{
  "report_schema": 13,
  "job_id": "645a6360-4a48-4323-9cc6-aaf06d4a706f",
  "verdict": "Accepted",
  "source_sha256": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
  "contract_sha256": "93cb341daba1ef96c3fee2f102e03244c355b2d1dfe6f8207b186ffc3cbf4919",
  "criteria_sha256": "04b8ab0a890de6a56a6403723bf51a2a46c5be704f5cfb3a85eaac89bc0528b3",
  "contract": {
    "schema": 1,
    "language": "rust",
    "wall_seconds": 2700,
    "criterion": [
      {
        "id": "build",
        "title": "the program compiles (release)",
        "required": true,
        "command": [
          {
            "argv": [
              "cargo",
              "build",
              "--release"
            ],
            "cwd": ".",
            "timeout_seconds": 600,
            "env": {},
            "allowed_exit_codes": [
              0
            ]
          }
        ]
      },
      {
        "id": "tests",
        "title": "the full test suite passes offline",
        "required": true,
        "command": [
          {
            "argv": [
              "cargo",
              "test"
            ],
            "cwd": ".",
            "timeout_seconds": 900,
            "env": {},
            "allowed_exit_codes": [
              0
            ]
          }
        ]
      },
      {
        "id": "clippy",
        "title": "clippy-clean (-D warnings)",
        "required": true,
        "command": [
          {
            "argv": [
              "cargo",
              "clippy",
              "--all-targets",
              "--",
              "-D",
              "warnings"
            ],
            "cwd": ".",
            "timeout_seconds": 900,
            "env": {},
            "allowed_exit_codes": [
              0
            ]
          }
        ]
      },
      {
        "id": "formatting",
        "title": "rustfmt-clean",
        "required": false,
        "command": [
          {
            "argv": [
              "cargo",
              "fmt",
              "--all",
              "--check"
            ],
            "cwd": ".",
            "timeout_seconds": 120,
            "env": {},
            "allowed_exit_codes": [
              0
            ]
          }
        ]
      }
    ],
    "invariants": [
      {
        "name": "chain linking is exact successor arithmetic and never wraps at the u64 ceiling",
        "description": "record N links to record N-1 iff prev_hash equals record N-1's hash AND seq is the exact u64 successor of record N-1's seq; the successor is never taken modulo the u64 ceiling — no seq may link past u64::MAX (the chain cannot wrap) — and on the guarded domain (prev below u64::MAX) the predicate is exactly seq == prev + 1",
        "plan_refs": [
          "formal-proofs",
          "floor-green",
          "both-rungs-proven"
        ],
        "kani": "proofs/links_kani.rs",
        "creusot": {
          "targets": [
            "links"
          ],
          "mode": "prove",
          "provers": [
            "alt-ergo",
            "z3"
          ],
          "timeout_ms": 30000,
          "erasure_check": "warn"
        }
      }
    ],
    "exceptions": []
  },
  "plan": {
    "schema_version": 1,
    "objective": "Verify the open-source falsegreen-ledger program exactly as published: the mechanical floor (release build, full offline test suite, clippy -D warnings, rustfmt) as frozen criteria, and one frozen claim — chain linking is exact successor arithmetic and never wraps at the u64 ceiling — carried by two formal encodings the machines discharge (Kani bounded over the shipped src/rules.rs arithmetic; an unbounded Creusot Why3 proof of the guarded Pearlite spec in src/spec.rs over both translated items).",
    "constraints": [
      "no contract edit mid-Job (the boundary is frozen at publish)",
      "the proof encodings are the ones measured in the job-image probe: the frozen Kani harness path and the bare Creusot target 'links'"
    ],
    "assumptions": [
      "the job image pins Kani 0.68.0 and Creusot v0.14.0 and carries the offline dependency cache for this crate's lockfile"
    ],
    "work_items": [
      {
        "id": "mechanical-floor",
        "outcome": "the program builds, tests, lints and formats clean offline, exactly as published",
        "dependencies": [],
        "acceptance": [
          {
            "id": "floor-green",
            "description": "every frozen criterion passes on the published source: release build, the full test suite, clippy with -D warnings, rustfmt check",
            "evidence": [
              {
                "id": "ev-build",
                "kind": "build",
                "description": "cargo build --release exits 0 in the job container",
                "criterion": "build"
              },
              {
                "id": "ev-tests",
                "kind": "behavioral_test",
                "description": "cargo test exits 0 offline",
                "criterion": "tests"
              },
              {
                "id": "ev-clippy",
                "kind": "static_analysis",
                "description": "cargo clippy --all-targets -- -D warnings exits 0",
                "criterion": "clippy"
              },
              {
                "id": "ev-fmt",
                "kind": "build",
                "description": "cargo fmt --all --check exits 0",
                "criterion": "formatting"
              }
            ],
            "failure_conditions": [
              "any criterion command exits outside its allowed codes"
            ]
          }
        ],
        "omission_risks": [
          "a proof-only claim carried without the mechanical floor would leave the shipped binary itself unverified"
        ]
      },
      {
        "id": "formal-proofs",
        "outcome": "the chain-link claim is discharged by both formal encodings on the published source",
        "dependencies": [
          "mechanical-floor"
        ],
        "acceptance": [
          {
            "id": "both-rungs-proven",
            "description": "the Kani rung returns proven over the shipped arithmetic (no counterexample), and the Creusot rung closes every verification condition for the frozen targets (measured: 4/4 obligations, incl. the shipped rule's u64-addition safety obligation)",
            "evidence": [
              {
                "id": "ev-kani",
                "kind": "proof",
                "description": "the frozen Kani harness over src/rules.rs proves both harnesses on the full u64 domain (bounded)",
                "criterion": null
              },
              {
                "id": "ev-creusot",
                "kind": "proof",
                "description": "the frozen Creusot slot (targets [links]) proves the guarded Pearlite spec and the shipped item's safety obligations (unbounded)",
                "criterion": null
              }
            ],
            "failure_conditions": [
              "a Kani counterexample (a violation names the input)",
              "a Creusot obligation left open (undecided), or an encoding that fails to compile (not proven)"
            ]
          }
        ],
        "omission_risks": [
          "the encodings encode the claim as read at freeze time — the encoding↔claim equivalence is the frozen human judgement the report exposes verbatim"
        ]
      }
    ],
    "overall_acceptance": [
      {
        "id": "artifact-verified",
        "description": "the published program is accepted: all four criteria green AND both proof rows proven, in one attempt, with the per-obligation prover disclosure and verbatim clauses in the signed report",
        "evidence": [
          {
            "id": "ev-accept",
            "kind": "behavioral_test",
            "description": "the terminal verdict is accepted with the full evidence set",
            "criterion": "tests"
          },
          {
            "id": "ev-proof-rows",
            "kind": "proof",
            "description": "both invariant rows carry real clause text, a non-empty encoding digest, and decision proven",
            "criterion": null
          }
        ],
        "failure_conditions": [
          "accepted with any proof row unproven or any digest empty (a reporting defect, not a pass)"
        ]
      }
    ]
  },
  "attempts": [
    {
      "index": 1,
      "outcome": "Accepted",
      "at": "2026-10-28T01:03:00.957731Z",
      "duration_ms": 93458,
      "source_sha256": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
      "security": {
        "policy": {
          "id": "falsegreen-platform",
          "version": "1",
          "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad",
          "required": [
            "dependency_vulnerability",
            "static_analysis",
            "secret",
            "supply_chain",
            "license"
          ],
          "minimum_witnesses": 1,
          "fail_on_severities": [
            "critical",
            "high"
          ],
          "unknown_severity": "insufficient",
          "secrets_fail_on_any_unexcepted": true,
          "required_standards": [],
          "unavailable_behavior": "insufficient"
        },
        "language": "rust",
        "classes": [
          {
            "class": "dependency_vulnerability",
            "required": true,
            "status": "pass",
            "witness_refs": [
              "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
            ],
            "reasons": []
          },
          {
            "class": "static_analysis",
            "required": true,
            "status": "pass",
            "witness_refs": [
              "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
            ],
            "reasons": []
          },
          {
            "class": "secret",
            "required": true,
            "status": "pass",
            "witness_refs": [
              "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
            ],
            "reasons": []
          },
          {
            "class": "supply_chain",
            "required": true,
            "status": "pass",
            "witness_refs": [
              "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53"
            ],
            "reasons": []
          },
          {
            "class": "license",
            "required": true,
            "status": "not_assessed",
            "witness_refs": [
              "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164"
            ],
            "reasons": [
              "no licence policy frozen — the licence facts are inventory, nothing was asserted"
            ]
          }
        ],
        "findings": [
          {
            "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstream@1.0.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "anstream@1.0.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle@1.0.14"
            },
            "rule": {
              "namespace": "syft",
              "id": "anstyle@1.0.14"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle-parse@1.0.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "anstyle-parse@1.0.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle-query@1.1.5"
            },
            "rule": {
              "namespace": "syft",
              "id": "anstyle-query@1.1.5"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle-wincon@3.0.11"
            },
            "rule": {
              "namespace": "syft",
              "id": "anstyle-wincon@3.0.11"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/base64ct@1.8.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "base64ct@1.8.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/bitflags@2.13.2"
            },
            "rule": {
              "namespace": "syft",
              "id": "bitflags@2.13.2"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/block-buffer@0.10.4"
            },
            "rule": {
              "namespace": "syft",
              "id": "block-buffer@0.10.4"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7c7783daff6a7d155286cca0cff6d6680da913d25c6b2f9b8cbaa7796870b15c",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/bumpalo@3.20.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "bumpalo@3.20.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/cfg-if@1.0.5"
            },
            "rule": {
              "namespace": "syft",
              "id": "cfg-if@1.0.5"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap@4.6.7"
            },
            "rule": {
              "namespace": "syft",
              "id": "clap@4.6.7"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap_builder@4.6.7"
            },
            "rule": {
              "namespace": "syft",
              "id": "clap_builder@4.6.7"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap_derive@4.6.7"
            },
            "rule": {
              "namespace": "syft",
              "id": "clap_derive@4.6.7"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap_lex@1.1.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "clap_lex@1.1.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/colorchoice@1.0.5"
            },
            "rule": {
              "namespace": "syft",
              "id": "colorchoice@1.0.5"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/const-oid@0.9.6"
            },
            "rule": {
              "namespace": "syft",
              "id": "const-oid@0.9.6"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/cpufeatures@0.2.17"
            },
            "rule": {
              "namespace": "syft",
              "id": "cpufeatures@0.2.17"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a289092557745e0eefda7242068cc669dc6c675bbd343c368809ac5ba3b7b585",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/creusot-std@0.14.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "creusot-std@0.14.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "bd757a2946d6e2f74809027c535554d69bb14965a21b50d1296dd4269251ca4f",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/creusot-std-proc@0.14.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "creusot-std-proc@0.14.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/crypto-common@0.1.7"
            },
            "rule": {
              "namespace": "syft",
              "id": "crypto-common@0.1.7"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/curve25519-dalek@4.1.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "curve25519-dalek@4.1.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "curve25519-dalek-derive@0.1.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/der@0.7.10"
            },
            "rule": {
              "namespace": "syft",
              "id": "der@0.7.10"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/digest@0.10.7"
            },
            "rule": {
              "namespace": "syft",
              "id": "digest@0.10.7"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/ed25519@2.2.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "ed25519@2.2.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/ed25519-dalek@2.2.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "ed25519-dalek@2.2.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/errno@0.3.14"
            },
            "rule": {
              "namespace": "syft",
              "id": "errno@0.3.14"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": ""
            },
            "rule": {
              "namespace": "syft",
              "id": "falsegreen-ledger@0.1.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/fastrand@2.5.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "fastrand@2.5.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/fiat-crypto@0.2.9"
            },
            "rule": {
              "namespace": "syft",
              "id": "fiat-crypto@0.2.9"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "476954817da44f19713c85a7f20edf24ebe14e973b2dd69ba13f6555d75a3094",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/futures-core@0.3.34"
            },
            "rule": {
              "namespace": "syft",
              "id": "futures-core@0.3.34"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "fee6978da35e4f5c6b8d96529cb65dee180d4cb7666707e503d34f0cfc05ef9a",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/futures-task@0.3.34"
            },
            "rule": {
              "namespace": "syft",
              "id": "futures-task@0.3.34"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d13989ae04350bcd91aced9f34a985abfd8185befd3143d4606db9aa484286f2",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/futures-util@0.3.34"
            },
            "rule": {
              "namespace": "syft",
              "id": "futures-util@0.3.34"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/generic-array@0.14.7"
            },
            "rule": {
              "namespace": "syft",
              "id": "generic-array@0.14.7"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/getrandom@0.2.17"
            },
            "rule": {
              "namespace": "syft",
              "id": "getrandom@0.2.17"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/getrandom@0.4.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "getrandom@0.4.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/heck@0.5.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "heck@0.5.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/hex@0.4.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "hex@0.4.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2"
            },
            "rule": {
              "namespace": "syft",
              "id": "is_terminal_polyfill@1.70.2"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/itoa@1.0.18"
            },
            "rule": {
              "namespace": "syft",
              "id": "itoa@1.0.18"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "77600897c032e28e90244d67c57a80b30db75d51812cb1dbcaa25d4c6fdee41c",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/js-sys@0.3.106"
            },
            "rule": {
              "namespace": "syft",
              "id": "js-sys@0.3.106"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/libc@0.2.191"
            },
            "rule": {
              "namespace": "syft",
              "id": "libc@0.2.191"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/linux-raw-sys@0.12.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "linux-raw-sys@0.12.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/memchr@2.8.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "memchr@2.8.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/once_cell@1.21.4"
            },
            "rule": {
              "namespace": "syft",
              "id": "once_cell@1.21.4"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/once_cell_polyfill@1.70.2"
            },
            "rule": {
              "namespace": "syft",
              "id": "once_cell_polyfill@1.70.2"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b8d773cef58aeb5fe067d9ae18794bd0971d08dd6c7d6d4b53712c6f778cdd08",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/pearlite-syn@0.14.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "pearlite-syn@0.14.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d70cae8bcb70f31e4c6b7164e3081c4a5431d743e96c3c24760e8b86e1a6eb7f",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/pin-project-lite@0.2.17"
            },
            "rule": {
              "namespace": "syft",
              "id": "pin-project-lite@0.2.17"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/pkcs8@0.10.2"
            },
            "rule": {
              "namespace": "syft",
              "id": "pkcs8@0.10.2"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/ppv-lite86@0.2.21"
            },
            "rule": {
              "namespace": "syft",
              "id": "ppv-lite86@0.2.21"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/proc-macro2@1.0.107"
            },
            "rule": {
              "namespace": "syft",
              "id": "proc-macro2@1.0.107"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/quote@1.0.47"
            },
            "rule": {
              "namespace": "syft",
              "id": "quote@1.0.47"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/r-efi@6.0.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "r-efi@6.0.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rand@0.8.8"
            },
            "rule": {
              "namespace": "syft",
              "id": "rand@0.8.8"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rand_chacha@0.3.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "rand_chacha@0.3.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rand_core@0.6.4"
            },
            "rule": {
              "namespace": "syft",
              "id": "rand_core@0.6.4"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rustc_version@0.4.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "rustc_version@0.4.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rustix@1.1.5"
            },
            "rule": {
              "namespace": "syft",
              "id": "rustix@1.1.5"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "aa23aa4807d46c98279b059d07943e631594c35e66ce52182c16b51cf7d43f12",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rustversion@1.0.23"
            },
            "rule": {
              "namespace": "syft",
              "id": "rustversion@1.0.23"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/semver@1.0.28"
            },
            "rule": {
              "namespace": "syft",
              "id": "semver@1.0.28"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde@1.0.229"
            },
            "rule": {
              "namespace": "syft",
              "id": "serde@1.0.229"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde_core@1.0.229"
            },
            "rule": {
              "namespace": "syft",
              "id": "serde_core@1.0.229"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde_derive@1.0.229"
            },
            "rule": {
              "namespace": "syft",
              "id": "serde_derive@1.0.229"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde_json@1.0.154"
            },
            "rule": {
              "namespace": "syft",
              "id": "serde_json@1.0.154"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/sha2@0.10.9"
            },
            "rule": {
              "namespace": "syft",
              "id": "sha2@0.10.9"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/signature@2.2.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "signature@2.2.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9bce2547a13eaf182484f1a571040d8cce743c62cb11c3b0adcb3a934d9771ff",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/slab@0.4.12"
            },
            "rule": {
              "namespace": "syft",
              "id": "slab@0.4.12"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/spki@0.7.3"
            },
            "rule": {
              "namespace": "syft",
              "id": "spki@0.7.3"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/strsim@0.11.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "strsim@0.11.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/subtle@2.6.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "subtle@2.6.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/syn@2.0.119"
            },
            "rule": {
              "namespace": "syft",
              "id": "syn@2.0.119"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/syn@3.0.9"
            },
            "rule": {
              "namespace": "syft",
              "id": "syn@3.0.9"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/tempfile@3.27.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "tempfile@3.27.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/typenum@1.20.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "typenum@1.20.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/unicode-ident@1.0.27"
            },
            "rule": {
              "namespace": "syft",
              "id": "unicode-ident@1.0.27"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/utf8parse@0.2.2"
            },
            "rule": {
              "namespace": "syft",
              "id": "utf8parse@0.2.2"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9582d4f239f7864b3b3b0fe0e400cb3bef7b6e4cafa8d4ffcf46bf2037b8b2d1",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/uuid@1.28.0"
            },
            "rule": {
              "namespace": "syft",
              "id": "uuid@1.28.0"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/version_check@0.9.5"
            },
            "rule": {
              "namespace": "syft",
              "id": "version_check@0.9.5"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1"
            },
            "rule": {
              "namespace": "syft",
              "id": "wasi@0.11.1+wasi-snapshot-preview1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "795f67b52a5a715e44751a89cd6e3eebe56440405d5b50d45fd590265e8b070c",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen@0.2.129"
            },
            "rule": {
              "namespace": "syft",
              "id": "wasm-bindgen@0.2.129"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "cdb73c713e3e48e4825973e061b272376c716442e995252af01cd807cb800f5c",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen-macro@0.2.129"
            },
            "rule": {
              "namespace": "syft",
              "id": "wasm-bindgen-macro@0.2.129"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "0e7c814d552fbfcb44b8a3d5bf843864865499653a32ab9c8cfca4b3b5c696ed",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen-macro-support@0.2.129"
            },
            "rule": {
              "namespace": "syft",
              "id": "wasm-bindgen-macro-support@0.2.129"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9c56e78576d675ae7a5b5e0eb53a91c8704424a30d7257fcd6d017493453ecf3",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen-shared@0.2.129"
            },
            "rule": {
              "namespace": "syft",
              "id": "wasm-bindgen-shared@0.2.129"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/windows-link@0.2.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "windows-link@0.2.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/windows-sys@0.61.2"
            },
            "rule": {
              "namespace": "syft",
              "id": "windows-sys@0.61.2"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zerocopy@0.8.63"
            },
            "rule": {
              "namespace": "syft",
              "id": "zerocopy@0.8.63"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zerocopy-derive@0.8.63"
            },
            "rule": {
              "namespace": "syft",
              "id": "zerocopy-derive@0.8.63"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zeroize@1.9.1"
            },
            "rule": {
              "namespace": "syft",
              "id": "zeroize@1.9.1"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4",
            "class": "supply_chain",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zmij@1.0.23"
            },
            "rule": {
              "namespace": "syft",
              "id": "zmij@1.0.23"
            },
            "state": "open",
            "evidence_refs": [
              "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
            ],
