{"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:fb4f8d66-8338-4b16-af38-e28ad443f7fd","version":1,"metadata":{"timestamp":"2026-09-19T17:54:07Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"name":"paint","description":"A simple, easy-to-use image editor for Linux.","version":"0.2.0+4","purl":"pkg:pub/paint@0.2.0%2B4","bom-ref":"pkg:pub/paint@0.2.0+4","type":"application"},"properties":[{"name":"cdx:bom:componentTypes","value":"pub"},{"name":"cdx:bom:componentSrcFiles","value":"pubspec.lock"}]},"components":[{"group":"","name":"paint","version":"0.2.0+4","description":"A simple, easy-to-use image editor for Linux.","purl":"pkg:pub/paint@0.2.0%2B4","type":"application","bom-ref":"pkg:pub/paint@0.2.0+4"},{"group":"","name":"archive","version":"4.0.9","scope":"required","hashes":[{"alg":"SHA-256","content":"a96e8b390886ee8abb49b7bd3ac8df6f451c621619f52a26e815fdcf568959ff"}],"purl":"pkg:pub/archive@4.0.9","type":"library","bom-ref":"pkg:pub/archive@4.0.9","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"async","version":"2.13.1","scope":"required","hashes":[{"alg":"SHA-256","content":"e2eb0491ba5ddb6177742d2da23904574082139b07c1e33b8503b9f46f3e1a37"}],"purl":"pkg:pub/async@2.13.1","type":"library","bom-ref":"pkg:pub/async@2.13.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"boolean_selector","version":"2.1.2","scope":"required","hashes":[{"alg":"SHA-256","content":"8aab1771e1243a5063b8b0ff68042d67334e3feab9e95b9490f9a6ebf73b42ea"}],"purl":"pkg:pub/boolean_selector@2.1.2","type":"library","bom-ref":"pkg:pub/boolean_selector@2.1.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"characters","version":"1.4.1","scope":"required","hashes":[{"alg":"SHA-256","content":"faf38497bda5ead2a8c7615f4f7939df04333478bf32e4173fcb06d428b5716b"}],"purl":"pkg:pub/characters@1.4.1","type":"library","bom-ref":"pkg:pub/characters@1.4.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"clock","version":"1.1.2","scope":"required","hashes":[{"alg":"SHA-256","content":"fddb70d9b5277016c77a80201021d40a2247104d9f4aa7bab7157b7e3f05b84b"}],"purl":"pkg:pub/clock@1.1.2","type":"library","bom-ref":"pkg:pub/clock@1.1.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"collection","version":"1.19.1","scope":"required","hashes":[{"alg":"SHA-256","content":"2f5709ae4d3d59dd8f7cd309b4e023046b57d8a6c82130785d2b0e5868084e76"}],"purl":"pkg:pub/collection@1.19.1","type":"library","bom-ref":"pkg:pub/collection@1.19.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"cross_file","version":"0.3.5+4","scope":"required","hashes":[{"alg":"SHA-256","content":"92c9c43c383bfa1c32079d3bc492d55d6d4318044b7b47edaff8971cbb555c51"}],"purl":"pkg:pub/cross_file@0.3.5%2B4","type":"library","bom-ref":"pkg:pub/cross_file@0.3.5+4","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"crypto","version":"3.0.7","scope":"required","hashes":[{"alg":"SHA-256","content":"c8ea0233063ba03258fbcf2ca4d6dadfefe14f02fab57702265467a19f27fadf"}],"purl":"pkg:pub/crypto@3.0.7","type":"library","bom-ref":"pkg:pub/crypto@3.0.7","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"desktop_drop","version":"0.7.1","scope":"required","hashes":[{"alg":"SHA-256","content":"aa1e797255bfbc76f9eb5aa4f61e5b68dbf69962ab1be6495816d2f251bc0d1f"}],"purl":"pkg:pub/desktop_drop@0.7.1","type":"library","bom-ref":"pkg:pub/desktop_drop@0.7.