{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "serialNumber": "urn:uuid:c13e6c53-988d-4262-b6e6-d4f0efab81bd",
    "version": 1,
    "metadata": {
        "timestamp": "2026-07-28T18:29:16Z",
        "tools": {
            "components": [
                {
                    "type": "application",
                    "name": "php",
                    "version": "8.3.33"
                }
            ]
        },
        "component": {
            "type": "application",
            "bom-ref": "pkg:generic/php@8.3.33",
            "name": "php",
            "version": "8.3.33",
            "purl": "pkg:generic/php@8.3.33",
            "cpe": "cpe:2.3:a:php:php:8.3.33:*:*:*:*:*:*:*",
            "supplier": {
                "name": "PHP Group"
            },
            "licenses": [
                {
                    "license": {
                        "id": "PHP-3.01"
                    }
                }
            ],
            "properties": [
                {
                    "name": "php:dependency-sbom-status",
                    "value": "present"
                },
                {
                    "name": "php:artifact-file-name",
                    "value": "php-8.3.33-Win32-vs16-x86.zip"
                },
                {
                    "name": "php:artifact-download-location",
                    "value": "https://downloads.php.net/~windows/releases/php-8.3.33-Win32-vs16-x86.zip"
                },
                {
                    "name": "php:artifact-architecture",
                    "value": "x86"
                },
                {
                    "name": "php:artifact-thread-safety",
                    "value": "ts"
                },
                {
                    "name": "php:artifact-compiler",
                    "value": "vs16"
                }
            ],
            "copyright": "Copyright (c) 1999 - 2024 The PHP Group. All rights reserved.",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ba37894e00a37012631ffa062556e85a64cecaa44746c6c0b65f1a0915e869bf"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/releases/php-8.3.33-Win32-vs16-x86.zip"
                }
            ]
        }
    },
    "components": [
        {
            "type": "library",
            "bom-ref": "pkg:generic/berkeley-uuencode",
            "name": "Berkeley uuencode",
            "version": "snapshot-25636b9321c2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/berkeley-uuencode",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause-UC"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/uuencode.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/boost-context-assembly",
            "name": "Boost.Context assembly",
            "version": "snapshot-e2dd9fce4358",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/boost-context-assembly",
            "licenses": [
                {
                    "license": {
                        "id": "BSL-1.0"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e2dd9fce43580d6e05005ea2e29c7791eb682871a0d7707f560f12c032db558d"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "Zend/asm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e2dd9fce43580d6e05005ea2e29c7791eb682871a0d7707f560f12c032db558d"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/crypt_blowfish@1.3",
            "name": "crypt_blowfish",
            "version": "1.3",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/crypt_blowfish@1.3",
            "licenses": [
                {
                    "license": {
                        "id": "bcrypt-Solar-Designer"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_blowfish.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/dynasm@1.5.0",
            "name": "DynASM",
            "version": "1.5.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/dynasm@1.5.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "75e0d7c7b8e447d60d9a6b99ee89d5184bb40d343bf4dad7cb38dd559a283c02"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/opcache/jit/dynasm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "75e0d7c7b8e447d60d9a6b99ee89d5184bb40d343bf4dad7cb38dd559a283c02"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/freesec-libcrypt",
            "name": "FreeSec libcrypt",
            "version": "snapshot-6b1d1d57b0af",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/freesec-libcrypt",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_freesec.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libarchive-format-octal",
            "name": "libarchive tar format_octal",
            "version": "snapshot-7a32320aab25",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libarchive-format-octal",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7a32320aab257e8da46c08fbe1eb0fe90d781201e044b18ad862399aaac85eea"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/tar.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "7a32320aab257e8da46c08fbe1eb0fe90d781201e044b18ad862399aaac85eea"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libavifinfo@96f34d945ac7dac229feddfa94dbae66e202b838",
            "name": "libavifinfo",
            "version": "96f34d945ac7dac229feddfa94dbae66e202b838",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libavifinfo@96f34d945ac7dac229feddfa94dbae66e202b838",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a1d412355a34d294de9d736e1d64411b5eae62b501885f09e2dbacef45a7011b"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/libavifinfo"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "a1d412355a34d294de9d736e1d64411b5eae62b501885f09e2dbacef45a7011b"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libbcmath@0.2",
            "name": "libbcmath",
            "version": "0.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libbcmath@0.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6297b19f06aabd3ac32312ba387c08223e45bef90973ca2bb4e718aa3c3bc697"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/bcmath/libbcmath"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6297b19f06aabd3ac32312ba387c08223e45bef90973ca2bb4e718aa3c3bc697"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libgd@2.0.35",
            "name": "libgd",
            "version": "2.0.35",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libgd@2.0.35",
            "licenses": [
                {
                    "license": {
                        "id": "GD"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d60dd0d3a39ccaff2371a3219d027f9404ae22f0ada530644dbfa80f8709d212"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/gd/libgd"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d60dd0d3a39ccaff2371a3219d027f9404ae22f0ada530644dbfa80f8709d212"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmagic@5.43",
            "name": "libmagic",
            "version": "5.43",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmagic@5.43",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a20daa17dbcfec371108ee65b82fbf80097a45792487b16e003392ed2f703e9a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/fileinfo/libmagic"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "a20daa17dbcfec371108ee65b82fbf80097a45792487b16e003392ed2f703e9a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmbfl@1.3.2",
            "name": "libmbfl",
            "version": "1.3.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmbfl@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e9fc39c045f851af8103798af8331f07d3c334375395b68e734d47a85a3eb8fb"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/libmbfl"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e9fc39c045f851af8103798af8331f07d3c334375395b68e734d47a85a3eb8fb"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libzip-zip-dirent",
            "name": "libzip zip_dirent",
            "version": "snapshot-c970906573a3",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libzip-zip-dirent",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c970906573a35709a604d945f445c38ee8b4870f04b28e719161de46979c6003"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/zip.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "c970906573a35709a604d945f445c38ee8b4870f04b28e719161de46979c6003"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/mtrand@1.0",
            "name": "MTRand",
            "version": "1.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/mtrand@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "77f5c2b60e54194044b4bd5f23c633132358bfd3373c8646f3209e0a662e4608"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/random/engine_mt19937.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "77f5c2b60e54194044b4bd5f23c633132358bfd3373c8646f3209e0a662e4608"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openldap-ucgendat",
            "name": "OpenLDAP ucgendat",
            "version": "snapshot-3977da6ead0f",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/openldap-ucgendat",
            "licenses": [
                {
                    "expression": "OLDAP-2.8 AND MIT"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3977da6ead0fa8468124aed97f207f095b5e0cfbed01406522b9928b33824f42"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/ucgendat/ucgendat.php"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "3977da6ead0fa8468124aed97f207f095b5e0cfbed01406522b9928b33824f42"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2@10.42",
            "name": "pcre2lib",
            "version": "10.42",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/pcre2@10.42",
            "licenses": [
                {
                    "expression": "BSD-3-Clause WITH PCRE2-exception"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "8269856107cb65b28d702b1652c47f5a356f78bdf7d26ac0960b9006ae09d8ae"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/pcre/pcre2lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "8269856107cb65b28d702b1652c47f5a356f78bdf7d26ac0960b9006ae09d8ae"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/snprintf",
            "name": "snprintf",
            "version": "snapshot-5e62e96d26ed",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/snprintf",
            "licenses": [
                {
                    "expression": "ISC AND Apache-1.0"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "5e62e96d26ed228adc7ec6c8e59e61347f461887400a055fed5a0fe86532508c"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/snprintf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "5e62e96d26ed228adc7ec6c8e59e61347f461887400a055fed5a0fe86532508c"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcat",
            "name": "strlcat",
            "version": "snapshot-d2244e6a54fe",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcat",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcat.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcpy",
            "name": "strlcpy",
            "version": "snapshot-144d697952d1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcpy",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcpy.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strnatcmp",
            "name": "strnatcmp",
            "version": "snapshot-e14f21965b39",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strnatcmp",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/strnatcmp.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/tcl-scanf@8.3.0",
            "name": "Tcl scanf implementation",
            "version": "8.3.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/tcl-scanf@8.3.0",
            "licenses": [
                {
                    "license": {
                        "id": "TCL"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/scanf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/timelib@2022.14",
            "name": "timelib",
            "version": "2022.14",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/timelib@2022.14",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b4d9d9a2600ab0173ea8c34a6d289dc463895ec3169cd7173e514d58090baad0"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/date/lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "b4d9d9a2600ab0173ea8c34a6d289dc463895ec3169cd7173e514d58090baad0"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xkcp-sha3",
            "name": "XKCP SHA-3",
            "version": "snapshot-aba3170bb6e1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xkcp-sha3",
            "licenses": [
                {
                    "expression": "CC0-1.0 AND Brian-Gladman-3-Clause"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/sha3"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xxhash@0.8.1",
            "name": "xxHash",
            "version": "0.8.1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xxhash@0.8.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6d53b7ccd8e677b843085077dfe13a2377cb2223973c9ca1edc469c208183420"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.3.33 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/xxhash"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6d53b7ccd8e677b843085077dfe13a2377cb2223973c9ca1edc469c208183420"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/ICU@72.1-1",
            "name": "ICU",
            "version": "72.1-1",
            "purl": "pkg:generic/icu@72.1",
            "licenses": [
                {
                    "license": {
                        "id": "Unicode-DFS-2016"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/ICU-72.1-1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/unicode-org/icu"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/unicode-org/icu/tree/release-72-1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/icu4c.git@c4b64c7513cd7c94c19eb2745f721be4bff194de"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "icu4c"
                },
                {
                    "name": "php:component",
                    "value": "ICU"
                },
                {
                    "name": "php:version",
                    "value": "72.1-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "72.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "unicode-org/icu"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/unicode-org/icu"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "release-72-1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/icu4c"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/icu4c"
                },
                {
                    "name": "php:source-ref",
                    "value": "icu4c-72.1-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "c4b64c7513cd7c94c19eb2745f721be4bff194de"
                },
                {
                    "name": "php:input-version",
                    "value": "icu4c-72.1-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.3"
                },
                {
                    "name": "php:package-file-name",
                    "value": "ICU-72.1-1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/ICU-72.1-1-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:ICU:72.1",
                        "name": "ICU",
                        "version": "72.1",
                        "purl": "pkg:generic/icu@72.1"
                    }
                ],