            "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstream@1.0.0"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle@1.0.14"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle-parse@1.0.0"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle-query@1.1.5"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/anstyle-wincon@3.0.11"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/base64ct@1.8.3"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/bitflags@2.13.2"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/block-buffer@0.10.4"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "112eba865d6e313d6f23bd9b4eb1bb1740fb2f837c273ec7124e835cc0da005d",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/bumpalo@3.20.3"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/cfg-if@1.0.5"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap@4.6.7"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap_builder@4.6.7"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap_derive@4.6.7"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/clap_lex@1.1.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/colorchoice@1.0.5"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/const-oid@0.9.6"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/cpufeatures@0.2.17"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "19e2b4591ae75b11535dd3adef8e6a0ee04d76d24038de6751a8b7537b96d5aa",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/creusot-std@0.14.0"
            },
            "rule": {
              "namespace": "license",
              "id": "LGPL-2.1-or-later"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "3cd2d76a6803b9cba3f213e24939049e38bd414067a7394974c19fdacc0fc663",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/creusot-std-proc@0.14.0"
            },
            "rule": {
              "namespace": "license",
              "id": "LGPL-2.1-or-later"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/crypto-common@0.1.7"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/curve25519-dalek@4.1.3"
            },
            "rule": {
              "namespace": "license",
              "id": "BSD-3-Clause"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT/Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/der@0.7.10"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/digest@0.10.7"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/ed25519@2.2.3"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/ed25519-dalek@2.2.0"
            },
            "rule": {
              "namespace": "license",
              "id": "BSD-3-Clause"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/errno@0.3.14"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/fastrand@2.5.0"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/fiat-crypto@0.2.9"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0 OR BSD-1-Clause"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "c6aeb45eaedd541244c476c372e812d3e20d16010265ee4571a3763242392da2",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/futures-core@0.3.34"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "301d6620277659895b68463d36b4239436b98a7dc028f4d60d5d04c4b334f741",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/futures-task@0.3.34"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2df66b072bb07a9e9a837604f76f68aa7c29f5388ae32a5c9be71b9858ac5f8c",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/futures-util@0.3.34"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/generic-array@0.14.7"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/getrandom@0.2.17"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/getrandom@0.4.3"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/heck@0.5.0"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/hex@0.4.3"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/itoa@1.0.18"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "93859812ef1acb1ac4078d220de712708a6509b708dff095c708eb414e618cbe",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/js-sys@0.3.106"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/libc@0.2.191"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/linux-raw-sys@0.12.1"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/memchr@2.8.3"
            },
            "rule": {
              "namespace": "license",
              "id": "Unlicense OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/once_cell@1.21.4"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/once_cell_polyfill@1.70.2"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a0fc8e8d71ece792a231095f168ab0c7cffca251fcacce43289829e77fb75ef5",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/pearlite-syn@0.14.0"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "f9bf8d0cc7852f11cf6152dec7595b43e8a75d0f5fed01aefb19963f05a61094",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/pin-project-lite@0.2.17"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/pkcs8@0.10.2"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/ppv-lite86@0.2.21"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/proc-macro2@1.0.107"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/quote@1.0.47"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/r-efi@6.0.0"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rand@0.8.8"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rand_chacha@0.3.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rand_core@0.6.4"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rustc_version@0.4.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rustix@1.1.5"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "70f4a38d76116971c51011dab9ec757f6973bf8279d2ec62777f3f1bf9d0d9c4",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/rustversion@1.0.23"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/semver@1.0.28"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde@1.0.229"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde_core@1.0.229"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde_derive@1.0.229"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/serde_json@1.0.154"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/sha2@0.10.9"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/signature@2.2.0"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "803d1a04fde4297e52e15eafb9f7045b38466b7ac9de09d53b23a5b801788df3",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/slab@0.4.12"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/spki@0.7.3"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/strsim@0.11.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/subtle@2.6.1"
            },
            "rule": {
              "namespace": "license",
              "id": "BSD-3-Clause"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/syn@2.0.119"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/syn@3.0.9"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/tempfile@3.27.0"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/typenum@1.20.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/unicode-ident@1.0.27"
            },
            "rule": {
              "namespace": "license",
              "id": "(MIT OR Apache-2.0) AND Unicode-3.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/utf8parse@0.2.2"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "f7242a40ee73e10ece190b2216fb89d082f1503d7eedadcb5949eefcfec5c507",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/uuid@1.28.0"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/version_check@0.9.5"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT/Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "86e8295bb7e74e6094ed25146fb85276095476aedf328c258f22d7928a971e28",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen@0.2.129"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "a8540d02003fc3df4b8bc38b7fb3f9d162f939ac2ea1c4b4401bd727c55443f2",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen-macro@0.2.129"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "ae94b33243d55cba9685b0da91cf31941957149cbef3cfb8a8b3c47ec027124c",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen-macro-support@0.2.129"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "b649102b4e27d450d6253da4c54818d3ecc38316817fde3de4f3adf5177f1025",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/wasm-bindgen-shared@0.2.129"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/windows-link@0.2.1"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/windows-sys@0.61.2"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT OR Apache-2.0"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zerocopy@0.8.63"
            },
            "rule": {
              "namespace": "license",
              "id": "BSD-2-Clause OR Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zerocopy-derive@0.8.63"
            },
            "rule": {
              "namespace": "license",
              "id": "BSD-2-Clause OR Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zeroize@1.9.1"
            },
            "rule": {
              "namespace": "license",
              "id": "Apache-2.0 OR MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7",
            "class": "license",
            "subject": {
              "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
              "component_id": "pkg:cargo/zmij@1.0.23"
            },
            "rule": {
              "namespace": "license",
              "id": "MIT"
            },
            "state": "open",
            "evidence_refs": [
              "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
            ],
            "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "first_observed_at": "2026-10-28T01:02:49.645169880Z"
          }
        ],
        "witnesses": [
          {
            "tool": "osv-scanner",
            "version": "2.7.0",
            "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b",
            "config_digest": "2c05dfbcac441e4f5d9fc803c18058296ddebc4d51a1171746a25bca6b51abdb",
            "invocation_digest": "e65b8610d3a7e49822362588c7c0ad8323cb68763e2f8f547b33779e60c165e5",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "54345d5194d238b6017d0f3181f392109ce35023cc6b4bdfa8c134943dcb578e",
            "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
            "limitations": [
              "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass"
            ],
            "evidence_class": "dependency_vulnerability",
            "observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "tool": "semgrep",
            "version": "1.181.0",
            "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391",
            "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009",
            "invocation_digest": "6d19a3070eeab77e2d607694f3a858d21fb646fecac277f4d4c2cbd79126a487",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54",
            "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
            "limitations": [],
            "evidence_class": "static_analysis",
            "observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "tool": "gitleaks",
            "version": "8.30.1",
            "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
            "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f",
            "invocation_digest": "76a219f7fa172309f23e0ce0b82c04725354797f69f7b131c92b5f276fff7a12",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570",
            "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
            "limitations": [],
            "evidence_class": "secret",
            "observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "tool": "syft",
            "version": "1.54.1",
            "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6",
            "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6",
            "invocation_digest": "eef337cabfa4ffc22335196eae78d92063e72fa4e51e2ec3d2d2f97b38301a80",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828",
            "normalized_evidence_digest": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "limitations": [],
            "evidence_class": "supply_chain",
            "observed_at": "2026-10-28T01:02:49.645169880Z"
          },
          {
            "tool": "dependency-manifest",
            "version": "1",
            "binary_digest": "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c",
            "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b",
            "invocation_digest": "eecf84121d1881c077d7ac91a9035cb43ce332e2fe23a8307107a23f0eea96c6",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c",
            "normalized_evidence_digest": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "limitations": [
              "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts"
            ],
            "evidence_class": "license",
            "observed_at": "2026-10-28T01:02:49.645169880Z"
          }
        ],
        "vulnerability_snapshot": {
          "source_identity": "osv.dev",
          "snapshot_identity": "osv-dev-20261027-adac4ad4",
          "observed_at": "2026-10-27T09:28:19Z",
          "freshness_hours": 24
        },
        "exceptions": [],
        "open_findings": 0,
        "satisfied": true,
        "evaluated_at": "2026-10-28T01:03:00.975850857Z"
      },
      "invariants": [
        {
          "name": "chain linking is exact successor arithmetic and never wraps at the u64 ceiling",
          "claim": "record N links to record N-1 iff prev_hash equals record N-1's hash AND seq is the exact u64 successor of record N-1's seq; the successor is never taken modulo the u64 ceiling — no seq may link past u64::MAX (the chain cannot wrap) — and on the guarded domain (prev below u64::MAX) the predicate is exactly seq == prev + 1",
          "clauses": [
            {
              "kind": "requires",
              "text": "kani::assume(seq < u64::MAX)"
            },
            {
              "kind": "ensures",
              "text": "kani::assert(!wrapped)"
            },
            {
              "kind": "requires",
              "text": "kani::assume(prev < u64::MAX)"
            },
            {
              "kind": "ensures",
              "text": "kani::assert(got == (seq == prev.wrapping_add(1)))"
            }
          ],
          "encoding_sha256": "e87bb002ddad5cf216c2e7df97470f826a80205820eff0e66ffd16bcf5c19d24",
          "argv": [
            "kani-driver",
            "proofs/links_kani.rs"
          ],
          "exit_code": 0,
          "expected_exit": 0,
          "timed_out": false,
          "duration_seconds": 0.593895525,
          "tail": "Kani Rust Verifier 0.68.0 (standalone) CBMC 6.11.0 Checking harness successor_matches_the_spec_on_the_guarded_domain... CBMC 6.11.0 (cbmc-6.11.0) CBMC version 6.11.0 (cbmc-6.11.0) 64-bit x86_64 linux Reading GOTO program from file <path> Generating GOTO Program Adding CPROVER library (x86_64) Removal of function pointers and virtual functions Generic Property Instrumentation Running with 16 object bits, 48 offset bits (user-specified) Starting Bounded Model Checking aborting path on assume(false) at file <path> line 17 column 11 function rules::links thread 0 Runtime Symex: 0.011841s size of program expression: 328 steps slicing removed 151 assignments Generated 4 VCC(s), 4 remaining after simplification Runtime Postprocess Equation: 6.316e-05s Passing problem to propositional reduction converting SSA Runtime Convert SSA: 0.0028006s Running propositional reduction Post-processing Runtime Post-process: 0.000225556s Solving with CaDiCaL 3.0.0 991 variables, 2493 clauses SAT checker: instance is SATISFIABLE Runtime Solver: 0.000357795s Runtime decision procedure: 0.0032582s Running propositional reduction Solving with CaDiCaL 3.0.0 992 variables, 2494 clauses SAT checker: instance is UNSATISFIABLE Runtime Solver: 0.0303398s Runtime decision procedure: 0.0305939s RESULTS: Check 1: rules::links.unreachable.1 - Status: SUCCESS - Description: \"unreachable code\" - Location: <path> in function rules::links Check 2: core::num::<impl u64>::checked_add.arithmetic_overflow.1 - Status: SUCCESS - Description: \"attempt to compute `unchecked_add` which would overflow\" - Location: <path> in function core::num::<impl u64>::checked_add Check 3: successor_matches_the_spec_on_the_guarded_domain.assertion.1 - Status: SUCCESS - Description: \"on the guarded domain the predicate is exactly seq == prev + 1\" - Location: <path> in function successor_matches_the_spec_on_the_guarded_domain SUMMARY: ** 0 of 3 failed VERIFICATION:- SUCCESSFUL Verification Time: 0.09678862s Checking harness successor_never_wraps_at_the_u64_ceiling... CBMC 6.11.0 (cbmc-6.11.0) CBMC version 6.11.0 (cbmc-6.11.0) 64-bit x86_64 linux Reading GOTO program from file <path> Generating GOTO Program Adding CPROVER library (x86_64) Removal of function pointers and virtual functions Generic Property Instrumentation Running with 16 object bits, 48 offset bits (user-specified) Starting Bounded Model Checking Runtime Symex: 0.00787497s size of program expression: 243 steps slicing removed 136 assignments Generated 2 VCC(s), 1 remaining after simplification Runtime Postprocess Equation: 5.9182e-05s Passing problem to propositional reduction converting SSA Runtime Convert SSA: 0.000608417s Running propositional reduction Post-processing Runtime Post-process: 1.035e-05s Solving with CaDiCaL 3.0.0 194 variables, 259 clauses SAT checker: instance is SATISFIABLE Runtime Solver: 0.000114345s Runtime decision procedure: 0.000797403s RESULTS: Check 1: rules::links.unreachable.1 - Status: SUCCESS - Description: \"unreachable code\" - Location: <path> in function rules::links Check 2: core::num::<impl u64>::checked_add.arithmetic_overflow.1 - Status: SUCCESS - Description: \"attempt to compute `unchecked_add` which would overflow\" - Location: <path> in function core::num::<impl u64>::checked_add Check 3: successor_never_wraps_at_the_u64_ceiling.assertion.1 - Status: SUCCESS - Description: \"the hash chain never wraps: no seq links past the u64 ceiling\" - Location: <path> in function successor_never_wraps_at_the_u64_ceiling SUMMARY: ** 0 of 3 failed VERIFICATION:- SUCCESSFUL Verification Time: 0.037153143s Manual Harness Summary: Complete - 2 successfully verified harnesses, 0 failures, 2 total. warning: unexpected `cfg` condition name: `test` --> <path> | 36 | #[cfg(test)] | ^^^^ | = help: expected names are: `kani` and 34 more = help: to expect this configuration use `--check-cfg=cfg(test)` = note: see <path> for more information about checking conditional configuration = note: `#[warn(unexpected_cfgs)]` on by default warning: unexpected `cfg` condition name: `test` --> <path> | 61 | #[cfg(test)] | ^^^^ | = help: to expect this configuration use `--check-cfg=cfg(test)` = note: see <path> for more information about checking conditional configuration warning: function `main` is never used --> <path> | 44 | fn main() {} | ^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `shard_name` is never used --> <path> | 24 | pub fn shard_name(index: u32) -> String { | ^^^^^^^^^^ warning: function `shard_index` is never used --> <path> | 30 | pub fn shard_index(name: &str) -> Option<u32> { | ^^^^^^^^^^^ warning: use of an unstable feature --> <crate attribute>:1:12 | 1 | #![feature(register_tool)] | ^^^^^^^^^^^^^ | = note: requested on the command line with `--force-warn unstable-features` warning: 6 warnings emitted",
          "passed": true,
          "tool": "kani",
          "version": "0.68.0",
          "harness": "successor_never_wraps_at_the_u64_ceiling",
          "decision": "proven"
        },
        {
          "name": "chain linking is exact successor arithmetic and never wraps at the u64 ceiling",
          "claim": "record N links to record N-1 iff prev_hash equals record N-1's hash AND seq is the exact u64 successor of record N-1's seq; the successor is never taken modulo the u64 ceiling — no seq may link past u64::MAX (the chain cannot wrap) — and on the guarded domain (prev below u64::MAX) the predicate is exactly seq == prev + 1",
          "target": "links",
          "clauses": [
            {
              "kind": "ensures",
              "text": "#[ensures(result == (seq == prev + 1u64))]"
            },
            {
              "kind": "requires",
              "text": "#[requires(prev < 18446744073709551615u64)]"
            }
          ],
          "encoding_sha256": "92ba29b838925b5024384e389e748475d9bb4e41d1df99beb791ab953efcad62",
          "argv": [
            "cargo",
            "creusot",
            "--why3session",
            "--span-mode",
            "relative",
            "--erasure-check=warn",
            "-j",
            "2",
            "--why3find-arg=--no-cache",
            "--why3find-arg=-f",
            "--why3find-arg=--prover=+alt-ergo,+z3",
            "--why3find-arg=--fast=600ms",
            "--why3find-arg=--time=30s",
            "links",
            "--",
            "--offline"
          ],
          "exit_code": 0,
          "expected_exit": 0,
          "timed_out": false,
          "duration_seconds": 56.425110718,
          "tail": "Generating <path> Proved (2 files) ✔ Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.27 Compiling libc v0.2.191 Compiling version_check v0.9.5 Checking cfg-if v1.0.5 Checking typenum v1.20.1 Compiling zerocopy v0.8.63 Compiling semver v1.0.28 Compiling getrandom v0.4.3 Compiling serde_core v1.0.229 Checking utf8parse v0.2.2 Checking cpufeatures v0.2.17 Compiling zmij v1.0.23 Checking anstyle v1.0.14 Checking is_terminal_polyfill v1.70.2 Checking colorchoice v1.0.5 Checking anstyle-query v1.1.5 Compiling serde_json v1.0.154 Checking strsim v0.11.1 Checking signature v2.2.0 Checking clap_lex v1.1.1 Compiling serde v1.0.229 Checking zeroize v1.9.1 Checking anstyle-parse v1.0.0 Compiling heck v0.5.0 Checking subtle v2.6.1 Checking ed25519 v2.2.3 Checking memchr v2.8.3 Checking itoa v1.0.18 Checking hex v0.4.3 Checking anstream v1.0.0 Compiling generic-array v0.14.7 Compiling rustc_version v0.4.1 Checking clap_builder v4.6.7 Compiling curve25519-dalek v4.1.3 Compiling syn v2.0.119 Compiling syn v3.0.9 Checking block-buffer v0.10.4 Checking crypto-common v0.1.7 Checking getrandom v0.2.17 Checking digest v0.10.7 Checking rand_core v0.6.4 Checking sha2 v0.10.9 Compiling uuid v1.28.0 Compiling clap_derive v4.6.7 Compiling serde_derive v1.0.229 Checking ppv-lite86 v0.2.21 Checking rand_chacha v0.3.1 Checking rand v0.8.8 Compiling pearlite-syn v0.14.0 Compiling curve25519-dalek-derive v0.1.1 Compiling creusot-std-proc v0.14.0 Checking clap v4.6.7 Checking ed25519-dalek v2.2.0 Checking creusot-std v0.14.0 Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/645a6360-4a48-4323-9cc6-aaf06d4a706f/run) warning: calling external function `strip_prefix` with no contract will yield an impossible precondition --> <path> | 31 | let rest = name.strip_prefix(\"shard-\")?; | ^^^^^^^^^^^^^^^^^^^^^^^^^^^ function called here | = note: `#[warn(creusot::contractless_external_function)]` on by default warning: calling external function `strip_suffix` with no contract will yield an impossible precondition --> <path> | 32 | let stem = rest.strip_suffix(\".jsonl\")?; | ^^^^^^^^^^^^^^^^^^^^^^^^^^^ function called here warning: calling external function `parse` with no contract will yield an impossible precondition --> <path> | 33 | stem.parse::<u32>().ok() | ^^^^^^^^^^^^^^^^^^^ function called here warning: `falsegreen-ledger` (lib) generated 3 warnings Finished `dev` profile [unoptimized + debuginfo] target(s) in 54.04s Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path>",
          "passed": true,
          "tool": "creusot",
          "version": "v0.14.0 (65349025c67e)",
          "decision": "proven",
          "goals": {
            "proven": 4,
            "total": 4
          },
          "provers_used": [
            {
              "obligation": "Coma::vc_checked_add",
              "prover": "alt-ergo",
              "status": "closed",
              "time_ms": 5
            },
            {
              "obligation": "Coma::vc_elim_Some",
              "prover": "alt-ergo",
              "status": "closed",
              "time_ms": 6
            },
            {
              "obligation": "Coma::vc_links",
              "prover": "alt-ergo",
              "status": "closed",
              "time_ms": 10
            },
            {
              "obligation": "Coma::vc_links",
              "prover": "alt-ergo",
              "status": "closed",
              "time_ms": 14
            }
          ]
        }
      ]
    }
  ],
  "evidence": [
    {
      "attempt_no": 1,
      "verdict": "passed",
      "evidence_sha256": "2a45e1f77052f9608d7dc1cf7dc6b09b485c31d2b03eb54cd8b0ed99b43d35de",
      "env_sha256": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
      "wall_seconds": 93.458133706,
      "result": {
        "job_id": "645a6360-4a48-4323-9cc6-aaf06d4a706f",
        "verdict": "passed",
        "criteria": [
          {
            "id": "build",
            "required": true,
            "passed": true,
            "commands": [
              {
                "argv": [
                  "cargo",
                  "build",
                  "--release"
                ],
                "exit_code": 0,
                "timed_out": false,
                "duration_seconds": 21.423516059,
                "tail": "   Compiling proc-macro2 v1.0.107\n   Compiling quote v1.0.47\n   Compiling unicode-ident v1.0.27\n   Compiling libc v0.2.191\n   Compiling version_check v0.9.5\n   Compiling typenum v1.20.1\n   Compiling cfg-if v1.0.5\n   Compiling zerocopy v0.8.63\n   Compiling getrandom v0.4.3\n   Compiling semver v1.0.28\n   Compiling utf8parse v0.2.2\n   Compiling serde_core v1.0.229\n   Compiling anstyle-query v1.1.5\n   Compiling anstyle v1.0.14\n   Compiling zmij v1.0.23\n   Compiling cpufeatures v0.2.17\n   Compiling colorchoice v1.0.5\n   Compiling is_terminal_polyfill v1.70.2\n   Compiling serde_json v1.0.154\n   Compiling signature v2.2.0\n   Compiling heck v0.5.0\n   Compiling strsim v0.11.1\n   Compiling clap_lex v1.1.1\n   Compiling anstyle-parse v1.0.0\n   Compiling zeroize v1.9.1\n   Compiling serde v1.0.229\n   Compiling subtle v2.6.1\n   Compiling itoa v1.0.18\n   Compiling ed25519 v2.2.3\n   Compiling memchr v2.8.3\n   Compiling hex v0.4.3\n   Compiling anstream v1.0.0\n   Compiling generic-array v0.14.7\n   Compiling rustc_version v0.4.1\n   Compiling curve25519-dalek v4.1.3\n   Compiling clap_builder v4.6.7\n   Compiling syn v2.0.119\n   Compiling syn v3.0.9\n   Compiling getrandom v0.2.17\n   Compiling crypto-common v0.1.7\n   Compiling block-buffer v0.10.4\n   Compiling uuid v1.28.0\n   Compiling digest v0.10.7\n   Compiling rand_core v0.6.4\n   Compiling sha2 v0.10.9\n   Compiling serde_derive v1.0.229\n   Compiling clap_derive v4.6.7\n   Compiling ppv-lite86 v0.2.21\n   Compiling clap v4.6.7\n   Compiling rand_chacha v0.3.1\n   Compiling pearlite-syn v0.14.0\n   Compiling rand v0.8.8\n   Compiling curve25519-dalek-derive v0.1.1\n   Compiling creusot-std-proc v0.14.0\n   Compiling creusot-std v0.14.0\n   Compiling ed25519-dalek v2.2.0\n   Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/645a6360-4a48-4323-9cc6-aaf06d4a706f/run)\n    Finished `release` profile [optimized] target(s) in 21.39s\n"
              }
            ]
          },
          {
            "id": "tests",
            "required": true,
            "passed": true,
            "commands": [
              {
                "argv": [
                  "cargo",
                  "test"
                ],
                "exit_code": 0,
                "timed_out": false,
                "duration_seconds": 9.201157849,