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"fake_async","version":"1.3.3","scope":"required","hashes":[{"alg":"SHA-256","content":"5368f224a74523e8d2e7399ea1638b37aecfca824a3cc4dfdf77bf1fa905ac44"}],"purl":"pkg:pub/fake_async@1.3.3","type":"library","bom-ref":"pkg:pub/fake_async@1.3.3","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"ffi","version":"2.2.0","scope":"required","hashes":[{"alg":"SHA-256","content":"6d7fd89431262d8f3125e81b50d3847a091d846eafcd4fdb88dd06f36d705a45"}],"purl":"pkg:pub/ffi@2.2.0","type":"library","bom-ref":"pkg:pub/ffi@2.2.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]},"tags":["native"]},{"group":"","name":"file","version":"7.0.1","scope":"required","hashes":[{"alg":"SHA-256","content":"a3b4f84adafef897088c160faf7dfffb7696046cb13ae90b508c2cbc95d3b8d4"}],"purl":"pkg:pub/file@7.0.1","type":"library","bom-ref":"pkg:pub/file@7.0.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector","version":"1.1.0","scope":"required","hashes":[{"alg":"SHA-256","content":"bd15e43e9268db636b53eeaca9f56324d1622af30e5c34d6e267649758c84d9a"}],"purl":"pkg:pub/file_selector@1.1.0","type":"library","bom-ref":"pkg:pub/file_selector@1.1.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_android","version":"0.5.2+9","scope":"required","hashes":[{"alg":"SHA-256","content":"1d45e9910f68c16eb0c74f0b10097ad81aed516ea28054c027137e8f7d75e840"}],"purl":"pkg:pub/file_selector_android@0.5.2%2B9","type":"library","bom-ref":"pkg:pub/file_selector_android@0.5.2+9","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_ios","version":"0.5.3+5","scope":"required","hashes":[{"alg":"SHA-256","content":"e2ecf2885c121691ce13b60db3508f53c01f869fb6e8dc5c1cfa771e4c46aeca"}],"purl":"pkg:pub/file_selector_ios@0.5.3%2B5","type":"library","bom-ref":"pkg:pub/file_selector_ios@0.5.3+5","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_linux","version":"0.9.4","scope":"required","hashes":[{"alg":"SHA-256","content":"2567f398e06ac72dcf2e98a0c95df2a9edd03c2c2e0cacd4780f20cdf56263a0"}],"purl":"pkg:pub/file_selector_linux@0.9.4","type":"library","bom-ref":"pkg:pub/file_selector_linux@0.9.4","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_macos","version":"0.9.5","scope":"required","hashes":[{"alg":"SHA-256","content":"5e0bbe9c312416f1787a68259ea1505b52f258c587f12920422671807c4d618a"}],"purl":"pkg:pub/file_selector_macos@0.9.5","type":"library","bom-ref":"pkg:pub/file_selector_macos@0.9.5","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_platform_interface","version":"2.7.0","scope":"required","hashes":[{"alg":"SHA-256","content":"35e0bd61ebcdb91a3505813b055b09b79dfdc7d0aee9c09a7ba59ae4bb13dc85"}],"purl":"pkg:pub/file_selector_platform_interface@2.7.0","type":"library","bom-ref":"pkg:pub/file_selector_platform_interface@2.7.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_web","version":"0.9.5","scope":"required","hashes":[{"alg":"SHA-256","content":"73181fbc5257776d8ecaa6a94ab3c8e920ad143b9132a6d984a9271dfc6928d3"}],"purl":"pkg:pub/file_selector_web@0.9.5","type":"library","bom-ref":"pkg:pub/file_selector_web@0.9.5","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"file_selector_windows","version":"0.9.3+5","scope":"required","hashes":[{"alg":"SHA-256","content":"62197474ae75893a62df75939c777763d39c2bc5f73ce5b88497208bc269abfd"}],"purl":"pkg:pub/file_selector_windows@0.9.3%2B5","type":"library","bom-ref":"pkg:pub/file_selector_windows@0.9.3+5","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"fixnum","version":"1.1.1","scope":"required","hashes":[{"alg":"SHA-256","content":"b6dc7065e46c974bc7c5f143080a6764ec7a4be6da1285ececdc37be96de53be"}],"purl":"pkg:pub/fixnum@1.1.1","type":"library","bom-ref":"pkg:pub/fixnum@1.1.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"flutter","version":"0.0.0","scope":"required","purl":"pkg:pub/flutter@0.0.0","type":"library","bom-ref":"pkg:pub/flutter@0.