                "notes": "Built from winlibs/icu4c ref icu4c-72.1-1 at commit c4b64c7513cd7c94c19eb2745f721be4bff194de with upstream identity unicode-org/icu tag release-72-1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apache@2.4.68",
            "name": "apache",
            "version": "2.4.68",
            "purl": "pkg:generic/apache-httpd@2.4.68",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/apache-2.4.68-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/apache/httpd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/httpd/tree/2.4.68"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/apache/httpd.git@736bb657405eb73fd68a64772c3a908807bdb887"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "apache"
                },
                {
                    "name": "php:component",
                    "value": "apache"
                },
                {
                    "name": "php:version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:source-ref",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-commit",
                    "value": "736bb657405eb73fd68a64772c3a908807bdb887"
                },
                {
                    "name": "php:input-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "apache-2.4.68-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/apache-2.4.68-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:apache:http_server:2.4.68:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/google-brotli@1.2.0",
            "name": "google/brotli",
            "version": "1.2.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "google"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "name": "apr-iconv",
            "version": "1.2.2",
            "purl": "pkg:generic/apr-iconv@1.2.2",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/apache/apr-iconv"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/apr-iconv/tree/1.2.2"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "apr-iconv-source/apr-iconv-1.2.2"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/apr-iconv"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/apr-iconv"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.2.2"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-1.6.3.tar.bz2@1.6.3",
            "name": "apr-util-1.6.3.tar.bz2",
            "version": "1.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-x86-windows@404e205e924c19cff030fd6eea819c10cd35ca46d9713930c2306a152f21e2ac",
            "name": "lua:x86-windows",
            "version": "404e205e924c19cff030fd6eea819c10cd35ca46d9713930c2306a152f21e2ac",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/madler-zlib@1.3.2",
            "name": "madler/zlib",
            "version": "1.3.2",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "madler"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/expat",
            "name": "expat",
            "version": "2.8.2",
            "purl": "pkg:github/microsoft/vcpkg#ports/expat",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-x86-windows@c67f1fbd544425cac5babca74e306fe946d5eeb88848a6cd06cefe63e4f03bf1",
            "name": "curl:x86-windows",
            "version": "c67f1fbd544425cac5babca74e306fe946d5eeb88848a6cd06cefe63e4f03bf1",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "name": "apr-util",
            "version": "1.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-1.7.6.tar.bz2@1.7.6",
            "name": "apr-1.7.6.tar.bz2",
            "version": "1.7.6",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/PCRE2Project-pcre2@10.47",
            "name": "PCRE2Project/pcre2",
            "version": "10.47",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PCRE2Project"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/brotli",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/brotli",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/openssl",
            "name": "openssl",
            "version": "3.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/openssl",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "name": "nghttp2",
            "version": "1.69.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2-x86-windows@66b06b634d409934241378b7c6e11aa27130b93f25b11940902c58d217f91eb6",
            "name": "pcre2:x86-windows",
            "version": "66b06b634d409934241378b7c6e11aa27130b93f25b11940902c58d217f91eb6",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-nghttp2@1.69.0",
            "name": "nghttp2/nghttp2",
            "version": "1.69.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "nghttp2"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zherczeg-sljit@45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "name": "zherczeg/sljit",
            "version": "45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "licenses": [
                {
                    "expression": "BSD-2-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Zoltan Herczeg"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr",
            "name": "apr",
            "version": "1.7.6#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-x86-windows@cde352c0d29047e4044d0866a632d0da9f89de9a40ef071773f784e835681677",
            "name": "apr-util:x86-windows",
            "version": "cde352c0d29047e4044d0866a632d0da9f89de9a40ef071773f784e835681677",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/brotli-x86-windows@45561f6d8fc4513ef0fc505e959e83feea9c14945d96867c65086f0f2cb868e7",
            "name": "brotli:x86-windows",
            "version": "45561f6d8fc4513ef0fc505e959e83feea9c14945d96867c65086f0f2cb868e7",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "name": "pcre2",
            "version": "10.47#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/curl",
            "name": "curl",
            "version": "8.21.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/curl",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-5.5.0.tar.gz@5.5.0",
            "name": "lua-5.5.0.tar.gz",
            "version": "5.5.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Lua.org"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-openssl@3.6.3",
            "name": "openssl/openssl",
            "version": "3.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "openssl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/akheron-jansson@2.15.1",
            "name": "akheron/jansson",
            "version": "2.15.1",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "akheron"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/expat-x86-windows@b946084fff1d02351b73e18dfdc3c33121f0053bab0b3a28143634552e57f6e5",
            "name": "expat:x86-windows",
            "version": "b946084fff1d02351b73e18dfdc3c33121f0053bab0b3a28143634552e57f6e5",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/lua",
            "name": "lua",
            "version": "5.5.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/lua",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-x86-windows@bb9d90144c3ccdaa2553ed8db4b224bf4efb0220216d0c33e75b5152e6a6dbfa",
            "name": "nghttp2:x86-windows",
            "version": "bb9d90144c3ccdaa2553ed8db4b224bf4efb0220216d0c33e75b5152e6a6dbfa",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/jansson-x86-windows@45a1ce57dcda1bb3e7e3c7f6a6fff7f833c45d08cd78053382069d79e71ad2bf",
            "name": "jansson:x86-windows",
            "version": "45a1ce57dcda1bb3e7e3c7f6a6fff7f833c45d08cd78053382069d79e71ad2bf",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-x86-windows@5004cf32f662805d6cb9ad098a55a83c36f9a9d707f32f076ed3674363e3e1d6",
            "name": "openssl:x86-windows",
            "version": "5004cf32f662805d6cb9ad098a55a83c36f9a9d707f32f076ed3674363e3e1d6",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zlib-x86-windows@41e49cb6fab4fc6dbfd3ff54bb10311f1911cb70c099e7e6bfb3756847823969",
            "name": "zlib:x86-windows",
            "version": "41e49cb6fab4fc6dbfd3ff54bb10311f1911cb70c099e7e6bfb3756847823969",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/jansson",
            "name": "jansson",
            "version": "2.15.1",
            "purl": "pkg:github/microsoft/vcpkg#ports/jansson",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libexpat-libexpat@2.8.2",
            "name": "libexpat/libexpat",
            "version": "2.8.2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "libexpat"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/zlib",
            "name": "zlib",
            "version": "1.3.2#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/zlib",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-curl@8.21.0",
            "name": "curl/curl",
            "version": "8.21.0",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "curl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-x86-windows@a14f230fe254055533f01cdd08b020c2f2ed1455da85c949f6089896a5f91342",
            "name": "apr:x86-windows",
            "version": "a14f230fe254055533f01cdd08b020c2f2ed1455da85c949f6089896a5f91342",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/brotli@1.2.0",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:generic/brotli@1.2.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/brotli-1.2.0-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/google/brotli"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/google/brotli/tree/v1.2.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/google/brotli.git@028fb5a23661f123017c060daa546b55cf4bde29"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "brotli"
                },
                {
                    "name": "php:component",
                    "value": "brotli"
                },
                {
                    "name": "php:version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "028fb5a23661f123017c060daa546b55cf4bde29"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "brotli-1.2.0-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/brotli-1.2.0-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:google:brotli:1.2.0:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/c-client@2007f-1",
            "name": "c-client",
            "version": "2007f-1",
            "purl": "pkg:generic/c-client@2007f",
            "licenses": [
                {
                    "expression": "Apache-2.0 AND BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/c-client-2007f-1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/winlibs/imap"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/winlibs/imap/tree/imap-2007f"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/imap.git@4f5969e9dd677122f30416de044576644f612c71"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "imap"
                },
                {
                    "name": "php:component",
                    "value": "c-client"
                },
                {
                    "name": "php:version",
                    "value": "2007f-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2007f"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "winlibs/imap"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/winlibs/imap"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "imap-2007f"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/imap"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/imap"
                },
                {
                    "name": "php:source-ref",
                    "value": "imap-2007f-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "4f5969e9dd677122f30416de044576644f612c71"
                },
                {
                    "name": "php:input-version",
                    "value": "imap-2007f-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "c-client-2007f-1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/c-client-2007f-1-vs16-x86.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/fbclient@3.0.14",
            "name": "fbclient",
            "version": "3.0.14",
            "purl": "pkg:generic/firebird@3.0.14",
            "licenses": [
                {
                    "expression": "Interbase-1.0 AND LicenseRef-fbclient-IDPL-1.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/fbclient-3.0.14-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/FirebirdSQL/firebird/tree/v3.0.14"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "fbclient"
                },
                {
                    "name": "php:component",
                    "value": "fbclient"
                },
                {
                    "name": "php:version",
                    "value": "3.0.14"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.14"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.0.14"
                },
                {
                    "name": "php:source-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.0.14"
                },
                {
                    "name": "php:input-version",
                    "value": "v3.0.14"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "fbclient-3.0.14-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/fbclient-3.0.14-vs16-x86.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/freetype@2.14.3",
            "name": "freetype",
            "version": "2.14.3",
            "purl": "pkg:generic/freetype@2.14.3",
            "licenses": [
                {
                    "expression": "FTL OR GPL-2.0-or-later"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/freetype-2.14.3-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/freetype/freetype"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/freetype/freetype/tree/VER-2-14-3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/freetype.git@3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "freetype"
                },
                {
                    "name": "php:component",
                    "value": "freetype"
                },
                {
                    "name": "php:version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "freetype/freetype"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/freetype/freetype"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "VER-2-14-3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/freetype"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/freetype"
                },
                {
                    "name": "php:source-ref",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                },
                {
                    "name": "php:input-version",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "freetype-2.14.3-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/freetype-2.14.3-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:freetype:freetype:2.14.3:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:freetype:2.14.3",
                        "name": "freetype",
                        "version": "2.14.3",
                        "purl": "pkg:generic/freetype@2.14.3"
                    }
                ],
                "notes": "Built from winlibs/freetype ref freetype-2.14.3 at commit 3d8e776a1f1800dea07d433e20c91e8a9a161c4f with upstream identity freetype/freetype tag VER-2-14-3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/glib@2.88.1-1",
            "name": "glib",
            "version": "2.88.1-1",