                "tail": "\nrunning 46 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest rules::links::non_successor ... ok\ntest rules::shardname::rejects_strangers ... ok\ntest rules::shardname::roundtrip ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest rules::links::successor ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest rules::links::never_links_past_the_ceiling ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 46 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest a_policy_violation_exits_policy ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n   Compiling proc-macro2 v1.0.107\n   Compiling unicode-ident v1.0.27\n   Compiling quote v1.0.47\n   Compiling libc v0.2.191\n   Compiling cfg-if v1.0.5\n   Compiling version_check v0.9.5\n   Compiling typenum v1.20.1\n   Compiling getrandom v0.4.3\n   Compiling semver v1.0.28\n   Compiling zerocopy v0.8.63\n   Compiling serde_core v1.0.229\n   Compiling utf8parse v0.2.2\n   Compiling anstyle v1.0.14\n   Compiling zmij v1.0.23\n   Compiling anstyle-query v1.1.5\n   Compiling is_terminal_polyfill v1.70.2\n   Compiling colorchoice v1.0.5\n   Compiling cpufeatures v0.2.17\n   Compiling zeroize v1.9.1\n   Compiling serde_json v1.0.154\n   Compiling heck v0.5.0\n   Compiling subtle v2.6.1\n   Compiling strsim v0.11.1\n   Compiling anstyle-parse v1.0.0\n   Compiling clap_lex v1.1.1\n   Compiling serde v1.0.229\n   Compiling signature v2.2.0\n   Compiling itoa v1.0.18\n   Compiling memchr v2.8.3\n   Compiling rustix v1.1.5\n   Compiling linux-raw-sys v0.12.1\n   Compiling rustc_version v0.4.1\n   Compiling ed25519 v2.2.3\n   Compiling hex v0.4.3\n   Compiling generic-array v0.14.7\n   Compiling anstream v1.0.0\n   Compiling bitflags v2.13.2\n   Compiling once_cell v1.21.4\n   Compiling fastrand v2.5.0\n   Compiling curve25519-dalek v4.1.3\n   Compiling clap_builder v4.6.7\n   Compiling syn v2.0.119\n   Compiling syn v3.0.9\n   Compiling block-buffer v0.10.4\n   Compiling crypto-common v0.1.7\n   Compiling digest v0.10.7\n   Compiling sha2 v0.10.9\n   Compiling getrandom v0.2.17\n   Compiling uuid v1.28.0\n   Compiling rand_core v0.6.4\n   Compiling tempfile v3.27.0\n   Compiling clap_derive v4.6.7\n   Compiling serde_derive v1.0.229\n   Compiling pearlite-syn v0.14.0\n   Compiling ppv-lite86 v0.2.21\n   Compiling rand_chacha v0.3.1\n   Compiling curve25519-dalek-derive v0.1.1\n   Compiling creusot-std-proc v0.14.0\n   Compiling rand v0.8.8\n   Compiling clap v4.6.7\n   Compiling creusot-std v0.14.0\n   Compiling ed25519-dalek v2.2.0\n   Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/645a6360-4a48-4323-9cc6-aaf06d4a706f/run)\n    Finished `test` profile [unoptimized + debuginfo] target(s) in 8.71s\n     Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger-181006dcfa19c4d0)\n     Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-39fe627b14d0e786)\n     Running tests/integration.rs (target/debug/deps/integration-615904bd15e709ce)\n   Doc-tests falsegreen_ledger\n"
              }
            ]
          },
          {
            "id": "clippy",
            "required": true,
            "passed": true,
            "commands": [
              {
                "argv": [
                  "cargo",
                  "clippy",
                  "--all-targets",
                  "--",
                  "-D",
                  "warnings"
                ],
                "exit_code": 0,
                "timed_out": false,
                "duration_seconds": 5.610563874,
                "tail": "    Checking cfg-if v1.0.5\n    Checking typenum v1.20.1\n    Checking utf8parse v0.2.2\n    Checking is_terminal_polyfill v1.70.2\n    Checking colorchoice v1.0.5\n    Checking anstyle-query v1.1.5\n    Checking anstyle v1.0.14\n    Checking cpufeatures v0.2.17\n    Checking zeroize v1.9.1\n    Checking subtle v2.6.1\n    Checking libc v0.2.191\n    Checking zerocopy v0.8.63\n    Checking serde_core v1.0.229\n    Checking signature v2.2.0\n    Checking strsim v0.11.1\n    Checking clap_lex v1.1.1\n    Checking zmij v1.0.23\n    Checking itoa v1.0.18\n    Checking memchr v2.8.3\n    Checking bitflags v2.13.2\n    Checking hex v0.4.3\n    Checking anstyle-parse v1.0.0\n    Checking linux-raw-sys v0.12.1\n    Checking fastrand v2.5.0\n    Checking once_cell v1.21.4\n    Checking ed25519 v2.2.3\n    Checking anstream v1.0.0\n    Checking clap_builder v4.6.7\n    Checking rustix v1.1.5\n    Checking generic-array v0.14.7\n    Checking getrandom v0.2.17\n    Checking getrandom v0.4.3\n    Checking rand_core v0.6.4\n    Checking block-buffer v0.10.4\n    Checking crypto-common v0.1.7\n   Compiling uuid v1.28.0\n    Checking digest v0.10.7\n    Checking curve25519-dalek v4.1.3\n    Checking sha2 v0.10.9\n   Compiling creusot-std-proc v0.14.0\n    Checking creusot-std v0.14.0\n    Checking tempfile v3.27.0\n    Checking clap v4.6.7\n    Checking serde_json v1.0.154\n    Checking serde v1.0.229\n    Checking ed25519-dalek v2.2.0\n    Checking ppv-lite86 v0.2.21\n    Checking rand_chacha v0.3.1\n    Checking rand v0.8.8\n    Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/645a6360-4a48-4323-9cc6-aaf06d4a706f/run)\n    Finished `dev` profile [unoptimized + debuginfo] target(s) in 5.55s\n"
              }
            ]
          },
          {
            "id": "formatting",
            "required": false,
            "passed": true,
            "commands": [
              {
                "argv": [
                  "cargo",
                  "fmt",
                  "--all",
                  "--check"
                ],
                "exit_code": 0,
                "timed_out": false,
                "duration_seconds": 0.114626214,
                "tail": ""
              }
            ]
          }
        ],
        "wall_seconds": 93.458133706,
        "error": null,
        "env_sha256": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
        "environment": {
          "schema": 1,
          "eco": "rust",
          "toolchain": "rustc 1.99.1 (rustc)",
          "toolchain_version": "1.99.1",
          "fingerprint": "432eeef1e6ac8e084325e67a9ea186674b1ff5bbf8f7b3072253e5e87c0f1b07",
          "artifacts": [
            {
              "name": "anstream",
              "version": "1.0.0",
              "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
            },
            {
              "name": "anstyle",
              "version": "1.0.14",
              "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
            },
            {
              "name": "anstyle-parse",
              "version": "1.0.0",
              "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
            },
            {
              "name": "anstyle-query",
              "version": "1.1.5",
              "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
            },
            {
              "name": "anstyle-wincon",
              "version": "3.0.11",
              "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
            },
            {
              "name": "base64ct",
              "version": "1.8.3",
              "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
            },
            {
              "name": "bitflags",
              "version": "2.13.2",
              "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06"
            },
            {
              "name": "block-buffer",
              "version": "0.10.4",
              "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
            },
            {
              "name": "bumpalo",
              "version": "3.20.3",
              "sha256": "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
            },
            {
              "name": "cfg-if",
              "version": "1.0.5",
              "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600"
            },
            {
              "name": "clap",
              "version": "4.6.7",
              "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946"
            },
            {
              "name": "clap_builder",
              "version": "4.6.7",
              "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d"
            },
            {
              "name": "clap_derive",
              "version": "4.6.7",
              "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0"
            },
            {
              "name": "clap_lex",
              "version": "1.1.1",
              "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486"
            },
            {
              "name": "colorchoice",
              "version": "1.0.5",
              "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
            },
            {
              "name": "const-oid",
              "version": "0.9.6",
              "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
            },
            {
              "name": "cpufeatures",
              "version": "0.2.17",
              "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
            },
            {
              "name": "creusot-std",
              "version": "0.14.0",
              "sha256": "b019630da7e585ab18eff475d7ea820474c3fc0cd05a57706facf37f67ab2705"
            },
            {
              "name": "creusot-std-proc",
              "version": "0.14.0",
              "sha256": "5a21564d3da8f97ce00e03125d0c3f7c9faedfa68e5d182d88beb25c82c12d25"
            },
            {
              "name": "crypto-common",
              "version": "0.1.7",
              "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
            },
            {
              "name": "curve25519-dalek",
              "version": "4.1.3",
              "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
            },
            {
              "name": "curve25519-dalek-derive",
              "version": "0.1.1",
              "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
            },
            {
              "name": "der",
              "version": "0.7.10",
              "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
            },
            {
              "name": "digest",
              "version": "0.10.7",
              "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
            },
            {
              "name": "ed25519",
              "version": "2.2.3",
              "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53"
            },
            {
              "name": "ed25519-dalek",
              "version": "2.2.0",
              "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9"
            },
            {
              "name": "errno",
              "version": "0.3.14",
              "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
            },
            {
              "name": "fastrand",
              "version": "2.5.0",
              "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
            },
            {
              "name": "fiat-crypto",
              "version": "0.2.9",
              "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d"
            },
            {
              "name": "futures-core",
              "version": "0.3.34",
              "sha256": "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e"
            },
            {
              "name": "futures-task",
              "version": "0.3.34",
              "sha256": "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd"
            },
            {
              "name": "futures-util",
              "version": "0.3.34",
              "sha256": "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc"
            },
            {
              "name": "generic-array",
              "version": "0.14.7",
              "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
            },
            {
              "name": "getrandom",
              "version": "0.2.17",
              "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
            },
            {
              "name": "getrandom",
              "version": "0.4.3",
              "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
            },
            {
              "name": "heck",
              "version": "0.5.0",
              "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
            },
            {
              "name": "hex",
              "version": "0.4.3",
              "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
            },
            {
              "name": "is_terminal_polyfill",
              "version": "1.70.2",
              "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
            },
            {
              "name": "itoa",
              "version": "1.0.18",
              "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
            },
            {
              "name": "js-sys",
              "version": "0.3.106",
              "sha256": "7883d941dae510fb2d978fc3fe018c71c9e2892fd38854de3e8b92c2e5ad9cc5"
            },
            {
              "name": "libc",
              "version": "0.2.191",
              "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a"
            },
            {
              "name": "linux-raw-sys",
              "version": "0.12.1",
              "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
            },
            {
              "name": "memchr",
              "version": "2.8.3",
              "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
            },
            {
              "name": "once_cell",
              "version": "1.21.4",
              "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
            },
            {
              "name": "once_cell_polyfill",
              "version": "1.70.2",
              "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
            },
            {
              "name": "pearlite-syn",
              "version": "0.14.0",
              "sha256": "e0cada22bee420c97f91bd98f0e1effdd6ef5ab219df0561f35144dcb504ebfd"
            },
            {
              "name": "pin-project-lite",
              "version": "0.2.17",
              "sha256": "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
            },
            {
              "name": "pkcs8",
              "version": "0.10.2",
              "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7"
            },
            {
              "name": "ppv-lite86",
              "version": "0.2.21",
              "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
            },
            {
              "name": "proc-macro2",
              "version": "1.0.107",
              "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
            },
            {
              "name": "quote",
              "version": "1.0.47",
              "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
            },
            {
              "name": "r-efi",
              "version": "6.0.0",
              "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
            },
            {
              "name": "rand",
              "version": "0.8.8",
              "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c"
            },
            {
              "name": "rand_chacha",
              "version": "0.3.1",
              "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
            },
            {
              "name": "rand_core",
              "version": "0.6.4",
              "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
            },
            {
              "name": "rustc_version",
              "version": "0.4.1",
              "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
            },
            {
              "name": "rustix",
              "version": "1.1.5",
              "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d"
            },
            {
              "name": "rustversion",
              "version": "1.0.23",
              "sha256": "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
            },
            {
              "name": "semver",
              "version": "1.0.28",
              "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
            },
            {
              "name": "serde",
              "version": "1.0.229",
              "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
            },
            {
              "name": "serde_core",
              "version": "1.0.229",
              "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
            },
            {
              "name": "serde_derive",
              "version": "1.0.229",
              "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
            },
            {
              "name": "serde_json",
              "version": "1.0.154",
              "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
            },
            {
              "name": "sha2",
              "version": "0.10.9",
              "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
            },
            {
              "name": "signature",
              "version": "2.2.0",
              "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
            },
            {
              "name": "slab",
              "version": "0.4.12",
              "sha256": "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
            },
            {
              "name": "spki",
              "version": "0.7.3",
              "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d"
            },
            {
              "name": "strsim",
              "version": "0.11.1",
              "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
            },
            {
              "name": "subtle",
              "version": "2.6.1",
              "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
            },
            {
              "name": "syn",
              "version": "2.0.119",
              "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
            },
            {
              "name": "syn",
              "version": "3.0.9",
              "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b"
            },
            {
              "name": "tempfile",
              "version": "3.27.0",
              "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
            },
            {
              "name": "typenum",
              "version": "1.20.1",
              "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
            },
            {
              "name": "unicode-ident",
              "version": "1.0.27",
              "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563"
            },
            {
              "name": "utf8parse",
              "version": "0.2.2",
              "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
            },
            {
              "name": "uuid",
              "version": "1.28.0",
              "sha256": "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606"
            },
            {
              "name": "version_check",
              "version": "0.9.5",
              "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
            },
            {
              "name": "wasi",
              "version": "0.11.1+wasi-snapshot-preview1",
              "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
            },
            {
              "name": "wasm-bindgen",
              "version": "0.2.129",
              "sha256": "9bb54f33acc68fd454578d9820b0bde1a1a3d17aa17bb7b6595806d02886d409"
            },
            {
              "name": "wasm-bindgen-macro",
              "version": "0.2.129",
              "sha256": "2e29d0c35b16e224a7eeb5cd2d25e3e1968fbd65604117b44d3b789d00ee8535"
            },
            {
              "name": "wasm-bindgen-macro-support",
              "version": "0.2.129",
              "sha256": "6f501a8bc3719dba86ef8ae4728879c08001bea749eb1333ac5b91e040e2a6b7"
            },
            {
              "name": "wasm-bindgen-shared",
              "version": "0.2.129",
              "sha256": "23f0c9c52aa7cd7d77769a4cfe2a9adb1b331f489a41d912ce14513d5ab995c6"
            },
            {
              "name": "windows-link",
              "version": "0.2.1",
              "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
            },
            {
              "name": "windows-sys",
              "version": "0.61.2",
              "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
            },
            {
              "name": "zerocopy",
              "version": "0.8.63",
              "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8"
            },
            {
              "name": "zerocopy-derive",
              "version": "0.8.63",
              "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f"
            },
            {
              "name": "zeroize",
              "version": "1.9.1",
              "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879"
            },
            {
              "name": "zmij",
              "version": "1.0.23",
              "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"
            }
          ]
        },
        "witness_invocations": [
          {
            "tool": "osv-scanner",
            "version": "2.7.0",
            "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b",
            "config_digest": "2c05dfbcac441e4f5d9fc803c18058296ddebc4d51a1171746a25bca6b51abdb",
            "invocation_digest": "e65b8610d3a7e49822362588c7c0ad8323cb68763e2f8f547b33779e60c165e5",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "54345d5194d238b6017d0f3181f392109ce35023cc6b4bdfa8c134943dcb578e",
            "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
            "limitations": [
              "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass"
            ],
            "evidence_class": "dependency_vulnerability",
            "observed_at": "2026-10-28T01:02:49.645169880+00:00",
            "findings": []
          },
          {
            "tool": "semgrep",
            "version": "1.181.0",
            "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391",
            "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009",
            "invocation_digest": "6d19a3070eeab77e2d607694f3a858d21fb646fecac277f4d4c2cbd79126a487",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54",
            "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
            "limitations": [],
            "evidence_class": "static_analysis",
            "observed_at": "2026-10-28T01:02:49.645169880+00:00",
            "findings": []
          },
          {
            "tool": "gitleaks",
            "version": "8.30.1",
            "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
            "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f",
            "invocation_digest": "76a219f7fa172309f23e0ce0b82c04725354797f69f7b131c92b5f276fff7a12",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570",
            "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
            "limitations": [],
            "evidence_class": "secret",
            "observed_at": "2026-10-28T01:02:49.645169880+00:00",
            "findings": []
          },
          {
            "tool": "syft",
            "version": "1.54.1",
            "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6",
            "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6",
            "invocation_digest": "eef337cabfa4ffc22335196eae78d92063e72fa4e51e2ec3d2d2f97b38301a80",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828",
            "normalized_evidence_digest": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
            "limitations": [],
            "evidence_class": "supply_chain",
            "observed_at": "2026-10-28T01:02:49.645169880+00:00",
            "findings": [
              {
                "rule_namespace": "syft",
                "rule_id": "anstream@1.0.0",
                "component": "pkg:cargo/anstream@1.0.0",
                "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "anstyle@1.0.14",
                "component": "pkg:cargo/anstyle@1.0.14",
                "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "anstyle-parse@1.0.0",
                "component": "pkg:cargo/anstyle-parse@1.0.0",
                "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "anstyle-query@1.1.5",
                "component": "pkg:cargo/anstyle-query@1.1.5",
                "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "anstyle-wincon@3.0.11",
                "component": "pkg:cargo/anstyle-wincon@3.0.11",
                "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "base64ct@1.8.3",
                "component": "pkg:cargo/base64ct@1.8.3",
                "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "bitflags@2.13.2",
                "component": "pkg:cargo/bitflags@2.13.2",
                "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "block-buffer@0.10.4",
                "component": "pkg:cargo/block-buffer@0.10.4",
                "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "bumpalo@3.20.3",
                "component": "pkg:cargo/bumpalo@3.20.3",
                "fingerprint": "ebd2c5601b952211b14cecbdb89274deb385da9e68d0f8a31f21058790eab280",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "cfg-if@1.0.5",
                "component": "pkg:cargo/cfg-if@1.0.5",
                "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "clap@4.6.7",
                "component": "pkg:cargo/clap@4.6.7",
                "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "clap_builder@4.6.7",
                "component": "pkg:cargo/clap_builder@4.6.7",
                "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "clap_derive@4.6.7",
                "component": "pkg:cargo/clap_derive@4.6.7",
                "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "clap_lex@1.1.1",
                "component": "pkg:cargo/clap_lex@1.1.1",
                "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "colorchoice@1.0.5",
                "component": "pkg:cargo/colorchoice@1.0.5",
                "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "const-oid@0.9.6",
                "component": "pkg:cargo/const-oid@0.9.6",
                "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "cpufeatures@0.2.17",
                "component": "pkg:cargo/cpufeatures@0.2.17",
                "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "creusot-std@0.14.0",
                "component": "pkg:cargo/creusot-std@0.14.0",
                "fingerprint": "ba65df0e3c004ea2df15ba467390ad740200624e4457fe996a4193fab0b28ab6",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "creusot-std-proc@0.14.0",
                "component": "pkg:cargo/creusot-std-proc@0.14.0",
                "fingerprint": "6b296ff428129d430738c0666c102ad648151f4d1fc796715d8a803e861cae0a",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "crypto-common@0.1.7",
                "component": "pkg:cargo/crypto-common@0.1.7",
                "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "curve25519-dalek@4.1.3",
                "component": "pkg:cargo/curve25519-dalek@4.1.3",
                "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "curve25519-dalek-derive@0.1.1",
                "component": "pkg:cargo/curve25519-dalek-derive@0.1.1",
                "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "der@0.7.10",
                "component": "pkg:cargo/der@0.7.10",
                "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "digest@0.10.7",
                "component": "pkg:cargo/digest@0.10.7",
                "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "ed25519@2.2.3",
                "component": "pkg:cargo/ed25519@2.2.3",
                "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "ed25519-dalek@2.2.0",
                "component": "pkg:cargo/ed25519-dalek@2.2.0",
                "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "errno@0.3.14",
                "component": "pkg:cargo/errno@0.3.14",
                "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "falsegreen-ledger@0.1.0",
                "component": "",
                "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "fastrand@2.5.0",
                "component": "pkg:cargo/fastrand@2.5.0",
                "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "fiat-crypto@0.2.9",
                "component": "pkg:cargo/fiat-crypto@0.2.9",
                "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "futures-core@0.3.34",
                "component": "pkg:cargo/futures-core@0.3.34",
                "fingerprint": "0013d414de65ca4d0e29c8a0cb7c1afe2adf7f3069f757ef8b562b59c3f64076",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "futures-task@0.3.34",
                "component": "pkg:cargo/futures-task@0.3.34",
