{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "serialNumber": "urn:uuid:9a085279-2f6c-46c6-a84f-20c43f884aae",
    "version": 1,
    "metadata": {
        "timestamp": "2026-07-28T13:27:35Z",
        "tools": {
            "components": [
                {
                    "type": "application",
                    "name": "php",
                    "version": "8.5.9"
                }
            ]
        },
        "component": {
            "type": "application",
            "bom-ref": "pkg:generic/php@8.5.9",
            "name": "php",
            "version": "8.5.9",
            "purl": "pkg:generic/php@8.5.9",
            "cpe": "cpe:2.3:a:php:php:8.5.9:*:*:*:*:*:*:*",
            "supplier": {
                "name": "PHP Group"
            },
            "licenses": [
                {
                    "license": {
                        "id": "PHP-3.01"
                    }
                }
            ],
            "properties": [
                {
                    "name": "php:dependency-sbom-status",
                    "value": "present"
                },
                {
                    "name": "php:artifact-file-name",
                    "value": "php-8.5.9-Win32-vs17-x64.zip"
                },
                {
                    "name": "php:artifact-download-location",
                    "value": "https://downloads.php.net/~windows/releases/php-8.5.9-Win32-vs17-x64.zip"
                },
                {
                    "name": "php:artifact-architecture",
                    "value": "x64"
                },
                {
                    "name": "php:artifact-thread-safety",
                    "value": "ts"
                },
                {
                    "name": "php:artifact-compiler",
                    "value": "vs17"
                }
            ],
            "copyright": "Copyright (c) 1999 - 2024 The PHP Group. All rights reserved.",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6a8af9f5d2a35b81cd9f1db04bd4037c3609828db62f81589e29e13faffd45f9"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/releases/php-8.5.9-Win32-vs17-x64.zip"
                }
            ]
        }
    },
    "components": [
        {
            "type": "library",
            "bom-ref": "pkg:generic/berkeley-uuencode",
            "name": "Berkeley uuencode",
            "version": "snapshot-25636b9321c2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/berkeley-uuencode",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause-UC"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/uuencode.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "25636b9321c2859ac28ee4ad7148270ebccaa79143777b623d84985622875597"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/boost-context-assembly",
            "name": "Boost.Context assembly",
            "version": "snapshot-6abda7f14758",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/boost-context-assembly",
            "licenses": [
                {
                    "license": {
                        "id": "BSL-1.0"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6abda7f14758e771821c255ee9be016c31e181d259bfe394098769013c7b1192"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "Zend/asm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6abda7f14758e771821c255ee9be016c31e181d259bfe394098769013c7b1192"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/crypt_blowfish@1.3",
            "name": "crypt_blowfish",
            "version": "1.3",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/crypt_blowfish@1.3",
            "licenses": [
                {
                    "license": {
                        "id": "bcrypt-Solar-Designer"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_blowfish.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "f3f115c759bf08bdb7f41a47fd8afdd7985ee51227298caa72530ffb14c10e94"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/dynasm@1.5.0",
            "name": "DynASM",
            "version": "1.5.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/dynasm@1.5.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d2d56ba8be243d8330b96f0aaf416dd4f8e153667a9ee07fcfe5cf7cf8e2fa22"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/opcache/jit/ir/dynasm"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d2d56ba8be243d8330b96f0aaf416dd4f8e153667a9ee07fcfe5cf7cf8e2fa22"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/freesec-libcrypt",
            "name": "FreeSec libcrypt",
            "version": "snapshot-6b1d1d57b0af",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/freesec-libcrypt",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/crypt_freesec.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "6b1d1d57b0af0da0fcdb3a72c5a2137a7c489303b8d55558db7359f10337aa2f"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libarchive-format-octal",
            "name": "libarchive tar format_octal",
            "version": "snapshot-36341177800f",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libarchive-format-octal",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "36341177800fc8f5646c62cc2a4b3dacd24b58b277cdfef47ce902e014288b17"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/tar.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "36341177800fc8f5646c62cc2a4b3dacd24b58b277cdfef47ce902e014288b17"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba",
            "name": "libavifinfo",
            "version": "2b924defa4c2cd227540efe164067a8cc913eeba",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "eebfce3dfe05d5173f6c95afcfb780eb4eda76cbff22d7149dffc6fd4590a8a1"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/libavifinfo"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "eebfce3dfe05d5173f6c95afcfb780eb4eda76cbff22d7149dffc6fd4590a8a1"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libbcmath@0.2",
            "name": "libbcmath",
            "version": "0.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libbcmath@0.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "1dc7ff5094242a377246b4462aeb0efd5142dc5fba9c4ab3bdfdc263f009973e"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/bcmath/libbcmath"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "1dc7ff5094242a377246b4462aeb0efd5142dc5fba9c4ab3bdfdc263f009973e"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libgd@2.0.35",
            "name": "libgd",
            "version": "2.0.35",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libgd@2.0.35",
            "licenses": [
                {
                    "license": {
                        "id": "GD"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d4d2379d9a61d03fd9458bc13ccb2ff67096c364a780d1dbf342585f0ddb411f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/gd/libgd"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d4d2379d9a61d03fd9458bc13ccb2ff67096c364a780d1dbf342585f0ddb411f"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmagic@5.46",
            "name": "libmagic",
            "version": "5.46",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmagic@5.46",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7924d405b2f9ef3c1ff2b28a4e4d40042de73e668ceae479086d37330891d0d6"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/fileinfo/libmagic"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "7924d405b2f9ef3c1ff2b28a4e4d40042de73e668ceae479086d37330891d0d6"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libmbfl@1.3.2",
            "name": "libmbfl",
            "version": "1.3.2",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libmbfl@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-only"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ce20ebaad689bfc0dabfb1ad9dec9bfbea30b299430465566db997084a939a2a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/libmbfl"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "ce20ebaad689bfc0dabfb1ad9dec9bfbea30b299430465566db997084a939a2a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libzip-zip-dirent",
            "name": "libzip zip_dirent",
            "version": "snapshot-79aa92b5cca9",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/libzip-zip-dirent",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "79aa92b5cca9f1bf4eedad9f72925b580707449a6d4e422db0c87e020f9222dc"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/phar/zip.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "79aa92b5cca9f1bf4eedad9f72925b580707449a6d4e422db0c87e020f9222dc"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/mtrand@1.0",
            "name": "MTRand",
            "version": "1.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/mtrand@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e789018f1e172ec356910fb66d9d50f13b780e05920e12d510395beaf96196ac"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/random/engine_mt19937.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e789018f1e172ec356910fb66d9d50f13b780e05920e12d510395beaf96196ac"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openldap-ucgendat",
            "name": "OpenLDAP ucgendat",
            "version": "snapshot-572651bf88b0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/openldap-ucgendat",
            "licenses": [
                {
                    "expression": "OLDAP-2.8 AND MIT"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "572651bf88b0d2a10f16ff41191ecb385a37e6102a12117597bc7523e0bad968"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/mbstring/ucgendat/ucgendat.php"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "572651bf88b0d2a10f16ff41191ecb385a37e6102a12117597bc7523e0bad968"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2@10.44",
            "name": "pcre2lib",
            "version": "10.44",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/pcre2@10.44",
            "licenses": [
                {
                    "expression": "BSD-3-Clause WITH PCRE2-exception"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "707a215120b9b27c3f80c75557b88de1890ea9e16212324fa87ddcede3e53d95"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/pcre/pcre2lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "707a215120b9b27c3f80c75557b88de1890ea9e16212324fa87ddcede3e53d95"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/snprintf",
            "name": "snprintf",
            "version": "snapshot-42618fe2e789",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/snprintf",
            "licenses": [
                {
                    "expression": "ISC AND Apache-1.0"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "42618fe2e789fed999fc4d6b832991db42d45314240fe6d7da72f66867623ff6"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/snprintf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "42618fe2e789fed999fc4d6b832991db42d45314240fe6d7da72f66867623ff6"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcat",
            "name": "strlcat",
            "version": "snapshot-d2244e6a54fe",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcat",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcat.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "d2244e6a54fead4265249866946ac7fb5050676fefe683110dbb965ea9a6dce8"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strlcpy",
            "name": "strlcpy",
            "version": "snapshot-144d697952d1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strlcpy",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "main/strlcpy.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "144d697952d109c4876660691033dcbe12b9c6124732199c56f31a02422884a6"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/strnatcmp",
            "name": "strnatcmp",
            "version": "snapshot-e14f21965b39",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/strnatcmp",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/strnatcmp.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "e14f21965b3924bc2231a1f638f990e1b2497b0e4fd51ec50f822837bed9bf68"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/tcl-scanf@8.3.0",
            "name": "Tcl scanf implementation",
            "version": "8.3.0",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/tcl-scanf@8.3.0",
            "licenses": [
                {
                    "license": {
                        "id": "TCL"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/standard/scanf.c"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "b8fc92fa954fdb70a31307312c5c50335d37fa2c35ff30560e7590010ffe36e1"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "file-content-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/timelib@2022.17",
            "name": "timelib",
            "version": "2022.17",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/timelib@2022.17",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "2210ee5ba51e09e82e37c7703f661704c412ca918612c9fcb44650dc4e2a873e"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/date/lib"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "2210ee5ba51e09e82e37c7703f661704c412ca918612c9fcb44650dc4e2a873e"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xkcp-sha3",
            "name": "XKCP SHA-3",
            "version": "snapshot-aba3170bb6e1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xkcp-sha3",
            "licenses": [
                {
                    "expression": "CC0-1.0 AND Brian-Gladman-3-Clause"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/sha3"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "aba3170bb6e15ba1bddf0d346e580d3f96c954ac252fe05f888c038cdcda735a"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/xxhash@0.8.1",
            "name": "xxHash",
            "version": "0.8.1",
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PHP Group"
            },
            "purl": "pkg:generic/xxhash@0.8.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "758cc817eb2636dde0c0213b8df1f7e1ba60a4adb3f07b4a62c89223d3f5207d"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "bundled"
                },
                {
                    "name": "php:source-artifact",
                    "value": "php-8.5.9 source tree"
                },
                {
                    "name": "php:source-path",
                    "value": "ext/hash/xxhash"
                },
                {
                    "name": "php:source-digest-algorithm",
                    "value": "SHA-256"
                },
                {
                    "name": "php:source-digest",
                    "value": "758cc817eb2636dde0c0213b8df1f7e1ba60a4adb3f07b4a62c89223d3f5207d"
                },
                {
                    "name": "php:source-digest-format",
                    "value": "relative-path-and-file-sha256-v1"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/ICU@77.1-1",
            "name": "ICU",
            "version": "77.1-1",
            "purl": "pkg:generic/icu@77.1",
            "licenses": [
                {
                    "license": {
                        "id": "Unicode-DFS-2016"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/ICU-77.1-1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/unicode-org/icu"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/unicode-org/icu/tree/release-77-1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/icu4c.git@11bca20cc331c2ad3d38e240e5921ebfad8fe523"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "icu4c"
                },
                {
                    "name": "php:component",
                    "value": "ICU"
                },
                {
                    "name": "php:version",
                    "value": "77.1-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "77.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "unicode-org/icu"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/unicode-org/icu"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "release-77-1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/icu4c"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/icu4c"
                },
                {
                    "name": "php:source-ref",
                    "value": "icu4c-77.1-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "11bca20cc331c2ad3d38e240e5921ebfad8fe523"
                },
                {
                    "name": "php:input-version",
                    "value": "icu4c-77.1-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "ICU-77.1-1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/ICU-77.1-1-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:ICU:77.1",
                        "name": "ICU",
                        "version": "77.1",
                        "purl": "pkg:generic/icu@77.1"
                    }
                ],
                "notes": "Built from winlibs/icu4c ref icu4c-77.1-1 at commit 11bca20cc331c2ad3d38e240e5921ebfad8fe523 with upstream identity unicode-org/icu tag release-77-1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apache@2.4.68",