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"flutter_lints","version":"6.0.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"3105dc8492f6183fb076ccf1f351ac3d60564bff92e20bfc4af9cc1651f4e7e1"}],"purl":"pkg:pub/flutter_lints@6.0.0","type":"library","bom-ref":"pkg:pub/flutter_lints@6.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"flutter_localizations","version":"0.0.0","scope":"required","purl":"pkg:pub/flutter_localizations@0.0.0","type":"library","bom-ref":"pkg:pub/flutter_localizations@0.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"flutter_test","version":"0.0.0","scope":"optional","purl":"pkg:pub/flutter_test@0.0.0","type":"library","bom-ref":"pkg:pub/flutter_test@0.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"flutter_web_plugins","version":"0.0.0","scope":"required","purl":"pkg:pub/flutter_web_plugins@0.0.0","type":"library","bom-ref":"pkg:pub/flutter_web_plugins@0.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"http","version":"1.6.0","scope":"required","hashes":[{"alg":"SHA-256","content":"87721a4a50b19c7f1d49001e51409bddc46303966ce89a65af4f4e6004896412"}],"purl":"pkg:pub/http@1.6.0","type":"library","bom-ref":"pkg:pub/http@1.6.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"http_parser","version":"4.1.2","scope":"required","hashes":[{"alg":"SHA-256","content":"178d74305e7866013777bab2c3d8726205dc5a4dd935297175b19a23a2e66571"}],"purl":"pkg:pub/http_parser@4.1.2","type":"library","bom-ref":"pkg:pub/http_parser@4.1.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]},"tags":["parse"]},{"group":"","name":"image","version":"4.9.1","scope":"required","hashes":[{"alg":"SHA-256","content":"6300175e00616bbc832e2fc91bfa4d776af5402c81c7151bee6905bb08473c52"}],"purl":"pkg:pub/image@4.9.1","type":"library","bom-ref":"pkg:pub/image@4.9.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"intl","version":"0.20.2","scope":"required","hashes":[{"alg":"SHA-256","content":"3df61194eb431efc39c4ceba583b95633a403f46c9fd341e550ce0bfa50e9aa5"}],"purl":"pkg:pub/intl@0.20.2","type":"library","bom-ref":"pkg:pub/intl@0.20.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"json_annotation","version":"4.12.0","scope":"required","hashes":[{"alg":"SHA-256","content":"2a743920d81b7910627f68ee2c9ac1fc0bfee32b9fc3403587d7c6791ca12f80"}],"purl":"pkg:pub/json_annotation@4.12.0","type":"library","bom-ref":"pkg:pub/json_annotation@4.12.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"leak_tracker","version":"11.0.2","scope":"required","hashes":[{"alg":"SHA-256","content":"33e2e26bdd85a0112ec15400c8cbffea70d0f9c3407491f672a2fad47915e2de"}],"purl":"pkg:pub/leak_tracker@11.0.2","type":"library","bom-ref":"pkg:pub/leak_tracker@11.0.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"leak_tracker_flutter_testing","version":"3.0.10","scope":"required","hashes":[{"alg":"SHA-256","content":"1dbc140bb5a23c75ea9c4811222756104fbcd1a27173f0c34ca01e16bea473c1"}],"purl":"pkg:pub/leak_tracker_flutter_testing@3.0.10","type":"library","bom-ref":"pkg:pub/leak_tracker_flutter_testing@3.0.10","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"leak_tracker_testing","version":"3.0.2","scope":"required","hashes":[{"alg":"SHA-256","content":"8d5a2d49f4a66b49744b23b018848400d23e54caf9463f4eb20df3eb8acb2eb1"}],"purl":"pkg:pub/leak_tracker_testing@3.0.2","type":"library","bom-ref":"pkg:pub/leak_tracker_testing@3.0.