                "fingerprint": "a118fb1e4e918f994f14bbe1ee90fa279ff4ee6c9500afbc001b49d79551e54d",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "futures-util@0.3.34",
                "component": "pkg:cargo/futures-util@0.3.34",
                "fingerprint": "647cafb7a179631b1f80e378358c4e603abd5bea5c3e7652d45832f416152dc0",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "generic-array@0.14.7",
                "component": "pkg:cargo/generic-array@0.14.7",
                "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "getrandom@0.2.17",
                "component": "pkg:cargo/getrandom@0.2.17",
                "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "getrandom@0.4.3",
                "component": "pkg:cargo/getrandom@0.4.3",
                "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "heck@0.5.0",
                "component": "pkg:cargo/heck@0.5.0",
                "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "hex@0.4.3",
                "component": "pkg:cargo/hex@0.4.3",
                "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "is_terminal_polyfill@1.70.2",
                "component": "pkg:cargo/is_terminal_polyfill@1.70.2",
                "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "itoa@1.0.18",
                "component": "pkg:cargo/itoa@1.0.18",
                "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "js-sys@0.3.106",
                "component": "pkg:cargo/js-sys@0.3.106",
                "fingerprint": "742e527e562973793bfedd37db6c589241b061668e70f1d7eff08d6240f3233d",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "libc@0.2.191",
                "component": "pkg:cargo/libc@0.2.191",
                "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "linux-raw-sys@0.12.1",
                "component": "pkg:cargo/linux-raw-sys@0.12.1",
                "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "memchr@2.8.3",
                "component": "pkg:cargo/memchr@2.8.3",
                "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "once_cell@1.21.4",
                "component": "pkg:cargo/once_cell@1.21.4",
                "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "once_cell_polyfill@1.70.2",
                "component": "pkg:cargo/once_cell_polyfill@1.70.2",
                "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "pearlite-syn@0.14.0",
                "component": "pkg:cargo/pearlite-syn@0.14.0",
                "fingerprint": "3b78130a898f4dc4d589ac05756506e7b48fe925f91d1fbc86f098293f553f1c",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "pin-project-lite@0.2.17",
                "component": "pkg:cargo/pin-project-lite@0.2.17",
                "fingerprint": "073231cd65fae794a011ef95d88ca20bc4b5a9bd1daf3f02805cab91921d88f7",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "pkcs8@0.10.2",
                "component": "pkg:cargo/pkcs8@0.10.2",
                "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "ppv-lite86@0.2.21",
                "component": "pkg:cargo/ppv-lite86@0.2.21",
                "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "proc-macro2@1.0.107",
                "component": "pkg:cargo/proc-macro2@1.0.107",
                "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "quote@1.0.47",
                "component": "pkg:cargo/quote@1.0.47",
                "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "r-efi@6.0.0",
                "component": "pkg:cargo/r-efi@6.0.0",
                "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "rand@0.8.8",
                "component": "pkg:cargo/rand@0.8.8",
                "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "rand_chacha@0.3.1",
                "component": "pkg:cargo/rand_chacha@0.3.1",
                "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "rand_core@0.6.4",
                "component": "pkg:cargo/rand_core@0.6.4",
                "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "rustc_version@0.4.1",
                "component": "pkg:cargo/rustc_version@0.4.1",
                "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "rustix@1.1.5",
                "component": "pkg:cargo/rustix@1.1.5",
                "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "rustversion@1.0.23",
                "component": "pkg:cargo/rustversion@1.0.23",
                "fingerprint": "630d116159fdde6d0f90e4557988ec9041a152f7df195bcae7a3225750e98692",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "semver@1.0.28",
                "component": "pkg:cargo/semver@1.0.28",
                "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "serde@1.0.229",
                "component": "pkg:cargo/serde@1.0.229",
                "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "serde_core@1.0.229",
                "component": "pkg:cargo/serde_core@1.0.229",
                "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "serde_derive@1.0.229",
                "component": "pkg:cargo/serde_derive@1.0.229",
                "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "serde_json@1.0.154",
                "component": "pkg:cargo/serde_json@1.0.154",
                "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "sha2@0.10.9",
                "component": "pkg:cargo/sha2@0.10.9",
                "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "signature@2.2.0",
                "component": "pkg:cargo/signature@2.2.0",
                "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "slab@0.4.12",
                "component": "pkg:cargo/slab@0.4.12",
                "fingerprint": "948c9244acb6046025b1b65f274caae8b3ee7338bc1df6396dff9da4a4171388",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "spki@0.7.3",
                "component": "pkg:cargo/spki@0.7.3",
                "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "strsim@0.11.1",
                "component": "pkg:cargo/strsim@0.11.1",
                "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "subtle@2.6.1",
                "component": "pkg:cargo/subtle@2.6.1",
                "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "syn@2.0.119",
                "component": "pkg:cargo/syn@2.0.119",
                "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "syn@3.0.9",
                "component": "pkg:cargo/syn@3.0.9",
                "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "tempfile@3.27.0",
                "component": "pkg:cargo/tempfile@3.27.0",
                "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "typenum@1.20.1",
                "component": "pkg:cargo/typenum@1.20.1",
                "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "unicode-ident@1.0.27",
                "component": "pkg:cargo/unicode-ident@1.0.27",
                "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "utf8parse@0.2.2",
                "component": "pkg:cargo/utf8parse@0.2.2",
                "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "uuid@1.28.0",
                "component": "pkg:cargo/uuid@1.28.0",
                "fingerprint": "387c50f544bf59684c502353f39ac7ecb4dc95d29ee832f1d37b1355d1c4a9b2",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "version_check@0.9.5",
                "component": "pkg:cargo/version_check@0.9.5",
                "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "wasi@0.11.1+wasi-snapshot-preview1",
                "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1",
                "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "wasm-bindgen@0.2.129",
                "component": "pkg:cargo/wasm-bindgen@0.2.129",
                "fingerprint": "35d065dd777b3a3c1950d42acd2cdde22981dd51b32918fd30da199145a09286",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "wasm-bindgen-macro@0.2.129",
                "component": "pkg:cargo/wasm-bindgen-macro@0.2.129",
                "fingerprint": "a8e55b4985705c0f45faacefc2d3c7f13a1a62e6054cbe81ef5f9dad25ed1211",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "wasm-bindgen-macro-support@0.2.129",
                "component": "pkg:cargo/wasm-bindgen-macro-support@0.2.129",
                "fingerprint": "576d991574a1488b52d97c8eb51cd397bd50af5391773ab18b8b17eb77ee8a46",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "wasm-bindgen-shared@0.2.129",
                "component": "pkg:cargo/wasm-bindgen-shared@0.2.129",
                "fingerprint": "1e2b83b3aec18a9d3c7bdba94812f53b9cd4aa64d200217acece249dbe08953a",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "windows-link@0.2.1",
                "component": "pkg:cargo/windows-link@0.2.1",
                "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "windows-sys@0.61.2",
                "component": "pkg:cargo/windows-sys@0.61.2",
                "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "zerocopy@0.8.63",
                "component": "pkg:cargo/zerocopy@0.8.63",
                "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "zerocopy-derive@0.8.63",
                "component": "pkg:cargo/zerocopy-derive@0.8.63",
                "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "zeroize@1.9.1",
                "component": "pkg:cargo/zeroize@1.9.1",
                "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb",
                "state": "open"
              },
              {
                "rule_namespace": "syft",
                "rule_id": "zmij@1.0.23",
                "component": "pkg:cargo/zmij@1.0.23",
                "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5",
                "state": "open"
              }
            ]
          },
          {
            "tool": "dependency-manifest",
            "version": "1",
            "binary_digest": "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c",
            "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b",
            "invocation_digest": "eecf84121d1881c077d7ac91a9035cb43ce332e2fe23a8307107a23f0eea96c6",
            "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
            "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
            "raw_output_digest": "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c",
            "normalized_evidence_digest": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
            "limitations": [
              "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts"
            ],
            "evidence_class": "license",
            "observed_at": "2026-10-28T01:02:49.645169880+00:00",
            "findings": [
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/anstream@1.0.0",
                "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/anstyle@1.0.14",
                "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/anstyle-parse@1.0.0",
                "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/anstyle-query@1.1.5",
                "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/anstyle-wincon@3.0.11",
                "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/base64ct@1.8.3",
                "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/bitflags@2.13.2",
                "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/block-buffer@0.10.4",
                "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/bumpalo@3.20.3",
                "fingerprint": "fb439b1eefd27abaf5c2b97a65e24db999739421db6aec7af1ae9e09836ea863",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/cfg-if@1.0.5",
                "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/clap@4.6.7",
                "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/clap_builder@4.6.7",
                "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/clap_derive@4.6.7",
                "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/clap_lex@1.1.1",
                "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/colorchoice@1.0.5",
                "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/const-oid@0.9.6",
                "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/cpufeatures@0.2.17",
                "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "LGPL-2.1-or-later",
                "component": "pkg:cargo/creusot-std@0.14.0",
                "fingerprint": "52c0daa50acd1c45524bd1b121ae4a27a42f3c92bd33efd664b989f1508da836",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "LGPL-2.1-or-later",
                "component": "pkg:cargo/creusot-std-proc@0.14.0",
                "fingerprint": "d31a01919a0d168ebfd2e421e9996cfa2bb55cef33c973628483831a5cb0e9a7",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/crypto-common@0.1.7",
                "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "BSD-3-Clause",
                "component": "pkg:cargo/curve25519-dalek@4.1.3",
                "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT/Apache-2.0",
                "component": "pkg:cargo/curve25519-dalek-derive@0.1.1",
                "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/der@0.7.10",
                "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/digest@0.10.7",
                "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/ed25519@2.2.3",
                "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "BSD-3-Clause",
                "component": "pkg:cargo/ed25519-dalek@2.2.0",
                "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/errno@0.3.14",
                "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/fastrand@2.5.0",
                "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause",
                "component": "pkg:cargo/fiat-crypto@0.2.9",
                "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/futures-core@0.3.34",
                "fingerprint": "e708d4180c88c87605cd95603414a37cfe1a3801b31f1323c74a6e2d1bb4e1db",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/futures-task@0.3.34",
                "fingerprint": "9043dae2c07a23628842a21d60d0a838cf8e98ed737f8110e5c7bb6289ed41f0",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/futures-util@0.3.34",
                "fingerprint": "534cbc1271792af245d4760d2c9a90c68c0c1324ec9d680ab9d2a3c2d2812f37",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT",
                "component": "pkg:cargo/generic-array@0.14.7",
                "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/getrandom@0.2.17",
                "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/getrandom@0.4.3",
                "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/heck@0.5.0",
                "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/hex@0.4.3",
                "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/is_terminal_polyfill@1.70.2",
                "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/itoa@1.0.18",
                "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/js-sys@0.3.106",
                "fingerprint": "0c5d8c7fabc22a6072bc983faa3dd9ac0464da8fd300d45fed1ac9541c4a791c",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/libc@0.2.191",
                "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT",
                "component": "pkg:cargo/linux-raw-sys@0.12.1",
                "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Unlicense OR MIT",
                "component": "pkg:cargo/memchr@2.8.3",
                "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/once_cell@1.21.4",
                "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/once_cell_polyfill@1.70.2",
                "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/pearlite-syn@0.14.0",
                "fingerprint": "2b33df9cb175bc361041a94c8c3646022e0d9b86c41b7637c7ffcf4596151b23",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/pin-project-lite@0.2.17",
                "fingerprint": "7d63e046bcf4b285411e74dea838153fa1b7f349692d4ea5ed66d11a2fb18246",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/pkcs8@0.10.2",
                "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/ppv-lite86@0.2.21",
                "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/proc-macro2@1.0.107",
                "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/quote@1.0.47",
                "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later",
                "component": "pkg:cargo/r-efi@6.0.0",
                "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/rand@0.8.8",
                "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/rand_chacha@0.3.1",
                "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/rand_core@0.6.4",
                "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/rustc_version@0.4.1",
                "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT",
                "component": "pkg:cargo/rustix@1.1.5",
                "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/rustversion@1.0.23",
                "fingerprint": "a6327ae5237d14d350b98cf3e3076e7e818a3d9995a4e23c45197af20b786c46",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/semver@1.0.28",
                "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/serde@1.0.229",
                "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/serde_core@1.0.229",
                "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/serde_derive@1.0.229",
                "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/serde_json@1.0.154",
                "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/sha2@0.10.9",
                "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/signature@2.2.0",
                "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT",
                "component": "pkg:cargo/slab@0.4.12",
                "fingerprint": "586e2f1b2978cc21e14bb78e7c7cd349eb290acc0dbfef20c0fc9ae895430f6e",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/spki@0.7.3",
                "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT",
                "component": "pkg:cargo/strsim@0.11.1",
                "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "BSD-3-Clause",
                "component": "pkg:cargo/subtle@2.6.1",
                "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/syn@2.0.119",
                "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/syn@3.0.9",
                "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/tempfile@3.27.0",
                "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/typenum@1.20.1",
                "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0",
                "component": "pkg:cargo/unicode-ident@1.0.27",
                "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/utf8parse@0.2.2",
                "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/uuid@1.28.0",
                "fingerprint": "a281fde73e2d446051c61d3c3be1d96a467858bcece90f7993ce40602de298db",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT/Apache-2.0",
                "component": "pkg:cargo/version_check@0.9.5",
                "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT",
                "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1",
                "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/wasm-bindgen@0.2.129",
                "fingerprint": "729e863cbbc54c1bef330269bdd729675d54e221708268a255b46a516328a608",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/wasm-bindgen-macro@0.2.129",
                "fingerprint": "ceea4e488c3ce53140e197fed83755b4ae0fea0a460e6b01b874e1c46de942df",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/wasm-bindgen-macro-support@0.2.129",
                "fingerprint": "53b8c44087f3546a325c69b3975f837eca8963e8d2eb3889a277d9013fa70361",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/wasm-bindgen-shared@0.2.129",
                "fingerprint": "1a638a18a78f90069271e9cd72ee22845878ca8207fd2938bb0acef03f9f2b9c",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/windows-link@0.2.1",
                "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT OR Apache-2.0",
                "component": "pkg:cargo/windows-sys@0.61.2",
                "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT",
                "component": "pkg:cargo/zerocopy@0.8.63",
                "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT",
                "component": "pkg:cargo/zerocopy-derive@0.8.63",
                "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "Apache-2.0 OR MIT",
                "component": "pkg:cargo/zeroize@1.9.1",
                "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed",
                "state": "open"
              },
              {
                "rule_namespace": "license",
                "rule_id": "MIT",
                "component": "pkg:cargo/zmij@1.0.23",
                "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d",
                "state": "open"
              }
            ]
          }
        ],
        "dependency_manifest": {
          "ecosystem": "rust",
          "tool": "cargo",
          "tool_version": "1.99.1",
          "entries": [
            {
              "name": "anstream",
              "version": "1.0.0",
              "purl": "pkg:cargo/anstream@1.0.0",
              "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "anstyle",
              "version": "1.0.14",
              "purl": "pkg:cargo/anstyle@1.0.14",
              "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "anstyle-parse",
              "version": "1.0.0",
              "purl": "pkg:cargo/anstyle-parse@1.0.0",
              "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "anstyle-query",
              "version": "1.1.5",
              "purl": "pkg:cargo/anstyle-query@1.1.5",
              "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "anstyle-wincon",
              "version": "3.0.11",
              "purl": "pkg:cargo/anstyle-wincon@3.0.11",
              "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "base64ct",
              "version": "1.8.3",
              "purl": "pkg:cargo/base64ct@1.8.3",
              "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "bitflags",
              "version": "2.13.2",
              "purl": "pkg:cargo/bitflags@2.13.2",
              "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "block-buffer",
              "version": "0.10.4",
              "purl": "pkg:cargo/block-buffer@0.10.4",
              "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "bumpalo",
              "version": "3.20.3",
              "purl": "pkg:cargo/bumpalo@3.20.3",
              "sha256": "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "cfg-if",
              "version": "1.0.5",
              "purl": "pkg:cargo/cfg-if@1.0.5",
              "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "clap",
              "version": "4.6.7",
              "purl": "pkg:cargo/clap@4.6.7",
              "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "clap_builder",
              "version": "4.6.7",
              "purl": "pkg:cargo/clap_builder@4.6.7",
              "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "clap_derive",
              "version": "4.6.7",
              "purl": "pkg:cargo/clap_derive@4.6.7",
              "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "clap_lex",
              "version": "1.1.1",
              "purl": "pkg:cargo/clap_lex@1.1.1",
              "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "colorchoice",
              "version": "1.0.5",
              "purl": "pkg:cargo/colorchoice@1.0.5",
              "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "const-oid",
              "version": "0.9.6",
              "purl": "pkg:cargo/const-oid@0.9.6",
              "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "cpufeatures",
              "version": "0.2.17",
              "purl": "pkg:cargo/cpufeatures@0.2.17",
              "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "creusot-std",
              "version": "0.14.0",
              "purl": "pkg:cargo/creusot-std@0.14.0",
              "sha256": "b019630da7e585ab18eff475d7ea820474c3fc0cd05a57706facf37f67ab2705",
              "scope": "runtime",
              "licenses": [
                "LGPL-2.1-or-later"
              ]
            },
            {
              "name": "creusot-std-proc",
              "version": "0.14.0",
              "purl": "pkg:cargo/creusot-std-proc@0.14.0",
              "sha256": "5a21564d3da8f97ce00e03125d0c3f7c9faedfa68e5d182d88beb25c82c12d25",
              "scope": "runtime",
              "licenses": [
                "LGPL-2.1-or-later"
              ]
            },
            {
              "name": "crypto-common",
              "version": "0.1.7",
              "purl": "pkg:cargo/crypto-common@0.1.7",
              "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "curve25519-dalek",
              "version": "4.1.3",
              "purl": "pkg:cargo/curve25519-dalek@4.1.3",
              "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be",
              "scope": "runtime",
              "licenses": [
                "BSD-3-Clause"
              ]
            },
            {
              "name": "curve25519-dalek-derive",
              "version": "0.1.1",
              "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1",
              "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3",
              "scope": "runtime",
              "licenses": [
                "MIT/Apache-2.0"
              ]
            },
            {
              "name": "der",
              "version": "0.7.10",
              "purl": "pkg:cargo/der@0.7.10",
              "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "digest",
              "version": "0.10.7",
              "purl": "pkg:cargo/digest@0.10.7",
              "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "ed25519",
              "version": "2.2.3",
              "purl": "pkg:cargo/ed25519@2.2.3",
              "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "ed25519-dalek",
              "version": "2.2.0",
              "purl": "pkg:cargo/ed25519-dalek@2.2.0",
              "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9",
              "scope": "runtime",
              "licenses": [
                "BSD-3-Clause"
              ]
            },
            {
              "name": "errno",
              "version": "0.3.14",
              "purl": "pkg:cargo/errno@0.3.14",
              "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "fastrand",
              "version": "2.5.0",
              "purl": "pkg:cargo/fastrand@2.5.0",
              "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "fiat-crypto",
              "version": "0.2.9",
              "purl": "pkg:cargo/fiat-crypto@0.2.9",
              "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0 OR BSD-1-Clause"
              ]
            },
            {
              "name": "futures-core",
              "version": "0.3.34",
              "purl": "pkg:cargo/futures-core@0.3.34",
              "sha256": "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "futures-task",
              "version": "0.3.34",
              "purl": "pkg:cargo/futures-task@0.3.34",
              "sha256": "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "futures-util",
              "version": "0.3.34",
              "purl": "pkg:cargo/futures-util@0.3.34",
              "sha256": "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "generic-array",
              "version": "0.14.7",
              "purl": "pkg:cargo/generic-array@0.14.7",
              "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a",
              "scope": "runtime",
              "licenses": [
                "MIT"
              ]
            },
            {
              "name": "getrandom",
              "version": "0.2.17",
              "purl": "pkg:cargo/getrandom@0.2.17",