            "name": "apache",
            "version": "2.4.68",
            "purl": "pkg:generic/apache-httpd@2.4.68",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/apache-2.4.68-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/apache/httpd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/httpd/tree/2.4.68"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/apache/httpd.git@736bb657405eb73fd68a64772c3a908807bdb887"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "apache"
                },
                {
                    "name": "php:component",
                    "value": "apache"
                },
                {
                    "name": "php:version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-repository",
                    "value": "apache/httpd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/apache/httpd"
                },
                {
                    "name": "php:source-ref",
                    "value": "2.4.68"
                },
                {
                    "name": "php:source-commit",
                    "value": "736bb657405eb73fd68a64772c3a908807bdb887"
                },
                {
                    "name": "php:input-version",
                    "value": "2.4.68"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "apache-2.4.68-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/apache-2.4.68-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:apache:http_server:2.4.68:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/jansson-x64-windows@678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4",
            "name": "jansson:x64-windows",
            "version": "678d7ad3250826f28d4b77b4c2ef87cb6b02d5dfb8d29c14eeac3f5cf5a1ced4",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/zlib",
            "name": "zlib",
            "version": "1.3.2#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/zlib",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-x64-windows@03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad",
            "name": "apr:x64-windows",
            "version": "03919ccf3f69b15eba8f04368099f5d3dc5c23ed3526015ec9137984d41c4fad",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/madler-zlib@1.3.2",
            "name": "madler/zlib",
            "version": "1.3.2",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "madler"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-x64-windows@1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676",
            "name": "nghttp2:x64-windows",
            "version": "1ea9da733d3d49024dff92b30043ee27dba59373816942b3d8c986b8a5edb676",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr",
            "name": "apr",
            "version": "1.7.6#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "name": "nghttp2",
            "version": "1.69.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/nghttp2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/brotli-x64-windows@45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426",
            "name": "brotli:x64-windows",
            "version": "45a3ef2859dd01b67fd278f7750b1e843fcc4554fd5350940963f48da31a7426",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-x64-windows@e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676",
            "name": "lua:x64-windows",
            "version": "e8f14584d48e1c2107547c9f22b9a9eccf73691b4aa033d797703ff440500676",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/PCRE2Project-pcre2@10.47",
            "name": "PCRE2Project/pcre2",
            "version": "10.47",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "PCRE2Project"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/jansson",
            "name": "jansson",
            "version": "2.15.1",
            "purl": "pkg:github/microsoft/vcpkg#ports/jansson",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/libexpat-libexpat@2.8.2",
            "name": "libexpat/libexpat",
            "version": "2.8.2",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "libexpat"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/lua-5.5.0.tar.gz@5.5.0",
            "name": "lua-5.5.0.tar.gz",
            "version": "5.5.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Lua.org"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zherczeg-sljit@45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "name": "zherczeg/sljit",
            "version": "45f910b78c6605ebf5b53d3ec7cb00f2312fe417",
            "licenses": [
                {
                    "expression": "BSD-2-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Zoltan Herczeg"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-x64-windows@ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e",
            "name": "curl:x64-windows",
            "version": "ea772160a9dd49cf8c0365727979d54a2593b7e9b057572af2174857bd60016e",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/expat",
            "name": "expat",
            "version": "2.8.2",
            "purl": "pkg:github/microsoft/vcpkg#ports/expat",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/akheron-jansson@2.15.1",
            "name": "akheron/jansson",
            "version": "2.15.1",
            "licenses": [
                {
                    "expression": "MIT AND dtoa"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "akheron"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/openssl",
            "name": "openssl",
            "version": "3.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/openssl",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "name": "apr-util",
            "version": "1.6.3",
            "purl": "pkg:github/microsoft/vcpkg#ports/apr-util",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "name": "apr-iconv",
            "version": "1.2.2",
            "purl": "pkg:generic/apr-iconv@1.2.2",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/apache/apr-iconv"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/apache/apr-iconv/tree/1.2.2"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "apr-iconv-source/apr-iconv-1.2.2"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "apache/apr-iconv"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/apache/apr-iconv"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.2.2"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/brotli",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:github/microsoft/vcpkg#ports/brotli",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/curl",
            "name": "curl",
            "version": "8.21.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/curl",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/nghttp2-nghttp2@1.69.0",
            "name": "nghttp2/nghttp2",
            "version": "1.69.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "nghttp2"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-x64-windows@8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677",
            "name": "openssl:x64-windows",
            "version": "8ebeacc935df08d9d1c210b16ef5af918196229f49850b57a60b800802600677",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/pcre2-x64-windows@1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc",
            "name": "pcre2:x64-windows",
            "version": "1b0a3280c093bfad0beafbc16e9be01ee86d1064a85163ebb3afc7b0a5339ddc",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/lua",
            "name": "lua",
            "version": "5.5.0#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/lua",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-1.7.6.tar.bz2@1.7.6",
            "name": "apr-1.7.6.tar.bz2",
            "version": "1.7.6",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/zlib-x64-windows@5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b",
            "name": "zlib:x64-windows",
            "version": "5ae23b0077d1eaea33185c69c114d098231e93cc7d2c77a8123d625ddd85c44b",
            "licenses": [
                {
                    "expression": "Zlib"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/google-brotli@1.2.0",
            "name": "google/brotli",
            "version": "1.2.0",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "google"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/curl-curl@8.21.0",
            "name": "curl/curl",
            "version": "8.21.0",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND ISC AND curl"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "curl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/expat-x64-windows@c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6",
            "name": "expat:x64-windows",
            "version": "c1722303603d771cc7dd274c0d811b2d1f3caf311b6117a74e9ef24bd7c7a1e6",
            "licenses": [
                {
                    "expression": "MIT"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/openssl-openssl@3.6.3",
            "name": "openssl/openssl",
            "version": "3.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "openssl"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "name": "pcre2",
            "version": "10.47#1",
            "purl": "pkg:github/microsoft/vcpkg#ports/pcre2",
            "licenses": [
                {
                    "expression": "BSD-3-Clause"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Microsoft"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-x64-windows@c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd",
            "name": "apr-util:x64-windows",
            "version": "c0221bb1ebe3af251a9b9a69917701cf75f2bbfafabb4c88ee331dba0aad8dcd",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apr-util-1.6.3.tar.bz2@1.6.3",
            "name": "apr-util-1.6.3.tar.bz2",
            "version": "1.6.3",
            "licenses": [
                {
                    "expression": "Apache-2.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Apache Software Foundation"
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/brotli@1.2.0",
            "name": "brotli",
            "version": "1.2.0",
            "purl": "pkg:generic/brotli@1.2.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/brotli-1.2.0-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/google/brotli"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/google/brotli/tree/v1.2.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/google/brotli.git@028fb5a23661f123017c060daa546b55cf4bde29"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "brotli"
                },
                {
                    "name": "php:component",
                    "value": "brotli"
                },
                {
                    "name": "php:version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.2.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "google/brotli"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/google/brotli"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "028fb5a23661f123017c060daa546b55cf4bde29"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.2.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "brotli-1.2.0-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/brotli-1.2.0-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:google:brotli:1.2.0:*:*:*:*:*:*:*"
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/fbclient@4.0.7",
            "name": "fbclient",
            "version": "4.0.7",
            "purl": "pkg:generic/firebird@4.0.7",
            "licenses": [
                {
                    "expression": "Interbase-1.0 AND LicenseRef-fbclient-IDPL-1.0"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/fbclient-4.0.7-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/FirebirdSQL/firebird/tree/v4.0.7"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "fbclient"
                },
                {
                    "name": "php:component",
                    "value": "fbclient"
                },
                {
                    "name": "php:version",
                    "value": "4.0.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "4.0.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v4.0.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/FirebirdSQL/firebird"
                },
                {
                    "name": "php:source-ref",
                    "value": "v4.0.7"
                },
                {
                    "name": "php:input-version",
                    "value": "v4.0.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "fbclient-4.0.7-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/fbclient-4.0.7-vs17-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/freetype@2.14.3",
            "name": "freetype",
            "version": "2.14.3",
            "purl": "pkg:generic/freetype@2.14.3",
            "licenses": [
                {
                    "expression": "FTL OR GPL-2.0-or-later"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/freetype-2.14.3-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/freetype/freetype"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/freetype/freetype/tree/VER-2-14-3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/freetype.git@3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "freetype"
                },
                {
                    "name": "php:component",
                    "value": "freetype"
                },
                {
                    "name": "php:version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.14.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "freetype/freetype"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/freetype/freetype"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "VER-2-14-3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/freetype"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/freetype"
                },
                {
                    "name": "php:source-ref",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "3d8e776a1f1800dea07d433e20c91e8a9a161c4f"
                },
                {
                    "name": "php:input-version",
                    "value": "freetype-2.14.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "freetype-2.14.3-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/freetype-2.14.3-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:freetype:freetype:2.14.3:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:freetype:2.14.3",
                        "name": "freetype",
                        "version": "2.14.3",
                        "purl": "pkg:generic/freetype@2.14.3"
                    }
                ],
                "notes": "Built from winlibs/freetype ref freetype-2.14.3 at commit 3d8e776a1f1800dea07d433e20c91e8a9a161c4f with upstream identity freetype/freetype tag VER-2-14-3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/glib@2.88.1-1",
            "name": "glib",
            "version": "2.88.1-1",
            "purl": "pkg:generic/glib@2.88.1",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/glib-2.88.1-1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/glib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/glib/tree/2.88.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/glib.git@dd6ae272f882ba3fb195b181827465993831ff83"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "glib"
                },
                {
                    "name": "php:component",
                    "value": "glib"
                },
                {
                    "name": "php:version",
                    "value": "2.88.1-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.88.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/glib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/glib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "2.88.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/glib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/glib"
                },
                {
                    "name": "php:source-ref",
                    "value": "glib-2.88.1-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "dd6ae272f882ba3fb195b181827465993831ff83"
                },
                {
                    "name": "php:input-version",
                    "value": "glib-2.88.1-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "glib-2.88.1-1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/glib-2.88.1-1-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:gnome:glib:2.88.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:glib:2.88.1",
                        "name": "glib",
                        "version": "2.88.1",
                        "purl": "pkg:generic/glib@2.88.1"
                    }
                ],
                "notes": "Built from winlibs/glib ref glib-2.88.1-1 at commit dd6ae272f882ba3fb195b181827465993831ff83 with upstream identity GNOME/glib tag 2.88.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libffi@3.6.0",