            "purl": "pkg:generic/glib@2.88.1",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/glib-2.88.1-1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/glib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/glib/tree/2.88.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/glib.git@dd6ae272f882ba3fb195b181827465993831ff83"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "glib"
                },
                {
                    "name": "php:component",
                    "value": "glib"
                },
                {
                    "name": "php:version",
                    "value": "2.88.1-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.88.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/glib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/glib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.88.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/glib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/glib"
                },
                {
                    "name": "php:source-ref",
                    "value": "glib-2.88.1-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "dd6ae272f882ba3fb195b181827465993831ff83"
                },
                {
                    "name": "php:input-version",
                    "value": "glib-2.88.1-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "glib-2.88.1-1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/glib-2.88.1-1-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:gnome:glib:2.88.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:glib:2.88.1",
                        "name": "glib",
                        "version": "2.88.1",
                        "purl": "pkg:generic/glib@2.88.1"
                    }
                ],
                "notes": "Built from winlibs/glib ref glib-2.88.1-1 at commit dd6ae272f882ba3fb195b181827465993831ff83 with upstream identity GNOME/glib tag 2.88.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libffi@3.6.0",
            "name": "libffi",
            "version": "3.6.0",
            "purl": "pkg:generic/libffi@3.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libffi-3.6.0-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libffi/libffi"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libffi/libffi/tree/v3.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libffi.git@9f75967331946c3ff827e14d74226c15a162e74e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libffi"
                },
                {
                    "name": "php:component",
                    "value": "libffi"
                },
                {
                    "name": "php:version",
                    "value": "3.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libffi/libffi"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libffi/libffi"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libffi"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libffi"
                },
                {
                    "name": "php:source-ref",
                    "value": "libffi-3.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f75967331946c3ff827e14d74226c15a162e74e"
                },
                {
                    "name": "php:input-version",
                    "value": "libffi-3.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libffi-3.6.0-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libffi-3.6.0-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libffi:3.6.0",
                        "name": "libffi",
                        "version": "3.6.0",
                        "purl": "pkg:generic/libffi@3.6.0"
                    }
                ],
                "notes": "Built from winlibs/libffi ref libffi-3.6.0 at commit 9f75967331946c3ff827e14d74226c15a162e74e with upstream identity libffi/libffi tag v3.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libintl@1.0",
            "name": "libintl",
            "version": "1.0",
            "purl": "pkg:generic/gettext@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libintl-1.0-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/gettext.git@cd6fcaeffc493305f9c0081310efa0e063060da6"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "gettext"
                },
                {
                    "name": "php:component",
                    "value": "libintl"
                },
                {
                    "name": "php:version",
                    "value": "1.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/gettext"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/gettext"
                },
                {
                    "name": "php:source-ref",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "cd6fcaeffc493305f9c0081310efa0e063060da6"
                },
                {
                    "name": "php:input-version",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libintl-1.0-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libintl-1.0-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libintl:1.0",
                        "name": "libintl",
                        "version": "1.0",
                        "purl": "pkg:generic/gettext@1.0"
                    }
                ],
                "notes": "Built from winlibs/gettext ref libintl-1.0 at commit cd6fcaeffc493305f9c0081310efa0e063060da6 with upstream identity https://git.savannah.gnu.org/git/gettext.git tag v1.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/zlib@1.3.2",
            "name": "zlib",
            "version": "1.3.2",
            "purl": "pkg:generic/zlib@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/zlib-1.3.2-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/madler/zlib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/madler/zlib/tree/v1.3.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/zlib.git@0089522e62e6b5d4950e62bd20f0cb06a9288413"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "zlib"
                },
                {
                    "name": "php:component",
                    "value": "zlib"
                },
                {
                    "name": "php:version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "madler/zlib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/madler/zlib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.3.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/zlib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/zlib"
                },
                {
                    "name": "php:source-ref",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "0089522e62e6b5d4950e62bd20f0cb06a9288413"
                },
                {
                    "name": "php:input-version",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "zlib-1.3.2-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/zlib-1.3.2-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:zlib:zlib:1.3.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:zlib:1.3.2",
                        "name": "zlib",
                        "version": "1.3.2",
                        "purl": "pkg:generic/zlib@1.3.2"
                    }
                ],
                "notes": "Built from winlibs/zlib ref zlib-1.3.2 at commit 0089522e62e6b5d4950e62bd20f0cb06a9288413 with upstream identity madler/zlib tag v1.3.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libargon2@20190702",
            "name": "libargon2",
            "version": "20190702",
            "purl": "pkg:generic/libargon2@20190702",
            "licenses": [
                {
                    "license": {
                        "id": "CC0-1.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libargon2-20190702-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/P-H-C/phc-winner-argon2/tree/20190702"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/argon2.git@fb53ef37be212380d51877b70f514f3bf2c1ee40"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "argon2"
                },
                {
                    "name": "php:component",
                    "value": "libargon2"
                },
                {
                    "name": "php:version",
                    "value": "20190702"
                },
                {
                    "name": "php:upstream-version",
                    "value": "20190702"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "20190702"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/argon2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/argon2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:source-commit",
                    "value": "fb53ef37be212380d51877b70f514f3bf2c1ee40"
                },
                {
                    "name": "php:input-version",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.3"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libargon2-20190702-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libargon2-20190702-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libargon2:20190702",
                        "name": "libargon2",
                        "version": "20190702",
                        "purl": "pkg:generic/libargon2@20190702"
                    }
                ],
                "notes": "Built from winlibs/argon2 ref libargon2-20190702 at commit fb53ef37be212380d51877b70f514f3bf2c1ee40 with upstream identity P-H-C/phc-winner-argon2 tag 20190702."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libavif@1.4.2",
            "name": "libavif",
            "version": "1.4.2",
            "purl": "pkg:generic/libavif@1.4.2",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libavif-1.4.2-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AOMediaCodec/libavif/tree/v1.4.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libavif.git@14976153789c7ebf2ca24b22215a964bbc5be213"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libavif"
                },
                {
                    "name": "php:component",
                    "value": "libavif"
                },
                {
                    "name": "php:version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.4.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libavif"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libavif"
                },
                {
                    "name": "php:source-ref",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "14976153789c7ebf2ca24b22215a964bbc5be213"
                },
                {
                    "name": "php:input-version",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libavif-1.4.2-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libavif-1.4.2-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libavif:1.4.2",
                        "name": "libavif",
                        "version": "1.4.2",
                        "purl": "pkg:generic/libavif@1.4.2"
                    }
                ],
                "notes": "Built from winlibs/libavif ref libavif-1.4.2 at commit 14976153789c7ebf2ca24b22215a964bbc5be213 with upstream identity AOMediaCodec/libavif tag v1.4.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/aom@3.14.1",
            "name": "aom",
            "version": "3.14.1",
            "purl": "pkg:generic/aom@3.14.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://aomedia.googlesource.com/aom"
                },
                {
                    "type": "vcs",
                    "url": "https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://aomedia.googlesource.com/aom.git@03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "libavif/ext/aom"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libbzip2@1.0.8",
            "name": "libbzip2",
            "version": "1.0.8",
            "purl": "pkg:generic/bzip2@1.0.8",
            "licenses": [
                {
                    "license": {
                        "id": "bzip2-1.0.6"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libbzip2-1.0.8-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libarchive/bzip2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libarchive/bzip2/tree/bzip2-1.0.8"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libbzip2.git@f131eb16809565cbeb0684ecad2bd20130e7d5a1"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libbzip2"
                },
                {
                    "name": "php:component",
                    "value": "libbzip2"
                },
                {
                    "name": "php:version",
                    "value": "1.0.8"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.8"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libarchive/bzip2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libarchive/bzip2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "bzip2-1.0.8"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libbzip2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libbzip2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libbzip2-1.0.8"
                },
                {
                    "name": "php:source-commit",
                    "value": "f131eb16809565cbeb0684ecad2bd20130e7d5a1"
                },
                {
                    "name": "php:input-version",
                    "value": "libbzip2-1.0.8"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libbzip2-1.0.8-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libbzip2-1.0.8-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libbzip2:1.0.8",
                        "name": "libbzip2",
                        "version": "1.0.8",
                        "purl": "pkg:generic/bzip2@1.0.8"
                    }
                ],
                "notes": "Built from winlibs/libbzip2 ref libbzip2-1.0.8 at commit f131eb16809565cbeb0684ecad2bd20130e7d5a1 with upstream identity libarchive/bzip2 tag bzip2-1.0.8."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libcurl@8.21.0",
            "name": "libcurl",
            "version": "8.21.0",
            "purl": "pkg:generic/curl@8.21.0",
            "licenses": [
                {
                    "license": {
                        "id": "curl"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libcurl-8.21.0-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/curl/curl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/curl/curl/tree/curl-8_21_0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/curl.git@b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "curl"
                },
                {
                    "name": "php:component",
                    "value": "libcurl"
                },
                {
                    "name": "php:version",
                    "value": "8.21.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "8.21.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "curl/curl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/curl/curl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "curl-8_21_0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/curl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/curl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libcurl-8.21.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                },
                {
                    "name": "php:input-version",
                    "value": "libcurl-8.21.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libcurl-8.21.0-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libcurl-8.21.0-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:haxx:curl:8.21.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libcurl:8.21.0",
