos/go-oidc/v3@3.17.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.17.0" }, { "bom-ref": "pkg:golang/github.com/masterminds/sprig/v3@3.3.0", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/masterminds/sprig/v3" }, { "type": "vcs", "url": "https://pkg.go.dev/github.com/masterminds/sprig/v3@3.3.0" } ], "name": "v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/masterminds/sprig/v3@3.3.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.3.0" }, { "bom-ref": "pkg:golang/github.com/masterminds/semver/v3@3.4.0", "description": "Package semver provides the ability to work with Semantic Versions (http://semver.org) in Go.\n\nSpecifically it provides the ability to:\n\nThere are two functions that can parse semantic versions. The `StrictNewVersion`\nfunction only parses valid version 2 semantic versions as outlined in the\nspecification. The `NewVersion` function attempts to coerce a version into a\nsemantic version and parse it. For example, if there is a leading v or a version\nlisted without all 3 parts (e.g. 1.2) it will attempt to coerce it into a valid\nsemantic version (e.g., 1.2.0). In both cases a `Version` object is returned\nthat can be sorted, compared, and used in constraints.\n\nWhen parsing a version an optional error can be returned if there is an issue\nparsing the version. For example,\n\nThe version object has methods to get the parts of the version, compare it to\nother versions, convert the version back into a string, and get the original\nstring. For more details please see the documentation\nat https://godoc.org/github.com/Masterminds/semver.\n\nA set of versions can be sorted using the `sort` package from the standard library.\nFor example,\n\nThere are two methods for comparing versions. One uses comparison methods on\n`Version` instances and the other is using Constraints. There are some important\ndifferences to notes between these two methods of comparison.\n\nThere are differences between the two methods or checking versions because the\ncomparison methods on `Version` follow the specification while comparison ranges\nare not part of the specification. Different packages and tools have taken it\nupon themselves to come up with range rules. This has resulted in differences.\nFor example, npm/js and Cargo/Rust follow similar patterns which PHP has a\ndifferent pattern for ^. The comparison features in this package follow the\nnpm/js and Cargo/Rust lead because applications using it have followed similar\npatters with their versions.\n\nChecking a version against version constraints is one of the most featureful\nparts of the package.\n\nThere are two elements to the comparisons. First, a comparison string is a list\nof comma or space separated AND comparisons. These are then separated by || (OR)\ncomparisons. For example, `\">= 1.2 < 3.0.0 || >= 4.2.3\"` is looking for a\ncomparison that's greater than or equal to 1.2 and less than 3.0.0 or is\ngreater than or equal to 4.2.3. This can also be written as\n`\">= 1.2, < 3.0.0 || >= 4.2.3\"`\n\nThe basic comparisons are:\n\nThere are multiple methods to handle ranges and the first is hyphens ranges.\nThese look like:\n\nThe `x`, `X`, and `*` characters can be used as a wildcard character. This works\nfor all comparison operators. When used on the `=` operator it falls\nback to the tilde operation. For example,\n\nTilde Range Comparisons (Patch)\n\nThe tilde (`~`) comparison operator is for patch level ranges when a minor\nversion is specified and major level changes when the minor number is missing.\nFor example,\n\nCaret Range Comparisons (Major)\n\nThe caret (`^`) comparison operator is for major level changes once a stable\n(1.0.0) release has occurred. Prior to a 1.0.0 release the minor versions acts\nas the API stability level. This is useful when comparisons of API versions as a\nmajor change is API breaking. For example,\n\nIn addition to testing a version against a constraint, a version can be validated\nagainst a constraint. When validation fails a slice of errors containing why a\nversion didn't meet the constraint is returned. For example,", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/masterminds/semver/v3" }, { "type": "issue-tracker", "url": "https://github.com/Masterminds/semver/issues" }, { "type": "vcs", "url": "git+https://github.com/masterminds/semver" }, { "type": "website", "url": "https://github.com/Masterminds/semver" } ], "licenses": [ { "expression": "MIT" } ], "name": "v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/masterminds/semver/v3@3.4.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.4.0" }, { "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@4.1.4", "description": "Package jose aims to provide an implementation of the Javascript Object Signing\nand Encryption set of standards. It implements encryption and signing based on\nthe JSON Web Encryption and JSON Web Signature standards, with optional JSON Web\nToken support available in a sub-package. The library supports both the compact\nand JWS/JWE JSON Serialization formats, and has optional support for multiple\nrecipients.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4" }, { "type": "issue-tracker", "url": "https://github.com/go-jose/go-jose/issues" }, { "type": "vcs", "url": "git+https://github.com/go-jose/go-jose" }, { "type": "website", "url": "https://github.com/go-jose/go-jose" } ], "licenses": [ { "expression": "Apache-2.0" } ], "name": "v4", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/go-jose/go-jose/v4@4.1.4", "supplier": { "name": "Go Modules" }, "type": "library", "version": "4.1.4" }, { "bom-ref": "pkg:golang/github.com/antlr4-go/antlr/v4@4.13.1", "description": "Package antlr implements the Go version of the ANTLR 4 runtime.