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"lints","version":"6.1.0","scope":"required","hashes":[{"alg":"SHA-256","content":"12f842a479589fea194fe5c5a3095abc7be0c1f2ddfa9a0e76aed1dbd26a87df"}],"purl":"pkg:pub/lints@6.1.0","type":"library","bom-ref":"pkg:pub/lints@6.1.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"matcher","version":"0.12.19","scope":"required","hashes":[{"alg":"SHA-256","content":"dc0b7dc7651697ea4ff3e69ef44b0407ea32c487a39fff6a4004fa585e901861"}],"purl":"pkg:pub/matcher@0.12.19","type":"library","bom-ref":"pkg:pub/matcher@0.12.19","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"material_color_utilities","version":"0.13.0","scope":"required","hashes":[{"alg":"SHA-256","content":"9c337007e82b1889149c82ed242ed1cb24a66044e30979c44912381e9be4c48b"}],"purl":"pkg:pub/material_color_utilities@0.13.0","type":"library","bom-ref":"pkg:pub/material_color_utilities@0.13.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"meta","version":"1.18.0","scope":"required","hashes":[{"alg":"SHA-256","content":"1741988757a65eb6b36abe716829688cf01910bbf91c34354ff7ec1c3de2b349"}],"purl":"pkg:pub/meta@1.18.0","type":"library","bom-ref":"pkg:pub/meta@1.18.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"nested","version":"1.0.0","scope":"required","hashes":[{"alg":"SHA-256","content":"03bac4c528c64c95c722ec99280375a6f2fc708eec17c7b3f07253b626cd2a20"}],"purl":"pkg:pub/nested@1.0.0","type":"library","bom-ref":"pkg:pub/nested@1.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"pasteboard","version":"0.5.0","scope":"required","hashes":[{"alg":"SHA-256","content":"fedbe8da188d2f713aa8b01260737342e6e1087534a3ab26e1a719f8d3e8f32f"}],"purl":"pkg:pub/pasteboard@0.5.0","type":"library","bom-ref":"pkg:pub/pasteboard@0.5.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"path","version":"1.9.1","scope":"required","hashes":[{"alg":"SHA-256","content":"75cca69d1490965be98c73ceaea117e8a04dd21217b37b292c9ddbec0d955bc5"}],"purl":"pkg:pub/path@1.9.1","type":"library","bom-ref":"pkg:pub/path@1.9.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"path_provider_linux","version":"2.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"58c2005f147315b11e9b4a7bc889cd5203e250cba8e3f012dae259b4972b5c16"}],"purl":"pkg:pub/path_provider_linux@2.2.2","type":"library","bom-ref":"pkg:pub/path_provider_linux@2.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"path_provider_platform_interface","version":"2.1.3","scope":"required","hashes":[{"alg":"SHA-256","content":"484838772624c3a4b94f1e44a3e19897fee738f2d5c4ce448443b0417f7c9dda"}],"purl":"pkg:pub/path_provider_platform_interface@2.1.3","type":"library","bom-ref":"pkg:pub/path_provider_platform_interface@2.1.3","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"path_provider_windows","version":"2.3.0","scope":"required","hashes":[{"alg":"SHA-256","content":"bd6f00dbd873bfb70d0761682da2b3a2c2fccc2b9e84c495821639601d81afe7"}],"purl":"pkg:pub/path_provider_windows@2.3.0","type":"library","bom-ref":"pkg:pub/path_provider_windows@2.3.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"petitparser","version":"7.0.2","scope":"required","hashes":[{"alg":"SHA-256","content":"91bd59303e9f769f108f8df05e371341b15d59e995e6806aefab827b58336675"}],"purl":"pkg:pub/petitparser@7.0.2","type":"library","bom-ref":"pkg:pub/petitparser@7.0.