                        "name": "libcurl",
                        "version": "8.21.0",
                        "purl": "pkg:generic/curl@8.21.0"
                    }
                ],
                "notes": "Built from winlibs/curl ref libcurl-8.21.0-1 at commit b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0 with upstream identity curl/curl tag curl-8_21_0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libssh2@1.11.1-4",
            "name": "libssh2",
            "version": "1.11.1-4",
            "purl": "pkg:generic/libssh2@1.11.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libssh2-1.11.1-4-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libssh2/libssh2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libssh2/libssh2/tree/libssh2-1.11.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libssh2.git@b47abdf27c93ee1ff4705e88968c5c628a93107a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libssh2"
                },
                {
                    "name": "php:component",
                    "value": "libssh2"
                },
                {
                    "name": "php:version",
                    "value": "1.11.1-4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libssh2/libssh2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libssh2/libssh2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libssh2-1.11.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libssh2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libssh2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libssh2-1.11.1-4"
                },
                {
                    "name": "php:source-commit",
                    "value": "b47abdf27c93ee1ff4705e88968c5c628a93107a"
                },
                {
                    "name": "php:input-version",
                    "value": "libssh2-1.11.1-4"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libssh2-1.11.1-4-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libssh2-1.11.1-4-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libssh2:libssh2:1.11.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libssh2:1.11.1",
                        "name": "libssh2",
                        "version": "1.11.1",
                        "purl": "pkg:generic/libssh2@1.11.1"
                    }
                ],
                "notes": "Built from winlibs/libssh2 ref libssh2-1.11.1-4 at commit b47abdf27c93ee1ff4705e88968c5c628a93107a with upstream identity libssh2/libssh2 tag libssh2-1.11.1.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-7598",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
                                },
                                "description": "Fixed by backporting upstream username_len bounds checking in src/userauth.c.",
                                "references": [
                                    "https://github.com/libssh2/libssh2/pull/1858",
                                    "https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-15661",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
                                },
                                "description": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/94726036b0d5abec38dfec6202270c5b4d0021dc",
                                    "https://github.com/libssh2/libssh2/commit/2dae3024897e1898d389835151f4e9606227721d",
                                    "https://github.com/libssh2/libssh2/commit/4ed26f5740bdd409269ed9fb48a28bf8f565b681"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55199",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
                                },
                                "description": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f6732df726b0e187f0ab6c4d538b7e5e5307439c",
                                    "https://github.com/libssh2/libssh2/commit/17626857d20b3c9a1addfa45979dadcee1cd84a4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55200",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
                                },
                                "description": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f2abc265e35792e3c86752c9f12682a1fb0d4a01",
                                    "https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58050",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
                                },
                                "description": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/103972c538a11e5ae571f6126657e1baefccc415",
                                    "https://github.com/libssh2/libssh2/commit/34497525929b9a47f03dfb81887ac896202b7e12"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58051",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
                                },
                                "description": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/97e8f0143a55b66df60a695678433ccbe24291f0",
                                    "https://github.com/libssh2/libssh2/commit/a9758da45a52bc8c630ec9493804d0c6ea30b24a"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "name": "libzstd",
            "version": "1.5.7",
            "purl": "pkg:generic/zstd@1.5.7",
            "licenses": [
                {
                    "expression": "BSD-3-Clause OR GPL-2.0-only"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libzstd-1.5.7-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/facebook/zstd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/facebook/zstd/tree/v1.5.7"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/facebook/zstd.git@f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzstd"
                },
                {
                    "name": "php:component",
                    "value": "libzstd"
                },
                {
                    "name": "php:version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-commit",
                    "value": "f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzstd-1.5.7-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libzstd-1.5.7-vs16-x86.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/nghttp2@1.69.0-1",
            "name": "nghttp2",
            "version": "1.69.0-1",
            "purl": "pkg:generic/nghttp2@1.69.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/nghttp2-1.69.0-1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nghttp2/nghttp2/tree/v1.69.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/nghttp2.git@2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "nghttp2"
                },
                {
                    "name": "php:component",
                    "value": "nghttp2"
                },
                {
                    "name": "php:version",
                    "value": "1.69.0-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.69.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.69.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/nghttp2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/nghttp2"
                },
                {
                    "name": "php:source-ref",
                    "value": "nghttp2-1.69.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62"
                },
                {
                    "name": "php:input-version",
                    "value": "nghttp2-1.69.0-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "nghttp2-1.69.0-1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/nghttp2-1.69.0-1-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:nghttp2:nghttp2:1.69.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:nghttp2:1.69.0",
                        "name": "nghttp2",
                        "version": "1.69.0",
                        "purl": "pkg:generic/nghttp2@1.69.0"
                    }
                ],
                "notes": "Built from winlibs/nghttp2 ref nghttp2-1.69.0-1 at commit 2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62 with upstream identity nghttp2/nghttp2 tag v1.69.0.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-58055",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
                                },
                                "description": "Fixed by backporting the upstream nghttpx request-header validation in winlibs/nghttp2 tag nghttp2-1.69.0-1.",
                                "references": [
                                    "https://github.com/winlibs/nghttp2/commit/2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62",
                                    "https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e",
                                    "https://github.com/nghttp2/nghttp2/pull/2769"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openssl@3.0.21.pl1",
            "name": "openssl",
            "version": "3.0.21.pl1",
            "purl": "pkg:generic/openssl@3.0.21",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/openssl-3.0.21.pl1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openssl/openssl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openssl/openssl/tree/openssl-3.0.21"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openssl.git@76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openssl"
                },
                {
                    "name": "php:component",
                    "value": "openssl"
                },
                {
                    "name": "php:version",
                    "value": "3.0.21.pl1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.21"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openssl/openssl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openssl/openssl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "openssl-3.0.21"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openssl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openssl"
                },
                {
                    "name": "php:source-ref",
                    "value": "openssl-3.0.21.pl1"
                },
                {
                    "name": "php:source-commit",
                    "value": "76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                },
                {
                    "name": "php:input-version",
                    "value": "openssl-3.0.21.pl1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openssl-3.0.21.pl1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/openssl-3.0.21.pl1-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openssl:openssl:3.0.21:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openssl:3.0.21",
                        "name": "openssl",
                        "version": "3.0.21",
                        "purl": "pkg:generic/openssl@3.0.21"
                    }
                ],
                "notes": "Built from winlibs/openssl ref openssl-3.0.21.pl1 at commit 76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6 with upstream identity openssl/openssl tag openssl-3.0.21. Backport Ubuntu's PKCS#1 implicit-rejection patch.",
                "patches": [
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/openssl/commit/76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                        }
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libenchant2@2.8.16-1",
            "name": "libenchant2",
            "version": "2.8.16-1",
            "purl": "pkg:generic/enchant@2.8.16",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libenchant2-2.8.16-1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AbiWord/enchant"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AbiWord/enchant/tree/v2.8.16"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/enchant.git@306f758741abb4a67b6e7143784d556eaacebdd9"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "enchant"
                },
                {
                    "name": "php:component",
                    "value": "libenchant2"
                },
                {
                    "name": "php:version",
                    "value": "2.8.16-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.8.16"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AbiWord/enchant"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AbiWord/enchant"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.8.16"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/enchant"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/enchant"
                },
                {
                    "name": "php:source-ref",
                    "value": "libenchant2-2.8.16-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "306f758741abb4a67b6e7143784d556eaacebdd9"
                },
                {
                    "name": "php:input-version",
                    "value": "libenchant2-2.8.16-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libenchant2-2.8.16-1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libenchant2-2.8.16-1-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libenchant2:2.8.16",
                        "name": "libenchant2",
                        "version": "2.8.16",
                        "purl": "pkg:generic/enchant@2.8.16"
                    }
                ],
                "notes": "Built from winlibs/enchant ref libenchant2-2.8.16-1 at commit 306f758741abb4a67b6e7143784d556eaacebdd9 with upstream identity AbiWord/enchant tag v2.8.16."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libiconv@1.19",
            "name": "libiconv",
            "version": "1.19",
            "purl": "pkg:generic/libiconv@1.19",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libiconv-1.19-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libiconv.git@8f55a0aa6532f30f947261d90e72b200f350a5df"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libiconv"
                },
                {
                    "name": "php:component",
                    "value": "libiconv"
                },
                {
                    "name": "php:version",
                    "value": "1.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libiconv"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libiconv"
                },
                {
                    "name": "php:source-ref",
                    "value": "libiconv-1.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "8f55a0aa6532f30f947261d90e72b200f350a5df"
                },
                {
                    "name": "php:input-version",
                    "value": "libiconv-1.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libiconv-1.19-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libiconv-1.19-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libiconv:1.19",
                        "name": "libiconv",
                        "version": "1.19",
                        "purl": "pkg:generic/libiconv@1.19"
                    }
                ],
                "notes": "Built from winlibs/libiconv ref libiconv-1.19 at commit 8f55a0aa6532f30f947261d90e72b200f350a5df with upstream identity https://git.savannah.gnu.org/git/libiconv.git tag v1.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
            "name": "libjpeg-turbo",
            "version": "3.1.4.1",