\n\nANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing,\nor translating structured text or binary files. It's widely used to build languages, tools, and frameworks.\nFrom a grammar, ANTLR generates a parser that can build parse trees and also generates a listener interface\n(or visitor) that makes it easy to respond to the recognition of phrases of interest.\n\nAt version 4.11.x and prior, the Go runtime was not properly versioned for go modules. After this point, the runtime\nsource code to be imported was held in the `runtime/Go/antlr/v4` directory, and the go.mod file was updated to reflect the version of\nANTLR4 that it is compatible with (I.E. uses the /v4 path).\n\nHowever, this was found to be problematic, as it meant that with the runtime embedded so far underneath the root\nof the repo, the `go get` and related commands could not properly resolve the location of the go runtime source code.\nThis meant that the reference to the runtime in your `go.mod` file would refer to the correct source code, but would not\nlist the release tag such as @4.13.1 - this was confusing, to say the least.\n\nAs of 4.13.0, the runtime is now available as a go module in its own repo, and can be imported as `github.com/antlr4-go/antlr`\n(the go get command should also be used with this path). See the main documentation for the ANTLR4 project for more information,\nwhich is available at ANTLR docs. The documentation for using the Go runtime is available at Go runtime docs.\n\nThis means that if you are using the source code without modules, you should also use the source code in the new repo.\nThough we highly recommend that you use go modules, as they are now idiomatic for Go.\n\nI am aware that this change will prove Hyrum's Law, but am prepared to live with it for the common good.\n\nGo runtime author: Jim Idle jimi@idle.ws\n\nANTLR supports the generation of code in a number of target languages, and the generated code is supported by a\nruntime library, written specifically to support the generated code in the target language. This library is the\nruntime for the Go target.\n\nTo generate code for the go target, it is generally recommended to place the source grammar files in a package of\ntheir own, and use the `.sh` script method of generating code, using the go generate directive. In that same directory\nit is usual, though not required, to place the antlr tool that should be used to generate the code. That does mean\nthat the antlr tool JAR file will be checked in to your source code control though, so you are, of course, free to use any other\nway of specifying the version of the ANTLR tool to use, such as aliasing in `.zshrc` or equivalent, or a profile in\nyour IDE, or configuration in your CI system. Checking in the jar does mean that it is easy to reproduce the build as\nit was at any point in its history.\n\nHere is a general/recommended template for an ANTLR based recognizer in Go:\n\nMake sure that the package statement in your grammar file(s) reflects the go package the generated code will exist in.\n\nThe generate.go file then looks like this:\n\nAnd the generate.sh file will look similar to this:\n\ndepending on whether you want visitors or listeners or any other ANTLR options. Not that another option here\nis to generate the code into a\n\nFrom the command line at the root of your source package (location of go.mo)d) you can then simply issue the command:\n\nWhich will generate the code for the parser, and place it in the parsing package. You can then use the generated code\nby importing the parsing package.\n\nThere are no hard and fast rules on this. It is just a recommendation. You can generate the code in any way and to anywhere you like.\n\nCopyright (c) 2012-2023 The ANTLR Project. All rights reserved.\n\nUse of this file is governed by the BSD 3-clause license, which can be found in the LICENSE.txt file in the project root.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/antlr4-go/antlr/v4" }, { "type": "issue-tracker", "url": "https://github.com/antlr4-go/antlr/issues" }, { "type": "vcs", "url": "git+https://github.com/antlr4-go/antlr" }, { "type": "website", "url": "https://github.com/antlr4-go/antlr" } ], "licenses": [ { "expression": "BSD-3-Clause" } ], "name": "v4", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/antlr4-go/antlr/v4@4.13.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "4.13.1" }, { "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@5.0.3", "description": "Package backoff implements backoff algorithms for retrying operations.\n\nUse Retry function for retrying operations that may fail.\nIf Retry does not meet your needs,\ncopy/paste the function into your project and modify as you wish.\n\nThere is also Ticker type similar to time.Ticker.\nYou can use it if you need to work with channels.\n\nSee Examples section below for usage examples.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/cenkalti/backoff/v5" }, { "type": "issue-tracker", "url": "https://github.com/cenkalti/backoff/issues" }, { "type": "vcs", "url": "git+https://github.com/cenkalti/backoff" }, { "type": "website", "url": "https://github.com/cenkalti/backoff" } ], "licenses": [ { "expression": "MIT" } ], "name": "v5", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/cenkalti/backoff/v5@5.0.3", "supplier": { "name": "Go Modules" }, "type": "library", "version": "5.0.3" }, { "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@5.2.5", "description": "Package chi is a small, idiomatic and composable router for building HTTP services.