              "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "getrandom",
              "version": "0.4.3",
              "purl": "pkg:cargo/getrandom@0.4.3",
              "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "heck",
              "version": "0.5.0",
              "purl": "pkg:cargo/heck@0.5.0",
              "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "hex",
              "version": "0.4.3",
              "purl": "pkg:cargo/hex@0.4.3",
              "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "is_terminal_polyfill",
              "version": "1.70.2",
              "purl": "pkg:cargo/is_terminal_polyfill@1.70.2",
              "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "itoa",
              "version": "1.0.18",
              "purl": "pkg:cargo/itoa@1.0.18",
              "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "js-sys",
              "version": "0.3.106",
              "purl": "pkg:cargo/js-sys@0.3.106",
              "sha256": "7883d941dae510fb2d978fc3fe018c71c9e2892fd38854de3e8b92c2e5ad9cc5",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "libc",
              "version": "0.2.191",
              "purl": "pkg:cargo/libc@0.2.191",
              "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "linux-raw-sys",
              "version": "0.12.1",
              "purl": "pkg:cargo/linux-raw-sys@0.12.1",
              "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "memchr",
              "version": "2.8.3",
              "purl": "pkg:cargo/memchr@2.8.3",
              "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98",
              "scope": "runtime",
              "licenses": [
                "Unlicense OR MIT"
              ]
            },
            {
              "name": "once_cell",
              "version": "1.21.4",
              "purl": "pkg:cargo/once_cell@1.21.4",
              "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "once_cell_polyfill",
              "version": "1.70.2",
              "purl": "pkg:cargo/once_cell_polyfill@1.70.2",
              "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "pearlite-syn",
              "version": "0.14.0",
              "purl": "pkg:cargo/pearlite-syn@0.14.0",
              "sha256": "e0cada22bee420c97f91bd98f0e1effdd6ef5ab219df0561f35144dcb504ebfd",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "pin-project-lite",
              "version": "0.2.17",
              "purl": "pkg:cargo/pin-project-lite@0.2.17",
              "sha256": "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "pkcs8",
              "version": "0.10.2",
              "purl": "pkg:cargo/pkcs8@0.10.2",
              "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "ppv-lite86",
              "version": "0.2.21",
              "purl": "pkg:cargo/ppv-lite86@0.2.21",
              "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "proc-macro2",
              "version": "1.0.107",
              "purl": "pkg:cargo/proc-macro2@1.0.107",
              "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "quote",
              "version": "1.0.47",
              "purl": "pkg:cargo/quote@1.0.47",
              "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "r-efi",
              "version": "6.0.0",
              "purl": "pkg:cargo/r-efi@6.0.0",
              "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0 OR LGPL-2.1-or-later"
              ]
            },
            {
              "name": "rand",
              "version": "0.8.8",
              "purl": "pkg:cargo/rand@0.8.8",
              "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "rand_chacha",
              "version": "0.3.1",
              "purl": "pkg:cargo/rand_chacha@0.3.1",
              "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "rand_core",
              "version": "0.6.4",
              "purl": "pkg:cargo/rand_core@0.6.4",
              "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "rustc_version",
              "version": "0.4.1",
              "purl": "pkg:cargo/rustc_version@0.4.1",
              "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "rustix",
              "version": "1.1.5",
              "purl": "pkg:cargo/rustix@1.1.5",
              "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "rustversion",
              "version": "1.0.23",
              "purl": "pkg:cargo/rustversion@1.0.23",
              "sha256": "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "semver",
              "version": "1.0.28",
              "purl": "pkg:cargo/semver@1.0.28",
              "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "serde",
              "version": "1.0.229",
              "purl": "pkg:cargo/serde@1.0.229",
              "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "serde_core",
              "version": "1.0.229",
              "purl": "pkg:cargo/serde_core@1.0.229",
              "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "serde_derive",
              "version": "1.0.229",
              "purl": "pkg:cargo/serde_derive@1.0.229",
              "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "serde_json",
              "version": "1.0.154",
              "purl": "pkg:cargo/serde_json@1.0.154",
              "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "sha2",
              "version": "0.10.9",
              "purl": "pkg:cargo/sha2@0.10.9",
              "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "signature",
              "version": "2.2.0",
              "purl": "pkg:cargo/signature@2.2.0",
              "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "slab",
              "version": "0.4.12",
              "purl": "pkg:cargo/slab@0.4.12",
              "sha256": "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5",
              "scope": "runtime",
              "licenses": [
                "MIT"
              ]
            },
            {
              "name": "spki",
              "version": "0.7.3",
              "purl": "pkg:cargo/spki@0.7.3",
              "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "strsim",
              "version": "0.11.1",
              "purl": "pkg:cargo/strsim@0.11.1",
              "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f",
              "scope": "runtime",
              "licenses": [
                "MIT"
              ]
            },
            {
              "name": "subtle",
              "version": "2.6.1",
              "purl": "pkg:cargo/subtle@2.6.1",
              "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292",
              "scope": "runtime",
              "licenses": [
                "BSD-3-Clause"
              ]
            },
            {
              "name": "syn",
              "version": "2.0.119",
              "purl": "pkg:cargo/syn@2.0.119",
              "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "syn",
              "version": "3.0.9",
              "purl": "pkg:cargo/syn@3.0.9",
              "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "tempfile",
              "version": "3.27.0",
              "purl": "pkg:cargo/tempfile@3.27.0",
              "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "typenum",
              "version": "1.20.1",
              "purl": "pkg:cargo/typenum@1.20.1",
              "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "unicode-ident",
              "version": "1.0.27",
              "purl": "pkg:cargo/unicode-ident@1.0.27",
              "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563",
              "scope": "runtime",
              "licenses": [
                "(MIT OR Apache-2.0) AND Unicode-3.0"
              ]
            },
            {
              "name": "utf8parse",
              "version": "0.2.2",
              "purl": "pkg:cargo/utf8parse@0.2.2",
              "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "uuid",
              "version": "1.28.0",
              "purl": "pkg:cargo/uuid@1.28.0",
              "sha256": "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "version_check",
              "version": "0.9.5",
              "purl": "pkg:cargo/version_check@0.9.5",
              "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a",
              "scope": "runtime",
              "licenses": [
                "MIT/Apache-2.0"
              ]
            },
            {
              "name": "wasi",
              "version": "0.11.1+wasi-snapshot-preview1",
              "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1",
              "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "wasm-bindgen",
              "version": "0.2.129",
              "purl": "pkg:cargo/wasm-bindgen@0.2.129",
              "sha256": "9bb54f33acc68fd454578d9820b0bde1a1a3d17aa17bb7b6595806d02886d409",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "wasm-bindgen-macro",
              "version": "0.2.129",
              "purl": "pkg:cargo/wasm-bindgen-macro@0.2.129",
              "sha256": "2e29d0c35b16e224a7eeb5cd2d25e3e1968fbd65604117b44d3b789d00ee8535",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "wasm-bindgen-macro-support",
              "version": "0.2.129",
              "purl": "pkg:cargo/wasm-bindgen-macro-support@0.2.129",
              "sha256": "6f501a8bc3719dba86ef8ae4728879c08001bea749eb1333ac5b91e040e2a6b7",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "wasm-bindgen-shared",
              "version": "0.2.129",
              "purl": "pkg:cargo/wasm-bindgen-shared@0.2.129",
              "sha256": "23f0c9c52aa7cd7d77769a4cfe2a9adb1b331f489a41d912ce14513d5ab995c6",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "windows-link",
              "version": "0.2.1",
              "purl": "pkg:cargo/windows-link@0.2.1",
              "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "windows-sys",
              "version": "0.61.2",
              "purl": "pkg:cargo/windows-sys@0.61.2",
              "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc",
              "scope": "runtime",
              "licenses": [
                "MIT OR Apache-2.0"
              ]
            },
            {
              "name": "zerocopy",
              "version": "0.8.63",
              "purl": "pkg:cargo/zerocopy@0.8.63",
              "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8",
              "scope": "runtime",
              "licenses": [
                "BSD-2-Clause OR Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "zerocopy-derive",
              "version": "0.8.63",
              "purl": "pkg:cargo/zerocopy-derive@0.8.63",
              "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f",
              "scope": "runtime",
              "licenses": [
                "BSD-2-Clause OR Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "zeroize",
              "version": "1.9.1",
              "purl": "pkg:cargo/zeroize@1.9.1",
              "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879",
              "scope": "runtime",
              "licenses": [
                "Apache-2.0 OR MIT"
              ]
            },
            {
              "name": "zmij",
              "version": "1.0.23",
              "purl": "pkg:cargo/zmij@1.0.23",
              "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b",
              "scope": "runtime",
              "licenses": [
                "MIT"
              ]
            }
          ]
        },
        "invariants": [
          {
            "name": "chain linking is exact successor arithmetic and never wraps at the u64 ceiling",
            "claim": "record N links to record N-1 iff prev_hash equals record N-1's hash AND seq is the exact u64 successor of record N-1's seq; the successor is never taken modulo the u64 ceiling — no seq may link past u64::MAX (the chain cannot wrap) — and on the guarded domain (prev below u64::MAX) the predicate is exactly seq == prev + 1",
            "clauses": [
              {
                "kind": "requires",
                "text": "kani::assume(seq < u64::MAX)"
              },
              {
                "kind": "ensures",
                "text": "kani::assert(!wrapped)"
              },
              {
                "kind": "requires",
                "text": "kani::assume(prev < u64::MAX)"
              },
              {
                "kind": "ensures",
                "text": "kani::assert(got == (seq == prev.wrapping_add(1)))"
              }
            ],
            "encoding_sha256": "e87bb002ddad5cf216c2e7df97470f826a80205820eff0e66ffd16bcf5c19d24",
            "argv": [
              "kani-driver",
              "proofs/links_kani.rs"
            ],
            "exit_code": 0,
            "expected_exit": 0,
            "timed_out": false,
            "duration_seconds": 0.593895525,
            "tail": "Kani Rust Verifier 0.68.0 (standalone) CBMC 6.11.0 Checking harness successor_matches_the_spec_on_the_guarded_domain... CBMC 6.11.0 (cbmc-6.11.0) CBMC version 6.11.0 (cbmc-6.11.0) 64-bit x86_64 linux Reading GOTO program from file <path> Generating GOTO Program Adding CPROVER library (x86_64) Removal of function pointers and virtual functions Generic Property Instrumentation Running with 16 object bits, 48 offset bits (user-specified) Starting Bounded Model Checking aborting path on assume(false) at file <path> line 17 column 11 function rules::links thread 0 Runtime Symex: 0.011841s size of program expression: 328 steps slicing removed 151 assignments Generated 4 VCC(s), 4 remaining after simplification Runtime Postprocess Equation: 6.316e-05s Passing problem to propositional reduction converting SSA Runtime Convert SSA: 0.0028006s Running propositional reduction Post-processing Runtime Post-process: 0.000225556s Solving with CaDiCaL 3.0.0 991 variables, 2493 clauses SAT checker: instance is SATISFIABLE Runtime Solver: 0.000357795s Runtime decision procedure: 0.0032582s Running propositional reduction Solving with CaDiCaL 3.0.0 992 variables, 2494 clauses SAT checker: instance is UNSATISFIABLE Runtime Solver: 0.0303398s Runtime decision procedure: 0.0305939s RESULTS: Check 1: rules::links.unreachable.1 - Status: SUCCESS - Description: \"unreachable code\" - Location: <path> in function rules::links Check 2: core::num::<impl u64>::checked_add.arithmetic_overflow.1 - Status: SUCCESS - Description: \"attempt to compute `unchecked_add` which would overflow\" - Location: <path> in function core::num::<impl u64>::checked_add Check 3: successor_matches_the_spec_on_the_guarded_domain.assertion.1 - Status: SUCCESS - Description: \"on the guarded domain the predicate is exactly seq == prev + 1\" - Location: <path> in function successor_matches_the_spec_on_the_guarded_domain SUMMARY: ** 0 of 3 failed VERIFICATION:- SUCCESSFUL Verification Time: 0.09678862s Checking harness successor_never_wraps_at_the_u64_ceiling... CBMC 6.11.0 (cbmc-6.11.0) CBMC version 6.11.0 (cbmc-6.11.0) 64-bit x86_64 linux Reading GOTO program from file <path> Generating GOTO Program Adding CPROVER library (x86_64) Removal of function pointers and virtual functions Generic Property Instrumentation Running with 16 object bits, 48 offset bits (user-specified) Starting Bounded Model Checking Runtime Symex: 0.00787497s size of program expression: 243 steps slicing removed 136 assignments Generated 2 VCC(s), 1 remaining after simplification Runtime Postprocess Equation: 5.9182e-05s Passing problem to propositional reduction converting SSA Runtime Convert SSA: 0.000608417s Running propositional reduction Post-processing Runtime Post-process: 1.035e-05s Solving with CaDiCaL 3.0.0 194 variables, 259 clauses SAT checker: instance is SATISFIABLE Runtime Solver: 0.000114345s Runtime decision procedure: 0.000797403s RESULTS: Check 1: rules::links.unreachable.1 - Status: SUCCESS - Description: \"unreachable code\" - Location: <path> in function rules::links Check 2: core::num::<impl u64>::checked_add.arithmetic_overflow.1 - Status: SUCCESS - Description: \"attempt to compute `unchecked_add` which would overflow\" - Location: <path> in function core::num::<impl u64>::checked_add Check 3: successor_never_wraps_at_the_u64_ceiling.assertion.1 - Status: SUCCESS - Description: \"the hash chain never wraps: no seq links past the u64 ceiling\" - Location: <path> in function successor_never_wraps_at_the_u64_ceiling SUMMARY: ** 0 of 3 failed VERIFICATION:- SUCCESSFUL Verification Time: 0.037153143s Manual Harness Summary: Complete - 2 successfully verified harnesses, 0 failures, 2 total. warning: unexpected `cfg` condition name: `test` --> <path> | 36 | #[cfg(test)] | ^^^^ | = help: expected names are: `kani` and 34 more = help: to expect this configuration use `--check-cfg=cfg(test)` = note: see <path> for more information about checking conditional configuration = note: `#[warn(unexpected_cfgs)]` on by default warning: unexpected `cfg` condition name: `test` --> <path> | 61 | #[cfg(test)] | ^^^^ | = help: to expect this configuration use `--check-cfg=cfg(test)` = note: see <path> for more information about checking conditional configuration warning: function `main` is never used --> <path> | 44 | fn main() {} | ^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `shard_name` is never used --> <path> | 24 | pub fn shard_name(index: u32) -> String { | ^^^^^^^^^^ warning: function `shard_index` is never used --> <path> | 30 | pub fn shard_index(name: &str) -> Option<u32> { | ^^^^^^^^^^^ warning: use of an unstable feature --> <crate attribute>:1:12 | 1 | #![feature(register_tool)] | ^^^^^^^^^^^^^ | = note: requested on the command line with `--force-warn unstable-features` warning: 6 warnings emitted",
            "passed": true,
            "tool": "kani",
            "version": "0.68.0",
            "harness": "successor_never_wraps_at_the_u64_ceiling",
            "decision": "proven"
          },
          {
            "name": "chain linking is exact successor arithmetic and never wraps at the u64 ceiling",
            "claim": "record N links to record N-1 iff prev_hash equals record N-1's hash AND seq is the exact u64 successor of record N-1's seq; the successor is never taken modulo the u64 ceiling — no seq may link past u64::MAX (the chain cannot wrap) — and on the guarded domain (prev below u64::MAX) the predicate is exactly seq == prev + 1",
            "target": "links",
            "clauses": [
              {
                "kind": "ensures",
                "text": "#[ensures(result == (seq == prev + 1u64))]"
              },
              {
                "kind": "requires",
                "text": "#[requires(prev < 18446744073709551615u64)]"
              }
            ],
            "encoding_sha256": "92ba29b838925b5024384e389e748475d9bb4e41d1df99beb791ab953efcad62",
            "argv": [
              "cargo",
              "creusot",
              "--why3session",
              "--span-mode",
              "relative",
              "--erasure-check=warn",
              "-j",
              "2",
              "--why3find-arg=--no-cache",
              "--why3find-arg=-f",
              "--why3find-arg=--prover=+alt-ergo,+z3",
              "--why3find-arg=--fast=600ms",
              "--why3find-arg=--time=30s",
              "links",
              "--",
              "--offline"
            ],
            "exit_code": 0,
            "expected_exit": 0,
            "timed_out": false,
            "duration_seconds": 56.425110718,
            "tail": "Generating <path> Proved (2 files) ✔ Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.27 Compiling libc v0.2.191 Compiling version_check v0.9.5 Checking cfg-if v1.0.5 Checking typenum v1.20.1 Compiling zerocopy v0.8.63 Compiling semver v1.0.28 Compiling getrandom v0.4.3 Compiling serde_core v1.0.229 Checking utf8parse v0.2.2 Checking cpufeatures v0.2.17 Compiling zmij v1.0.23 Checking anstyle v1.0.14 Checking is_terminal_polyfill v1.70.2 Checking colorchoice v1.0.5 Checking anstyle-query v1.1.5 Compiling serde_json v1.0.154 Checking strsim v0.11.1 Checking signature v2.2.0 Checking clap_lex v1.1.1 Compiling serde v1.0.229 Checking zeroize v1.9.1 Checking anstyle-parse v1.0.0 Compiling heck v0.5.0 Checking subtle v2.6.1 Checking ed25519 v2.2.3 Checking memchr v2.8.3 Checking itoa v1.0.18 Checking hex v0.4.3 Checking anstream v1.0.0 Compiling generic-array v0.14.7 Compiling rustc_version v0.4.1 Checking clap_builder v4.6.7 Compiling curve25519-dalek v4.1.3 Compiling syn v2.0.119 Compiling syn v3.0.9 Checking block-buffer v0.10.4 Checking crypto-common v0.1.7 Checking getrandom v0.2.17 Checking digest v0.10.7 Checking rand_core v0.6.4 Checking sha2 v0.10.9 Compiling uuid v1.28.0 Compiling clap_derive v4.6.7 Compiling serde_derive v1.0.229 Checking ppv-lite86 v0.2.21 Checking rand_chacha v0.3.1 Checking rand v0.8.8 Compiling pearlite-syn v0.14.0 Compiling curve25519-dalek-derive v0.1.1 Compiling creusot-std-proc v0.14.0 Checking clap v4.6.7 Checking ed25519-dalek v2.2.0 Checking creusot-std v0.14.0 Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/645a6360-4a48-4323-9cc6-aaf06d4a706f/run) warning: calling external function `strip_prefix` with no contract will yield an impossible precondition --> <path> | 31 | let rest = name.strip_prefix(\"shard-\")?; | ^^^^^^^^^^^^^^^^^^^^^^^^^^^ function called here | = note: `#[warn(creusot::contractless_external_function)]` on by default warning: calling external function `strip_suffix` with no contract will yield an impossible precondition --> <path> | 32 | let stem = rest.strip_suffix(\".jsonl\")?; | ^^^^^^^^^^^^^^^^^^^^^^^^^^^ function called here warning: calling external function `parse` with no contract will yield an impossible precondition --> <path> | 33 | stem.parse::<u32>().ok() | ^^^^^^^^^^^^^^^^^^^ function called here warning: `falsegreen-ledger` (lib) generated 3 warnings Finished `dev` profile [unoptimized + debuginfo] target(s) in 54.04s Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path> Warning: inexistent file in source location: No resolved file among <path>",
            "passed": true,
            "tool": "creusot",
            "version": "v0.14.0 (65349025c67e)",
            "decision": "proven",
            "goals": {
              "proven": 4,
              "total": 4
            },
            "provers_used": [
              {
                "obligation": "Coma::vc_checked_add",
                "prover": "alt-ergo",
                "status": "closed",
                "time_ms": 5
              },
              {
                "obligation": "Coma::vc_elim_Some",
                "prover": "alt-ergo",
                "status": "closed",
                "time_ms": 6
              },
              {
                "obligation": "Coma::vc_links",
                "prover": "alt-ergo",
                "status": "closed",
                "time_ms": 10
              },
              {
                "obligation": "Coma::vc_links",
                "prover": "alt-ergo",
                "status": "closed",
                "time_ms": 14
              }
            ]
          }
        ]
      }
    }
  ],
  "verification_ms": 93458,
  "security": {
    "policy": {
      "id": "falsegreen-platform",
      "version": "1",
      "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad",
      "required": [
        "dependency_vulnerability",
        "static_analysis",
        "secret",
        "supply_chain",
        "license"
      ],
      "minimum_witnesses": 1,
      "fail_on_severities": [
        "critical",
        "high"
      ],
      "unknown_severity": "insufficient",
      "secrets_fail_on_any_unexcepted": true,
      "required_standards": [],
      "unavailable_behavior": "insufficient"
    },
    "language": "rust",
    "classes": [
      {
        "class": "dependency_vulnerability",
        "required": true,
        "status": "pass",
        "witness_refs": [
          "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
        ],
        "reasons": []
      },
      {
        "class": "static_analysis",
        "required": true,
        "status": "pass",
        "witness_refs": [
          "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
        ],
        "reasons": []
      },
      {
        "class": "secret",
        "required": true,
        "status": "pass",
        "witness_refs": [
          "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
        ],
        "reasons": []
      },
      {
        "class": "supply_chain",
        "required": true,
        "status": "pass",
        "witness_refs": [
          "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53"
        ],
        "reasons": []
      },
      {
        "class": "license",
        "required": true,
        "status": "not_assessed",
        "witness_refs": [
          "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164"
        ],
        "reasons": [
          "no licence policy frozen — the licence facts are inventory, nothing was asserted"
        ]
      }
    ],
    "findings": [
      {
        "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstream@1.0.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "anstream@1.0.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle@1.0.14"
        },
        "rule": {
          "namespace": "syft",
          "id": "anstyle@1.0.14"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle-parse@1.0.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "anstyle-parse@1.0.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle-query@1.1.5"
        },
        "rule": {
          "namespace": "syft",
          "id": "anstyle-query@1.1.5"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle-wincon@3.0.11"
        },
        "rule": {
          "namespace": "syft",
          "id": "anstyle-wincon@3.0.11"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/base64ct@1.8.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "base64ct@1.8.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/bitflags@2.13.2"
        },
        "rule": {
          "namespace": "syft",
          "id": "bitflags@2.13.2"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/block-buffer@0.10.4"
        },
        "rule": {
          "namespace": "syft",
          "id": "block-buffer@0.10.4"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7c7783daff6a7d155286cca0cff6d6680da913d25c6b2f9b8cbaa7796870b15c",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/bumpalo@3.20.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "bumpalo@3.20.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/cfg-if@1.0.5"
        },
        "rule": {
          "namespace": "syft",
          "id": "cfg-if@1.0.5"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap@4.6.7"
        },
        "rule": {
          "namespace": "syft",
          "id": "clap@4.6.7"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap_builder@4.6.7"
        },
        "rule": {
          "namespace": "syft",
          "id": "clap_builder@4.6.7"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap_derive@4.6.7"
        },
        "rule": {
          "namespace": "syft",
          "id": "clap_derive@4.6.7"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap_lex@1.1.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "clap_lex@1.1.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/colorchoice@1.0.5"
        },
        "rule": {
          "namespace": "syft",
          "id": "colorchoice@1.0.5"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/const-oid@0.9.6"
        },
        "rule": {
          "namespace": "syft",
          "id": "const-oid@0.9.6"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/cpufeatures@0.2.17"
        },
        "rule": {
          "namespace": "syft",
          "id": "cpufeatures@0.2.17"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a289092557745e0eefda7242068cc669dc6c675bbd343c368809ac5ba3b7b585",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/creusot-std@0.14.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "creusot-std@0.14.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "bd757a2946d6e2f74809027c535554d69bb14965a21b50d1296dd4269251ca4f",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/creusot-std-proc@0.14.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "creusot-std-proc@0.14.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/crypto-common@0.1.7"