            "purl": "pkg:generic/libjpeg-turbo@3.1.4.1",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND IJG"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libjpeg-turbo-3.1.4.1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/tree/3.1.4.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libjpeg.git@ca1aee45c747aaf6f66aada3abe6353306ff502b"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libjpeg"
                },
                {
                    "name": "php:component",
                    "value": "libjpeg-turbo"
                },
                {
                    "name": "php:version",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libjpeg"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libjpeg"
                },
                {
                    "name": "php:source-ref",
                    "value": "libjpeg-turbo-3.1.4.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "ca1aee45c747aaf6f66aada3abe6353306ff502b"
                },
                {
                    "name": "php:input-version",
                    "value": "libjpeg-turbo-3.1.4.1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libjpeg-turbo-3.1.4.1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libjpeg-turbo-3.1.4.1-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:3.1.4.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libjpeg-turbo:3.1.4.1",
                        "name": "libjpeg-turbo",
                        "version": "3.1.4.1",
                        "purl": "pkg:generic/libjpeg-turbo@3.1.4.1"
                    }
                ],
                "notes": "Built from winlibs/libjpeg ref libjpeg-turbo-3.1.4.1 at commit ca1aee45c747aaf6f66aada3abe6353306ff502b with upstream identity libjpeg-turbo/libjpeg-turbo tag 3.1.4.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "name": "liblmdb",
            "version": "0.9.35",
            "purl": "pkg:generic/lmdb@0.9.35",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/liblmdb-0.9.35-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/LMDB/lmdb"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/LMDB/lmdb/tree/LMDB_0.9.35"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/lmdb.git@337459047d55fbf52e634bc26285195d06ac145d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "lmdb"
                },
                {
                    "name": "php:component",
                    "value": "liblmdb"
                },
                {
                    "name": "php:version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:upstream-version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "LMDB/lmdb"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/LMDB/lmdb"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "LMDB_0.9.35"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/lmdb"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/lmdb"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:source-commit",
                    "value": "337459047d55fbf52e634bc26285195d06ac145d"
                },
                {
                    "name": "php:input-version",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblmdb-0.9.35-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/liblmdb-0.9.35-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblmdb:0.9.35",
                        "name": "liblmdb",
                        "version": "0.9.35",
                        "purl": "pkg:generic/lmdb@0.9.35"
                    }
                ],
                "notes": "Built from winlibs/lmdb ref liblmdb-0.9.35 at commit 337459047d55fbf52e634bc26285195d06ac145d with upstream identity LMDB/lmdb tag LMDB_0.9.35."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblzma@5.8.3",
            "name": "liblzma",
            "version": "5.8.3",
            "purl": "pkg:generic/xz@5.8.3",
            "licenses": [
                {
                    "license": {
                        "id": "0BSD"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/liblzma-5.8.3-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/tukaani-project/xz"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/tukaani-project/xz/tree/v5.8.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/liblzma.git@debf994b6385f384f01815eaac4597e3c2e2cc4e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "liblzma"
                },
                {
                    "name": "php:component",
                    "value": "liblzma"
                },
                {
                    "name": "php:version",
                    "value": "5.8.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "tukaani-project/xz"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/tukaani-project/xz"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.8.3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/liblzma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/liblzma"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblzma-5.8.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "debf994b6385f384f01815eaac4597e3c2e2cc4e"
                },
                {
                    "name": "php:input-version",
                    "value": "liblzma-5.8.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblzma-5.8.3-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/liblzma-5.8.3-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblzma:5.8.3",
                        "name": "liblzma",
                        "version": "5.8.3",
                        "purl": "pkg:generic/xz@5.8.3"
                    }
                ],
                "notes": "Built from winlibs/liblzma ref liblzma-5.8.3 at commit debf994b6385f384f01815eaac4597e3c2e2cc4e with upstream identity tukaani-project/xz tag v5.8.3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libonig@6.9.10",
            "name": "libonig",
            "version": "6.9.10",
            "purl": "pkg:generic/oniguruma@6.9.10",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libonig-6.9.10-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/kkos/oniguruma"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/kkos/oniguruma/tree/v6.9.10"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/oniguruma.git@fceeeffdb609661ffaea9be4075c6ff4d6696611"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "oniguruma"
                },
                {
                    "name": "php:component",
                    "value": "libonig"
                },
                {
                    "name": "php:version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:upstream-version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "kkos/oniguruma"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/kkos/oniguruma"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v6.9.10"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/oniguruma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/oniguruma"
                },
                {
                    "name": "php:source-ref",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:source-commit",
                    "value": "fceeeffdb609661ffaea9be4075c6ff4d6696611"
                },
                {
                    "name": "php:input-version",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libonig-6.9.10-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libonig-6.9.10-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libonig:6.9.10",
                        "name": "libonig",
                        "version": "6.9.10",
                        "purl": "pkg:generic/oniguruma@6.9.10"
                    }
                ],
                "notes": "Built from winlibs/oniguruma ref libonig-6.9.10 at commit fceeeffdb609661ffaea9be4075c6ff4d6696611 with upstream identity kkos/oniguruma tag v6.9.10."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpng@1.6.58",
            "name": "libpng",
            "version": "1.6.58",
            "purl": "pkg:generic/libpng@1.6.58",
            "licenses": [
                {
                    "license": {
                        "id": "libpng-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libpng-1.6.58-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/pnggroup/libpng"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/pnggroup/libpng/tree/v1.6.58"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libpng.git@5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libpng"
                },
                {
                    "name": "php:component",
                    "value": "libpng"
                },
                {
                    "name": "php:version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "pnggroup/libpng"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/pnggroup/libpng"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.58"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libpng"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libpng"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:source-commit",
                    "value": "5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                },
                {
                    "name": "php:input-version",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpng-1.6.58-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libpng-1.6.58-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libpng:libpng:1.6.58:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpng:1.6.58",
                        "name": "libpng",
                        "version": "1.6.58",
                        "purl": "pkg:generic/libpng@1.6.58"
                    }
                ],
                "notes": "Built from winlibs/libpng ref libpng-1.6.58 at commit 5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896 with upstream identity pnggroup/libpng tag v1.6.58."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpq@14.23",
            "name": "libpq",
            "version": "14.23",
            "purl": "pkg:generic/postgresql@14.23",
            "licenses": [
                {
                    "license": {
                        "id": "PostgreSQL"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libpq-14.23-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/postgres/postgres"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/postgres/postgres/tree/REL_14_23"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/postgresql.git@5c619216c319e12881327daf7defb511ef214b70"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "postgresql"
                },
                {
                    "name": "php:component",
                    "value": "libpq"
                },
                {
                    "name": "php:version",
                    "value": "14.23"
                },
                {
                    "name": "php:upstream-version",
                    "value": "14.23"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "postgres/postgres"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/postgres/postgres"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "REL_14_23"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/postgresql"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/postgresql"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpq-14.23"
                },
                {
                    "name": "php:source-commit",
                    "value": "5c619216c319e12881327daf7defb511ef214b70"
                },
                {
                    "name": "php:input-version",
                    "value": "libpq-14.23"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpq-14.23-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libpq-14.23-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:postgresql:postgresql:14.23:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpq:14.23",
                        "name": "libpq",
                        "version": "14.23",
                        "purl": "pkg:generic/postgresql@14.23"
                    }
                ],
                "notes": "Built from winlibs/postgresql ref libpq-14.23 at commit 5c619216c319e12881327daf7defb511ef214b70 with upstream identity postgres/postgres tag REL_14_23."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "name": "libqdbm",
            "version": "1.8.78",
            "purl": "pkg:generic/qdbm@1.8.78",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libqdbm-1.8.78-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/qdbm.git@586aa477ff42f0d307dc26adada275642630b28f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "qdbm"
                },
                {
                    "name": "php:component",
                    "value": "libqdbm"
                },
                {
                    "name": "php:version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://dbmx.net/qdbm/"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "qdbm-1.8.78"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/qdbm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/qdbm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:source-commit",
                    "value": "586aa477ff42f0d307dc26adada275642630b28f"
                },
                {
                    "name": "php:input-version",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libqdbm-1.8.78-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libqdbm-1.8.78-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libqdbm:1.8.78",
                        "name": "libqdbm",
                        "version": "1.8.78",
                        "purl": "pkg:generic/qdbm@1.8.78"
                    }
                ],
                "notes": "Built from winlibs/qdbm ref libqdbm-1.8.78 at commit 586aa477ff42f0d307dc26adada275642630b28f with upstream identity https://dbmx.net/qdbm/ tag qdbm-1.8.78."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "name": "libsasl",
            "version": "2.1.28",
            "purl": "pkg:generic/cyrus-sasl@2.1.28",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libsasl-2.1.28-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/cyrusimap/cyrus-sasl/tree/cyrus-sasl-2.1.28"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/cyrus-sasl.git@63a75ce9293206aea981e9f3edcd96645bafd677"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "cyrus-sasl"
                },
                {
                    "name": "php:component",
                    "value": "libsasl"
                },
                {
                    "name": "php:version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "cyrus-sasl-2.1.28"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:source-commit",
                    "value": "63a75ce9293206aea981e9f3edcd96645bafd677"
                },
                {
                    "name": "php:input-version",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsasl-2.1.28-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libsasl-2.1.28-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsasl:2.1.28",
                        "name": "libsasl",
                        "version": "2.1.28",
                        "purl": "pkg:generic/cyrus-sasl@2.1.28"
                    }
                ],
                "notes": "Built from winlibs/cyrus-sasl ref libsasl-2.1.28 at commit 63a75ce9293206aea981e9f3edcd96645bafd677 with upstream identity cyrusimap/cyrus-sasl tag cyrus-sasl-2.1.28."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/sqlite3@3.53.2",