\n\nchi supports the four most recent major versions of Go.\n\nExample:\n\nSee github.com/go-chi/chi/_examples/ for more in-depth examples.\n\nURL patterns allow for easy matching of path components in HTTP\nrequests. The matching components can then be accessed using\nchi.URLParam(). All patterns must begin with a slash.\n\nA simple named placeholder {name} matches any sequence of characters\nup to the next / or the end of the URL. Trailing slashes on paths must\nbe handled explicitly.\n\nA placeholder with a name followed by a colon allows a regular\nexpression match, for example {number:\\\\d+}. The regular expression\nsyntax is Go's normal regexp RE2 syntax, except that / will never be\nmatched. An anonymous regexp pattern is allowed, using an empty string\nbefore the colon in the placeholder, such as {:\\\\d+}\n\nThe special placeholder of asterisk matches the rest of the requested\nURL. Any trailing characters in the pattern are ignored. This is the only\nplaceholder which will match / characters.\n\nExamples:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/go-chi/chi/v5" }, { "type": "issue-tracker", "url": "https://github.com/go-chi/chi/issues" }, { "type": "vcs", "url": "git+https://github.com/go-chi/chi" }, { "type": "website", "url": "https://github.com/go-chi/chi" } ], "licenses": [ { "expression": "MIT" } ], "name": "v5", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/go-chi/chi/v5@5.2.5", "supplier": { "name": "Go Modules" }, "type": "library", "version": "5.2.5" }, { "bom-ref": "pkg:golang/github.com/jackc/pgx/v5@5.8.0", "description": "Package pgx is a PostgreSQL database driver.\n\npgx provides a native PostgreSQL driver and can act as a database/sql driver. The native PostgreSQL interface is similar\nto the database/sql interface while providing better speed and access to PostgreSQL specific features. Use\ngithub.com/jackc/pgx/v5/stdlib to use pgx as a database/sql compatible driver. See that package's documentation for\ndetails.\n\nThe primary way of establishing a connection is with pgx.Connect:\n\nThe database connection string can be in URL or key/value format. Both PostgreSQL settings and pgx settings can be\nspecified here. In addition, a config struct can be created by ParseConfig and modified before establishing the\nconnection with ConnectConfig to configure settings such as tracing that cannot be configured with a connection\nstring.\n\n*pgx.Conn represents a single connection to the database and is not concurrency safe. Use package\ngithub.com/jackc/pgx/v5/pgxpool for a concurrency safe connection pool.\n\npgx implements Query in the familiar database/sql style. However, pgx provides generic functions such as CollectRows and\nForEachRow that are a simpler and safer way of processing rows than manually calling defer rows.Close(), rows.Next(),\nrows.Scan, and rows.Err().\n\nCollectRows can be used collect all returned rows into a slice.\n\nForEachRow can be used to execute a callback function for every row. This is often easier than iterating over rows\ndirectly.\n\npgx also implements QueryRow in the same style as database/sql.\n\nUse Exec to execute a query that does not return a result set.\n\npgx uses the pgtype package to converting Go values to and from PostgreSQL values. It supports many PostgreSQL types\ndirectly and is customizable and extendable. User defined data types such as enums, domains, and composite types may\nrequire type registration. See that package's documentation for details.\n\nTransactions are started by calling Begin.\n\nThe Tx returned from Begin also implements the Begin method. This can be used to implement pseudo nested transactions.\nThese are internally implemented with savepoints.\n\nUse BeginTx to control the transaction mode. BeginTx also can be used to ensure a new transaction is created instead of\na pseudo nested transaction.\n\nBeginFunc and BeginTxFunc are functions that begin a transaction, execute a function, and commit or rollback the\ntransaction depending on the return value of the function. These can be simpler and less error prone to use.\n\nPrepared statements can be manually created with the Prepare method. However, this is rarely necessary because pgx\nincludes an automatic statement cache by default. Queries run through the normal Query, QueryRow, and Exec functions are\nautomatically prepared on first execution and the prepared statement is reused on subsequent executions. See ParseConfig\nfor information on how to customize or disable the statement cache.\n\nUse CopyFrom to efficiently insert multiple rows at a time using the PostgreSQL copy protocol. CopyFrom accepts a\nCopyFromSource interface. If the data is already in a [][]any use CopyFromRows to wrap it in a CopyFromSource interface.\nOr implement CopyFromSource to avoid buffering the entire data set in memory.\n\nWhen you already have a typed array using CopyFromSlice can be more convenient.\n\nCopyFrom can be faster than an insert with as few as 5 rows.\n\npgx can listen to the PostgreSQL notification system with the `Conn.WaitForNotification` method. It blocks until a\nnotification is received or the context is canceled.\n\npgx supports tracing by setting ConnConfig.Tracer. To combine several tracers you can use the multitracer.Tracer.\n\nIn addition, the tracelog package provides the TraceLog type which lets a traditional logger act as a Tracer.