        },
        "rule": {
          "namespace": "syft",
          "id": "crypto-common@0.1.7"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/curve25519-dalek@4.1.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "curve25519-dalek@4.1.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "curve25519-dalek-derive@0.1.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/der@0.7.10"
        },
        "rule": {
          "namespace": "syft",
          "id": "der@0.7.10"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/digest@0.10.7"
        },
        "rule": {
          "namespace": "syft",
          "id": "digest@0.10.7"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/ed25519@2.2.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "ed25519@2.2.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/ed25519-dalek@2.2.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "ed25519-dalek@2.2.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/errno@0.3.14"
        },
        "rule": {
          "namespace": "syft",
          "id": "errno@0.3.14"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": ""
        },
        "rule": {
          "namespace": "syft",
          "id": "falsegreen-ledger@0.1.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/fastrand@2.5.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "fastrand@2.5.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/fiat-crypto@0.2.9"
        },
        "rule": {
          "namespace": "syft",
          "id": "fiat-crypto@0.2.9"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "476954817da44f19713c85a7f20edf24ebe14e973b2dd69ba13f6555d75a3094",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/futures-core@0.3.34"
        },
        "rule": {
          "namespace": "syft",
          "id": "futures-core@0.3.34"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "fee6978da35e4f5c6b8d96529cb65dee180d4cb7666707e503d34f0cfc05ef9a",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/futures-task@0.3.34"
        },
        "rule": {
          "namespace": "syft",
          "id": "futures-task@0.3.34"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d13989ae04350bcd91aced9f34a985abfd8185befd3143d4606db9aa484286f2",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/futures-util@0.3.34"
        },
        "rule": {
          "namespace": "syft",
          "id": "futures-util@0.3.34"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/generic-array@0.14.7"
        },
        "rule": {
          "namespace": "syft",
          "id": "generic-array@0.14.7"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/getrandom@0.2.17"
        },
        "rule": {
          "namespace": "syft",
          "id": "getrandom@0.2.17"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/getrandom@0.4.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "getrandom@0.4.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/heck@0.5.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "heck@0.5.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/hex@0.4.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "hex@0.4.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2"
        },
        "rule": {
          "namespace": "syft",
          "id": "is_terminal_polyfill@1.70.2"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/itoa@1.0.18"
        },
        "rule": {
          "namespace": "syft",
          "id": "itoa@1.0.18"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "77600897c032e28e90244d67c57a80b30db75d51812cb1dbcaa25d4c6fdee41c",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/js-sys@0.3.106"
        },
        "rule": {
          "namespace": "syft",
          "id": "js-sys@0.3.106"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/libc@0.2.191"
        },
        "rule": {
          "namespace": "syft",
          "id": "libc@0.2.191"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/linux-raw-sys@0.12.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "linux-raw-sys@0.12.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/memchr@2.8.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "memchr@2.8.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/once_cell@1.21.4"
        },
        "rule": {
          "namespace": "syft",
          "id": "once_cell@1.21.4"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/once_cell_polyfill@1.70.2"
        },
        "rule": {
          "namespace": "syft",
          "id": "once_cell_polyfill@1.70.2"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b8d773cef58aeb5fe067d9ae18794bd0971d08dd6c7d6d4b53712c6f778cdd08",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/pearlite-syn@0.14.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "pearlite-syn@0.14.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d70cae8bcb70f31e4c6b7164e3081c4a5431d743e96c3c24760e8b86e1a6eb7f",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/pin-project-lite@0.2.17"
        },
        "rule": {
          "namespace": "syft",
          "id": "pin-project-lite@0.2.17"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/pkcs8@0.10.2"
        },
        "rule": {
          "namespace": "syft",
          "id": "pkcs8@0.10.2"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/ppv-lite86@0.2.21"
        },
        "rule": {
          "namespace": "syft",
          "id": "ppv-lite86@0.2.21"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/proc-macro2@1.0.107"
        },
        "rule": {
          "namespace": "syft",
          "id": "proc-macro2@1.0.107"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/quote@1.0.47"
        },
        "rule": {
          "namespace": "syft",
          "id": "quote@1.0.47"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/r-efi@6.0.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "r-efi@6.0.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rand@0.8.8"
        },
        "rule": {
          "namespace": "syft",
          "id": "rand@0.8.8"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rand_chacha@0.3.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "rand_chacha@0.3.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rand_core@0.6.4"
        },
        "rule": {
          "namespace": "syft",
          "id": "rand_core@0.6.4"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rustc_version@0.4.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "rustc_version@0.4.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rustix@1.1.5"
        },
        "rule": {
          "namespace": "syft",
          "id": "rustix@1.1.5"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "aa23aa4807d46c98279b059d07943e631594c35e66ce52182c16b51cf7d43f12",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rustversion@1.0.23"
        },
        "rule": {
          "namespace": "syft",
          "id": "rustversion@1.0.23"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/semver@1.0.28"
        },
        "rule": {
          "namespace": "syft",
          "id": "semver@1.0.28"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde@1.0.229"
        },
        "rule": {
          "namespace": "syft",
          "id": "serde@1.0.229"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde_core@1.0.229"
        },
        "rule": {
          "namespace": "syft",
          "id": "serde_core@1.0.229"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde_derive@1.0.229"
        },
        "rule": {
          "namespace": "syft",
          "id": "serde_derive@1.0.229"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde_json@1.0.154"
        },
        "rule": {
          "namespace": "syft",
          "id": "serde_json@1.0.154"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/sha2@0.10.9"
        },
        "rule": {
          "namespace": "syft",
          "id": "sha2@0.10.9"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/signature@2.2.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "signature@2.2.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9bce2547a13eaf182484f1a571040d8cce743c62cb11c3b0adcb3a934d9771ff",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/slab@0.4.12"
        },
        "rule": {
          "namespace": "syft",
          "id": "slab@0.4.12"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/spki@0.7.3"
        },
        "rule": {
          "namespace": "syft",
          "id": "spki@0.7.3"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/strsim@0.11.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "strsim@0.11.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/subtle@2.6.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "subtle@2.6.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/syn@2.0.119"
        },
        "rule": {
          "namespace": "syft",
          "id": "syn@2.0.119"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/syn@3.0.9"
        },
        "rule": {
          "namespace": "syft",
          "id": "syn@3.0.9"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/tempfile@3.27.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "tempfile@3.27.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/typenum@1.20.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "typenum@1.20.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/unicode-ident@1.0.27"
        },
        "rule": {
          "namespace": "syft",
          "id": "unicode-ident@1.0.27"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/utf8parse@0.2.2"
        },
        "rule": {
          "namespace": "syft",
          "id": "utf8parse@0.2.2"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9582d4f239f7864b3b3b0fe0e400cb3bef7b6e4cafa8d4ffcf46bf2037b8b2d1",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/uuid@1.28.0"
        },
        "rule": {
          "namespace": "syft",
          "id": "uuid@1.28.0"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/version_check@0.9.5"
        },
        "rule": {
          "namespace": "syft",
          "id": "version_check@0.9.5"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1"
        },
        "rule": {
          "namespace": "syft",
          "id": "wasi@0.11.1+wasi-snapshot-preview1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "795f67b52a5a715e44751a89cd6e3eebe56440405d5b50d45fd590265e8b070c",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen@0.2.129"
        },
        "rule": {
          "namespace": "syft",
          "id": "wasm-bindgen@0.2.129"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "cdb73c713e3e48e4825973e061b272376c716442e995252af01cd807cb800f5c",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen-macro@0.2.129"
        },
        "rule": {
          "namespace": "syft",
          "id": "wasm-bindgen-macro@0.2.129"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "0e7c814d552fbfcb44b8a3d5bf843864865499653a32ab9c8cfca4b3b5c696ed",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen-macro-support@0.2.129"
        },
        "rule": {
          "namespace": "syft",
          "id": "wasm-bindgen-macro-support@0.2.129"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9c56e78576d675ae7a5b5e0eb53a91c8704424a30d7257fcd6d017493453ecf3",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen-shared@0.2.129"
        },
        "rule": {
          "namespace": "syft",
          "id": "wasm-bindgen-shared@0.2.129"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/windows-link@0.2.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "windows-link@0.2.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/windows-sys@0.61.2"
        },
        "rule": {
          "namespace": "syft",
          "id": "windows-sys@0.61.2"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zerocopy@0.8.63"
        },
        "rule": {
          "namespace": "syft",
          "id": "zerocopy@0.8.63"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zerocopy-derive@0.8.63"
        },
        "rule": {
          "namespace": "syft",
          "id": "zerocopy-derive@0.8.63"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zeroize@1.9.1"
        },
        "rule": {
          "namespace": "syft",
          "id": "zeroize@1.9.1"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4",
        "class": "supply_chain",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zmij@1.0.23"
        },
        "rule": {
          "namespace": "syft",
          "id": "zmij@1.0.23"
        },
        "state": "open",
        "evidence_refs": [
          "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828"
        ],
        "witness_tool_ref": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstream@1.0.0"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle@1.0.14"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle-parse@1.0.0"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle-query@1.1.5"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/anstyle-wincon@3.0.11"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/base64ct@1.8.3"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/bitflags@2.13.2"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/block-buffer@0.10.4"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "112eba865d6e313d6f23bd9b4eb1bb1740fb2f837c273ec7124e835cc0da005d",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/bumpalo@3.20.3"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/cfg-if@1.0.5"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap@4.6.7"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap_builder@4.6.7"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap_derive@4.6.7"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/clap_lex@1.1.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/colorchoice@1.0.5"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/const-oid@0.9.6"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/cpufeatures@0.2.17"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "19e2b4591ae75b11535dd3adef8e6a0ee04d76d24038de6751a8b7537b96d5aa",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/creusot-std@0.14.0"
        },
        "rule": {
          "namespace": "license",
          "id": "LGPL-2.1-or-later"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "3cd2d76a6803b9cba3f213e24939049e38bd414067a7394974c19fdacc0fc663",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/creusot-std-proc@0.14.0"
        },
        "rule": {
          "namespace": "license",
          "id": "LGPL-2.1-or-later"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/crypto-common@0.1.7"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/curve25519-dalek@4.1.3"
        },
        "rule": {
          "namespace": "license",
          "id": "BSD-3-Clause"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT/Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/der@0.7.10"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/digest@0.10.7"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/ed25519@2.2.3"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/ed25519-dalek@2.2.0"
        },
        "rule": {
          "namespace": "license",
          "id": "BSD-3-Clause"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/errno@0.3.14"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/fastrand@2.5.0"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/fiat-crypto@0.2.9"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0 OR BSD-1-Clause"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "c6aeb45eaedd541244c476c372e812d3e20d16010265ee4571a3763242392da2",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/futures-core@0.3.34"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "301d6620277659895b68463d36b4239436b98a7dc028f4d60d5d04c4b334f741",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/futures-task@0.3.34"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2df66b072bb07a9e9a837604f76f68aa7c29f5388ae32a5c9be71b9858ac5f8c",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/futures-util@0.3.34"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/generic-array@0.14.7"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/getrandom@0.2.17"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/getrandom@0.4.3"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/heck@0.5.0"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/hex@0.4.3"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/itoa@1.0.18"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "93859812ef1acb1ac4078d220de712708a6509b708dff095c708eb414e618cbe",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/js-sys@0.3.106"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/libc@0.2.191"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/linux-raw-sys@0.12.1"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/memchr@2.8.3"
        },
        "rule": {
          "namespace": "license",
          "id": "Unlicense OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/once_cell@1.21.4"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/once_cell_polyfill@1.70.2"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a0fc8e8d71ece792a231095f168ab0c7cffca251fcacce43289829e77fb75ef5",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/pearlite-syn@0.14.0"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "f9bf8d0cc7852f11cf6152dec7595b43e8a75d0f5fed01aefb19963f05a61094",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/pin-project-lite@0.2.17"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/pkcs8@0.10.2"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/ppv-lite86@0.2.21"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/proc-macro2@1.0.107"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/quote@1.0.47"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/r-efi@6.0.0"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rand@0.8.8"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rand_chacha@0.3.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rand_core@0.6.4"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rustc_version@0.4.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rustix@1.1.5"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "70f4a38d76116971c51011dab9ec757f6973bf8279d2ec62777f3f1bf9d0d9c4",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/rustversion@1.0.23"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/semver@1.0.28"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde@1.0.229"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde_core@1.0.229"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde_derive@1.0.229"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/serde_json@1.0.154"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/sha2@0.10.9"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/signature@2.2.0"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "803d1a04fde4297e52e15eafb9f7045b38466b7ac9de09d53b23a5b801788df3",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/slab@0.4.12"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/spki@0.7.3"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/strsim@0.11.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/subtle@2.6.1"
        },
        "rule": {
          "namespace": "license",
          "id": "BSD-3-Clause"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/syn@2.0.119"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/syn@3.0.9"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/tempfile@3.27.0"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/typenum@1.20.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/unicode-ident@1.0.27"
        },
        "rule": {
          "namespace": "license",
          "id": "(MIT OR Apache-2.0) AND Unicode-3.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/utf8parse@0.2.2"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "f7242a40ee73e10ece190b2216fb89d082f1503d7eedadcb5949eefcfec5c507",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/uuid@1.28.0"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/version_check@0.9.5"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT/Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "86e8295bb7e74e6094ed25146fb85276095476aedf328c258f22d7928a971e28",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen@0.2.129"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "a8540d02003fc3df4b8bc38b7fb3f9d162f939ac2ea1c4b4401bd727c55443f2",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen-macro@0.2.129"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "ae94b33243d55cba9685b0da91cf31941957149cbef3cfb8a8b3c47ec027124c",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen-macro-support@0.2.129"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "b649102b4e27d450d6253da4c54818d3ecc38316817fde3de4f3adf5177f1025",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/wasm-bindgen-shared@0.2.129"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/windows-link@0.2.1"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/windows-sys@0.61.2"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT OR Apache-2.0"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zerocopy@0.8.63"
        },
        "rule": {
          "namespace": "license",
          "id": "BSD-2-Clause OR Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zerocopy-derive@0.8.63"
        },
        "rule": {
          "namespace": "license",
          "id": "BSD-2-Clause OR Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zeroize@1.9.1"
        },
        "rule": {
          "namespace": "license",
          "id": "Apache-2.0 OR MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7",
        "class": "license",
        "subject": {
          "specimen_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
          "component_id": "pkg:cargo/zmij@1.0.23"
        },
        "rule": {
          "namespace": "license",
          "id": "MIT"
        },
        "state": "open",
        "evidence_refs": [
          "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c"
        ],
        "witness_tool_ref": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "first_observed_at": "2026-10-28T01:02:49.645169880Z"
      }
    ],
    "witnesses": [
      {
        "tool": "osv-scanner",
        "version": "2.7.0",
        "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b",
        "config_digest": "2c05dfbcac441e4f5d9fc803c18058296ddebc4d51a1171746a25bca6b51abdb",
        "invocation_digest": "e65b8610d3a7e49822362588c7c0ad8323cb68763e2f8f547b33779e60c165e5",
        "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
        "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
        "raw_output_digest": "54345d5194d238b6017d0f3181f392109ce35023cc6b4bdfa8c134943dcb578e",
        "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
        "limitations": [
          "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass"
        ],
        "evidence_class": "dependency_vulnerability",
        "observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "tool": "semgrep",
        "version": "1.181.0",
        "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391",
        "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009",
        "invocation_digest": "6d19a3070eeab77e2d607694f3a858d21fb646fecac277f4d4c2cbd79126a487",
        "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
        "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
        "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54",
        "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
        "limitations": [],
        "evidence_class": "static_analysis",
        "observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "tool": "gitleaks",
        "version": "8.30.1",
        "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
        "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f",
        "invocation_digest": "76a219f7fa172309f23e0ce0b82c04725354797f69f7b131c92b5f276fff7a12",
        "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
        "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
        "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570",
        "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
        "limitations": [],
        "evidence_class": "secret",
        "observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "tool": "syft",
        "version": "1.54.1",
        "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6",
        "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6",
        "invocation_digest": "eef337cabfa4ffc22335196eae78d92063e72fa4e51e2ec3d2d2f97b38301a80",
        "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
        "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
        "raw_output_digest": "db8845122bc81426a03e88dd43bf27c21af026409a592dbbc39c7b2f86b9d828",
        "normalized_evidence_digest": "f6ae973925e75cce9c0dae24ab0f52ca0eafa4dbd620784eedd92bede0093b53",
        "limitations": [],
        "evidence_class": "supply_chain",
        "observed_at": "2026-10-28T01:02:49.645169880Z"
      },
      {
        "tool": "dependency-manifest",
        "version": "1",
        "binary_digest": "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c",
        "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b",
        "invocation_digest": "eecf84121d1881c077d7ac91a9035cb43ce332e2fe23a8307107a23f0eea96c6",
        "input_subject_digest": "70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b",
        "environment_identity": "a4a5bf077e04f6aeb04a2ea1c0b0852414491d85daa6909080ad17cbf5f7f2e8",
        "raw_output_digest": "47177464b86eb544fc2aaf29d1db0351b338548f4175b1222e47a5c82ad0639c",
        "normalized_evidence_digest": "ea8109124d0dd53c66977b76d9ee4057543b5c3642413caec29cc951f316e164",
        "limitations": [
          "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts"
        ],
        "evidence_class": "license",
        "observed_at": "2026-10-28T01:02:49.645169880Z"
      }
    ],
    "vulnerability_snapshot": {
      "source_identity": "osv.dev",
      "snapshot_identity": "osv-dev-20261027-adac4ad4",
      "observed_at": "2026-10-27T09:28:19Z",
      "freshness_hours": 24
    },
    "exceptions": [],
    "open_findings": 0,
    "satisfied": true,
    "evaluated_at": "2026-10-28T01:03:00.975850857Z"
  },
  "standards": [],
  "exports": [
    {
      "format": "spdx-3.0",
      "digest": "b0d1a45bd3f26e73a0d907549a605ab07a7e846d4e2352eb94d798a0b7582a3d",
      "ref": "report-artifact:sbom:spdx-3.0",