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]},"tags":["parse"]},{"group":"","name":"platform","version":"3.1.6","scope":"required","hashes":[{"alg":"SHA-256","content":"5d6b1b0036a5f331ebc77c850ebc8506cbc1e9416c27e59b439f917a902a4984"}],"purl":"pkg:pub/platform@3.1.6","type":"library","bom-ref":"pkg:pub/platform@3.1.6","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"plugin_platform_interface","version":"2.1.8","scope":"required","hashes":[{"alg":"SHA-256","content":"4820fbfdb9478b1ebae27888254d445073732dae3d6ea81f0b7e06d5dedc3f02"}],"purl":"pkg:pub/plugin_platform_interface@2.1.8","type":"library","bom-ref":"pkg:pub/plugin_platform_interface@2.1.8","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"posix","version":"6.5.2","scope":"required","hashes":[{"alg":"SHA-256","content":"bc1bad54ad2b735816e31f8d4600cfde6c7839975085ddfbca48b6c9f7c4044e"}],"purl":"pkg:pub/posix@6.5.2","type":"library","bom-ref":"pkg:pub/posix@6.5.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"provider","version":"6.1.5+1","scope":"required","hashes":[{"alg":"SHA-256","content":"4e82183fa20e5ca25703ead7e05de9e4cceed1fbd1eadc1ac3cb6f565a09f272"}],"purl":"pkg:pub/provider@6.1.5%2B1","type":"library","bom-ref":"pkg:pub/provider@6.1.5+1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"screen_retriever","version":"0.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"ace919117a7520c13a50a6259e60c4a0d4cbe98809468792a91b5c5adada2aa6"}],"purl":"pkg:pub/screen_retriever@0.2.2","type":"library","bom-ref":"pkg:pub/screen_retriever@0.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"screen_retriever_linux","version":"0.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"7b52006a5ceae1f3d5af7f77188c3290d6e7d8ded16d99809bea84967c65c257"}],"purl":"pkg:pub/screen_retriever_linux@0.2.2","type":"library","bom-ref":"pkg:pub/screen_retriever_linux@0.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"screen_retriever_macos","version":"0.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"a1489b99cce597c45a54b9aae1cd94c8d4705353b7e0bb2457a6e4de44e0ad8a"}],"purl":"pkg:pub/screen_retriever_macos@0.2.2","type":"library","bom-ref":"pkg:pub/screen_retriever_macos@0.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"screen_retriever_platform_interface","version":"0.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"94a5535277510a63184ca178ce12a1449bc0b38618879aa1c18bf57369c5064a"}],"purl":"pkg:pub/screen_retriever_platform_interface@0.2.2","type":"library","bom-ref":"pkg:pub/screen_retriever_platform_interface@0.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"screen_retriever_windows","version":"0.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"dafc6922b0bfbf1d48cf3ccbf519b4fff47bdcb820da1728ea6db675fecc9324"}],"purl":"pkg:pub/screen_retriever_windows@0.2.2","type":"library","bom-ref":"pkg:pub/screen_retriever_windows@0.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences","version":"2.5.5","scope":"required","hashes":[{"alg":"SHA-256","content":"c3025c5534b01739267eb7d76959bbc25a6d10f6988e1c2a3036940133dd10bf"}],"purl":"pkg:pub/shared_preferences@2.5.5","type":"library","bom-ref":"pkg:pub/shared_preferences@2.5.5","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences_android","version":"2.4.27","scope":"required","hashes":[{"alg":"SHA-256","content":"0634e64bd719f89c012f392938e173521f535d3ecaf66558fa94a056d22b5cc7"}],"purl":"pkg:pub/shared_preferences_android@2.4.27","type":"library","bom-ref":"pkg:pub/shared_preferences_android@2.4.27","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences_foundation","version":"2.5.6","scope":"required","hashes":[{"alg":"SHA-256","content":"4e7eaffc2b17ba398759f1151415869a34771ba11ebbccd1b0145472a619a64f"}],"purl":"pkg:pub/shared_preferences_foundation@2.5.6","type":"library","bom-ref":"pkg:pub/shared_preferences_foundation@2.5.6","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences_linux","version":"2.4.1","scope":"required","hashes":[{"alg":"SHA-256","content":"580abfd40f415611503cae30adf626e6656dfb2f0cee8f465ece7b6defb40f2f"}],"purl":"pkg:pub/shared_preferences_linux@2.4.1","type":"library","bom-ref":"pkg:pub/shared_preferences_linux@2.4.