\n\nFor debug tracing of the actual PostgreSQL wire protocol messages see github.com/jackc/pgx/v5/pgproto3.\n\ngithub.com/jackc/pgx/v5/pgconn contains a lower level PostgreSQL driver roughly at the level of libpq. pgx.Conn is\nimplemented on top of pgconn. The Conn.PgConn() method can be used to access this lower layer.\n\nBy default pgx automatically...", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/jackc/pgx/v5" }, { "type": "issue-tracker", "url": "https://github.com/jackc/pgx/issues" }, { "type": "vcs", "url": "git+https://github.com/jackc/pgx" }, { "type": "website", "url": "https://github.com/jackc/pgx" } ], "licenses": [ { "expression": "MIT" } ], "name": "v5", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/jackc/pgx/v5@5.8.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "5.8.0" }, { "bom-ref": "pkg:golang/github.com/rs/xid@1.6.0", "description": "Package xid is a globally unique id generator suited for web scale\n\nXid is using Mongo Object ID algorithm to generate globally unique ids:\nhttps://docs.mongodb.org/manual/reference/object-id/\n\nThe binary representation of the id is compatible with Mongo 12 bytes Object IDs.\nThe string representation is using base32 hex (w/o padding) for better space efficiency\nwhen stored in that form (20 bytes). The hex variant of base32 is used to retain the\nsortable property of the id.\n\nXid doesn't use base64 because case sensitivity and the 2 non alphanum chars may be an\nissue when transported as a string between various systems. Base36 wasn't retained either\nbecause 1/ it's not standard 2/ the resulting size is not predictable (not bit aligned)\nand 3/ it would not remain sortable. To validate a base32 `xid`, expect a 20 chars long,\nall lowercase sequence of `a` to `v` letters and `0` to `9` numbers (`[0-9a-v]{20}`).\n\nUUID is 16 bytes (128 bits), snowflake is 8 bytes (64 bits), xid stands in between\nwith 12 bytes with a more compact string representation ready for the web and no\nrequired configuration or central generation server.\n\nFeatures:\n\nBest used with xlog's RequestIDHandler (https://godoc.org/github.com/rs/xlog#RequestIDHandler).\n\nReferences:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/rs/xid" }, { "type": "issue-tracker", "url": "https://github.com/rs/xid/issues" }, { "type": "vcs", "url": "git+https://github.com/rs/xid" }, { "type": "website", "url": "https://github.com/rs/xid" } ], "licenses": [ { "expression": "MIT" } ], "name": "xid", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/rs/xid@1.6.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.6.0" }, { "bom-ref": "pkg:golang/github.com/huandu/xstrings@1.5.0", "description": "Package xstrings is to provide string algorithms which are useful but not included in `strings` package.\nSee project home page for details. https://github.com/huandu/xstrings\n\nPackage xstrings assumes all strings are encoded in utf8.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/huandu/xstrings" }, { "type": "issue-tracker", "url": "https://github.com/huandu/xstrings/issues" }, { "type": "vcs", "url": "git+https://github.com/huandu/xstrings" }, { "type": "website", "url": "https://github.com/huandu/xstrings" } ], "licenses": [ { "expression": "MIT" } ], "name": "xstrings", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/huandu/xstrings@1.5.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.5.0" }, { "bom-ref": "pkg:golang/github.com/cespare/xxhash@1.1.0", "description": "Package xxhash implements the 64-bit variant of xxHash (XXH64) as described\nat http://cyan4973.github.io/xxHash/.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/cespare/xxhash" }, { "type": "issue-tracker", "url": "https://github.com/cespare/xxhash/issues" }, { "type": "vcs", "url": "git+https://github.com/cespare/xxhash" }, { "type": "website", "url": "https://github.com/cespare/xxhash" } ], "licenses": [ { "expression": "MIT" } ], "name": "xxhash", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/cespare/xxhash@1.1.0", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.1.0" }, { "bom-ref": "pkg:golang/gopkg.in/yaml.v3@3.0.1", "description": "Package yaml implements YAML support for the Go language.\n\nSource code and other details for the project are available at GitHub:", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/gopkg.in/yaml.v3" }, { "type": "issue-tracker", "url": "https://github.com/go-yaml/yaml/issues" }, { "type": "website", "url": "https://github.com/go-yaml/yaml" } ], "licenses": [ { "expression": "Apache-2.0 OR MIT" } ], "name": "yaml.v3", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/gopkg.in/yaml.v3@3.0.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "3.0.1" }, { "bom-ref": "pkg:golang/go.uber.org/zap@1.27.1", "description": "Package zap provides fast, structured, leveled logging.\n\nFor applications that log in the hot path, reflection-based serialization\nand string formatting are prohibitively expensive - they're CPU-intensive\nand make many small allocations. Put differently, using json.Marshal and\nfmt.Fprintf to log tons of interface{} makes your application slow.\n\nZap takes a different approach. It includes a reflection-free,\nzero-allocation JSON encoder, and the base Logger strives to avoid\nserialization overhead and allocations wherever possible. By building the\nhigh-level SugaredLogger on that foundation, zap lets users choose when\nthey need to count every allocation and when they'd prefer a more familiar,\nloosely typed API.