uboot-imx/SBOM.spdx.json at lf_v2026.04 · jedvet/uboot-imx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
{
  "SPDXID": "SPDXRef-DOCUMENT",
  "spdxVersion": "SPDX-2.3",
  "creationInfo": {
    "created": "2026-06-02T03:01:00Z",
    "creators": [
      "Organization: NXP"
    ],
    "licenseListVersion": "3.26"
  },
  "name": "uboot-imx-lf-6.18.20-2.0.0",
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://nxp.com/spdx/b7f68ba3-77a4-48bb-a777-0387e536c385",
  "packages": [
    {
      "SPDXID": "SPDXRef-package-b7f68ba3-77a4-48bb-a777-0387e536c385",
      "name": "uboot-imx",
      "versionInfo": "lf-6.18.20-2.0.0",
      "licenseConcluded": "(GPL-2.0-only)",
      "licenseDeclared": "(GPL-2.0-only)",
      "downloadLocation": "https://github.com/nxp-imx/uboot-imx -b lf-6.18.20-2.0.0",
      "originator": "Organization: NXP",
      "supplier": "NOASSERTION",
      "externalRefs": [],
      "filesAnalyzed": false
    },
    {
      "SPDXID": "SPDXRef-package-b7f68ba3-77a4-48bb-a777-0387e536c385---a8aa5caa-c3bf-4654-8b07-f11fbe86557b",
      "name": "U-Boot",
      "versionInfo": "v2026.04",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "(GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-or-later AND NOASSERTION)",
      "homepage": "https://source.denx.de/u-boot/u-boot",
      "downloadLocation": "NOASSERTION",
      "originator": "Organization: U-Boot",
      "supplier": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:denx:u-boot:2026.04:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        },
        {
          "referenceCategory": "SECURITY",
          "referenceLocator": "cpe:2.3:a:u_boot:u_boot:2026.04:*:*:*:*:*:*:*",
          "referenceType": "cpe23Type"
        }
      ],
      "filesAnalyzed": false
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-package-b7f68ba3-77a4-48bb-a777-0387e536c385"
    },
    {
      "spdxElementId": "SPDXRef-package-b7f68ba3-77a4-48bb-a777-0387e536c385",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-package-b7f68ba3-77a4-48bb-a777-0387e536c385---a8aa5caa-c3bf-4654-8b07-f11fbe86557b"
    }
  ]
}