            "name": "sqlite3",
            "version": "3.53.2",
            "purl": "pkg:generic/sqlite@3.53.2",
            "licenses": [
                {
                    "license": {
                        "id": "blessing"
                    }
                }
            ],
            "copyright": "NONE",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/sqlite3-3.53.2-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/sqlite/sqlite"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/sqlite/sqlite/tree/version-3.53.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/sqlite3.git@1317473784d608cfe3193628ccbe27ed2dedc3fe"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "sqlite3"
                },
                {
                    "name": "php:component",
                    "value": "sqlite3"
                },
                {
                    "name": "php:version",
                    "value": "3.53.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.53.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "sqlite/sqlite"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/sqlite/sqlite"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "version-3.53.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/sqlite3"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/sqlite3"
                },
                {
                    "name": "php:source-ref",
                    "value": "sqlite3-3.53.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "1317473784d608cfe3193628ccbe27ed2dedc3fe"
                },
                {
                    "name": "php:input-version",
                    "value": "sqlite3-3.53.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "sqlite3-3.53.2-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/sqlite3-3.53.2-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:sqlite:sqlite:3.53.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:sqlite3:3.53.2",
                        "name": "sqlite3",
                        "version": "3.53.2",
                        "purl": "pkg:generic/sqlite@3.53.2"
                    }
                ],
                "notes": "Built from winlibs/sqlite3 ref sqlite3-3.53.2 at commit 1317473784d608cfe3193628ccbe27ed2dedc3fe with upstream identity sqlite/sqlite tag version-3.53.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "name": "libsodium",
            "version": "1.0.22",
            "purl": "pkg:generic/libsodium@1.0.22",
            "licenses": [
                {
                    "license": {
                        "id": "ISC"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libsodium-1.0.22-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/jedisct1/libsodium"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/jedisct1/libsodium/tree/1.0.22-RELEASE"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libsodium.git@1777bbc853d2aeb124e7b842a11b916193db7bdf"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libsodium"
                },
                {
                    "name": "php:component",
                    "value": "libsodium"
                },
                {
                    "name": "php:version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.0.22-RELEASE"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libsodium"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libsodium"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:source-commit",
                    "value": "1777bbc853d2aeb124e7b842a11b916193db7bdf"
                },
                {
                    "name": "php:input-version",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsodium-1.0.22-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libsodium-1.0.22-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsodium:1.0.22",
                        "name": "libsodium",
                        "version": "1.0.22",
                        "purl": "pkg:generic/libsodium@1.0.22"
                    }
                ],
                "notes": "Built from winlibs/libsodium ref libsodium-1.0.22 at commit 1777bbc853d2aeb124e7b842a11b916193db7bdf with upstream identity jedisct1/libsodium tag 1.0.22-RELEASE."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "name": "libtidy",
            "version": "5.8.0",
            "purl": "pkg:generic/libtidy@5.8.0",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libtidy-5.8.0-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/htacg/tidy-html5"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/htacg/tidy-html5/tree/5.8.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libtidy.git@8b6229fd70409656257a6446a254fd62fde8a03a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libtidy"
                },
                {
                    "name": "php:component",
                    "value": "libtidy"
                },
                {
                    "name": "php:version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libtidy"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libtidy"
                },
                {
                    "name": "php:source-ref",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "8b6229fd70409656257a6446a254fd62fde8a03a"
                },
                {
                    "name": "php:input-version",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libtidy-5.8.0-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libtidy-5.8.0-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libtidy:5.8.0",
                        "name": "libtidy",
                        "version": "5.8.0",
                        "purl": "pkg:generic/libtidy@5.8.0"
                    }
                ],
                "notes": "Built from winlibs/libtidy ref libtidy-5.8.0 at commit 8b6229fd70409656257a6446a254fd62fde8a03a with upstream identity htacg/tidy-html5 tag 5.8.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "name": "libwebp",
            "version": "1.6.0",
            "purl": "pkg:generic/libwebp@1.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libwebp-1.6.0-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/webmproject/libwebp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/webmproject/libwebp/tree/v1.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libwebp.git@1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libwebp"
                },
                {
                    "name": "php:component",
                    "value": "libwebp"
                },
                {
                    "name": "php:version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "webmproject/libwebp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/webmproject/libwebp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libwebp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libwebp"
                },
                {
                    "name": "php:source-ref",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                },
                {
                    "name": "php:input-version",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libwebp-1.6.0-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libwebp-1.6.0-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libwebp:1.6.0",
                        "name": "libwebp",
                        "version": "1.6.0",
                        "purl": "pkg:generic/libwebp@1.6.0"
                    }
                ],
                "notes": "Built from winlibs/libwebp ref libwebp-1.6.0 at commit 1b7801dd9a59c1dc5bda38895d8f94c815732a9f with upstream identity webmproject/libwebp tag v1.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxml2@2.10.4-8",
            "name": "libxml2",
            "version": "2.10.4-8",
            "purl": "pkg:generic/libxml2@2.10.4",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libxml2-2.10.4-8-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxml2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxml2/tree/v2.10.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxml2.git@53d3ad9aa8a1fa570ae06c05647a8930448818e2"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxml2"
                },
                {
                    "name": "php:component",
                    "value": "libxml2"
                },
                {
                    "name": "php:version",
                    "value": "2.10.4-8"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.10.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxml2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxml2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.10.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxml2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxml2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxml2-2.10.4-8"
                },
                {
                    "name": "php:source-commit",
                    "value": "53d3ad9aa8a1fa570ae06c05647a8930448818e2"
                },
                {
                    "name": "php:input-version",
                    "value": "libxml2-2.10.4-8"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxml2-2.10.4-8-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libxml2-2.10.4-8-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.10.4:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxml2:2.10.4",
                        "name": "libxml2",
                        "version": "2.10.4",
                        "purl": "pkg:generic/libxml2@2.10.4"
                    }
                ],
                "notes": "Built from winlibs/libxml2 ref libxml2-2.10.4-8 at commit 53d3ad9aa8a1fa570ae06c05647a8930448818e2 with upstream identity GNOME/libxml2 tag v2.10.4.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2024-25062",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25062"
                                },
                                "description": "Fixed by the XML Reader XInclude use-after-free backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1c73a6c376c2d520eaada3b92cfd4f98162356a2"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2024-34459",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34459"
                                },
                                "description": "Fixed by the xmllint --htmlout buffer overread backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/bf8478ae3fadbe0efad786f4770e4e022394b78c"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2024-56171",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/dd01595fc74d2746ad2888d6440f5343ac2f60dd"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-24928",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/37bebde79cb22b8c55b507c4abf19a953087b749"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-27113",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
                                },
                                "description": "Fixed by winlibs/libxml2 backport in tag libxml2-2.10.4-1."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32414",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/9bac466bb016cf25ced3b15989a5b850c5991d10"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32415",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
                                },
                                "description": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d963820501a091df1089d092e08f5d17e52ec537"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49794",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
                                },
                                "description": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49795",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/e5afa4ec2e052e417cd876079f7ba881105ab30d"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49796",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
                                },
                                "description": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6021",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d723785ce7a425d67989538605469e3e65279ab9"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6170",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
                                },
                                "description": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/35c00d862ffa065f5b1d882069e61a2164fc71a0"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7425",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
                                },
                                "description": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxslt/-/issues/140",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/f1e1f13b766eb580a8dcc0c4e7a447346dfd862e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-8732",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
                                },
                                "description": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.10.4-5.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/eae9291aa73907694dd3a4274d306e31217e746e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0989",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/b5d63abd7cadb4c74497b7ba4168ee4e39c2f87c"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0990",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/6921e4891853ebcd28288c5877020b7529cf0375"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0992",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/6f3e673437a625a686dc7ee23153693091cc1173",
                                    "https://github.com/winlibs/libxml2/commit/ff42012a0b85a601f20ea4e6ebb988bdbe295a62"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-1757",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d1ecfeadc65df66837b6f5d2ccec4551b769370e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2022-49043",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49043"
                                },
                                "description": "Fixed by backporting the upstream fix for the xmlXIncludeAddNode use-after-free in URI error reporting in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/55cc16e7c4d7ac47a3c36ad573442ed026342062",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2023-45322",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
                                },
                                "description": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1ffa4ec5e3dcf0387418975a7a2482c985f1e92b",
                                    "https://github.com/winlibs/libxml2/commit/c7dfe471044cb57ff340c6cd18cd7e6d69027865",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/d39f78069dff496ec865c73aa44d7110e429bce9",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/8707838e69f9c6e729c1d1d46bb3681d9e622be5"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-11979",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
                                },
                                "description": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/4b5f545c1f7a26d19d05737ea573751342046053",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-6653",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6653"
                                },