\n\nIn contexts where performance is nice, but not critical, use the\nSugaredLogger. It's 4-10x faster than other structured logging packages and\nsupports both structured and printf-style logging. Like log15 and go-kit,\nthe SugaredLogger's structured logging APIs are loosely typed and accept a\nvariadic number of key-value pairs. (For more advanced use cases, they also\naccept strongly typed fields - see the SugaredLogger.With documentation for\ndetails.)\n\nBy default, loggers are unbuffered. However, since zap's low-level APIs\nallow buffering, calling Sync before letting your process exit is a good\nhabit.\n\nIn the rare contexts where every microsecond and every allocation matter,\nuse the Logger. It's even faster than the SugaredLogger and allocates far\nless, but it only supports strongly-typed, structured logging.\n\nChoosing between the Logger and SugaredLogger doesn't need to be an\napplication-wide decision: converting between the two is simple and\ninexpensive.\n\nThe simplest way to build a Logger is to use zap's opinionated presets:\nNewExample, NewProduction, and NewDevelopment. These presets build a logger\nwith a single function call:\n\nPresets are fine for small projects, but larger projects and organizations\nnaturally require a bit more customization. For most users, zap's Config\nstruct strikes the right balance between flexibility and convenience. See\nthe package-level BasicConfiguration example for sample code.\n\nMore unusual configurations (splitting output between files, sending logs\nto a message queue, etc.) are possible, but require direct use of\ngo.uber.org/zap/zapcore. See the package-level AdvancedConfiguration\nexample for sample code.\n\nThe zap package itself is a relatively thin wrapper around the interfaces\nin go.uber.org/zap/zapcore. Extending zap to support a new encoding (e.g.,\nBSON), a new log sink (e.g., Kafka), or something more exotic (perhaps an\nexception aggregation service, like Sentry or Rollbar) typically requires\nimplementing the zapcore.Encoder, zapcore.WriteSyncer, or zapcore.Core\ninterfaces. See the zapcore documentation for details.\n\nSimilarly, package authors can use the high-performance Encoder and Core\nimplementations in the zapcore package to build their own loggers.\n\nAn FAQ covering everything from installation errors to design decisions is\navailable at https://github.com/uber-go/zap/blob/master/FAQ.md.", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/go.uber.org/zap" }, { "type": "issue-tracker", "url": "https://github.com/uber-go/zap/issues" }, { "type": "website", "url": "https://github.com/uber-go/zap" } ], "licenses": [ { "expression": "MIT" } ], "name": "zap", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/go.uber.org/zap@1.27.1", "supplier": { "name": "Go Modules" }, "type": "library", "version": "1.27.1" }, { "bom-ref": "pkg:golang/github.com/caddyserver/zerossl@0.1.5", "description": "Package zerossl implements the ZeroSSL REST API.\nSee the API documentation on the ZeroSSL website: https://zerossl.com/documentation/api/", "externalReferences": [ { "type": "distribution", "url": "https://pkg.go.dev/github.com/caddyserver/zerossl" }, { "type": "issue-tracker", "url": "https://github.com/caddyserver/zerossl/issues" }, { "type": "vcs", "url": "git+https://github.com/caddyserver/zerossl" }, { "type": "website", "url": "https://github.com/caddyserver/zerossl" } ], "licenses": [ { "expression": "MIT" } ], "name": "zerossl", "properties": [ { "name": "sbomify:enrichment:source", "value": "ecosyste.ms" } ], "purl": "pkg:golang/github.com/caddyserver/zerossl@0.1.5", "supplier": { "name": "Go Modules" }, "type": "library", "version": "0.1.5" } ], "dependencies": [ { "dependsOn": [ "pkg:docker/dhi/caddy@2.11.2-debian13?os_name=debian&os_version=13", "pkg:golang/caddyserver/caddy@2.11.2", "pkg:golang/cel.dev/expr@0.25.1", "pkg:golang/cloud.google.com/go/auth/oauth2adapt@0.2.8", "pkg:golang/cloud.google.com/go/auth@0.18.2", "pkg:golang/cloud.google.com/go/compute/metadata@0.9.0", "pkg:golang/dario.cat/mergo@1.0.2", "pkg:golang/filippo.io/bigmod@0.1.0", "pkg:golang/filippo.io/edwards25519@1.2.0", "pkg:golang/github.com/alecthomas/chroma/v2@2.23.1", "pkg:golang/github.com/andreasbriese/bbloom@0.0.0-20190825152654-46b345b51c96", "pkg:golang/github.com/antlr4-go/antlr/v4@4.13.1", "pkg:golang/github.com/aryann/difflib@0.0.0-20210328193216-ff5ff6dc229b", "pkg:golang/github.com/beorn7/perks@1.0.1", "pkg:golang/github.com/burntsushi/toml@1.6.0", "pkg:golang/github.com/caddyserver/caddy/v2@2.11.2%2Bdirty", "pkg:golang/github.com/caddyserver/certmagic@0.25.2", "pkg:golang/github.com/caddyserver/zerossl@0.1.5", "pkg:golang/github.com/ccoveille/go-safecast/v2@2.0.0", "pkg:golang/github.com/cenkalti/backoff/v5@5.0.3", "pkg:golang/github.com/cespare/xxhash/v2@2.3.0", "pkg:golang/github.com/cespare/xxhash@1.1.0", "pkg:golang/github.com/chzyer/readline@1.5.1", "pkg:golang/github.com/cloudflare/circl@1.6.3", "pkg:golang/github.com/coreos/go-oidc/v3@3.17.0", "pkg:golang/github.com/cpuguy83/go-md2man/v2@2.0.7", "pkg:golang/github.com/deruina/timberjack@1.3.9", "pkg:golang/github.com/dgraph-io/badger/v2@2.2007.4", "pkg:golang/github.com/dgraph-io/badger@1.6.2", "pkg:golang/github.com/dgraph-io/ristretto@0.2.0", "pkg:golang/github.com/dgryski/go-farm@0.0.0-20200201041132-a6ae2369ad13", "pkg:golang/github.com/dlclark/regexp2@1.11.5", "pkg:golang/github.com/dustin/go-humanize@1.0.1", "pkg:golang/github.com/felixge/httpsnoop@1.0.4", "pkg:golang/github.com/fxamacker/cbor/v2@2.9.0", "pkg:golang/github.com/go-chi/chi/v5@5.2.5", "pkg:golang/github.com/go-jose/go-jose/v3@3.0.5", "pkg:golang/github.com/go-jose/go-jose/v4@4.1.4", "pkg:golang/github.com/