            "name": "libffi",
            "version": "3.6.0",
            "purl": "pkg:generic/libffi@3.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libffi-3.6.0-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libffi/libffi"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libffi/libffi/tree/v3.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libffi.git@9f75967331946c3ff827e14d74226c15a162e74e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libffi"
                },
                {
                    "name": "php:component",
                    "value": "libffi"
                },
                {
                    "name": "php:version",
                    "value": "3.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libffi/libffi"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libffi/libffi"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libffi"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libffi"
                },
                {
                    "name": "php:source-ref",
                    "value": "libffi-3.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f75967331946c3ff827e14d74226c15a162e74e"
                },
                {
                    "name": "php:input-version",
                    "value": "libffi-3.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libffi-3.6.0-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libffi-3.6.0-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libffi:3.6.0",
                        "name": "libffi",
                        "version": "3.6.0",
                        "purl": "pkg:generic/libffi@3.6.0"
                    }
                ],
                "notes": "Built from winlibs/libffi ref libffi-3.6.0 at commit 9f75967331946c3ff827e14d74226c15a162e74e with upstream identity libffi/libffi tag v3.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libintl@1.0",
            "name": "libintl",
            "version": "1.0",
            "purl": "pkg:generic/gettext@1.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libintl-1.0-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/gettext.git@cd6fcaeffc493305f9c0081310efa0e063060da6"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "gettext"
                },
                {
                    "name": "php:component",
                    "value": "libintl"
                },
                {
                    "name": "php:version",
                    "value": "1.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/gettext.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/gettext"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/gettext"
                },
                {
                    "name": "php:source-ref",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "cd6fcaeffc493305f9c0081310efa0e063060da6"
                },
                {
                    "name": "php:input-version",
                    "value": "libintl-1.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libintl-1.0-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libintl-1.0-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libintl:1.0",
                        "name": "libintl",
                        "version": "1.0",
                        "purl": "pkg:generic/gettext@1.0"
                    }
                ],
                "notes": "Built from winlibs/gettext ref libintl-1.0 at commit cd6fcaeffc493305f9c0081310efa0e063060da6 with upstream identity https://git.savannah.gnu.org/git/gettext.git tag v1.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/zlib@1.3.2",
            "name": "zlib",
            "version": "1.3.2",
            "purl": "pkg:generic/zlib@1.3.2",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/zlib-1.3.2-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/madler/zlib"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/madler/zlib/tree/v1.3.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/zlib.git@0089522e62e6b5d4950e62bd20f0cb06a9288413"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "zlib"
                },
                {
                    "name": "php:component",
                    "value": "zlib"
                },
                {
                    "name": "php:version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.3.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "madler/zlib"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/madler/zlib"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.3.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/zlib"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/zlib"
                },
                {
                    "name": "php:source-ref",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "0089522e62e6b5d4950e62bd20f0cb06a9288413"
                },
                {
                    "name": "php:input-version",
                    "value": "zlib-1.3.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "zlib-1.3.2-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/zlib-1.3.2-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:zlib:zlib:1.3.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:zlib:1.3.2",
                        "name": "zlib",
                        "version": "1.3.2",
                        "purl": "pkg:generic/zlib@1.3.2"
                    }
                ],
                "notes": "Built from winlibs/zlib ref zlib-1.3.2 at commit 0089522e62e6b5d4950e62bd20f0cb06a9288413 with upstream identity madler/zlib tag v1.3.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libargon2@20190702",
            "name": "libargon2",
            "version": "20190702",
            "purl": "pkg:generic/libargon2@20190702",
            "licenses": [
                {
                    "license": {
                        "id": "CC0-1.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libargon2-20190702-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/P-H-C/phc-winner-argon2/tree/20190702"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/argon2.git@fb53ef37be212380d51877b70f514f3bf2c1ee40"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "argon2"
                },
                {
                    "name": "php:component",
                    "value": "libargon2"
                },
                {
                    "name": "php:version",
                    "value": "20190702"
                },
                {
                    "name": "php:upstream-version",
                    "value": "20190702"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/P-H-C/phc-winner-argon2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "20190702"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/argon2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/argon2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:source-commit",
                    "value": "fb53ef37be212380d51877b70f514f3bf2c1ee40"
                },
                {
                    "name": "php:input-version",
                    "value": "libargon2-20190702"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libargon2-20190702-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libargon2-20190702-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libargon2:20190702",
                        "name": "libargon2",
                        "version": "20190702",
                        "purl": "pkg:generic/libargon2@20190702"
                    }
                ],
                "notes": "Built from winlibs/argon2 ref libargon2-20190702 at commit fb53ef37be212380d51877b70f514f3bf2c1ee40 with upstream identity P-H-C/phc-winner-argon2 tag 20190702."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libavif@1.4.2",
            "name": "libavif",
            "version": "1.4.2",
            "purl": "pkg:generic/libavif@1.4.2",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libavif-1.4.2-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AOMediaCodec/libavif/tree/v1.4.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libavif.git@14976153789c7ebf2ca24b22215a964bbc5be213"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libavif"
                },
                {
                    "name": "php:component",
                    "value": "libavif"
                },
                {
                    "name": "php:version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.4.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AOMediaCodec/libavif"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.4.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libavif"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libavif"
                },
                {
                    "name": "php:source-ref",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "14976153789c7ebf2ca24b22215a964bbc5be213"
                },
                {
                    "name": "php:input-version",
                    "value": "libavif-1.4.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libavif-1.4.2-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libavif-1.4.2-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libavif:1.4.2",
                        "name": "libavif",
                        "version": "1.4.2",
                        "purl": "pkg:generic/libavif@1.4.2"
                    }
                ],
                "notes": "Built from winlibs/libavif ref libavif-1.4.2 at commit 14976153789c7ebf2ca24b22215a964bbc5be213 with upstream identity AOMediaCodec/libavif tag v1.4.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/aom@3.14.1",
            "name": "aom",
            "version": "3.14.1",
            "purl": "pkg:generic/aom@3.14.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://aomedia.googlesource.com/aom"
                },
                {
                    "type": "vcs",
                    "url": "https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://aomedia.googlesource.com/aom.git@03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "libavif/ext/aom"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-url",
                    "value": "https://aomedia.googlesource.com/aom"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.14.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "03087864cf4bea6abb0d28f95cf7843511413d8f"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libbzip2@1.0.8-1",
            "name": "libbzip2",
            "version": "1.0.8-1",
            "purl": "pkg:generic/bzip2@1.0.8",
            "licenses": [
                {
                    "license": {
                        "id": "bzip2-1.0.6"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libbzip2-1.0.8-1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libarchive/bzip2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libarchive/bzip2/tree/bzip2-1.0.8"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libbzip2.git@99d3c4812e2b98bc305ae4b867f35346946717f0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libbzip2"
                },
                {
                    "name": "php:component",
                    "value": "libbzip2"
                },
                {
                    "name": "php:version",
                    "value": "1.0.8-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.8"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libarchive/bzip2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libarchive/bzip2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "bzip2-1.0.8"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libbzip2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libbzip2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libbzip2-1.0.8-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "99d3c4812e2b98bc305ae4b867f35346946717f0"
                },
                {
                    "name": "php:input-version",
                    "value": "libbzip2-1.0.8-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libbzip2-1.0.8-1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libbzip2-1.0.8-1-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libbzip2:1.0.8",
                        "name": "libbzip2",
                        "version": "1.0.8",
                        "purl": "pkg:generic/bzip2@1.0.8"
                    }
                ],
                "notes": "Built from winlibs/libbzip2 ref libbzip2-1.0.8-1 at commit 99d3c4812e2b98bc305ae4b867f35346946717f0 with upstream identity libarchive/bzip2 tag bzip2-1.0.8."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libcurl@8.21.0-1",
            "name": "libcurl",
            "version": "8.21.0-1",
            "purl": "pkg:generic/curl@8.21.0",
            "licenses": [
                {
                    "license": {
                        "id": "curl"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libcurl-8.21.0-1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/curl/curl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/curl/curl/tree/curl-8_21_0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/curl.git@b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "curl"
                },
                {
                    "name": "php:component",
                    "value": "libcurl"
                },
                {
                    "name": "php:version",
                    "value": "8.21.0-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "8.21.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "curl/curl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/curl/curl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "curl-8_21_0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/curl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/curl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libcurl-8.21.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0"
                },
                {
                    "name": "php:input-version",
                    "value": "libcurl-8.21.0-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.5"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libcurl-8.21.0-1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libcurl-8.21.0-1-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:haxx:curl:8.21.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libcurl:8.21.0",
                        "name": "libcurl",
                        "version": "8.21.0",
                        "purl": "pkg:generic/curl@8.21.0"
                    }
                ],
                "notes": "Built from winlibs/curl ref libcurl-8.21.0-1 at commit b49adb2e4efd37ca3f76e8a80d16c3e2c5efdab0 with upstream identity curl/curl tag curl-8_21_0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libssh2@1.11.1-5",
            "name": "libssh2",
            "version": "1.11.1-5",
            "purl": "pkg:generic/libssh2@1.11.1",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libssh2-1.11.1-5-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libssh2/libssh2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libssh2/libssh2/tree/libssh2-1.11.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libssh2.git@b47abdf27c93ee1ff4705e88968c5c628a93107a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libssh2"
                },
                {
                    "name": "php:component",
                    "value": "libssh2"
                },
                {
                    "name": "php:version",
                    "value": "1.11.1-5"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libssh2/libssh2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libssh2/libssh2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libssh2-1.11.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libssh2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libssh2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libssh2-1.11.1-5"
                },
                {
                    "name": "php:source-commit",
                    "value": "b47abdf27c93ee1ff4705e88968c5c628a93107a"
                },
                {
                    "name": "php:input-version",
                    "value": "libssh2-1.11.1-5"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.5"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libssh2-1.11.1-5-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libssh2-1.11.1-5-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libssh2:libssh2:1.11.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libssh2:1.11.1",
                        "name": "libssh2",
                        "version": "1.11.1",
                        "purl": "pkg:generic/libssh2@1.11.1"
                    }
                ],
                "notes": "Built from winlibs/libssh2 ref libssh2-1.11.1-5 at commit b47abdf27c93ee1ff4705e88968c5c628a93107a with upstream identity libssh2/libssh2 tag libssh2-1.11.1.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-7598",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