      "content": "{\"@context\":{\"spdx\":\"https://spdx.org/rdf/terms#\"},\"spdx:comment\":\"dcf6a49b61c45e7ee3c625b856ac35f28801f5cf8ea73f71d37a67dc83d92a8f\",\"spdx:created\":\"2026-10-28T01:03:00.975850857+00:00\",\"spdx:creator\":[\"Tool: cargo/1.99.1\"],\"spdx:documentDescribes\":[\"SPDXRef-Root-70708a48\"],\"spdx:hasExtract\":[{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"urn:fg:specimen:70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b\",\"spdx:type\":\"FIRST_PARTY_IDENTIFIER\"}],\"spdx:id\":\"SPDXRef-Root-70708a48\",\"spdx:name\":\"falsegreen-specimen-70708a48\",\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"SoftwarePackage\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstream@1.0.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d\"}],\"spdx:id\":\"pkg:cargo/anstream@1.0.0\",\"spdx:name\":\"anstream\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle@1.0.14\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000\"}],\"spdx:id\":\"pkg:cargo/anstyle@1.0.14\",\"spdx:name\":\"anstyle\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.14\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle-parse@1.0.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e\"}],\"spdx:id\":\"pkg:cargo/anstyle-parse@1.0.0\",\"spdx:name\":\"anstyle-parse\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle-query@1.1.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc\"}],\"spdx:id\":\"pkg:cargo/anstyle-query@1.1.5\",\"spdx:name\":\"anstyle-query\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.1.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d\"}],\"spdx:id\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"spdx:name\":\"anstyle-wincon\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.0.11\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/base64ct@1.8.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06\"}],\"spdx:id\":\"pkg:cargo/base64ct@1.8.3\",\"spdx:name\":\"base64ct\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.8.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/bitflags@2.13.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06\"}],\"spdx:id\":\"pkg:cargo/bitflags@2.13.2\",\"spdx:name\":\"bitflags\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.13.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/block-buffer@0.10.4\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71\"}],\"spdx:id\":\"pkg:cargo/block-buffer@0.10.4\",\"spdx:name\":\"block-buffer\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.4\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/bumpalo@3.20.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649\"}],\"spdx:id\":\"pkg:cargo/bumpalo@3.20.3\",\"spdx:name\":\"bumpalo\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.20.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/cfg-if@1.0.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600\"}],\"spdx:id\":\"pkg:cargo/cfg-if@1.0.5\",\"spdx:name\":\"cfg-if\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap@4.6.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946\"}],\"spdx:id\":\"pkg:cargo/clap@4.6.7\",\"spdx:name\":\"clap\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.6.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap_builder@4.6.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d\"}],\"spdx:id\":\"pkg:cargo/clap_builder@4.6.7\",\"spdx:name\":\"clap_builder\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.6.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap_derive@4.6.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0\"}],\"spdx:id\":\"pkg:cargo/clap_derive@4.6.7\",\"spdx:name\":\"clap_derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.6.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap_lex@1.1.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486\"}],\"spdx:id\":\"pkg:cargo/clap_lex@1.1.1\",\"spdx:name\":\"clap_lex\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.1.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/colorchoice@1.0.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570\"}],\"spdx:id\":\"pkg:cargo/colorchoice@1.0.5\",\"spdx:name\":\"colorchoice\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/const-oid@0.9.6\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8\"}],\"spdx:id\":\"pkg:cargo/const-oid@0.9.6\",\"spdx:name\":\"const-oid\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.9.6\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/cpufeatures@0.2.17\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280\"}],\"spdx:id\":\"pkg:cargo/cpufeatures@0.2.17\",\"spdx:name\":\"cpufeatures\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.17\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/creusot-std@0.14.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-LGPL-2.1-or-later\",\"spdx:licenseId\":\"LGPL-2.1-or-later\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"b019630da7e585ab18eff475d7ea820474c3fc0cd05a57706facf37f67ab2705\"}],\"spdx:id\":\"pkg:cargo/creusot-std@0.14.0\",\"spdx:name\":\"creusot-std\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"b019630da7e585ab18eff475d7ea820474c3fc0cd05a57706facf37f67ab2705\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.14.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/creusot-std-proc@0.14.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-LGPL-2.1-or-later\",\"spdx:licenseId\":\"LGPL-2.1-or-later\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"5a21564d3da8f97ce00e03125d0c3f7c9faedfa68e5d182d88beb25c82c12d25\"}],\"spdx:id\":\"pkg:cargo/creusot-std-proc@0.14.0\",\"spdx:name\":\"creusot-std-proc\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"5a21564d3da8f97ce00e03125d0c3f7c9faedfa68e5d182d88beb25c82c12d25\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.14.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/crypto-common@0.1.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a\"}],\"spdx:id\":\"pkg:cargo/crypto-common@0.1.7\",\"spdx:name\":\"crypto-common\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.1.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-3-Clause\",\"spdx:licenseId\":\"BSD-3-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be\"}],\"spdx:id\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"spdx:name\":\"curve25519-dalek\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.1.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT/Apache-2.0\",\"spdx:licenseId\":\"MIT/Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3\"}],\"spdx:id\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"spdx:name\":\"curve25519-dalek-derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.1.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/der@0.7.10\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb\"}],\"spdx:id\":\"pkg:cargo/der@0.7.10\",\"spdx:name\":\"der\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.7.10\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/digest@0.10.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292\"}],\"spdx:id\":\"pkg:cargo/digest@0.10.7\",\"spdx:name\":\"digest\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/ed25519@2.2.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53\"}],\"spdx:id\":\"pkg:cargo/ed25519@2.2.3\",\"spdx:name\":\"ed25519\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.2.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-3-Clause\",\"spdx:licenseId\":\"BSD-3-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9\"}],\"spdx:id\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"spdx:name\":\"ed25519-dalek\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.2.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/errno@0.3.14\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb\"}],\"spdx:id\":\"pkg:cargo/errno@0.3.14\",\"spdx:name\":\"errno\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.14\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/fastrand@2.5.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223\"}],\"spdx:id\":\"pkg:cargo/fastrand@2.5.0\",\"spdx:name\":\"fastrand\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.5.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/fiat-crypto@0.2.9\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0 OR BSD-1-Clause\",\"spdx:licenseId\":\"MIT OR Apache-2.0 OR BSD-1-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d\"}],\"spdx:id\":\"pkg:cargo/fiat-crypto@0.2.9\",\"spdx:name\":\"fiat-crypto\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.9\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/futures-core@0.3.34\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e\"}],\"spdx:id\":\"pkg:cargo/futures-core@0.3.34\",\"spdx:name\":\"futures-core\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.34\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/futures-task@0.3.34\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd\"}],\"spdx:id\":\"pkg:cargo/futures-task@0.3.34\",\"spdx:name\":\"futures-task\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.34\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/futures-util@0.3.34\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc\"}],\"spdx:id\":\"pkg:cargo/futures-util@0.3.34\",\"spdx:name\":\"futures-util\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.34\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/generic-array@0.14.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a\"}],\"spdx:id\":\"pkg:cargo/generic-array@0.14.7\",\"spdx:name\":\"generic-array\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.14.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/getrandom@0.2.17\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0\"}],\"spdx:id\":\"pkg:cargo/getrandom@0.2.17\",\"spdx:name\":\"getrandom\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.17\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/getrandom@0.4.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099\"}],\"spdx:id\":\"pkg:cargo/getrandom@0.4.3\",\"spdx:name\":\"getrandom\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/heck@0.5.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea\"}],\"spdx:id\":\"pkg:cargo/heck@0.5.0\",\"spdx:name\":\"heck\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.5.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/hex@0.4.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70\"}],\"spdx:id\":\"pkg:cargo/hex@0.4.3\",\"spdx:name\":\"hex\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695\"}],\"spdx:id\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"spdx:name\":\"is_terminal_polyfill\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.70.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/itoa@1.0.18\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682\"}],\"spdx:id\":\"pkg:cargo/itoa@1.0.18\",\"spdx:name\":\"itoa\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.18\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/js-sys@0.3.106\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"7883d941dae510fb2d978fc3fe018c71c9e2892fd38854de3e8b92c2e5ad9cc5\"}],\"spdx:id\":\"pkg:cargo/js-sys@0.3.106\",\"spdx:name\":\"js-sys\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"7883d941dae510fb2d978fc3fe018c71c9e2892fd38854de3e8b92c2e5ad9cc5\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.106\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/libc@0.2.191\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a\"}],\"spdx:id\":\"pkg:cargo/libc@0.2.191\",\"spdx:name\":\"libc\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.191\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53\"}],\"spdx:id\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"spdx:name\":\"linux-raw-sys\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.12.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/memchr@2.8.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Unlicense OR MIT\",\"spdx:licenseId\":\"Unlicense OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98\"}],\"spdx:id\":\"pkg:cargo/memchr@2.8.3\",\"spdx:name\":\"memchr\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.8.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/once_cell@1.21.4\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50\"}],\"spdx:id\":\"pkg:cargo/once_cell@1.21.4\",\"spdx:name\":\"once_cell\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.21.4\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe\"}],\"spdx:id\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"spdx:name\":\"once_cell_polyfill\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.70.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/pearlite-syn@0.14.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e0cada22bee420c97f91bd98f0e1effdd6ef5ab219df0561f35144dcb504ebfd\"}],\"spdx:id\":\"pkg:cargo/pearlite-syn@0.14.0\",\"spdx:name\":\"pearlite-syn\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e0cada22bee420c97f91bd98f0e1effdd6ef5ab219df0561f35144dcb504ebfd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.14.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/pin-project-lite@0.2.17\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd\"}],\"spdx:id\":\"pkg:cargo/pin-project-lite@0.2.17\",\"spdx:name\":\"pin-project-lite\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.17\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/pkcs8@0.10.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7\"}],\"spdx:id\":\"pkg:cargo/pkcs8@0.10.2\",\"spdx:name\":\"pkcs8\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/ppv-lite86@0.2.21\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9\"}],\"spdx:id\":\"pkg:cargo/ppv-lite86@0.2.21\",\"spdx:name\":\"ppv-lite86\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.21\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/proc-macro2@1.0.107\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9\"}],\"spdx:id\":\"pkg:cargo/proc-macro2@1.0.107\",\"spdx:name\":\"proc-macro2\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.107\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/quote@1.0.47\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001\"}],\"spdx:id\":\"pkg:cargo/quote@1.0.47\",\"spdx:name\":\"quote\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.47\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/r-efi@6.0.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0 OR LGPL-2.1-or-later\",\"spdx:licenseId\":\"MIT OR Apache-2.0 OR LGPL-2.1-or-later\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf\"}],\"spdx:id\":\"pkg:cargo/r-efi@6.0.0\",\"spdx:name\":\"r-efi\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"6.0.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rand@0.8.8\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c\"}],\"spdx:id\":\"pkg:cargo/rand@0.8.8\",\"spdx:name\":\"rand\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.8.8\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rand_chacha@0.3.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88\"}],\"spdx:id\":\"pkg:cargo/rand_chacha@0.3.1\",\"spdx:name\":\"rand_chacha\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rand_core@0.6.4\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c\"}],\"spdx:id\":\"pkg:cargo/rand_core@0.6.4\",\"spdx:name\":\"rand_core\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.6.4\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rustc_version@0.4.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92\"}],\"spdx:id\":\"pkg:cargo/rustc_version@0.4.1\",\"spdx:name\":\"rustc_version\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rustix@1.1.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d\"}],\"spdx:id\":\"pkg:cargo/rustix@1.1.5\",\"spdx:name\":\"rustix\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.1.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rustversion@1.0.23\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f\"}],\"spdx:id\":\"pkg:cargo/rustversion@1.0.23\",\"spdx:name\":\"rustversion\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.23\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/semver@1.0.28\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd\"}],\"spdx:id\":\"pkg:cargo/semver@1.0.28\",\"spdx:name\":\"semver\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.28\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde@1.0.229\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba\"}],\"spdx:id\":\"pkg:cargo/serde@1.0.229\",\"spdx:name\":\"serde\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.229\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde_core@1.0.229\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48\"}],\"spdx:id\":\"pkg:cargo/serde_core@1.0.229\",\"spdx:name\":\"serde_core\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.229\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde_derive@1.0.229\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348\"}],\"spdx:id\":\"pkg:cargo/serde_derive@1.0.229\",\"spdx:name\":\"serde_derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.229\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde_json@1.0.154\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6\"}],\"spdx:id\":\"pkg:cargo/serde_json@1.0.154\",\"spdx:name\":\"serde_json\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.154\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/sha2@0.10.9\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283\"}],\"spdx:id\":\"pkg:cargo/sha2@0.10.9\",\"spdx:name\":\"sha2\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.9\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/signature@2.2.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de\"}],\"spdx:id\":\"pkg:cargo/signature@2.2.0\",\"spdx:name\":\"signature\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.2.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/slab@0.4.12\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5\"}],\"spdx:id\":\"pkg:cargo/slab@0.4.12\",\"spdx:name\":\"slab\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.12\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/spki@0.7.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d\"}],\"spdx:id\":\"pkg:cargo/spki@0.7.3\",\"spdx:name\":\"spki\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.7.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/strsim@0.11.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f\"}],\"spdx:id\":\"pkg:cargo/strsim@0.11.1\",\"spdx:name\":\"strsim\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.11.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/subtle@2.6.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-3-Clause\",\"spdx:licenseId\":\"BSD-3-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292\"}],\"spdx:id\":\"pkg:cargo/subtle@2.6.1\",\"spdx:name\":\"subtle\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.6.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/syn@2.0.119\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297\"}],\"spdx:id\":\"pkg:cargo/syn@2.0.119\",\"spdx:name\":\"syn\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.0.119\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/syn@3.0.9\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b\"}],\"spdx:id\":\"pkg:cargo/syn@3.0.9\",\"spdx:name\":\"syn\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.0.9\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/tempfile@3.27.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd\"}],\"spdx:id\":\"pkg:cargo/tempfile@3.27.0\",\"spdx:name\":\"tempfile\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.27.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/typenum@1.20.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20\"}],\"spdx:id\":\"pkg:cargo/typenum@1.20.1\",\"spdx:name\":\"typenum\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.20.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/unicode-ident@1.0.27\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-(MIT OR Apache-2.0) AND Unicode-3.0\",\"spdx:licenseId\":\"(MIT OR Apache-2.0) AND Unicode-3.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563\"}],\"spdx:id\":\"pkg:cargo/unicode-ident@1.0.27\",\"spdx:name\":\"unicode-ident\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.27\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/utf8parse@0.2.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821\"}],\"spdx:id\":\"pkg:cargo/utf8parse@0.2.2\",\"spdx:name\":\"utf8parse\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/uuid@1.28.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606\"}],\"spdx:id\":\"pkg:cargo/uuid@1.28.0\",\"spdx:name\":\"uuid\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.28.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/version_check@0.9.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT/Apache-2.0\",\"spdx:licenseId\":\"MIT/Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a\"}],\"spdx:id\":\"pkg:cargo/version_check@0.9.5\",\"spdx:name\":\"version_check\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.9.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b\"}],\"spdx:id\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"spdx:name\":\"wasi\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.11.1+wasi-snapshot-preview1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/wasm-bindgen@0.2.129\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"9bb54f33acc68fd454578d9820b0bde1a1a3d17aa17bb7b6595806d02886d409\"}],\"spdx:id\":\"pkg:cargo/wasm-bindgen@0.2.129\",\"spdx:name\":\"wasm-bindgen\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"9bb54f33acc68fd454578d9820b0bde1a1a3d17aa17bb7b6595806d02886d409\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.129\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/wasm-bindgen-macro@0.2.129\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"2e29d0c35b16e224a7eeb5cd2d25e3e1968fbd65604117b44d3b789d00ee8535\"}],\"spdx:id\":\"pkg:cargo/wasm-bindgen-macro@0.2.129\",\"spdx:name\":\"wasm-bindgen-macro\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"2e29d0c35b16e224a7eeb5cd2d25e3e1968fbd65604117b44d3b789d00ee8535\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.129\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/wasm-bindgen-macro-support@0.2.129\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"6f501a8bc3719dba86ef8ae4728879c08001bea749eb1333ac5b91e040e2a6b7\"}],\"spdx:id\":\"pkg:cargo/wasm-bindgen-macro-support@0.2.129\",\"spdx:name\":\"wasm-bindgen-macro-support\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"6f501a8bc3719dba86ef8ae4728879c08001bea749eb1333ac5b91e040e2a6b7\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.129\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/wasm-bindgen-shared@0.2.129\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"23f0c9c52aa7cd7d77769a4cfe2a9adb1b331f489a41d912ce14513d5ab995c6\"}],\"spdx:id\":\"pkg:cargo/wasm-bindgen-shared@0.2.129\",\"spdx:name\":\"wasm-bindgen-shared\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"23f0c9c52aa7cd7d77769a4cfe2a9adb1b331f489a41d912ce14513d5ab995c6\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.129\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/windows-link@0.2.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5\"}],\"spdx:id\":\"pkg:cargo/windows-link@0.2.1\",\"spdx:name\":\"windows-link\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/windows-sys@0.61.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc\"}],\"spdx:id\":\"pkg:cargo/windows-sys@0.61.2\",\"spdx:name\":\"windows-sys\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.61.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zerocopy@0.8.63\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8\"}],\"spdx:id\":\"pkg:cargo/zerocopy@0.8.63\",\"spdx:name\":\"zerocopy\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.8.63\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f\"}],\"spdx:id\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"spdx:name\":\"zerocopy-derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.8.63\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zeroize@1.9.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879\"}],\"spdx:id\":\"pkg:cargo/zeroize@1.9.1\",\"spdx:name\":\"zeroize\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.9.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zmij@1.0.23\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b\"}],\"spdx:id\":\"pkg:cargo/zmij@1.0.23\",\"spdx:name\":\"zmij\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.23\"}],\"spdx:name\":\"falsegreen-sbom-70708a48\",\"spdx:relationship\":[{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/anstream@1.0.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle@1.0.14\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle-parse@1.0.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle-query@1.1.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle-wincon@3.0.11\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/base64ct@1.8.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/bitflags@2.13.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/block-buffer@0.10.4\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/bumpalo@3.20.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/cfg-if@1.0.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/clap@4.6.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/clap_builder@4.6.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/clap_derive@4.6.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/clap_lex@1.1.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/colorchoice@1.0.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/const-oid@0.9.6\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/cpufeatures@0.2.17\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/creusot-std@0.14.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/creusot-std-proc@0.14.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/crypto-common@0.1.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/curve25519-dalek@4.1.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/der@0.7.10\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/digest@0.10.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/ed25519@2.2.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/ed25519-dalek@2.2.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/errno@0.3.14\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/fastrand@2.5.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/fiat-crypto@0.2.9\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/futures-core@0.3.34\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/futures-task@0.3.34\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/futures-util@0.3.34\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/generic-array@0.14.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/getrandom@0.2.17\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/getrandom@0.4.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/heck@0.5.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/hex@0.4.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/is_terminal_polyfill@1.70.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/itoa@1.0.18\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/js-sys@0.3.106\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/libc@0.2.191\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/linux-raw-sys@0.12.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/memchr@2.8.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/once_cell@1.21.4\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/once_cell_polyfill@1.70.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/pearlite-syn@0.14.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/pin-project-lite@0.2.17\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/pkcs8@0.10.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/ppv-lite86@0.2.21\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/proc-macro2@1.0.107\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/quote@1.0.47\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/r-efi@6.0.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/rand@0.8.8\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/rand_chacha@0.3.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/rand_core@0.6.4\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/rustc_version@0.4.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/rustix@1.1.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/rustversion@1.0.23\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/semver@1.0.28\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/serde@1.0.229\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/serde_core@1.0.229\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/serde_derive@1.0.229\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/serde_json@1.0.154\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/sha2@0.10.9\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/signature@2.2.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/slab@0.4.12\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/spki@0.7.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/strsim@0.11.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/subtle@2.6.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/syn@2.0.119\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/syn@3.0.9\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/tempfile@3.27.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/typenum@1.20.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/unicode-ident@1.0.27\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/utf8parse@0.2.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/uuid@1.28.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/version_check@0.9.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/wasm-bindgen@0.2.129\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/wasm-bindgen-macro@0.2.129\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/wasm-bindgen-macro-support@0.2.129\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/wasm-bindgen-shared@0.2.129\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/windows-link@0.2.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/windows-sys@0.61.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/zerocopy@0.8.63\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/zerocopy-derive@0.8.63\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/zeroize@1.9.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-70708a48\",\"spdx:spdxElement2\":\"pkg:cargo/zmij@1.0.23\"}],\"spdx:spdxVersion\":\"SPDX-3.0\",\"spdx:specVersion\":\"3.0\"}"
