{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a08c4000-d498-8874-b347-505d17d29c39",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-07T07:15:51Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "awa-sbom",
          "version": "0.1.0"
        }
      ]
    },
    "manufacturer": {
      "name": "AwaCloud"
    },
    "component": {
      "type": "library",
      "bom-ref": "awacloud-oconv-fonts",
      "group": "@awacloud",
      "name": "oconv-fonts",
      "version": "1.0.0",
      "supplier": {
        "name": "AwaCloud"
      },
      "manufacturer": {
        "name": "AwaCloud"
      },
      "purl": "pkg:npm/%40awacloud/oconv-fonts@1.0.0",
      "licenses": [
        {
          "expression": "AGPL-3.0-only",
          "acknowledgement": "concluded"
        }
      ],
      "copyright": "Copyright (c) 2026 AwaCloud SAS",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@awacloud/oconv-fonts/-/oconv-fonts-1.0.0.tgz"
        },
        {
          "type": "license",
          "url": "packages/front/office/oconv-fonts/vendor/NOTICE"
        },
        {
          "type": "other",
          "url": "packages/front/office/oconv-fonts/package.json",
          "comment": "source manifest at the generation commit"
        },
        {
          "type": "other",
          "url": "packages/front/office/oconv-fonts/vendor/PROVENANCE.json",
          "comment": "1 vendored trees, version 1"
        }
      ],
      "properties": [
        {
          "name": "awa:license:ruled",
          "value": "AGPL-3.0-only"
        },
        {
          "name": "awa:license:ruled-source",
          "value": "awf.config.json#distribution.packages[name=@awacloud/oconv-fonts].license <- ai/program/PUBLICATION-DECISIONS.md § Rulings recorded, #2 (2026-08-20)"
        },
        {
          "name": "awa:maturity",
          "value": "L3"
        }
      ],
      "components": [
        {
          "type": "library",
          "bom-ref": "vendor-liberation",
          "name": "liberation",
          "version": "2.1.5",
          "supplier": {
            "name": "AwaCloud"
          },
          "manufacturer": {
            "name": "Red Hat, Inc."
          },
          "licenses": [
            {
              "expression": "OFL-1.1",
              "acknowledgement": "declared"
            }
          ],
          "copyright": "Copyright (c) 2012 Red Hat, Inc.",
          "externalReferences": [
            {
              "type": "distribution",
              "url": "https://github.com/liberationfonts/liberation-fonts/files/7261482/liberation-fonts-ttf-2.1.5.tar.gz"
            },
            {
              "type": "license",
              "url": "packages/front/office/oconv-fonts/vendor/NOTICE-liberation"
            },
            {
              "type": "other",
              "url": "packages/front/office/oconv-fonts/vendor/PROVENANCE.json",
              "comment": "trees[id=liberation]"
            }
          ],
          "properties": [
            {
              "name": "awa:gap:license-concluded",
              "value": "no owner conclusion recorded (acknowledgement stays declared)"
            },
            {
              "name": "awa:provenance:id",
              "value": "liberation"
            },
            {
              "name": "awa:provenance:notice",
              "value": "Liberation Fonts 2.1.5 (Red Hat, Inc.; digitized data (c) 2010 Google Corporation). SIL OFL 1.1 with Reserved Font Names Liberation, Arimo, Tinos, Cousine. See vendor/NOTICE-liberation and vendor/OFL.txt."
            },
            {
              "name": "awa:provenance:ref",
              "value": "2.1.5"
            },
            {
              "name": "awa:provenance:sha256",
              "value": "7191c669bf38899f73a2094ed00f7b800553364f90e2637010a69c0e268f25d0"
            },
            {
              "name": "awa:provenance:sha256-semantics",
              "value": "digest of the committed subset under packages/front/office/oconv-fonts/vendor/ (see packages/front/office/oconv-fonts/vendor/NOTICE-liberation for the tree's own notice), not an archive hash — not emitted as hashes[] (gap:sha256-semantics)"
            },
            {
              "name": "awa:vendored-subset",
              "value": "see vendor/NOTICE-liberation § Files vendored"
            }
          ]
        }
      ]
    },
    "properties": [
      {
        "name": "awa:git:commit",
        "value": "f0edfca41af50b9592a1739f013fe7b71a2d605a"
      },
      {
        "name": "awa:paths:relative-to",
        "value": "repository root at the generation commit"
      },
      {
        "name": "awa:scope",
        "value": "package @awacloud/oconv-fonts: 1 distribution row(s) described (closure) of the 16 awf.config.json distribution rows (+ 1 vendored trees)"
      },
      {
        "name": "awa:timestamp:source",
        "value": "committer date of the generation commit (git show -s --format=%ct)"
      }
    ]
  },
  "components": [],
  "dependencies": [
    {
      "ref": "awacloud-oconv-fonts",
      "dependsOn": []
    }
  ],
  "compositions": [
    {
      "aggregate": "complete",
      "dependencies": []
    }
  ]
}