                                },
                                "description": "Fixed by backporting upstream username_len bounds checking in src/userauth.c.",
                                "references": [
                                    "https://github.com/libssh2/libssh2/pull/1858",
                                    "https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-15661",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
                                },
                                "description": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/94726036b0d5abec38dfec6202270c5b4d0021dc",
                                    "https://github.com/libssh2/libssh2/commit/2dae3024897e1898d389835151f4e9606227721d",
                                    "https://github.com/libssh2/libssh2/commit/4ed26f5740bdd409269ed9fb48a28bf8f565b681"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55199",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
                                },
                                "description": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f6732df726b0e187f0ab6c4d538b7e5e5307439c",
                                    "https://github.com/libssh2/libssh2/commit/17626857d20b3c9a1addfa45979dadcee1cd84a4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-55200",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
                                },
                                "description": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/f2abc265e35792e3c86752c9f12682a1fb0d4a01",
                                    "https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58050",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
                                },
                                "description": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/103972c538a11e5ae571f6126657e1baefccc415",
                                    "https://github.com/libssh2/libssh2/commit/34497525929b9a47f03dfb81887ac896202b7e12"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-58051",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
                                },
                                "description": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c.",
                                "references": [
                                    "https://github.com/winlibs/libssh2/commit/97e8f0143a55b66df60a695678433ccbe24291f0",
                                    "https://github.com/libssh2/libssh2/commit/a9758da45a52bc8c630ec9493804d0c6ea30b24a"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "name": "libzstd",
            "version": "1.5.7",
            "purl": "pkg:generic/zstd@1.5.7",
            "licenses": [
                {
                    "expression": "BSD-3-Clause OR GPL-2.0-only"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libzstd-1.5.7-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/facebook/zstd"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/facebook/zstd/tree/v1.5.7"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/facebook/zstd.git@f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzstd"
                },
                {
                    "name": "php:component",
                    "value": "libzstd"
                },
                {
                    "name": "php:version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.5.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "upstream"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "facebook/zstd"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/facebook/zstd"
                },
                {
                    "name": "php:source-ref",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:source-commit",
                    "value": "f8745da6ff1ad1e7bab384bd1f9d742439278e99"
                },
                {
                    "name": "php:input-version",
                    "value": "v1.5.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzstd-1.5.7-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libzstd-1.5.7-vs17-x64.zip"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/nghttp2@1.69.0-1",
            "name": "nghttp2",
            "version": "1.69.0-1",
            "purl": "pkg:generic/nghttp2@1.69.0",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/nghttp2-1.69.0-1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nghttp2/nghttp2/tree/v1.69.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/nghttp2.git@2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "nghttp2"
                },
                {
                    "name": "php:component",
                    "value": "nghttp2"
                },
                {
                    "name": "php:version",
                    "value": "1.69.0-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.69.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nghttp2/nghttp2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.69.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/nghttp2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/nghttp2"
                },
                {
                    "name": "php:source-ref",
                    "value": "nghttp2-1.69.0-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62"
                },
                {
                    "name": "php:input-version",
                    "value": "nghttp2-1.69.0-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "nghttp2-1.69.0-1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/nghttp2-1.69.0-1-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:nghttp2:nghttp2:1.69.0:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:nghttp2:1.69.0",
                        "name": "nghttp2",
                        "version": "1.69.0",
                        "purl": "pkg:generic/nghttp2@1.69.0"
                    }
                ],
                "notes": "Built from winlibs/nghttp2 ref nghttp2-1.69.0-1 at commit 2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62 with upstream identity nghttp2/nghttp2 tag v1.69.0.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2026-58055",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
                                },
                                "description": "Fixed by backporting the upstream nghttpx request-header validation in winlibs/nghttp2 tag nghttp2-1.69.0-1.",
                                "references": [
                                    "https://github.com/winlibs/nghttp2/commit/2a9c99ffa829858a2c0b245eeb4a6e7c9cae7c62",
                                    "https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e",
                                    "https://github.com/nghttp2/nghttp2/pull/2769"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openssl@3.5.7",
            "name": "openssl",
            "version": "3.5.7",
            "purl": "pkg:generic/openssl@3.5.7",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openssl-3.5.7-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openssl/openssl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openssl/openssl/tree/openssl-3.5.7"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openssl.git@07444295ce1ca3175b58a18c9da732c14393161e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openssl"
                },
                {
                    "name": "php:component",
                    "value": "openssl"
                },
                {
                    "name": "php:version",
                    "value": "3.5.7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.5.7"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openssl/openssl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openssl/openssl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "openssl-3.5.7"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openssl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openssl"
                },
                {
                    "name": "php:source-ref",
                    "value": "openssl-3.5.7"
                },
                {
                    "name": "php:source-commit",
                    "value": "07444295ce1ca3175b58a18c9da732c14393161e"
                },
                {
                    "name": "php:input-version",
                    "value": "openssl-3.5.7"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.5"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openssl-3.5.7-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openssl-3.5.7-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openssl:3.5.7",
                        "name": "openssl",
                        "version": "3.5.7",
                        "purl": "pkg:generic/openssl@3.5.7"
                    }
                ],
                "notes": "Built from winlibs/openssl ref openssl-3.5.7 at commit 07444295ce1ca3175b58a18c9da732c14393161e with upstream identity openssl/openssl tag openssl-3.5.7."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libenchant2@2.8.16-1",
            "name": "libenchant2",
            "version": "2.8.16-1",
            "purl": "pkg:generic/enchant@2.8.16",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libenchant2-2.8.16-1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/AbiWord/enchant"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/AbiWord/enchant/tree/v2.8.16"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/enchant.git@306f758741abb4a67b6e7143784d556eaacebdd9"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "enchant"
                },
                {
                    "name": "php:component",
                    "value": "libenchant2"
                },
                {
                    "name": "php:version",
                    "value": "2.8.16-1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.8.16"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "AbiWord/enchant"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/AbiWord/enchant"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.8.16"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/enchant"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/enchant"
                },
                {
                    "name": "php:source-ref",
                    "value": "libenchant2-2.8.16-1"
                },
                {
                    "name": "php:source-commit",
                    "value": "306f758741abb4a67b6e7143784d556eaacebdd9"
                },
                {
                    "name": "php:input-version",
                    "value": "libenchant2-2.8.16-1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libenchant2-2.8.16-1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libenchant2-2.8.16-1-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libenchant2:2.8.16",
                        "name": "libenchant2",
                        "version": "2.8.16",
                        "purl": "pkg:generic/enchant@2.8.16"
                    }
                ],
                "notes": "Built from winlibs/enchant ref libenchant2-2.8.16-1 at commit 306f758741abb4a67b6e7143784d556eaacebdd9 with upstream identity AbiWord/enchant tag v2.8.16."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libiconv@1.19",
            "name": "libiconv",
            "version": "1.19",
            "purl": "pkg:generic/libiconv@1.19",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libiconv-1.19-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libiconv.git@8f55a0aa6532f30f947261d90e72b200f350a5df"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libiconv"
                },
                {
                    "name": "php:component",
                    "value": "libiconv"
                },
                {
                    "name": "php:version",
                    "value": "1.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://git.savannah.gnu.org/git/libiconv.git"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libiconv"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libiconv"
                },
                {
                    "name": "php:source-ref",
                    "value": "libiconv-1.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "8f55a0aa6532f30f947261d90e72b200f350a5df"
                },
                {
                    "name": "php:input-version",
                    "value": "libiconv-1.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libiconv-1.19-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libiconv-1.19-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libiconv:1.19",
                        "name": "libiconv",
                        "version": "1.19",
                        "purl": "pkg:generic/libiconv@1.19"
                    }
                ],
                "notes": "Built from winlibs/libiconv ref libiconv-1.19 at commit 8f55a0aa6532f30f947261d90e72b200f350a5df with upstream identity https://git.savannah.gnu.org/git/libiconv.git tag v1.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
            "name": "libjpeg-turbo",
            "version": "3.1.4.1",
            "purl": "pkg:generic/libjpeg-turbo@3.1.4.1",
            "licenses": [
                {
                    "expression": "BSD-3-Clause AND IJG"
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libjpeg-turbo-3.1.4.1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/libjpeg-turbo/libjpeg-turbo/tree/3.1.4.1"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libjpeg.git@ca1aee45c747aaf6f66aada3abe6353306ff502b"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libjpeg"
                },
                {
                    "name": "php:component",
                    "value": "libjpeg-turbo"
                },
                {
                    "name": "php:version",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/libjpeg-turbo/libjpeg-turbo"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "3.1.4.1"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libjpeg"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libjpeg"
                },
                {
                    "name": "php:source-ref",
                    "value": "libjpeg-turbo-3.1.4.1"
                },
                {
                    "name": "php:source-commit",
                    "value": "ca1aee45c747aaf6f66aada3abe6353306ff502b"
                },
                {
                    "name": "php:input-version",
                    "value": "libjpeg-turbo-3.1.4.1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libjpeg-turbo-3.1.4.1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libjpeg-turbo-3.1.4.1-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:3.1.4.1:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libjpeg-turbo:3.1.4.1",
                        "name": "libjpeg-turbo",
                        "version": "3.1.4.1",
                        "purl": "pkg:generic/libjpeg-turbo@3.1.4.1"
                    }
                ],
                "notes": "Built from winlibs/libjpeg ref libjpeg-turbo-3.1.4.1 at commit ca1aee45c747aaf6f66aada3abe6353306ff502b with upstream identity libjpeg-turbo/libjpeg-turbo tag 3.1.4.1."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "name": "liblmdb",
            "version": "0.9.35",
            "purl": "pkg:generic/lmdb@0.9.35",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/liblmdb-0.9.35-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/LMDB/lmdb"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/LMDB/lmdb/tree/LMDB_0.9.35"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/lmdb.git@337459047d55fbf52e634bc26285195d06ac145d"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "lmdb"
                },
                {
                    "name": "php:component",
                    "value": "liblmdb"
                },
                {
                    "name": "php:version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:upstream-version",
                    "value": "0.9.35"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "LMDB/lmdb"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/LMDB/lmdb"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "LMDB_0.9.35"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/lmdb"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/lmdb"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:source-commit",
                    "value": "337459047d55fbf52e634bc26285195d06ac145d"
                },
                {
                    "name": "php:input-version",
                    "value": "liblmdb-0.9.35"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblmdb-0.9.35-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/liblmdb-0.9.35-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblmdb:0.9.35",
                        "name": "liblmdb",