go-logr/logr@1.4.3", "pkg:golang/github.com/go-logr/stdr@1.2.2", "pkg:golang/github.com/golang/protobuf@1.5.4", "pkg:golang/github.com/golang/snappy@0.0.4", "pkg:golang/github.com/google/cel-go@0.27.0", "pkg:golang/github.com/google/certificate-transparency-go@1.1.8-0.20240110162603-74a5dd331745", "pkg:golang/github.com/google/go-tpm@0.9.8", "pkg:golang/github.com/google/go-tspi@0.3.0", "pkg:golang/github.com/google/s2a-go@0.1.9", "pkg:golang/github.com/google/uuid@1.6.0", "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@0.3.14", "pkg:golang/github.com/googleapis/gax-go/v2@2.18.0", "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@2.29.0", "pkg:golang/github.com/huandu/xstrings@1.5.0", "pkg:golang/github.com/jackc/pgpassfile@1.0.0", "pkg:golang/github.com/jackc/pgservicefile@0.0.0-20240606120523-5a60cdf6a761", "pkg:golang/github.com/jackc/pgx/v5@5.8.0", "pkg:golang/github.com/jackc/puddle/v2@2.2.2", "pkg:golang/github.com/kimmachinegun/automemlimit@0.7.5", "pkg:golang/github.com/klauspost/compress@1.18.4", "pkg:golang/github.com/klauspost/cpuid/v2@2.3.0", "pkg:golang/github.com/libdns/libdns@1.1.1", "pkg:golang/github.com/manifoldco/promptui@0.9.0", "pkg:golang/github.com/masterminds/goutils@1.1.1", "pkg:golang/github.com/masterminds/semver/v3@3.4.0", "pkg:golang/github.com/masterminds/sprig/v3@3.3.0", "pkg:golang/github.com/mattn/go-colorable@0.1.14", "pkg:golang/github.com/mattn/go-isatty@0.0.20", "pkg:golang/github.com/mgutz/ansi@0.0.0-20200706080929-d51e80ef957d", "pkg:golang/github.com/mholt/acmez/v3@3.1.6", "pkg:golang/github.com/miekg/dns@1.1.72", "pkg:golang/github.com/mitchellh/copystructure@1.2.0", "pkg:golang/github.com/mitchellh/go-ps@1.0.0", "pkg:golang/github.com/mitchellh/reflectwalk@1.0.2", "pkg:golang/github.com/munnerz/goautoneg@0.0.0-20191010083416-a7dc8b61c822", "pkg:golang/github.com/pbnjay/memory@0.0.0-20210728143218-7b4eea64cf58", "pkg:golang/github.com/pires/go-proxyproto@0.11.0", "pkg:golang/github.com/pkg/errors@0.9.1", "pkg:golang/github.com/prometheus/client_golang@1.23.2", "pkg:golang/github.com/prometheus/client_model@0.6.2", "pkg:golang/github.com/prometheus/common@0.67.5", "pkg:golang/github.com/prometheus/otlptranslator@1.0.0", "pkg:golang/github.com/prometheus/procfs@0.19.2", "pkg:golang/github.com/quic-go/qpack@0.6.0", "pkg:golang/github.com/quic-go/quic-go@0.59.0", "pkg:golang/github.com/rs/xid@1.6.0", "pkg:golang/github.com/russross/blackfriday/v2@2.1.0", "pkg:golang/github.com/shopspring/decimal@1.4.0", "pkg:golang/github.com/shurcool/sanitized_anchor_name@1.0.0", "pkg:golang/github.com/sirupsen/logrus@1.9.4", "pkg:golang/github.com/slackhq/nebula@1.10.3", "pkg:golang/github.com/smallstep/certificates@0.30.1", "pkg:golang/github.com/smallstep/cli-utils@0.12.2", "pkg:golang/github.com/smallstep/go-attestation@0.4.4-0.20241119153605-2306d5b464ca", "pkg:golang/github.com/smallstep/linkedca@0.25.0", "pkg:golang/github.com/smallstep/nosql@0.8.0", "pkg:golang/github.com/smallstep/pkcs7@0.2.1", "pkg:golang/github.com/smallstep/scep@0.0.0-20250318231241-a25cabb69492", "pkg:golang/github.com/smallstep/truststore@0.13.0", "pkg:golang/github.com/spf13/cast@1.7.0", "pkg:golang/github.com/spf13/cobra@1.10.2", "pkg:golang/github.com/spf13/pflag@1.0.10", "pkg:golang/github.com/tailscale/tscert@0.0.0-20251216020129-aea342f6d747", "pkg:golang/github.com/urfave/cli@1.22.17", "pkg:golang/github.com/x448/float16@0.8.4", "pkg:golang/github.com/yuin/goldmark-highlighting/v2@2.0.0-20230729083705-37449abec8cc", "pkg:golang/github.com/yuin/goldmark@1.7.16", "pkg:golang/github.com/zeebo/blake3@0.2.4", "pkg:golang/go.etcd.io/bbolt@1.4.3", "pkg:golang/go.opentelemetry.io/auto/sdk@1.2.1", "pkg:golang/go.opentelemetry.io/contrib/bridges/prometheus@0.65.0", "pkg:golang/go.opentelemetry.io/contrib/exporters/autoexport@0.65.0", "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@0.65.0", "pkg:golang/go.opentelemetry.io/contrib/propagators/autoprop@0.65.0", "pkg:golang/go.opentelemetry.io/contrib/propagators/aws@1.40.0", "pkg:golang/go.opentelemetry.io/contrib/propagators/b3@1.40.0", "pkg:golang/go.opentelemetry.io/contrib/propagators/jaeger@1.40.0", "pkg:golang/go.opentelemetry.io/contrib/propagators/ot@1.40.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@0.16.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@0.19.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@1.40.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@1.43.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.40.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.43.0", "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@1.43.0", "pkg:golang/go.opentelemetry.io/otel/exporters/prometheus@0.62.0", "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutlog@0.16.0", "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutmetric@1.40.0", "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@1.40.0", "pkg:golang/go.opentelemetry.io/otel/log@0.19.0", "pkg:golang/go.opentelemetry.io/otel/metric@1.43.0", "pkg:golang/go.opentelemetry.io/otel/sdk/log@0.19.0", "pkg:golang/go.opentelemetry.io/otel/sdk/metric@1.43.0", "pkg:golang/go.opentelemetry.io/otel/sdk@1.43.0", "pkg:golang/go.opentelemetry.io/otel/trace@1.43.0", "pkg:golang/go.opentelemetry.io/otel@1.43.0", "pkg:golang/go.opentelemetry.io/proto/otlp@1.10.0", "pkg:golang/go.step.sm/crypto@0.77.1", "pkg:golang/go.uber.org/automaxprocs@1.6.0", "pkg:golang/go.uber.org/multierr@1.11.0", "pkg:golang/go.uber.org/zap/exp@0.3.0", "pkg:golang/go.uber.org/zap@1.27.1", "pkg:golang/go.yaml.in/yaml/v2@2.4.3", "pkg:golang/go.yaml.in/yaml/v3@3.0