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences_platform_interface","version":"2.4.2","scope":"required","hashes":[{"alg":"SHA-256","content":"649dc798a33931919ea356c4305c2d1f81619ea6e92244070b520187b5140ef9"}],"purl":"pkg:pub/shared_preferences_platform_interface@2.4.2","type":"library","bom-ref":"pkg:pub/shared_preferences_platform_interface@2.4.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences_web","version":"2.4.3","scope":"required","hashes":[{"alg":"SHA-256","content":"c49bd060261c9a3f0ff445892695d6212ff603ef3115edbb448509d407600019"}],"purl":"pkg:pub/shared_preferences_web@2.4.3","type":"library","bom-ref":"pkg:pub/shared_preferences_web@2.4.3","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"shared_preferences_windows","version":"2.4.1","scope":"required","hashes":[{"alg":"SHA-256","content":"94ef0f72b2d71bc3e700e025db3710911bd51a71cefb65cc609dd0d9a982e3c1"}],"purl":"pkg:pub/shared_preferences_windows@2.4.1","type":"library","bom-ref":"pkg:pub/shared_preferences_windows@2.4.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"sky_engine","version":"0.0.0","scope":"required","purl":"pkg:pub/sky_engine@0.0.0","type":"library","bom-ref":"pkg:pub/sky_engine@0.0.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"slate_ui","version":"0.2.0","scope":"required","purl":"pkg:pub/slate_ui@0.2.0","type":"library","bom-ref":"pkg:pub/slate_ui@0.2.0","properties":[{"name":"cdx:pub:registry","value":"https://github.com/alpinsuite/ui-kit.git"},{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"source_span","version":"1.10.2","scope":"required","hashes":[{"alg":"SHA-256","content":"56a02f1f4cd1a2d96303c0144c93bd6d909eea6bee6bf5a0e0b685edbd4c47ab"}],"purl":"pkg:pub/source_span@1.10.2","type":"library","bom-ref":"pkg:pub/source_span@1.10.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"stack_trace","version":"1.12.1","scope":"required","hashes":[{"alg":"SHA-256","content":"8b27215b45d22309b5cddda1aa2b19bdfec9df0e765f2de506401c071d38d1b1"}],"purl":"pkg:pub/stack_trace@1.12.1","type":"library","bom-ref":"pkg:pub/stack_trace@1.12.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"stream_channel","version":"2.1.4","scope":"required","hashes":[{"alg":"SHA-256","content":"969e04c80b8bcdf826f8f16579c7b14d780458bd97f56d107d3950fdbeef059d"}],"purl":"pkg:pub/stream_channel@2.1.4","type":"library","bom-ref":"pkg:pub/stream_channel@2.1.4","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"string_scanner","version":"1.4.1","scope":"required","hashes":[{"alg":"SHA-256","content":"921cd31725b72fe181906c6a94d987c78e3b98c2e205b397ea399d4054872b43"}],"purl":"pkg:pub/string_scanner@1.4.1","type":"library","bom-ref":"pkg:pub/string_scanner@1.4.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"term_glyph","version":"1.2.2","scope":"required","hashes":[{"alg":"SHA-256","content":"7f554798625ea768a7518313e58f83891c7f5024f88e46e7182a4558850a4b8e"}],"purl":"pkg:pub/term_glyph@1.2.2","type":"library","bom-ref":"pkg:pub/term_glyph@1.2.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"test_api","version":"0.7.11","scope":"required","hashes":[{"alg":"SHA-256","content":"949a932224383300f01be9221c39180316445ecb8e7547f70a41a35bf421fb9e"}],"purl":"pkg:pub/test_api@0.7.11","type":"library","bom-ref":"pkg:pub/test_api@0.7.11","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"typed_data","version":"1.4.0","scope":"required","hashes":[{"alg":"SHA-256","content":"f9049c039ebfeb4cf7a7104a675823cd72dba8297f264b6637062516699fa006"}],"purl":"pkg:pub/typed_data@1.4.0","type":"library","bom-ref":"pkg:pub/typed_data@1.4.