                        "version": "0.9.35",
                        "purl": "pkg:generic/lmdb@0.9.35"
                    }
                ],
                "notes": "Built from winlibs/lmdb ref liblmdb-0.9.35 at commit 337459047d55fbf52e634bc26285195d06ac145d with upstream identity LMDB/lmdb tag LMDB_0.9.35."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/liblzma@5.8.3",
            "name": "liblzma",
            "version": "5.8.3",
            "purl": "pkg:generic/xz@5.8.3",
            "licenses": [
                {
                    "license": {
                        "id": "0BSD"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/liblzma-5.8.3-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/tukaani-project/xz"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/tukaani-project/xz/tree/v5.8.3"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/liblzma.git@debf994b6385f384f01815eaac4597e3c2e2cc4e"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "liblzma"
                },
                {
                    "name": "php:component",
                    "value": "liblzma"
                },
                {
                    "name": "php:version",
                    "value": "5.8.3"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.3"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "tukaani-project/xz"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/tukaani-project/xz"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.8.3"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/liblzma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/liblzma"
                },
                {
                    "name": "php:source-ref",
                    "value": "liblzma-5.8.3"
                },
                {
                    "name": "php:source-commit",
                    "value": "debf994b6385f384f01815eaac4597e3c2e2cc4e"
                },
                {
                    "name": "php:input-version",
                    "value": "liblzma-5.8.3"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "liblzma-5.8.3-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/liblzma-5.8.3-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:liblzma:5.8.3",
                        "name": "liblzma",
                        "version": "5.8.3",
                        "purl": "pkg:generic/xz@5.8.3"
                    }
                ],
                "notes": "Built from winlibs/liblzma ref liblzma-5.8.3 at commit debf994b6385f384f01815eaac4597e3c2e2cc4e with upstream identity tukaani-project/xz tag v5.8.3."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libonig@6.9.10",
            "name": "libonig",
            "version": "6.9.10",
            "purl": "pkg:generic/oniguruma@6.9.10",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-2-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libonig-6.9.10-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/kkos/oniguruma"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/kkos/oniguruma/tree/v6.9.10"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/oniguruma.git@fceeeffdb609661ffaea9be4075c6ff4d6696611"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "oniguruma"
                },
                {
                    "name": "php:component",
                    "value": "libonig"
                },
                {
                    "name": "php:version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:upstream-version",
                    "value": "6.9.10"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "kkos/oniguruma"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/kkos/oniguruma"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v6.9.10"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/oniguruma"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/oniguruma"
                },
                {
                    "name": "php:source-ref",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:source-commit",
                    "value": "fceeeffdb609661ffaea9be4075c6ff4d6696611"
                },
                {
                    "name": "php:input-version",
                    "value": "libonig-6.9.10"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libonig-6.9.10-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libonig-6.9.10-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libonig:6.9.10",
                        "name": "libonig",
                        "version": "6.9.10",
                        "purl": "pkg:generic/oniguruma@6.9.10"
                    }
                ],
                "notes": "Built from winlibs/oniguruma ref libonig-6.9.10 at commit fceeeffdb609661ffaea9be4075c6ff4d6696611 with upstream identity kkos/oniguruma tag v6.9.10."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpng@1.6.58",
            "name": "libpng",
            "version": "1.6.58",
            "purl": "pkg:generic/libpng@1.6.58",
            "licenses": [
                {
                    "license": {
                        "id": "libpng-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libpng-1.6.58-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/pnggroup/libpng"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/pnggroup/libpng/tree/v1.6.58"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libpng.git@5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libpng"
                },
                {
                    "name": "php:component",
                    "value": "libpng"
                },
                {
                    "name": "php:version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.58"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "pnggroup/libpng"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/pnggroup/libpng"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.58"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libpng"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libpng"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:source-commit",
                    "value": "5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896"
                },
                {
                    "name": "php:input-version",
                    "value": "libpng-1.6.58"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpng-1.6.58-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libpng-1.6.58-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:libpng:libpng:1.6.58:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpng:1.6.58",
                        "name": "libpng",
                        "version": "1.6.58",
                        "purl": "pkg:generic/libpng@1.6.58"
                    }
                ],
                "notes": "Built from winlibs/libpng ref libpng-1.6.58 at commit 5d1b8aa0f6a0f20d7962270ac5ebb64b5795a896 with upstream identity pnggroup/libpng tag v1.6.58."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libpq@16.14",
            "name": "libpq",
            "version": "16.14",
            "purl": "pkg:generic/postgresql@16.14",
            "licenses": [
                {
                    "license": {
                        "id": "PostgreSQL"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libpq-16.14-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/postgres/postgres"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/postgres/postgres/tree/REL_16_14"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/postgresql.git@1d21b9597f8b7a6c5a96435408e3a61e16b68191"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "postgresql"
                },
                {
                    "name": "php:component",
                    "value": "libpq"
                },
                {
                    "name": "php:version",
                    "value": "16.14"
                },
                {
                    "name": "php:upstream-version",
                    "value": "16.14"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "postgres/postgres"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/postgres/postgres"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "REL_16_14"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/postgresql"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/postgresql"
                },
                {
                    "name": "php:source-ref",
                    "value": "libpq-16.14"
                },
                {
                    "name": "php:source-commit",
                    "value": "1d21b9597f8b7a6c5a96435408e3a61e16b68191"
                },
                {
                    "name": "php:input-version",
                    "value": "libpq-16.14"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libpq-16.14-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libpq-16.14-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:postgresql:postgresql:16.14:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libpq:16.14",
                        "name": "libpq",
                        "version": "16.14",
                        "purl": "pkg:generic/postgresql@16.14"
                    }
                ],
                "notes": "Built from winlibs/postgresql ref libpq-16.14 at commit 1d21b9597f8b7a6c5a96435408e3a61e16b68191 with upstream identity postgres/postgres tag REL_16_14."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openssl@3.0.21.pl1",
            "name": "openssl",
            "version": "3.0.21.pl1",
            "purl": "pkg:generic/openssl@3.0.21",
            "licenses": [
                {
                    "license": {
                        "id": "Apache-2.0"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openssl-3.0.21.pl1-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openssl/openssl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openssl/openssl/tree/openssl-3.0.21"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openssl.git@76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openssl"
                },
                {
                    "name": "php:component",
                    "value": "openssl"
                },
                {
                    "name": "php:version",
                    "value": "3.0.21.pl1"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.21"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openssl/openssl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openssl/openssl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "openssl-3.0.21"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openssl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openssl"
                },
                {
                    "name": "php:source-ref",
                    "value": "openssl-3.0.21.pl1"
                },
                {
                    "name": "php:source-commit",
                    "value": "76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                },
                {
                    "name": "php:input-version",
                    "value": "openssl-3.0.21.pl1"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openssl-3.0.21.pl1-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openssl-3.0.21.pl1-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openssl:openssl:3.0.21:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openssl:3.0.21",
                        "name": "openssl",
                        "version": "3.0.21",
                        "purl": "pkg:generic/openssl@3.0.21"
                    }
                ],
                "notes": "Built from winlibs/openssl ref openssl-3.0.21.pl1 at commit 76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6 with upstream identity openssl/openssl tag openssl-3.0.21. Backport Ubuntu's PKCS#1 implicit-rejection patch.",
                "patches": [
                    {
                        "type": "backport",
                        "diff": {
                            "url": "https://github.com/winlibs/openssl/commit/76409f1973ddc85fa2f6838b2679b1b2ea1e0bb6"
                        }
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "name": "libqdbm",
            "version": "1.8.78",
            "purl": "pkg:generic/qdbm@1.8.78",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-2.1-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libqdbm-1.8.78-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "https://dbmx.net/qdbm/"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/qdbm.git@586aa477ff42f0d307dc26adada275642630b28f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "qdbm"
                },
                {
                    "name": "php:component",
                    "value": "libqdbm"
                },
                {
                    "name": "php:version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.8.78"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://dbmx.net/qdbm/"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "qdbm-1.8.78"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/qdbm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/qdbm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:source-commit",
                    "value": "586aa477ff42f0d307dc26adada275642630b28f"
                },
                {
                    "name": "php:input-version",
                    "value": "libqdbm-1.8.78"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libqdbm-1.8.78-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libqdbm-1.8.78-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libqdbm:1.8.78",
                        "name": "libqdbm",
                        "version": "1.8.78",
                        "purl": "pkg:generic/qdbm@1.8.78"
                    }
                ],
                "notes": "Built from winlibs/qdbm ref libqdbm-1.8.78 at commit 586aa477ff42f0d307dc26adada275642630b28f with upstream identity https://dbmx.net/qdbm/ tag qdbm-1.8.78."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "name": "libsasl",
            "version": "2.1.28",
            "purl": "pkg:generic/cyrus-sasl@2.1.28",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-4-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libsasl-2.1.28-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/cyrusimap/cyrus-sasl/tree/cyrus-sasl-2.1.28"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/cyrus-sasl.git@63a75ce9293206aea981e9f3edcd96645bafd677"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "cyrus-sasl"
                },
                {
                    "name": "php:component",
                    "value": "libsasl"
                },
                {
                    "name": "php:version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.1.28"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/cyrusimap/cyrus-sasl"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "cyrus-sasl-2.1.28"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/cyrus-sasl"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:source-commit",
                    "value": "63a75ce9293206aea981e9f3edcd96645bafd677"
                },
                {
                    "name": "php:input-version",
                    "value": "libsasl-2.1.28"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsasl-2.1.28-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libsasl-2.1.28-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsasl:2.1.28",
                        "name": "libsasl",
                        "version": "2.1.28",
                        "purl": "pkg:generic/cyrus-sasl@2.1.28"
                    }
                ],
                "notes": "Built from winlibs/cyrus-sasl ref libsasl-2.1.28 at commit 63a75ce9293206aea981e9f3edcd96645bafd677 with upstream identity cyrusimap/cyrus-sasl tag cyrus-sasl-2.1.28."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/sqlite3@3.53.2",
            "name": "sqlite3",
            "version": "3.53.2",
            "purl": "pkg:generic/sqlite@3.53.2",
            "licenses": [
                {
                    "license": {
                        "id": "blessing"
                    }
                }
            ],
            "copyright": "NONE",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/sqlite3-3.53.2-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/sqlite/sqlite"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/sqlite/sqlite/tree/version-3.53.2"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/sqlite3.git@1317473784d608cfe3193628ccbe27ed2dedc3fe"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "sqlite3"
                },
                {
                    "name": "php:component",
                    "value": "sqlite3"
                },
                {
                    "name": "php:version",