.4", "pkg:golang/golang.org/x/crypto/x509roots/fallback@0.0.0-20260213171211-a408498e5541", "pkg:golang/golang.org/x/crypto@0.50.0", "pkg:golang/golang.org/x/exp@0.0.0-20251023183803-a4bb9ffd2546", "pkg:golang/golang.org/x/net@0.53.0", "pkg:golang/golang.org/x/oauth2@0.36.0", "pkg:golang/golang.org/x/sync@0.20.0", "pkg:golang/golang.org/x/sys@0.43.0", "pkg:golang/golang.org/x/term@0.42.0", "pkg:golang/golang.org/x/text@0.36.0", "pkg:golang/golang.org/x/time@0.15.0", "pkg:golang/google.golang.org/api@0.271.0", "pkg:golang/google.golang.org/genproto/googleapis/api@0.0.0-20260414002931-afd174a4e478", "pkg:golang/google.golang.org/genproto/googleapis/rpc@0.0.0-20260414002931-afd174a4e478", "pkg:golang/google.golang.org/grpc@1.80.0", "pkg:golang/google.golang.org/protobuf@1.36.11", "pkg:golang/gopkg.in/yaml.v3@3.0.1", "pkg:golang/stdlib@1.26.2" ], "ref": "DocumentRoot" }, { "ref": "pkg:docker/dhi/caddy@2.11.2-debian13?os_name=debian&os_version=13" }, { "ref": "pkg:golang/caddyserver/caddy@2.11.2" }, { "ref": "pkg:golang/cel.dev/expr@0.25.1" }, { "ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@0.2.8" }, { "ref": "pkg:golang/cloud.google.com/go/auth@0.18.2" }, { "ref": "pkg:golang/cloud.google.com/go/compute/metadata@0.9.0" }, { "ref": "pkg:golang/dario.cat/mergo@1.0.2" }, { "ref": "pkg:golang/filippo.io/bigmod@0.1.0" }, { "ref": "pkg:golang/filippo.io/edwards25519@1.2.0" }, { "ref": "pkg:golang/github.com/alecthomas/chroma/v2@2.23.1" }, { "ref": "pkg:golang/github.com/andreasbriese/bbloom@0.0.0-20190825152654-46b345b51c96" }, { "ref": "pkg:golang/github.com/antlr4-go/antlr/v4@4.13.1" }, { "ref": "pkg:golang/github.com/aryann/difflib@0.0.0-20210328193216-ff5ff6dc229b" }, { "ref": "pkg:golang/github.com/beorn7/perks@1.0.1" }, { "ref": "pkg:golang/github.com/burntsushi/toml@1.6.0" }, { "ref": "pkg:golang/github.com/caddyserver/caddy/v2@2.11.2%2Bdirty" }, { "ref": "pkg:golang/github.com/caddyserver/certmagic@0.25.2" }, { "ref": "pkg:golang/github.com/caddyserver/zerossl@0.1.5" }, { "ref": "pkg:golang/github.com/ccoveille/go-safecast/v2@2.0.0" }, { "ref": "pkg:golang/github.com/cenkalti/backoff/v5@5.0.3" }, { "ref": "pkg:golang/github.com/cespare/xxhash/v2@2.3.0" }, { "ref": "pkg:golang/github.com/cespare/xxhash@1.1.0" }, { "ref": "pkg:golang/github.com/chzyer/readline@1.5.1" }, { "ref": "pkg:golang/github.com/cloudflare/circl@1.6.3" }, { "ref": "pkg:golang/github.com/coreos/go-oidc/v3@3.17.0" }, { "ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@2.0.7" }, { "ref": "pkg:golang/github.com/deruina/timberjack@1.3.9" }, { "ref": "pkg:golang/github.com/dgraph-io/badger/v2@2.2007.4" }, { "ref": "pkg:golang/github.com/dgraph-io/badger@1.6.2" }, { "ref": "pkg:golang/github.com/dgraph-io/ristretto@0.2.0" }, { "ref": "pkg:golang/github.com/dgryski/go-farm@0.0.0-20200201041132-a6ae2369ad13" }, { "ref": "pkg:golang/github.com/dlclark/regexp2@1.11.5" }, { "ref": "pkg:golang/github.com/dustin/go-humanize@1.0.1" }, { "ref": "pkg:golang/github.com/felixge/httpsnoop@1.0.4" }, { "ref": "pkg:golang/github.com/fxamacker/cbor/v2@2.9.0" }, { "ref": "pkg:golang/github.com/go-chi/chi/v5@5.2.5" }, { "ref": "pkg:golang/github.com/go-jose/go-jose/v3@3.0.5" }, { "ref": "pkg:golang/github.com/go-jose/go-jose/v4@4.1.4" }, { "ref": "pkg:golang/github.com/go-logr/logr@1.4.3" }, { "ref": "pkg:golang/github.com/go-logr/stdr@1.2.2" }, { "ref": "pkg:golang/github.com/golang/protobuf@1.5.4" }, { "ref": "pkg:golang/github.com/golang/snappy@0.0.4" }, { "ref": "pkg:golang/github.com/google/cel-go@0.27.0" }, { "ref": "pkg:golang/github.com/google/certificate-transparency-go@1.1.8-0.20240110162603-74a5dd331745" }, { "ref": "pkg:golang/github.com/google/go-tpm@0.9.8" }, { "ref": "pkg:golang/github.com/google/go-tspi@0.3.0" }, { "ref": "pkg:golang/github.com/google/s2a-go@0.1.9" }, { "ref": "pkg:golang/github.com/google/uuid@1.6.0" }, { "ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@0.3.14" }, { "ref": "pkg:golang/github.com/googleapis/gax-go/v2@2.18.0" }, { "ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@2.29.0" }, { "ref": "pkg:golang/github.com/huandu/xstrings@1.5.0" }, { "ref": "pkg:golang/github.com/jackc/pgpassfile@1.0.0" }, { "ref": "pkg:golang/github.com/jackc/pgservicefile@0.0.0-20240606120523-5a60cdf6a761" }, { "ref": "pkg:golang/github.com/jackc/pgx/v5@5.8.0" }, { "ref": "pkg:golang/github.com/jackc/puddle/v2@2.2.2" }, { "ref": "pkg:golang/github.com/kimmachinegun/automemlimit@0.7.5" }, { "ref": "pkg:golang/github.com/klauspost/compress@1.18.4" }, { "ref": "pkg:golang/github.com/klauspost/cpuid/v2@2.3.0" }, { "ref": "pkg:golang/github.com/libdns/libdns@1.1.1" }, { "ref": "pkg:golang/github.com/manifoldco/promptui@0.9.0" }, { "ref": "pkg:golang/github.com/masterminds/goutils@1.1.1" }, { "ref": "pkg:golang/github.com/masterminds/semver/v3@3.4.0" }, { "ref": "pkg:golang/github.com/masterminds/sprig/v3@3.3.0" }, { "ref": "pkg:golang/github.com/mattn/go-colorable@0.1.14" }, { "ref": "pkg:golang/github.com/mattn/go-isatty@0.0.20" }, { "ref": "pkg:golang/github.com/mgutz/ansi@0.0.0-20200706080929-d51e80ef957d" }, { "ref": "pkg:golang/github.com/mholt/acmez/v3@3.1.6" }, { "ref": "pkg:golang/github.com/miekg/dns@1.1.72" }, { "ref": "pkg:golang/github.com/mitchellh/copystructure@1.2.0" }, { "ref": "pkg:golang/github.com/mitchellh/go-ps@1.0.0" }, { "ref": "pkg:golang/github.com/mitchellh/reflectwalk@1.0.2" }, { "ref": "pkg:golang/github.com/munnerz/goautoneg@0.0.0-20191010083416-a7dc8b61c822" }, { "ref": "pkg:golang/github.com/pbnjay/memory@0.0.0-20210728143218-7b4eea64cf58" }, { "ref": "pkg:golang/github.com