DataOps-platform/docs/security/data-rule-runtime-sbom.json

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "component": {
      "type": "application",
      "bom-ref": "dataops-governed-rule-runtime",
      "name": "dataops-governed-rule-runtime"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:pypi/polars@1.42.1",
      "name": "polars",
      "version": "1.42.1",
      "purl": "pkg:pypi/polars@1.42.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/pola-rs/polars"
        }
      ],
      "properties": [
        {
          "name": "dataops:purpose",
          "value": "Python API for governed Polars batch execution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:pypi/polars-runtime-32@1.42.1",
      "name": "polars-runtime-32",
      "version": "1.42.1",
      "purl": "pkg:pypi/polars-runtime-32@1.42.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/pola-rs/polars"
        }
      ],
      "properties": [
        {
          "name": "dataops:purpose",
          "value": "Native 32-bit Polars runtime wheel"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:pypi/pyarrow@21.0.0",
      "name": "pyarrow",
      "version": "21.0.0",
      "purl": "pkg:pypi/pyarrow@21.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/apache/arrow"
        }
      ],
      "properties": [
        {
          "name": "dataops:purpose",
          "value": "Trusted Parquet footer and row-group resource preflight"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:pypi/psutil@5.9.8",
      "name": "psutil",
      "version": "5.9.8",
      "purl": "pkg:pypi/psutil@5.9.8",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/giampaolo/psutil"
        }
      ],
      "properties": [
        {
          "name": "dataops:purpose",
          "value": "Isolated worker RSS enforcement and process monitoring"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:pypi/minio@7.2.10",
      "name": "minio",
      "version": "7.2.10",
      "purl": "pkg:pypi/minio@7.2.10",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/minio/minio-py"
        }
      ],
      "properties": [
        {
          "name": "dataops:purpose",
          "value": "Digest-bound Parquet artifact transport"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "dataops-governed-rule-runtime",
      "dependsOn": [
        "pkg:pypi/minio@7.2.10",
        "pkg:pypi/polars@1.42.1",
        "pkg:pypi/psutil@5.9.8",
        "pkg:pypi/pyarrow@21.0.0"
      ]
    },
    {
      "ref": "pkg:pypi/polars@1.42.1",
      "dependsOn": [
        "pkg:pypi/polars-runtime-32@1.42.1"
      ]
    },
    {
      "ref": "pkg:pypi/polars-runtime-32@1.42.1"
    },
    {
      "ref": "pkg:pypi/pyarrow@21.0.0"
    },
    {
      "ref": "pkg:pypi/psutil@5.9.8"
    },
    {
      "ref": "pkg:pypi/minio@7.2.10"
    }
  ]
}