                                "description": "Fixed by backporting the upstream entity amplification accounting changes in winlibs/libxml2 tag libxml2-2.10.4-8.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/53d3ad9aa8a1fa570ae06c05647a8930448818e2",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/463bbeeca1805b5c4828f50d0fefc4eebaf620df",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1058"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "name": "libxpm",
            "version": "3.5.19",
            "purl": "pkg:generic/libxpm@3.5.19",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libxpm-3.5.19-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "type": "vcs",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm/-/tree/libXpm-3.5.19"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxpm.git@90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxpm"
                },
                {
                    "name": "php:component",
                    "value": "libxpm"
                },
                {
                    "name": "php:version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libXpm-3.5.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxpm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxpm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                },
                {
                    "name": "php:input-version",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxpm-3.5.19-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libxpm-3.5.19-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxpm:3.5.19",
                        "name": "libxpm",
                        "version": "3.5.19",
                        "purl": "pkg:generic/libxpm@3.5.19"
                    }
                ],
                "notes": "Built from winlibs/libxpm ref libxpm-3.5.19 at commit 90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099 with upstream identity https://gitlab.freedesktop.org/xorg/lib/libxpm tag libXpm-3.5.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "name": "libxslt",
            "version": "1.1.43-2",
            "purl": "pkg:generic/libxslt@1.1.43",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libxslt-1.1.43-2-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxslt"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxslt/tree/v1.1.43"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxslt.git@9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxslt"
                },
                {
                    "name": "php:component",
                    "value": "libxslt"
                },
                {
                    "name": "php:version",
                    "value": "1.1.43-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.1.43"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxslt"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxslt"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.1.43"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxslt"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxslt"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                },
                {
                    "name": "php:input-version",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxslt-1.1.43-2-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libxslt-1.1.43-2-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxslt:1.1.43:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxslt:1.1.43",
                        "name": "libxslt",
                        "version": "1.1.43",
                        "purl": "pkg:generic/libxslt@1.1.43"
                    }
                ],
                "notes": "Built from winlibs/libxslt ref libxslt-1.1.43-2 at commit 9f399f8d223ddddeaeacd15285a2e993ec326c0f with upstream identity GNOME/libxslt tag v1.1.43.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2025-10911",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-11731",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/7b6b3c1b3abc2d4c4332496d44979b8a1933dd1b"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7424",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/f32502000e6e6404125988d67cd9503ef8677e43"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzip@1.11.4",
            "name": "libzip",
            "version": "1.11.4",
            "purl": "pkg:generic/libzip@1.11.4",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libzip-1.11.4-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nih-at/libzip"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nih-at/libzip/tree/v1.11.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libzip.git@94b3e6583c6ddf77d3fef95699310818a91bc23a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzip"
                },
                {
                    "name": "php:component",
                    "value": "libzip"
                },
                {
                    "name": "php:version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nih-at/libzip"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nih-at/libzip"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.11.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libzip"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libzip"
                },
                {
                    "name": "php:source-ref",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "94b3e6583c6ddf77d3fef95699310818a91bc23a"
                },
                {
                    "name": "php:input-version",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzip-1.11.4-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/libzip-1.11.4-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libzip:1.11.4",
                        "name": "libzip",
                        "version": "1.11.4",
                        "purl": "pkg:generic/libzip@1.11.4"
                    }
                ],
                "notes": "Built from winlibs/libzip ref libzip-1.11.4 at commit 94b3e6583c6ddf77d3fef95699310818a91bc23a with upstream identity nih-at/libzip tag v1.11.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "name": "mpir",
            "version": "3.0.0-2",
            "purl": "pkg:generic/mpir@3.0.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-3.0-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/mpir-3.0.0-2-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/wbhart/mpir"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/wbhart/mpir/tree/mpir-3.0.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/mpir.git@796ed2cee089c96dc254caec624fe9084c3a68c3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "mpir"
                },
                {
                    "name": "php:component",
                    "value": "mpir"
                },
                {
                    "name": "php:version",
                    "value": "3.0.0-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "wbhart/mpir"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/wbhart/mpir"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "mpir-3.0.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/mpir"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/mpir"
                },
                {
                    "name": "php:source-ref",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "796ed2cee089c96dc254caec624fe9084c3a68c3"
                },
                {
                    "name": "php:input-version",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "mpir-3.0.0-2-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/mpir-3.0.0-2-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:mpir:3.0.0",
                        "name": "mpir",
                        "version": "3.0.0",
                        "purl": "pkg:generic/mpir@3.0.0"
                    }
                ],
                "notes": "Built from winlibs/mpir ref mpir-3.0.0-2 at commit 796ed2cee089c96dc254caec624fe9084c3a68c3 with upstream identity wbhart/mpir tag mpir-3.0.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/net-snmp@5.7.3-3",
            "name": "net-snmp",
            "version": "5.7.3-3",
            "purl": "pkg:generic/net-snmp@5.7.3",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/net-snmp-5.7.3-3-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/net-snmp/net-snmp/tree/v5.7.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/net-snmp.git@3cdec74894985d67753772b72a07064c3ed2e336"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "net-snmp"
                },
                {
                    "name": "php:component",
                    "value": "net-snmp"
                },
                {
                    "name": "php:version",
                    "value": "5.7.3-3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.7.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.7.3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/net-snmp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/net-snmp"
                },
                {
                    "name": "php:source-ref",
                    "value": "net-snmp-5.7.3-3"
                },
                {
                    "name": "php:source-commit",
                    "value": "3cdec74894985d67753772b72a07064c3ed2e336"
                },
                {
                    "name": "php:input-version",
                    "value": "net-snmp-5.7.3-3"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "net-snmp-5.7.3-3-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/net-snmp-5.7.3-3-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:net-snmp:5.7.3",
                        "name": "net-snmp",
                        "version": "5.7.3",
                        "purl": "pkg:generic/net-snmp@5.7.3"
                    }
                ],
                "notes": "Built from winlibs/net-snmp ref net-snmp-5.7.3-3 at commit 3cdec74894985d67753772b72a07064c3ed2e336 with upstream identity net-snmp/net-snmp tag v5.7.3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openldap@2.6.13-1",
            "name": "openldap",
            "version": "2.6.13-1",
            "purl": "pkg:generic/openldap@2.6.13",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/openldap-2.6.13-1-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openldap/openldap"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openldap/openldap/tree/OPENLDAP_REL_ENG_2_6_13"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openldap.git@006411230eaf28f3201362f18a0e5903f9772f5c"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openldap"
                },
                {
                    "name": "php:component",
                    "value": "openldap"
                },
                {
                    "name": "php:version",
                    "value": "2.6.13-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.6.13"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openldap/openldap"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openldap/openldap"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "OPENLDAP_REL_ENG_2_6_13"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openldap"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openldap"
                },
                {
                    "name": "php:source-ref",
                    "value": "openldap-2.6.13-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "006411230eaf28f3201362f18a0e5903f9772f5c"
                },
                {
                    "name": "php:input-version",
                    "value": "openldap-2.6.13-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openldap-2.6.13-1-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/openldap-2.6.13-1-vs16-x86.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openldap:openldap:2.6.13:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openldap:2.6.13",
                        "name": "openldap",
                        "version": "2.6.13",
                        "purl": "pkg:generic/openldap@2.6.13"
                    }
                ],
                "notes": "Built from winlibs/openldap ref openldap-2.6.13-1 at commit 006411230eaf28f3201362f18a0e5903f9772f5c with upstream identity openldap/openldap tag OPENLDAP_REL_ENG_2_6_13."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "name": "rxspencer",
            "version": "3.9.0",
            "purl": "pkg:generic/rxspencer@3.9.0",
            "licenses": [
                {
                    "license": {
                        "id": "Spencer-94"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/garyhouston/rxspencer/tree/v3.9.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/garyhouston/rxspencer.git@9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "rxspencer"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/wineditline@2.208",
            "name": "wineditline",
            "version": "2.208",
            "purl": "pkg:generic/wineditline@2.208",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/wineditline-2.208-vs16-x86.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/ptosco/wineditline"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/ptosco/wineditline/tree/wineditline-2.208"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/wineditline.git@39ae4ff02a06c97f804833844b767777d6625fb8"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "wineditline"
                },
                {
                    "name": "php:component",
                    "value": "wineditline"
                },
                {
                    "name": "php:version",
                    "value": "2.208"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.208"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "ptosco/wineditline"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/ptosco/wineditline"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "wineditline-2.208"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/wineditline"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/wineditline"
                },
                {
                    "name": "php:source-ref",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:source-commit",
                    "value": "39ae4ff02a06c97f804833844b767777d6625fb8"
                },
                {
                    "name": "php:input-version",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:vs",
                    "value": "vs16"
                },
                {
                    "name": "php:arch",
                    "value": "x86"
                },
                {
                    "name": "php:php-version",
                    "value": "8.2"
                },
                {
                    "name": "php:package-file-name",
                    "value": "wineditline-2.208-vs16-x86.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs16/x86/wineditline-2.208-vs16-x86.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:wineditline:2.208",
                        "name": "wineditline",
                        "version": "2.208",
                        "purl": "pkg:generic/wineditline@2.208"
                    }
                ],
                "notes": "Built from winlibs/wineditline ref WinEditLine-2.208 at commit 39ae4ff02a06c97f804833844b767777d6625fb8 with upstream identity ptosco/wineditline tag wineditline-2.208."