                    "value": "3.53.2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.53.2"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "sqlite/sqlite"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/sqlite/sqlite"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "version-3.53.2"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/sqlite3"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/sqlite3"
                },
                {
                    "name": "php:source-ref",
                    "value": "sqlite3-3.53.2"
                },
                {
                    "name": "php:source-commit",
                    "value": "1317473784d608cfe3193628ccbe27ed2dedc3fe"
                },
                {
                    "name": "php:input-version",
                    "value": "sqlite3-3.53.2"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "sqlite3-3.53.2-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/sqlite3-3.53.2-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:sqlite:sqlite:3.53.2:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:sqlite3:3.53.2",
                        "name": "sqlite3",
                        "version": "3.53.2",
                        "purl": "pkg:generic/sqlite@3.53.2"
                    }
                ],
                "notes": "Built from winlibs/sqlite3 ref sqlite3-3.53.2 at commit 1317473784d608cfe3193628ccbe27ed2dedc3fe with upstream identity sqlite/sqlite tag version-3.53.2."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "name": "libsodium",
            "version": "1.0.22",
            "purl": "pkg:generic/libsodium@1.0.22",
            "licenses": [
                {
                    "license": {
                        "id": "ISC"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libsodium-1.0.22-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/jedisct1/libsodium"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/jedisct1/libsodium/tree/1.0.22-RELEASE"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libsodium.git@1777bbc853d2aeb124e7b842a11b916193db7bdf"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libsodium"
                },
                {
                    "name": "php:component",
                    "value": "libsodium"
                },
                {
                    "name": "php:version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.0.22"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/jedisct1/libsodium"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "1.0.22-RELEASE"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libsodium"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libsodium"
                },
                {
                    "name": "php:source-ref",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:source-commit",
                    "value": "1777bbc853d2aeb124e7b842a11b916193db7bdf"
                },
                {
                    "name": "php:input-version",
                    "value": "libsodium-1.0.22"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libsodium-1.0.22-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libsodium-1.0.22-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libsodium:1.0.22",
                        "name": "libsodium",
                        "version": "1.0.22",
                        "purl": "pkg:generic/libsodium@1.0.22"
                    }
                ],
                "notes": "Built from winlibs/libsodium ref libsodium-1.0.22 at commit 1777bbc853d2aeb124e7b842a11b916193db7bdf with upstream identity jedisct1/libsodium tag 1.0.22-RELEASE."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "name": "libtidy",
            "version": "5.8.0",
            "purl": "pkg:generic/libtidy@5.8.0",
            "licenses": [
                {
                    "license": {
                        "id": "Zlib"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libtidy-5.8.0-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/htacg/tidy-html5"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/htacg/tidy-html5/tree/5.8.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libtidy.git@8b6229fd70409656257a6446a254fd62fde8a03a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libtidy"
                },
                {
                    "name": "php:component",
                    "value": "libtidy"
                },
                {
                    "name": "php:version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/htacg/tidy-html5"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "5.8.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libtidy"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libtidy"
                },
                {
                    "name": "php:source-ref",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "8b6229fd70409656257a6446a254fd62fde8a03a"
                },
                {
                    "name": "php:input-version",
                    "value": "libtidy-5.8.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libtidy-5.8.0-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libtidy-5.8.0-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libtidy:5.8.0",
                        "name": "libtidy",
                        "version": "5.8.0",
                        "purl": "pkg:generic/libtidy@5.8.0"
                    }
                ],
                "notes": "Built from winlibs/libtidy ref libtidy-5.8.0 at commit 8b6229fd70409656257a6446a254fd62fde8a03a with upstream identity htacg/tidy-html5 tag 5.8.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "name": "libwebp",
            "version": "1.6.0",
            "purl": "pkg:generic/libwebp@1.6.0",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libwebp-1.6.0-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/webmproject/libwebp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/webmproject/libwebp/tree/v1.6.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libwebp.git@1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libwebp"
                },
                {
                    "name": "php:component",
                    "value": "libwebp"
                },
                {
                    "name": "php:version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.6.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "webmproject/libwebp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/webmproject/libwebp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.6.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libwebp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libwebp"
                },
                {
                    "name": "php:source-ref",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "1b7801dd9a59c1dc5bda38895d8f94c815732a9f"
                },
                {
                    "name": "php:input-version",
                    "value": "libwebp-1.6.0"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libwebp-1.6.0-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libwebp-1.6.0-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libwebp:1.6.0",
                        "name": "libwebp",
                        "version": "1.6.0",
                        "purl": "pkg:generic/libwebp@1.6.0"
                    }
                ],
                "notes": "Built from winlibs/libwebp ref libwebp-1.6.0 at commit 1b7801dd9a59c1dc5bda38895d8f94c815732a9f with upstream identity webmproject/libwebp tag v1.6.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxml2@2.11.9-7",
            "name": "libxml2",
            "version": "2.11.9-7",
            "purl": "pkg:generic/libxml2@2.11.9",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxml2-2.11.9-7-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxml2"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxml2/tree/v2.11.9"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxml2.git@f06d784607050c08a9b28b1fce2faa4236c052cf"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxml2"
                },
                {
                    "name": "php:component",
                    "value": "libxml2"
                },
                {
                    "name": "php:version",
                    "value": "2.11.9-7"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.11.9"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxml2"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxml2"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v2.11.9"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxml2"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxml2"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxml2-2.11.9-7"
                },
                {
                    "name": "php:source-commit",
                    "value": "f06d784607050c08a9b28b1fce2faa4236c052cf"
                },
                {
                    "name": "php:input-version",
                    "value": "libxml2-2.11.9-7"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxml2-2.11.9-7-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxml2-2.11.9-7-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.11.9:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxml2:2.11.9",
                        "name": "libxml2",
                        "version": "2.11.9",
                        "purl": "pkg:generic/libxml2@2.11.9"
                    }
                ],
                "notes": "Built from winlibs/libxml2 ref libxml2-2.11.9-7 at commit f06d784607050c08a9b28b1fce2faa4236c052cf with upstream identity GNOME/libxml2 tag v2.11.9.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2024-56171",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/3e2239c54bcc20495bd9dc35f80d3402179b6809"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-24928",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/f4646b65a167bcdf3f18246772b12415172545a8"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-27113",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
                                },
                                "description": "Fixed by winlibs/libxml2 backport in tag libxml2-2.11.9-1."
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32414",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/220875f30a741ee7a4dbd3aa4cfa1e4569573ea9"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-32415",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
                                },
                                "description": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/bcaa5c4af33b2648371b1fff3059bf0c51abe6bd"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49794",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
                                },
                                "description": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/781345c83817681e35f201892d3befc6b63d6129"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49795",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
                                },
                                "description": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/21afa4ccaf8fcf64f03fc0e8fd0c65ef9770c902"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-49796",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
                                },
                                "description": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/781345c83817681e35f201892d3befc6b63d6129"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6021",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/1aaac89c3c076a72c61263e279be47ee9e016a09"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-6170",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
                                },
                                "description": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/f7f4f1cdc447df9b0d4621ebb84fb2c690cecef4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7425",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
                                },
                                "description": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxslt/-/issues/140",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/f1e1f13b766eb580a8dcc0c4e7a447346dfd862e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-8732",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
                                },
                                "description": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.11.9-5.",
                                "references": [
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/eae9291aa73907694dd3a4274d306e31217e746e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0989",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/561fa6aa2df56372746029e027125634008c6f2e"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0990",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/d26c645cd83ae7c8d1439a696a54730af7630ff4"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-0992",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/850597a70a2ff93de74b0be9e378f6bb4f11ade6",
                                    "https://github.com/winlibs/libxml2/commit/04c5570aa73c0c1938ee9e256dbda7649dd7c479"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-1757",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
                                },
                                "description": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/ca4540f6dcc6cb583c0835dbd5ce4dd76d1d8741"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2023-45322",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
                                },
                                "description": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/8af91ce979a7478c852a67a450774b0b3d374308",
                                    "https://github.com/winlibs/libxml2/commit/f06d784607050c08a9b28b1fce2faa4236c052cf",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/d39f78069dff496ec865c73aa44d7110e429bce9",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/8707838e69f9c6e729c1d1d46bb3681d9e622be5"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2026-11979",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
                                },
                                "description": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.11.9-7.",
                                "references": [
                                    "https://github.com/winlibs/libxml2/commit/8abcf2bca49fe3ad8618d356536dc7b0cb3b3225",
                                    "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "name": "libxpm",
            "version": "3.5.19",
            "purl": "pkg:generic/libxpm@3.5.19",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxpm-3.5.19-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "type": "vcs",
                    "url": "https://gitlab.freedesktop.org/xorg/lib/libxpm/-/tree/libXpm-3.5.19"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxpm.git@90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxpm"
                },
                {
                    "name": "php:component",
                    "value": "libxpm"
                },
                {
                    "name": "php:version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.5.19"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://gitlab.freedesktop.org/xorg/lib/libxpm"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "libXpm-3.5.19"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxpm"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxpm"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:source-commit",
                    "value": "90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099"
                },
                {
                    "name": "php:input-version",
                    "value": "libxpm-3.5.19"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxpm-3.5.19-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxpm-3.5.19-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxpm:3.5.19",
                        "name": "libxpm",
                        "version": "3.5.19",
                        "purl": "pkg:generic/libxpm@3.5.19"
                    }
                ],
                "notes": "Built from winlibs/libxpm ref libxpm-3.5.19 at commit 90f573b4ae2aed9bda5dbb6df3b9d86f1bec9099 with upstream identity https://gitlab.freedesktop.org/xorg/lib/libxpm tag libXpm-3.5.19."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "name": "libxslt",
            "version": "1.1.43-2",
            "purl": "pkg:generic/libxslt@1.1.43",
            "licenses": [
                {
                    "license": {
                        "id": "MIT"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxslt-1.1.43-2-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/GNOME/libxslt"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/GNOME/libxslt/tree/v1.1.43"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libxslt.git@9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libxslt"