    },
    {
      "format": "cyclonedx-1.7",
      "digest": "8a23b906c0d49c0932df91526ca4734e1a40ba84ca8d1ff29b88faba692394ec",
      "ref": "report-artifact:sbom:cyclonedx-1.7",
      "content": "{\"bomFormat\":\"CycloneDX\",\"components\":[{\"bom-ref\":\"pkg:cargo/anstream@1.0.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstream\",\"purl\":\"pkg:cargo/anstream@1.0.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.0\"},{\"bom-ref\":\"pkg:cargo/anstyle@1.0.14\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle\",\"purl\":\"pkg:cargo/anstyle@1.0.14\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.14\"},{\"bom-ref\":\"pkg:cargo/anstyle-parse@1.0.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle-parse\",\"purl\":\"pkg:cargo/anstyle-parse@1.0.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.0\"},{\"bom-ref\":\"pkg:cargo/anstyle-query@1.1.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle-query\",\"purl\":\"pkg:cargo/anstyle-query@1.1.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.1.5\"},{\"bom-ref\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle-wincon\",\"purl\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.0.11\"},{\"bom-ref\":\"pkg:cargo/base64ct@1.8.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"base64ct\",\"purl\":\"pkg:cargo/base64ct@1.8.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.8.3\"},{\"bom-ref\":\"pkg:cargo/bitflags@2.13.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"bitflags\",\"purl\":\"pkg:cargo/bitflags@2.13.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.13.2\"},{\"bom-ref\":\"pkg:cargo/block-buffer@0.10.4\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"block-buffer\",\"purl\":\"pkg:cargo/block-buffer@0.10.4\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.4\"},{\"bom-ref\":\"pkg:cargo/bumpalo@3.20.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"bumpalo\",\"purl\":\"pkg:cargo/bumpalo@3.20.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.20.3\"},{\"bom-ref\":\"pkg:cargo/cfg-if@1.0.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"cfg-if\",\"purl\":\"pkg:cargo/cfg-if@1.0.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.5\"},{\"bom-ref\":\"pkg:cargo/clap@4.6.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap\",\"purl\":\"pkg:cargo/clap@4.6.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.6.7\"},{\"bom-ref\":\"pkg:cargo/clap_builder@4.6.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap_builder\",\"purl\":\"pkg:cargo/clap_builder@4.6.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.6.7\"},{\"bom-ref\":\"pkg:cargo/clap_derive@4.6.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap_derive\",\"purl\":\"pkg:cargo/clap_derive@4.6.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.6.7\"},{\"bom-ref\":\"pkg:cargo/clap_lex@1.1.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap_lex\",\"purl\":\"pkg:cargo/clap_lex@1.1.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.1.1\"},{\"bom-ref\":\"pkg:cargo/colorchoice@1.0.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"colorchoice\",\"purl\":\"pkg:cargo/colorchoice@1.0.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.5\"},{\"bom-ref\":\"pkg:cargo/const-oid@0.9.6\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"const-oid\",\"purl\":\"pkg:cargo/const-oid@0.9.6\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.9.6\"},{\"bom-ref\":\"pkg:cargo/cpufeatures@0.2.17\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"cpufeatures\",\"purl\":\"pkg:cargo/cpufeatures@0.2.17\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.17\"},{\"bom-ref\":\"pkg:cargo/creusot-std@0.14.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"b019630da7e585ab18eff475d7ea820474c3fc0cd05a57706facf37f67ab2705\"}],\"licenses\":[{\"license\":{\"id\":\"LGPL-2.1-or-later\"}}],\"name\":\"creusot-std\",\"purl\":\"pkg:cargo/creusot-std@0.14.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.14.0\"},{\"bom-ref\":\"pkg:cargo/creusot-std-proc@0.14.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"5a21564d3da8f97ce00e03125d0c3f7c9faedfa68e5d182d88beb25c82c12d25\"}],\"licenses\":[{\"license\":{\"id\":\"LGPL-2.1-or-later\"}}],\"name\":\"creusot-std-proc\",\"purl\":\"pkg:cargo/creusot-std-proc@0.14.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.14.0\"},{\"bom-ref\":\"pkg:cargo/crypto-common@0.1.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"crypto-common\",\"purl\":\"pkg:cargo/crypto-common@0.1.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.1.7\"},{\"bom-ref\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-3-Clause\"}}],\"name\":\"curve25519-dalek\",\"purl\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.1.3\"},{\"bom-ref\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3\"}],\"licenses\":[{\"license\":{\"id\":\"MIT/Apache-2.0\"}}],\"name\":\"curve25519-dalek-derive\",\"purl\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.1.1\"},{\"bom-ref\":\"pkg:cargo/der@0.7.10\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"der\",\"purl\":\"pkg:cargo/der@0.7.10\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.7.10\"},{\"bom-ref\":\"pkg:cargo/digest@0.10.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"digest\",\"purl\":\"pkg:cargo/digest@0.10.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.7\"},{\"bom-ref\":\"pkg:cargo/ed25519@2.2.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"ed25519\",\"purl\":\"pkg:cargo/ed25519@2.2.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.2.3\"},{\"bom-ref\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-3-Clause\"}}],\"name\":\"ed25519-dalek\",\"purl\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.2.0\"},{\"bom-ref\":\"pkg:cargo/errno@0.3.14\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"errno\",\"purl\":\"pkg:cargo/errno@0.3.14\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.14\"},{\"bom-ref\":\"pkg:cargo/fastrand@2.5.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"fastrand\",\"purl\":\"pkg:cargo/fastrand@2.5.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.5.0\"},{\"bom-ref\":\"pkg:cargo/fiat-crypto@0.2.9\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0 OR BSD-1-Clause\"}}],\"name\":\"fiat-crypto\",\"purl\":\"pkg:cargo/fiat-crypto@0.2.9\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.9\"},{\"bom-ref\":\"pkg:cargo/futures-core@0.3.34\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"futures-core\",\"purl\":\"pkg:cargo/futures-core@0.3.34\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.34\"},{\"bom-ref\":\"pkg:cargo/futures-task@0.3.34\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"futures-task\",\"purl\":\"pkg:cargo/futures-task@0.3.34\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.34\"},{\"bom-ref\":\"pkg:cargo/futures-util@0.3.34\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"futures-util\",\"purl\":\"pkg:cargo/futures-util@0.3.34\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.34\"},{\"bom-ref\":\"pkg:cargo/generic-array@0.14.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"generic-array\",\"purl\":\"pkg:cargo/generic-array@0.14.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.14.7\"},{\"bom-ref\":\"pkg:cargo/getrandom@0.2.17\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"getrandom\",\"purl\":\"pkg:cargo/getrandom@0.2.17\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.17\"},{\"bom-ref\":\"pkg:cargo/getrandom@0.4.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"getrandom\",\"purl\":\"pkg:cargo/getrandom@0.4.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.3\"},{\"bom-ref\":\"pkg:cargo/heck@0.5.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"heck\",\"purl\":\"pkg:cargo/heck@0.5.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.5.0\"},{\"bom-ref\":\"pkg:cargo/hex@0.4.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"hex\",\"purl\":\"pkg:cargo/hex@0.4.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.3\"},{\"bom-ref\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"is_terminal_polyfill\",\"purl\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.70.2\"},{\"bom-ref\":\"pkg:cargo/itoa@1.0.18\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"itoa\",\"purl\":\"pkg:cargo/itoa@1.0.18\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.18\"},{\"bom-ref\":\"pkg:cargo/js-sys@0.3.106\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"7883d941dae510fb2d978fc3fe018c71c9e2892fd38854de3e8b92c2e5ad9cc5\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"js-sys\",\"purl\":\"pkg:cargo/js-sys@0.3.106\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.106\"},{\"bom-ref\":\"pkg:cargo/libc@0.2.191\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"libc\",\"purl\":\"pkg:cargo/libc@0.2.191\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.191\"},{\"bom-ref\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\"}}],\"name\":\"linux-raw-sys\",\"purl\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.12.1\"},{\"bom-ref\":\"pkg:cargo/memchr@2.8.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98\"}],\"licenses\":[{\"license\":{\"id\":\"Unlicense OR MIT\"}}],\"name\":\"memchr\",\"purl\":\"pkg:cargo/memchr@2.8.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.8.3\"},{\"bom-ref\":\"pkg:cargo/once_cell@1.21.4\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"once_cell\",\"purl\":\"pkg:cargo/once_cell@1.21.4\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.21.4\"},{\"bom-ref\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"once_cell_polyfill\",\"purl\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.70.2\"},{\"bom-ref\":\"pkg:cargo/pearlite-syn@0.14.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e0cada22bee420c97f91bd98f0e1effdd6ef5ab219df0561f35144dcb504ebfd\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"pearlite-syn\",\"purl\":\"pkg:cargo/pearlite-syn@0.14.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.14.0\"},{\"bom-ref\":\"pkg:cargo/pin-project-lite@0.2.17\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"pin-project-lite\",\"purl\":\"pkg:cargo/pin-project-lite@0.2.17\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.17\"},{\"bom-ref\":\"pkg:cargo/pkcs8@0.10.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"pkcs8\",\"purl\":\"pkg:cargo/pkcs8@0.10.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.2\"},{\"bom-ref\":\"pkg:cargo/ppv-lite86@0.2.21\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"ppv-lite86\",\"purl\":\"pkg:cargo/ppv-lite86@0.2.21\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.21\"},{\"bom-ref\":\"pkg:cargo/proc-macro2@1.0.107\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"proc-macro2\",\"purl\":\"pkg:cargo/proc-macro2@1.0.107\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.107\"},{\"bom-ref\":\"pkg:cargo/quote@1.0.47\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"quote\",\"purl\":\"pkg:cargo/quote@1.0.47\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.47\"},{\"bom-ref\":\"pkg:cargo/r-efi@6.0.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0 OR LGPL-2.1-or-later\"}}],\"name\":\"r-efi\",\"purl\":\"pkg:cargo/r-efi@6.0.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"6.0.0\"},{\"bom-ref\":\"pkg:cargo/rand@0.8.8\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rand\",\"purl\":\"pkg:cargo/rand@0.8.8\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.8.8\"},{\"bom-ref\":\"pkg:cargo/rand_chacha@0.3.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rand_chacha\",\"purl\":\"pkg:cargo/rand_chacha@0.3.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.1\"},{\"bom-ref\":\"pkg:cargo/rand_core@0.6.4\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rand_core\",\"purl\":\"pkg:cargo/rand_core@0.6.4\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.6.4\"},{\"bom-ref\":\"pkg:cargo/rustc_version@0.4.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rustc_version\",\"purl\":\"pkg:cargo/rustc_version@0.4.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.1\"},{\"bom-ref\":\"pkg:cargo/rustix@1.1.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\"}}],\"name\":\"rustix\",\"purl\":\"pkg:cargo/rustix@1.1.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.1.5\"},{\"bom-ref\":\"pkg:cargo/rustversion@1.0.23\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rustversion\",\"purl\":\"pkg:cargo/rustversion@1.0.23\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.23\"},{\"bom-ref\":\"pkg:cargo/semver@1.0.28\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"semver\",\"purl\":\"pkg:cargo/semver@1.0.28\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.28\"},{\"bom-ref\":\"pkg:cargo/serde@1.0.229\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde\",\"purl\":\"pkg:cargo/serde@1.0.229\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.229\"},{\"bom-ref\":\"pkg:cargo/serde_core@1.0.229\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde_core\",\"purl\":\"pkg:cargo/serde_core@1.0.229\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.229\"},{\"bom-ref\":\"pkg:cargo/serde_derive@1.0.229\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde_derive\",\"purl\":\"pkg:cargo/serde_derive@1.0.229\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.229\"},{\"bom-ref\":\"pkg:cargo/serde_json@1.0.154\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde_json\",\"purl\":\"pkg:cargo/serde_json@1.0.154\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.154\"},{\"bom-ref\":\"pkg:cargo/sha2@0.10.9\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"sha2\",\"purl\":\"pkg:cargo/sha2@0.10.9\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.9\"},{\"bom-ref\":\"pkg:cargo/signature@2.2.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"signature\",\"purl\":\"pkg:cargo/signature@2.2.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.2.0\"},{\"bom-ref\":\"pkg:cargo/slab@0.4.12\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"slab\",\"purl\":\"pkg:cargo/slab@0.4.12\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.12\"},{\"bom-ref\":\"pkg:cargo/spki@0.7.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"spki\",\"purl\":\"pkg:cargo/spki@0.7.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.7.3\"},{\"bom-ref\":\"pkg:cargo/strsim@0.11.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"strsim\",\"purl\":\"pkg:cargo/strsim@0.11.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.11.1\"},{\"bom-ref\":\"pkg:cargo/subtle@2.6.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-3-Clause\"}}],\"name\":\"subtle\",\"purl\":\"pkg:cargo/subtle@2.6.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.6.1\"},{\"bom-ref\":\"pkg:cargo/syn@2.0.119\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"syn\",\"purl\":\"pkg:cargo/syn@2.0.119\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.0.119\"},{\"bom-ref\":\"pkg:cargo/syn@3.0.9\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"syn\",\"purl\":\"pkg:cargo/syn@3.0.9\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.0.9\"},{\"bom-ref\":\"pkg:cargo/tempfile@3.27.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"tempfile\",\"purl\":\"pkg:cargo/tempfile@3.27.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.27.0\"},{\"bom-ref\":\"pkg:cargo/typenum@1.20.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"typenum\",\"purl\":\"pkg:cargo/typenum@1.20.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.20.1\"},{\"bom-ref\":\"pkg:cargo/unicode-ident@1.0.27\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563\"}],\"licenses\":[{\"license\":{\"id\":\"(MIT OR Apache-2.0) AND Unicode-3.0\"}}],\"name\":\"unicode-ident\",\"purl\":\"pkg:cargo/unicode-ident@1.0.27\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.27\"},{\"bom-ref\":\"pkg:cargo/utf8parse@0.2.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"utf8parse\",\"purl\":\"pkg:cargo/utf8parse@0.2.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.2\"},{\"bom-ref\":\"pkg:cargo/uuid@1.28.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"uuid\",\"purl\":\"pkg:cargo/uuid@1.28.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.28.0\"},{\"bom-ref\":\"pkg:cargo/version_check@0.9.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT/Apache-2.0\"}}],\"name\":\"version_check\",\"purl\":\"pkg:cargo/version_check@0.9.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.9.5\"},{\"bom-ref\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\"}}],\"name\":\"wasi\",\"purl\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.11.1+wasi-snapshot-preview1\"},{\"bom-ref\":\"pkg:cargo/wasm-bindgen@0.2.129\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"9bb54f33acc68fd454578d9820b0bde1a1a3d17aa17bb7b6595806d02886d409\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"wasm-bindgen\",\"purl\":\"pkg:cargo/wasm-bindgen@0.2.129\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.129\"},{\"bom-ref\":\"pkg:cargo/wasm-bindgen-macro@0.2.129\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"2e29d0c35b16e224a7eeb5cd2d25e3e1968fbd65604117b44d3b789d00ee8535\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"wasm-bindgen-macro\",\"purl\":\"pkg:cargo/wasm-bindgen-macro@0.2.129\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.129\"},{\"bom-ref\":\"pkg:cargo/wasm-bindgen-macro-support@0.2.129\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"6f501a8bc3719dba86ef8ae4728879c08001bea749eb1333ac5b91e040e2a6b7\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"wasm-bindgen-macro-support\",\"purl\":\"pkg:cargo/wasm-bindgen-macro-support@0.2.129\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.129\"},{\"bom-ref\":\"pkg:cargo/wasm-bindgen-shared@0.2.129\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"23f0c9c52aa7cd7d77769a4cfe2a9adb1b331f489a41d912ce14513d5ab995c6\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"wasm-bindgen-shared\",\"purl\":\"pkg:cargo/wasm-bindgen-shared@0.2.129\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.129\"},{\"bom-ref\":\"pkg:cargo/windows-link@0.2.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"windows-link\",\"purl\":\"pkg:cargo/windows-link@0.2.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.1\"},{\"bom-ref\":\"pkg:cargo/windows-sys@0.61.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"windows-sys\",\"purl\":\"pkg:cargo/windows-sys@0.61.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.61.2\"},{\"bom-ref\":\"pkg:cargo/zerocopy@0.8.63\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-2-Clause OR Apache-2.0 OR MIT\"}}],\"name\":\"zerocopy\",\"purl\":\"pkg:cargo/zerocopy@0.8.63\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.8.63\"},{\"bom-ref\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-2-Clause OR Apache-2.0 OR MIT\"}}],\"name\":\"zerocopy-derive\",\"purl\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.8.63\"},{\"bom-ref\":\"pkg:cargo/zeroize@1.9.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"zeroize\",\"purl\":\"pkg:cargo/zeroize@1.9.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.9.1\"},{\"bom-ref\":\"pkg:cargo/zmij@1.0.23\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"zmij\",\"purl\":\"pkg:cargo/zmij@1.0.23\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.23\"}],\"dependencies\":[{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstream@1.0.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle@1.0.14\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle-parse@1.0.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle-query@1.1.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle-wincon@3.0.11\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/base64ct@1.8.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/bitflags@2.13.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/block-buffer@0.10.4\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/bumpalo@3.20.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/cfg-if@1.0.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap@4.6.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap_builder@4.6.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap_derive@4.6.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap_lex@1.1.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/colorchoice@1.0.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/const-oid@0.9.6\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/cpufeatures@0.2.17\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/creusot-std@0.14.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/creusot-std-proc@0.14.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/crypto-common@0.1.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/curve25519-dalek@4.1.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/der@0.7.10\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/digest@0.10.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/ed25519@2.2.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/ed25519-dalek@2.2.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/errno@0.3.14\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/fastrand@2.5.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/fiat-crypto@0.2.9\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/futures-core@0.3.34\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/futures-task@0.3.34\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/futures-util@0.3.34\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/generic-array@0.14.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/getrandom@0.2.17\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/getrandom@0.4.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/heck@0.5.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/hex@0.4.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/is_terminal_polyfill@1.70.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/itoa@1.0.18\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/js-sys@0.3.106\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/libc@0.2.191\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/linux-raw-sys@0.12.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/memchr@2.8.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/once_cell@1.21.4\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/once_cell_polyfill@1.70.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/pearlite-syn@0.14.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/pin-project-lite@0.2.17\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/pkcs8@0.10.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/ppv-lite86@0.2.21\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/proc-macro2@1.0.107\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/quote@1.0.47\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/r-efi@6.0.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rand@0.8.8\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rand_chacha@0.3.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rand_core@0.6.4\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rustc_version@0.4.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rustix@1.1.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rustversion@1.0.23\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/semver@1.0.28\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde@1.0.229\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde_core@1.0.229\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde_derive@1.0.229\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde_json@1.0.154\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/sha2@0.10.9\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/signature@2.2.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/slab@0.4.12\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/spki@0.7.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/strsim@0.11.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/subtle@2.6.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/syn@2.0.119\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/syn@3.0.9\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/tempfile@3.27.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/typenum@1.20.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/unicode-ident@1.0.27\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/utf8parse@0.2.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/uuid@1.28.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/version_check@0.9.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/wasm-bindgen@0.2.129\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/wasm-bindgen-macro@0.2.129\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/wasm-bindgen-macro-support@0.2.129\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/wasm-bindgen-shared@0.2.129\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/windows-link@0.2.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/windows-sys@0.61.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zerocopy@0.8.63\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zerocopy-derive@0.8.63\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zeroize@1.9.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zmij@1.0.23\"}],\"metadata\":{\"component\":{\"bom-ref\":\"root\",\"name\":\"falsegreen-specimen-70708a48\",\"type\":\"application\"},\"timestamp\":\"2026-10-28T01:03:00.975850857+00:00\",\"tools\":[{\"name\":\"cargo\",\"vendor\":\"FalseGreen\",\"version\":\"1.99.1\"}]},\"properties\":[{\"name\":\"falsegreen:projectionDigest\",\"value\":\"ec86a71f8aa1936c25ab01dfca53ff4ff8842273eabcab2503b1d120ed2fd287\"}],\"serialNumber\":\"urn:uuid:f6e8c850-079c-6886-e4b3-b49025de655c\",\"specVersion\":\"1.7\",\"version\":1}"
    },
    {
      "format": "cyclonedx-1.7-vex",
      "digest": "bcb2993e5908166bc0f99215bf7e14bf48ad76f3081437da4e42b9f19fd8ae7b",
      "ref": "report-artifact:vex:cyclonedx-1.7-vex",
      "content": "{\"bomFormat\":\"CycloneDX\",\"metadata\":{\"component\":{\"bom-ref\":\"specimen\",\"hashes\":[{\"alg\":\"SHA-256\",\"content\":\"70708a48e95a2a0f015e5eec37af6d1498b0c9feade57d0e39c6dd9de4529b4b\"}],\"name\":\"falsegreen-job-specimen\",\"type\":\"application\"},\"properties\":[{\"name\":\"falsegreen:vex:vulnerabilitySnapshot\",\"value\":\"osv-dev-20261027-adac4ad4 observed_at=2026-10-27T09:28:19Z\"}],\"timestamp\":\"2026-10-28T01:03:00Z\",\"tools\":{\"components\":[{\"name\":\"falsegreen-server\",\"type\":\"application\",\"vendor\":\"FalseGreen\",\"version\":\"0.16.0\"}]}},\"serialNumber\":\"urn:uuid:faa89142-6cc9-9266-407a-799ec57bf707\",\"specVersion\":\"1.7\",\"version\":1,\"vulnerabilities\":[]}"
    }
  ],
  "signed_at": "2026-10-28T01:03:00.975850857Z",
  "digest": "71857148951d29c6d07e8b6d38a8dfe8c3b4b9e672957e7ef258d717891994c3",
  "signature": "83c58222cd3193cfc90a05b2ef379e18fef8e727eaf84607e6f56acb0475db11",
  "key_id": "fg-report-9fc1a2c5-134c-4ca1-a0f2-56b2d1bcde67-20261018-1",
  "public_key": "ie4eQdY1lt7O5aCCQzO+/192Yzc4pLQsGyVNqSKtlmA=",
  "signature_ed25519": "q8nHMzGUGsXVqqecllF9wZ4fJKlyAyPxUlOdW39v1YDRJFaQ35z+wtFcLaClt4WIK0jQ23izXMGZvWC9Ay95Dw==",
  "language": "rust",
  "toolchain": "rustc 1.99.1 (rustc) (1.99.1)",
  "record_seq": 1,
  "supersedes": {
    "job_id": "301e97ff-620a-43c5-981c-57cf719b8c5d",
    "verdict": "accepted"
  }
}