/pires/go-proxyproto@0.11.0" }, { "ref": "pkg:golang/github.com/pkg/errors@0.9.1" }, { "ref": "pkg:golang/github.com/prometheus/client_golang@1.23.2" }, { "ref": "pkg:golang/github.com/prometheus/client_model@0.6.2" }, { "ref": "pkg:golang/github.com/prometheus/common@0.67.5" }, { "ref": "pkg:golang/github.com/prometheus/otlptranslator@1.0.0" }, { "ref": "pkg:golang/github.com/prometheus/procfs@0.19.2" }, { "ref": "pkg:golang/github.com/quic-go/qpack@0.6.0" }, { "ref": "pkg:golang/github.com/quic-go/quic-go@0.59.0" }, { "ref": "pkg:golang/github.com/rs/xid@1.6.0" }, { "ref": "pkg:golang/github.com/russross/blackfriday/v2@2.1.0" }, { "ref": "pkg:golang/github.com/shopspring/decimal@1.4.0" }, { "ref": "pkg:golang/github.com/shurcool/sanitized_anchor_name@1.0.0" }, { "ref": "pkg:golang/github.com/sirupsen/logrus@1.9.4" }, { "ref": "pkg:golang/github.com/slackhq/nebula@1.10.3" }, { "ref": "pkg:golang/github.com/smallstep/certificates@0.30.1" }, { "ref": "pkg:golang/github.com/smallstep/cli-utils@0.12.2" }, { "ref": "pkg:golang/github.com/smallstep/go-attestation@0.4.4-0.20241119153605-2306d5b464ca" }, { "ref": "pkg:golang/github.com/smallstep/linkedca@0.25.0" }, { "ref": "pkg:golang/github.com/smallstep/nosql@0.8.0" }, { "ref": "pkg:golang/github.com/smallstep/pkcs7@0.2.1" }, { "ref": "pkg:golang/github.com/smallstep/scep@0.0.0-20250318231241-a25cabb69492" }, { "ref": "pkg:golang/github.com/smallstep/truststore@0.13.0" }, { "ref": "pkg:golang/github.com/spf13/cast@1.7.0" }, { "ref": "pkg:golang/github.com/spf13/cobra@1.10.2" }, { "ref": "pkg:golang/github.com/spf13/pflag@1.0.10" }, { "ref": "pkg:golang/github.com/tailscale/tscert@0.0.0-20251216020129-aea342f6d747" }, { "ref": "pkg:golang/github.com/urfave/cli@1.22.17" }, { "ref": "pkg:golang/github.com/x448/float16@0.8.4" }, { "ref": "pkg:golang/github.com/yuin/goldmark-highlighting/v2@2.0.0-20230729083705-37449abec8cc" }, { "ref": "pkg:golang/github.com/yuin/goldmark@1.7.16" }, { "ref": "pkg:golang/github.com/zeebo/blake3@0.2.4" }, { "ref": "pkg:golang/go.etcd.io/bbolt@1.4.3" }, { "ref": "pkg:golang/go.opentelemetry.io/auto/sdk@1.2.1" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/bridges/prometheus@0.65.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/exporters/autoexport@0.65.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@0.65.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/autoprop@0.65.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/aws@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/b3@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/jaeger@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/contrib/propagators/ot@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@0.16.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@0.19.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/prometheus@0.62.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutlog@0.16.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdoutmetric@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@1.40.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/log@0.19.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/metric@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/sdk/log@0.19.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/sdk@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel/trace@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/otel@1.43.0" }, { "ref": "pkg:golang/go.opentelemetry.io/proto/otlp@1.10.0" }, { "ref": "pkg:golang/go.step.sm/crypto@0.77.1" }, { "ref": "pkg:golang/go.uber.org/automaxprocs@1.6.0" }, { "ref": "pkg:golang/go.uber.org/multierr@1.11.0" }, { "ref": "pkg:golang/go.uber.org/zap/exp@0.3.0" }, { "ref": "pkg:golang/go.uber.org/zap@1.27.1" }, { "ref": "pkg:golang/go.yaml.in/yaml/v2@2.4.3" }, { "ref": "pkg:golang/go.yaml.in/yaml/v3@3.0.4" }, { "ref": "pkg:golang/golang.org/x/crypto/x509roots/fallback@0.0.0-20260213171211-a408498e5541" }, { "ref": "pkg:golang/golang.org/x/crypto@0.50.0" }, { "ref": "pkg:golang/golang.org/x/exp@0.0.0-20251023183803-a4bb9ffd2546" }, { "ref": "pkg:golang/golang.org/x/net@0.53.0" }, { "ref": "pkg:golang/golang.org/x/oauth2@0.36.0" }, { "ref": "pkg:golang/golang.org/x/sync@0.20.0" }, { "ref": "pkg:golang/golang.org/x/sys@0.43.0" }, { "ref": "pkg:golang/golang.org/x/term@0.42.0" }, { "ref": "pkg:golang/golang.org/x/text@0.36.0" }, { "ref": "pkg:golang/golang.org/x/time@0.15.0" }, { "ref": "pkg:golang/google.golang.org/api@0.271.0" }, { "ref": "pkg:golang/google.golang.org/genproto/googleapis/api@0.0.0-20260414002931-afd174a4e478" }, { "ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@0.0.0-20260414002931-afd174a4e478" }, { "ref": "pkg:golang/google.golang.org/grpc@1.80.0" }, { "ref": "pkg:golang/google.golang.org/protobuf@1.36.11" }, { "ref": "pkg:golang/gopkg.in/yaml.v3@3.0.1" }, { "ref": "pkg:golang/stdlib@1.26.2" } ], "metadata": { "authors": [ { "name": "Docker, Inc." } ], "component": { "bom-ref": "DocumentRoot", "name": "caddy", "properties": [ { "name": "cdx:lifecycle:milestone:generalAvailability", "value": "2020-05-04" } ], "purl": "pkg:docker/dhi/caddy@sha256:47908329497aa86cda6232b2baf37776baf5fe4325a8be5b5a2a40a674aaac2b", "type": "container", "version": "sha256:47908329497aa86cda6232b2baf37776baf5fe4325a8be5b5a2a40a674aaac2b" }, "timestamp": "2026-04-19T19:26:36.568511+00:00", "tools": { "components": [ { "name": "docker-scout-1.20.2-14-g7245b054", "type": "application" } ] } }, "serialNumber": "urn:uuid:bb6093e5-97c9-4b75-a42f-be294b8f11e7", "version": 1, "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6" }