                },
                {
                    "name": "php:component",
                    "value": "libxslt"
                },
                {
                    "name": "php:version",
                    "value": "1.1.43-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.1.43"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "GNOME/libxslt"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/GNOME/libxslt"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.1.43"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libxslt"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libxslt"
                },
                {
                    "name": "php:source-ref",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                },
                {
                    "name": "php:input-version",
                    "value": "libxslt-1.1.43-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libxslt-1.1.43-2-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libxslt-1.1.43-2-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:xmlsoft:libxslt:1.1.43:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libxslt:1.1.43",
                        "name": "libxslt",
                        "version": "1.1.43",
                        "purl": "pkg:generic/libxslt@1.1.43"
                    }
                ],
                "notes": "Built from winlibs/libxslt ref libxslt-1.1.43-2 at commit 9f399f8d223ddddeaeacd15285a2e993ec326c0f with upstream identity GNOME/libxslt tag v1.1.43.",
                "patches": [
                    {
                        "type": "backport",
                        "resolves": [
                            {
                                "type": "security",
                                "id": "CVE-2025-10911",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/9f399f8d223ddddeaeacd15285a2e993ec326c0f"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-11731",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/7b6b3c1b3abc2d4c4332496d44979b8a1933dd1b"
                                ]
                            },
                            {
                                "type": "security",
                                "id": "CVE-2025-7424",
                                "source": {
                                    "name": "NVD",
                                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
                                },
                                "description": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2.",
                                "references": [
                                    "https://github.com/winlibs/libxslt/commit/f32502000e6e6404125988d67cd9503ef8677e43"
                                ]
                            }
                        ]
                    }
                ]
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/libzip@1.11.4",
            "name": "libzip",
            "version": "1.11.4",
            "purl": "pkg:generic/libzip@1.11.4",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libzip-1.11.4-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/nih-at/libzip"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/nih-at/libzip/tree/v1.11.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/libzip.git@94b3e6583c6ddf77d3fef95699310818a91bc23a"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "libzip"
                },
                {
                    "name": "php:component",
                    "value": "libzip"
                },
                {
                    "name": "php:version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "1.11.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "nih-at/libzip"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/nih-at/libzip"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v1.11.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/libzip"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/libzip"
                },
                {
                    "name": "php:source-ref",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "94b3e6583c6ddf77d3fef95699310818a91bc23a"
                },
                {
                    "name": "php:input-version",
                    "value": "libzip-1.11.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "libzip-1.11.4-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/libzip-1.11.4-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:libzip:1.11.4",
                        "name": "libzip",
                        "version": "1.11.4",
                        "purl": "pkg:generic/libzip@1.11.4"
                    }
                ],
                "notes": "Built from winlibs/libzip ref libzip-1.11.4 at commit 94b3e6583c6ddf77d3fef95699310818a91bc23a with upstream identity nih-at/libzip tag v1.11.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "name": "mpir",
            "version": "3.0.0-2",
            "purl": "pkg:generic/mpir@3.0.0",
            "licenses": [
                {
                    "license": {
                        "id": "LGPL-3.0-or-later"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/mpir-3.0.0-2-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/wbhart/mpir"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/wbhart/mpir/tree/mpir-3.0.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/mpir.git@796ed2cee089c96dc254caec624fe9084c3a68c3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "mpir"
                },
                {
                    "name": "php:component",
                    "value": "mpir"
                },
                {
                    "name": "php:version",
                    "value": "3.0.0-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "3.0.0"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "wbhart/mpir"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/wbhart/mpir"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "mpir-3.0.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/mpir"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/mpir"
                },
                {
                    "name": "php:source-ref",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "796ed2cee089c96dc254caec624fe9084c3a68c3"
                },
                {
                    "name": "php:input-version",
                    "value": "mpir-3.0.0-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "mpir-3.0.0-2-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/mpir-3.0.0-2-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:mpir:3.0.0",
                        "name": "mpir",
                        "version": "3.0.0",
                        "purl": "pkg:generic/mpir@3.0.0"
                    }
                ],
                "notes": "Built from winlibs/mpir ref mpir-3.0.0-2 at commit 796ed2cee089c96dc254caec624fe9084c3a68c3 with upstream identity wbhart/mpir tag mpir-3.0.0."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/net-snmp@5.9.4",
            "name": "net-snmp",
            "version": "5.9.4",
            "purl": "pkg:generic/net-snmp@5.9.4",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/net-snmp-5.9.4-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/net-snmp/net-snmp/tree/v5.9.4"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/net-snmp.git@0c478089ece16d6346fbf464a9ef00d17f123fc3"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "net-snmp"
                },
                {
                    "name": "php:component",
                    "value": "net-snmp"
                },
                {
                    "name": "php:version",
                    "value": "5.9.4"
                },
                {
                    "name": "php:upstream-version",
                    "value": "5.9.4"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/net-snmp/net-snmp"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v5.9.4"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/net-snmp"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/net-snmp"
                },
                {
                    "name": "php:source-ref",
                    "value": "net-snmp-5.9.4"
                },
                {
                    "name": "php:source-commit",
                    "value": "0c478089ece16d6346fbf464a9ef00d17f123fc3"
                },
                {
                    "name": "php:input-version",
                    "value": "net-snmp-5.9.4"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "net-snmp-5.9.4-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/net-snmp-5.9.4-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:net-snmp:5.9.4",
                        "name": "net-snmp",
                        "version": "5.9.4",
                        "purl": "pkg:generic/net-snmp@5.9.4"
                    }
                ],
                "notes": "Built from winlibs/net-snmp ref net-snmp-5.9.4 at commit 0c478089ece16d6346fbf464a9ef00d17f123fc3 with upstream identity net-snmp/net-snmp tag v5.9.4."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/openldap@2.6.13-2",
            "name": "openldap",
            "version": "2.6.13-2",
            "purl": "pkg:generic/openldap@2.6.13",
            "licenses": [
                {
                    "license": {
                        "id": "OLDAP-2.8"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openldap-2.6.13-2-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/openldap/openldap"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/openldap/openldap/tree/OPENLDAP_REL_ENG_2_6_13"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/openldap.git@006411230eaf28f3201362f18a0e5903f9772f5c"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "openldap"
                },
                {
                    "name": "php:component",
                    "value": "openldap"
                },
                {
                    "name": "php:version",
                    "value": "2.6.13-2"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.6.13"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "openldap/openldap"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/openldap/openldap"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "OPENLDAP_REL_ENG_2_6_13"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/openldap"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/openldap"
                },
                {
                    "name": "php:source-ref",
                    "value": "openldap-2.6.13-2"
                },
                {
                    "name": "php:source-commit",
                    "value": "006411230eaf28f3201362f18a0e5903f9772f5c"
                },
                {
                    "name": "php:input-version",
                    "value": "openldap-2.6.13-2"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.5"
                },
                {
                    "name": "php:package-file-name",
                    "value": "openldap-2.6.13-2-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/openldap-2.6.13-2-vs17-x64.zip"
                }
            ],
            "cpe": "cpe:2.3:a:openldap:openldap:2.6.13:*:*:*:*:*:*:*",
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:openldap:2.6.13",
                        "name": "openldap",
                        "version": "2.6.13",
                        "purl": "pkg:generic/openldap@2.6.13"
                    }
                ],
                "notes": "Built from winlibs/openldap ref openldap-2.6.13-2 at commit 006411230eaf28f3201362f18a0e5903f9772f5c with upstream identity openldap/openldap tag OPENLDAP_REL_ENG_2_6_13."
            }
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "name": "rxspencer",
            "version": "3.9.0",
            "purl": "pkg:generic/rxspencer@3.9.0",
            "licenses": [
                {
                    "license": {
                        "id": "Spencer-94"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/garyhouston/rxspencer/tree/v3.9.0"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/garyhouston/rxspencer.git@9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ],
            "properties": [
                {
                    "name": "php:component-origin",
                    "value": "embedded"
                },
                {
                    "name": "php:source-path",
                    "value": "rxspencer"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-repository",
                    "value": "garyhouston/rxspencer"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/garyhouston/rxspencer"
                },
                {
                    "name": "php:source-ref",
                    "value": "v3.9.0"
                },
                {
                    "name": "php:source-commit",
                    "value": "9f835b523f1af617ca54e06863a1924c23f6e56a"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:php-windows-deps/wineditline@2.208",
            "name": "wineditline",
            "version": "2.208",
            "purl": "pkg:generic/wineditline@2.208",
            "licenses": [
                {
                    "license": {
                        "id": "BSD-3-Clause"
                    }
                }
            ],
            "copyright": "See accompanying license and notice files.",
            "supplier": {
                "name": "Winlibs"
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/wineditline-2.208-vs17-x64.zip"
                },
                {
                    "type": "website",
                    "url": "https://github.com/ptosco/wineditline"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/ptosco/wineditline/tree/wineditline-2.208"
                },
                {
                    "type": "vcs",
                    "url": "git+https://github.com/winlibs/wineditline.git@39ae4ff02a06c97f804833844b767777d6625fb8"
                }
            ],
            "properties": [
                {
                    "name": "php:library",
                    "value": "wineditline"
                },
                {
                    "name": "php:component",
                    "value": "wineditline"
                },
                {
                    "name": "php:version",
                    "value": "2.208"
                },
                {
                    "name": "php:upstream-version",
                    "value": "2.208"
                },
                {
                    "name": "php:source-origin",
                    "value": "winlibs-fork"
                },
                {
                    "name": "php:upstream-repository",
                    "value": "ptosco/wineditline"
                },
                {
                    "name": "php:upstream-url",
                    "value": "https://github.com/ptosco/wineditline"
                },
                {
                    "name": "php:upstream-tag",
                    "value": "wineditline-2.208"
                },
                {
                    "name": "php:source-repository",
                    "value": "winlibs/wineditline"
                },
                {
                    "name": "php:source-url",
                    "value": "https://github.com/winlibs/wineditline"
                },
                {
                    "name": "php:source-ref",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:source-commit",
                    "value": "39ae4ff02a06c97f804833844b767777d6625fb8"
                },
                {
                    "name": "php:input-version",
                    "value": "WinEditLine-2.208"
                },
                {
                    "name": "php:vs",
                    "value": "vs17"
                },
                {
                    "name": "php:arch",
                    "value": "x64"
                },
                {
                    "name": "php:php-version",
                    "value": "8.4"
                },
                {
                    "name": "php:package-file-name",
                    "value": "wineditline-2.208-vs17-x64.zip"
                },
                {
                    "name": "php:download-location",
                    "value": "https://downloads.php.net/~windows/php-sdk/deps/vs17/x64/wineditline-2.208-vs17-x64.zip"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "bom-ref": "urn:php:upstream:wineditline:2.208",
                        "name": "wineditline",
                        "version": "2.208",
                        "purl": "pkg:generic/wineditline@2.208"
                    }
                ],
                "notes": "Built from winlibs/wineditline ref WinEditLine-2.208 at commit 39ae4ff02a06c97f804833844b767777d6625fb8 with upstream identity ptosco/wineditline tag wineditline-2.208."