            }
        }
    ],
    "dependencies": [
        {
            "ref": "pkg:php-windows-deps/ICU@72.1-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/apache@2.4.68",
            "dependsOn": [
                "pkg:php-windows-deps/apr-iconv@1.2.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/brotli@1.2.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/c-client@2007f-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/fbclient@3.0.14",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/freetype@2.14.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/glib@2.88.1-1",
            "dependsOn": [
                "pkg:php-windows-deps/libffi@3.6.0",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libffi@3.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libintl@1.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/zlib@1.3.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libargon2@20190702",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/aom@3.14.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libavif@1.4.2",
            "dependsOn": [
                "pkg:php-windows-deps/aom@3.14.1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libbzip2@1.0.8",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libcurl@8.21.0",
            "dependsOn": [
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/libssh2@1.11.1-4",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/nghttp2@1.69.0-1",
                "pkg:php-windows-deps/openssl@3.0.21.pl1",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libssh2@1.11.1-4",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.21.pl1",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/nghttp2@1.69.0-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/openssl@3.0.21.pl1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libenchant2@2.8.16-1",
            "dependsOn": [
                "pkg:php-windows-deps/glib@2.88.1-1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libiconv@1.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblzma@5.8.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libonig@6.9.10",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libpng@1.6.58",
            "dependsOn": [
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libpq@14.23",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.21.pl1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "dependsOn": [
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/openssl@3.0.21.pl1",
                "pkg:php-windows-deps/sqlite3@3.53.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/sqlite3@3.53.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxml2@2.10.4-8",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19",
                "pkg:php-windows-deps/libxml2@2.10.4-8"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzip@1.11.4",
            "dependsOn": [
                "pkg:php-windows-deps/libbzip2@1.0.8",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/net-snmp@5.7.3-3",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.21.pl1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/openldap@2.6.13-1",
            "dependsOn": [
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/openssl@3.0.21.pl1",
                "pkg:php-windows-deps/rxspencer@3.9.0"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/wineditline@2.208",
            "dependsOn": []
        },
        {
            "ref": "pkg:generic/php@8.3.33",
            "dependsOn": [
                "pkg:generic/berkeley-uuencode",
                "pkg:generic/boost-context-assembly",
                "pkg:generic/crypt_blowfish@1.3",
                "pkg:generic/dynasm@1.5.0",
                "pkg:generic/freesec-libcrypt",
                "pkg:generic/libarchive-format-octal",
                "pkg:generic/libavifinfo@96f34d945ac7dac229feddfa94dbae66e202b838",
                "pkg:generic/libbcmath@0.2",
                "pkg:generic/libgd@2.0.35",
                "pkg:generic/libmagic@5.43",
                "pkg:generic/libmbfl@1.3.2",
                "pkg:generic/libzip-zip-dirent",
                "pkg:generic/mtrand@1.0",
                "pkg:generic/openldap-ucgendat",
                "pkg:generic/pcre2@10.42",
                "pkg:generic/snprintf",
                "pkg:generic/strlcat",
                "pkg:generic/strlcpy",
                "pkg:generic/strnatcmp",
                "pkg:generic/tcl-scanf@8.3.0",
                "pkg:generic/timelib@2022.14",
                "pkg:generic/xkcp-sha3",
                "pkg:generic/xxhash@0.8.1",
                "pkg:php-windows-deps/ICU@72.1-1",
                "pkg:php-windows-deps/apache@2.4.68",
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/c-client@2007f-1",
                "pkg:php-windows-deps/fbclient@3.0.14",
                "pkg:php-windows-deps/freetype@2.14.3",
                "pkg:php-windows-deps/glib@2.88.1-1",
                "pkg:php-windows-deps/libargon2@20190702",
                "pkg:php-windows-deps/libavif@1.4.2",
                "pkg:php-windows-deps/libbzip2@1.0.8",
                "pkg:php-windows-deps/libcurl@8.21.0",
                "pkg:php-windows-deps/libenchant2@2.8.16-1",
                "pkg:php-windows-deps/libffi@3.6.0",
                "pkg:php-windows-deps/libiconv@1.19",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/libonig@6.9.10",
                "pkg:php-windows-deps/libpng@1.6.58",
                "pkg:php-windows-deps/libpq@14.23",
                "pkg:php-windows-deps/libqdbm@1.8.78",
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/libsodium@1.0.22",
                "pkg:php-windows-deps/libssh2@1.11.1-4",
                "pkg:php-windows-deps/libtidy@5.8.0",
                "pkg:php-windows-deps/libwebp@1.6.0",
                "pkg:php-windows-deps/libxml2@2.10.4-8",
                "pkg:php-windows-deps/libxpm@3.5.19",
                "pkg:php-windows-deps/libxslt@1.1.43-2",
                "pkg:php-windows-deps/libzip@1.11.4",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/mpir@3.0.0-2",
                "pkg:php-windows-deps/net-snmp@5.7.3-3",
                "pkg:php-windows-deps/nghttp2@1.69.0-1",
                "pkg:php-windows-deps/openldap@2.6.13-1",
                "pkg:php-windows-deps/openssl@3.0.21.pl1",
                "pkg:php-windows-deps/sqlite3@3.53.2",
                "pkg:php-windows-deps/wineditline@2.208",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        }
    ],
    "vulnerabilities": [
        {
            "id": "CVE-1999-0289",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0289"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The affected legacy Win32 path handling is not present in Apache HTTP Server 2.4 builds."
            }
        },
        {
            "id": "CVE-1999-0678",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0678"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE concerns a Debian default ServerRoot configuration; Debian packaging and configuration are not present in the Windows artifact."
            }
        },
        {
            "id": "CVE-2025-3891",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3891"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects mod_auth_openidc, which is a separate module and is not included in the Apache dependency artifact."
            }
        },
        {
            "id": "CVE-2025-15661",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-4"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix."
            }
        },
        {
            "id": "CVE-2026-55199",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-4"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c."
            }
        },
        {
            "id": "CVE-2026-55200",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-4"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c."
            }
        },
        {
            "id": "CVE-2026-58050",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-4"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58051",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-4"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58055",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/nghttp2@1.69.0-1"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream nghttpx request-header validation in winlibs/nghttp2 tag nghttp2-1.69.0-1."
            }
        },
        {
            "id": "CVE-2026-7598",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-4"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting upstream username_len bounds checking in src/userauth.c."
            }
        },
        {
            "id": "CVE-2017-8806",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8806"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libpq@14.23"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects Debian and Ubuntu postgresql-common cluster scripts, which are not included in the Windows libpq artifact."
            }
        },
        {
            "id": "CVE-2022-49043",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49043"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream fix for the xmlXIncludeAddNode use-after-free in URI error reporting in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2023-45322",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2024-25062",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25062"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the XML Reader XInclude use-after-free backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2024-34459",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34459"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the xmllint --htmlout buffer overread backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2024-56171",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-24928",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-27113",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 backport in tag libxml2-2.10.4-1."
            }
        },
        {
            "id": "CVE-2025-32414",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-32415",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-49794",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
            }
        },
        {
            "id": "CVE-2025-49795",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-49796",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 schematron backport in tag libxml2-2.10.4-4."
            }
        },
        {
            "id": "CVE-2025-6021",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-6170",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-8732",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.10.4-5."
            }
        },
        {
            "id": "CVE-2026-0989",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-0990",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-0992",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-11979",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-1757",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2026-6653",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6653"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.10.4-8"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream entity amplification accounting changes in winlibs/libxml2 tag libxml2-2.10.4-8."
            }
        },
        {
            "id": "CVE-2025-10911",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-11731",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7424",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "protected_by_mitigating_control",
                "detail": "The patched libxml2 dependency shipped with this Winlibs build preserves the private atype flag bits, preventing the corruption in libxslt."
            }
        }
    ]
}