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"universal_platform","version":"1.1.0","scope":"required","hashes":[{"alg":"SHA-256","content":"64e16458a0ea9b99260ceb5467a214c1f298d647c659af1bff6d3bf82536b1ec"}],"purl":"pkg:pub/universal_platform@1.1.0","type":"library","bom-ref":"pkg:pub/universal_platform@1.1.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"uuid","version":"4.6.0","scope":"required","hashes":[{"alg":"SHA-256","content":"9b129329f58692f6e6578329498a8fe9fbe98f090beb764ffbb8ee2eadd01dcd"}],"purl":"pkg:pub/uuid@4.6.0","type":"library","bom-ref":"pkg:pub/uuid@4.6.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"vector_math","version":"2.2.0","scope":"required","hashes":[{"alg":"SHA-256","content":"d530bd74fea330e6e364cda7a85019c434070188383e1cd8d9777ee586914c5b"}],"purl":"pkg:pub/vector_math@2.2.0","type":"library","bom-ref":"pkg:pub/vector_math@2.2.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"vm_service","version":"15.2.0","scope":"required","hashes":[{"alg":"SHA-256","content":"0016aef94fc66495ac78af5859181e3f3bf2026bd8eecc72b9565601e19ab360"}],"purl":"pkg:pub/vm_service@15.2.0","type":"library","bom-ref":"pkg:pub/vm_service@15.2.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"web","version":"1.1.1","scope":"required","hashes":[{"alg":"SHA-256","content":"868d88a33d8a87b18ffc05f9f030ba328ffefba92d6c127917a2ba740f9cfe4a"}],"purl":"pkg:pub/web@1.1.1","type":"library","bom-ref":"pkg:pub/web@1.1.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"window_manager","version":"0.5.2","scope":"required","hashes":[{"alg":"SHA-256","content":"05c231fd7b23d2380f14c5cc10b7b93d60d4fa4a2fb4e0f032de27e44b5560e9"}],"purl":"pkg:pub/window_manager@0.5.2","type":"library","bom-ref":"pkg:pub/window_manager@0.5.2","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"xdg_directories","version":"1.1.0","scope":"required","hashes":[{"alg":"SHA-256","content":"7a3f37b05d989967cdddcbb571f1ea834867ae2faa29725fd085180e0883aa15"}],"purl":"pkg:pub/xdg_directories@1.1.0","type":"library","bom-ref":"pkg:pub/xdg_directories@1.1.0","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}},{"group":"","name":"xml","version":"7.0.1","scope":"required","hashes":[{"alg":"SHA-256","content":"67f0aff7be013d107995e9b75bf4e7f2c3ef2dfdb2c8e68024bba0a7fd5756a4"}],"purl":"pkg:pub/xml@7.0.1","type":"library","bom-ref":"pkg:pub/xml@7.0.1","properties":[{"name":"SrcFile","value":"pubspec.lock"}],"evidence":{"identity":[{"field":"purl","confidence":1,"methods":[{"technique":"manifest-analysis","confidence":1,"value":"pubspec.lock"}],"concludedValue":"pubspec.lock"}]}}],"dependencies":[{"ref":"pkg:pub/paint@0.2.0+4","dependsOn":["pkg:pub/collection@1.19.1","pkg:pub/desktop_drop@0.7.1","pkg:pub/file_selector@1.1.0","pkg:pub/flutter@0.0.0","pkg:pub/flutter_localizations@0.0.0","pkg:pub/image@4.9.1","pkg:pub/intl@0.20.2","pkg:pub/pasteboard@0.5.0","pkg:pub/path@1.9.1","pkg:pub/provider@6.1.5+1","pkg:pub/shared_preferences@2.5.5","pkg:pub/slate_ui@0.2.0","pkg:pub/window_manager@0.5.2"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:pub/paint@0.2.0+4"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-09-19T17:54:07Z","text":"This Software Bill-of-Materials (SBOM) document was created on Saturday, September 19, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'paint' with version '0.2.0+4'."}]}