            }
        }
    ],
    "dependencies": [
        {
            "ref": "pkg:php-windows-deps/ICU@77.1-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/apache@2.4.68",
            "dependsOn": [
                "pkg:php-windows-deps/apr-iconv@1.2.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/apr-iconv@1.2.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/brotli@1.2.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/fbclient@4.0.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/freetype@2.14.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/glib@2.88.1-1",
            "dependsOn": [
                "pkg:php-windows-deps/libffi@3.6.0",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libffi@3.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libintl@1.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/zlib@1.3.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libargon2@20190702",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/aom@3.14.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libavif@1.4.2",
            "dependsOn": [
                "pkg:php-windows-deps/aom@3.14.1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libbzip2@1.0.8-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libcurl@8.21.0-1",
            "dependsOn": [
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/libssh2@1.11.1-5",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/nghttp2@1.69.0-1",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libssh2@1.11.1-5",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzstd@1.5.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/nghttp2@1.69.0-1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/openssl@3.5.7",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libenchant2@2.8.16-1",
            "dependsOn": [
                "pkg:php-windows-deps/glib@2.88.1-1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libiconv@1.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblmdb@0.9.35",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/liblzma@5.8.3",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libonig@6.9.10",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libpng@1.6.58",
            "dependsOn": [
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libpq@16.14",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.21.pl1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/openssl@3.0.21.pl1",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libqdbm@1.8.78",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsasl@2.1.28",
            "dependsOn": [
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/openssl@3.0.21.pl1",
                "pkg:php-windows-deps/sqlite3@3.53.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/sqlite3@3.53.2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libsodium@1.0.22",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libtidy@5.8.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libwebp@1.6.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxml2@2.11.9-7",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libxpm@3.5.19",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/libxslt@1.1.43-2",
            "dependsOn": [
                "pkg:php-windows-deps/libiconv@1.19",
                "pkg:php-windows-deps/libxml2@2.11.9-7"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/libzip@1.11.4",
            "dependsOn": [
                "pkg:php-windows-deps/libbzip2@1.0.8-1",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/mpir@3.0.0-2",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/net-snmp@5.9.4",
            "dependsOn": [
                "pkg:php-windows-deps/openssl@3.0.21.pl1"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/openldap@2.6.13-2",
            "dependsOn": [
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/rxspencer@3.9.0"
            ]
        },
        {
            "ref": "pkg:php-windows-deps/rxspencer@3.9.0",
            "dependsOn": []
        },
        {
            "ref": "pkg:php-windows-deps/wineditline@2.208",
            "dependsOn": []
        },
        {
            "ref": "pkg:generic/php@8.5.9",
            "dependsOn": [
                "pkg:generic/berkeley-uuencode",
                "pkg:generic/boost-context-assembly",
                "pkg:generic/crypt_blowfish@1.3",
                "pkg:generic/dynasm@1.5.0",
                "pkg:generic/freesec-libcrypt",
                "pkg:generic/libarchive-format-octal",
                "pkg:generic/libavifinfo@2b924defa4c2cd227540efe164067a8cc913eeba",
                "pkg:generic/libbcmath@0.2",
                "pkg:generic/libgd@2.0.35",
                "pkg:generic/libmagic@5.46",
                "pkg:generic/libmbfl@1.3.2",
                "pkg:generic/libzip-zip-dirent",
                "pkg:generic/mtrand@1.0",
                "pkg:generic/openldap-ucgendat",
                "pkg:generic/pcre2@10.44",
                "pkg:generic/snprintf",
                "pkg:generic/strlcat",
                "pkg:generic/strlcpy",
                "pkg:generic/strnatcmp",
                "pkg:generic/tcl-scanf@8.3.0",
                "pkg:generic/timelib@2022.17",
                "pkg:generic/xkcp-sha3",
                "pkg:generic/xxhash@0.8.1",
                "pkg:php-windows-deps/ICU@77.1-1",
                "pkg:php-windows-deps/apache@2.4.68",
                "pkg:php-windows-deps/brotli@1.2.0",
                "pkg:php-windows-deps/fbclient@4.0.7",
                "pkg:php-windows-deps/freetype@2.14.3",
                "pkg:php-windows-deps/glib@2.88.1-1",
                "pkg:php-windows-deps/libargon2@20190702",
                "pkg:php-windows-deps/libavif@1.4.2",
                "pkg:php-windows-deps/libbzip2@1.0.8-1",
                "pkg:php-windows-deps/libcurl@8.21.0-1",
                "pkg:php-windows-deps/libenchant2@2.8.16-1",
                "pkg:php-windows-deps/libffi@3.6.0",
                "pkg:php-windows-deps/libiconv@1.19",
                "pkg:php-windows-deps/libintl@1.0",
                "pkg:php-windows-deps/libjpeg-turbo@3.1.4.1",
                "pkg:php-windows-deps/liblmdb@0.9.35",
                "pkg:php-windows-deps/liblzma@5.8.3",
                "pkg:php-windows-deps/libonig@6.9.10",
                "pkg:php-windows-deps/libpng@1.6.58",
                "pkg:php-windows-deps/libpq@16.14",
                "pkg:php-windows-deps/libqdbm@1.8.78",
                "pkg:php-windows-deps/libsasl@2.1.28",
                "pkg:php-windows-deps/libsodium@1.0.22",
                "pkg:php-windows-deps/libssh2@1.11.1-5",
                "pkg:php-windows-deps/libtidy@5.8.0",
                "pkg:php-windows-deps/libwebp@1.6.0",
                "pkg:php-windows-deps/libxml2@2.11.9-7",
                "pkg:php-windows-deps/libxpm@3.5.19",
                "pkg:php-windows-deps/libxslt@1.1.43-2",
                "pkg:php-windows-deps/libzip@1.11.4",
                "pkg:php-windows-deps/libzstd@1.5.7",
                "pkg:php-windows-deps/mpir@3.0.0-2",
                "pkg:php-windows-deps/net-snmp@5.9.4",
                "pkg:php-windows-deps/nghttp2@1.69.0-1",
                "pkg:php-windows-deps/openldap@2.6.13-2",
                "pkg:php-windows-deps/openssl@3.5.7",
                "pkg:php-windows-deps/sqlite3@3.53.2",
                "pkg:php-windows-deps/wineditline@2.208",
                "pkg:php-windows-deps/zlib@1.3.2"
            ]
        }
    ],
    "vulnerabilities": [
        {
            "id": "CVE-1999-0289",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0289"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "The affected legacy Win32 path handling is not present in Apache HTTP Server 2.4 builds."
            }
        },
        {
            "id": "CVE-1999-0678",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0678"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE concerns a Debian default ServerRoot configuration; Debian packaging and configuration are not present in the Windows artifact."
            }
        },
        {
            "id": "CVE-2025-3891",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3891"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/apache@2.4.68"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects mod_auth_openidc, which is a separate module and is not included in the Apache dependency artifact."
            }
        },
        {
            "id": "CVE-2025-15661",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15661"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds-checked parsing for malformed SFTP symlink responses in src/sftp.c and the follow-up SSH_FXP_STATUS response handling fix."
            }
        },
        {
            "id": "CVE-2026-55199",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55199"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream parse-failure handling for SSH_MSG_EXT_INFO extension name and value strings in src/packet.c."
            }
        },
        {
            "id": "CVE-2026-55200",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55200"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream packet length upper-bound validation in src/transport.c."
            }
        },
        {
            "id": "CVE-2026-58050",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checking for public-key attribute counts in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58051",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58051"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream initialization of newly allocated public-key list entries in src/publickey.c."
            }
        },
        {
            "id": "CVE-2026-58055",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58055"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/nghttp2@1.69.0-1"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream nghttpx request-header validation in winlibs/nghttp2 tag nghttp2-1.69.0-1."
            }
        },
        {
            "id": "CVE-2026-7598",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libssh2@1.11.1-5"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting upstream username_len bounds checking in src/userauth.c."
            }
        },
        {
            "id": "CVE-2017-8806",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-8806"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libpq@16.14"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "code_not_present",
                "detail": "This CVE affects Debian and Ubuntu postgresql-common cluster scripts, which are not included in the Windows libpq artifact."
            }
        },
        {
            "id": "CVE-2023-45322",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45322"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream DTD-copy use-after-free fix in xmlStaticCopyNodeList and its regression follow-up in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2024-56171",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56171"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-24928",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24928"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-27113",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27113"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by winlibs/libxml2 backport in tag libxml2-2.11.9-1."
            }
        },
        {
            "id": "CVE-2025-32414",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32414"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-32415",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32415"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the xmlSchemaIDCFillNodeTables heap buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-49794",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49794"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-49795",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49795"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-49796",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49796"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 schematron backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-6021",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-6170",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the debugXML interactive shell buffer overflow backport in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by preserving libxslt private flag bits in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-8732",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8732"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by SGML catalog recursion limit backport in winlibs/libxml2 tag libxml2-2.11.9-5."
            }
        },
        {
            "id": "CVE-2026-0989",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0989"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-0990",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0990"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-0992",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0992"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport and compatibility follow-up in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-11979",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11979"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by backporting the upstream bounds checks for xmlcatalog --shell command and argument parsing in winlibs/libxml2 tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2026-1757",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1757"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxml2@2.11.9-7"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxml2 backport in tag libxml2-2.11.9-7."
            }
        },
        {
            "id": "CVE-2025-10911",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10911"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-11731",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11731"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7424",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7424"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "resolved_with_pedigree",
                "response": [
                    "update"
                ],
                "detail": "Fixed by the winlibs/libxslt backport in tag libxslt-1.1.43-2."
            }
        },
        {
            "id": "CVE-2025-7425",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7425"
            },
            "affects": [
                {
                    "ref": "pkg:php-windows-deps/libxslt@1.1.43-2"
                }
            ],
            "analysis": {
                "state": "not_affected",
                "justification": "protected_by_mitigating_control",
                "detail": "The patched libxml2 dependency shipped with this Winlibs build preserves the private atype flag bits, preventing the corruption in libxslt."
            }
        }
    ]
}