{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "awacloud-oconv-fonts",
  "documentNamespace": "https://awaforge.eu/sbom/awacloud-oconv-fonts-f0edfca41af50b9592a1739f013fe7b71a2d605a.spdx",
  "comment": "generated by awa-sbom-0.1.0 for commit f0edfca41af50b9592a1739f013fe7b71a2d605a; package @awacloud/oconv-fonts: 1 distribution row(s) described (closure); 43 other workspace members counted, not listed; determinism rules: see this tool's README",
  "creationInfo": {
    "created": "2026-10-07T07:15:51Z",
    "creators": [
      "Organization: AwaCloud",
      "Tool: awa-sbom-0.1.0"
    ],
    "comment": "created = committer date of commit f0edfca41af50b9592a1739f013fe7b71a2d605a (git show -s --format=%ct); the Tool creator names the generator that produced this document"
  },
  "packages": [
    {
      "SPDXID": "SPDXRef-Package-awacloud-oconv-fonts",
      "name": "@awacloud/oconv-fonts",
      "versionInfo": "1.0.0",
      "primaryPackagePurpose": "LIBRARY",
      "supplier": "Organization: AwaCloud",
      "originator": "Organization: AwaCloud",
      "downloadLocation": "https://registry.npmjs.org/@awacloud/oconv-fonts/-/oconv-fonts-1.0.0.tgz",
      "filesAnalyzed": false,
      "licenseConcluded": "AGPL-3.0-only",
      "licenseDeclared": "AGPL-3.0-only",
      "copyrightText": "Copyright (c) 2026 AwaCloud SAS",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "awa-notice",
          "referenceLocator": "packages/front/office/oconv-fonts/vendor/NOTICE"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "awa-provenance",
          "referenceLocator": "packages/front/office/oconv-fonts/vendor/PROVENANCE.json"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:npm/%40awacloud/oconv-fonts@1.0.0"
        }
      ],
      "comment": "source: packages/front/office/oconv-fonts/package.json (awa.maturity L3); sideEffects false; 1 vendored trees under vendor/ (PROVENANCE.json version 1) — CONTAINS relationships below"
    },
    {
      "SPDXID": "SPDXRef-Package-vendor-liberation",
      "name": "liberation",
      "versionInfo": "2.1.5",
      "primaryPackagePurpose": "SOURCE",
      "supplier": "Organization: AwaCloud",
      "originator": "Organization: Red Hat, Inc.",
      "downloadLocation": "https://github.com/liberationfonts/liberation-fonts/files/7261482/liberation-fonts-ttf-2.1.5.tar.gz",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "OFL-1.1",
      "copyrightText": "Copyright (c) 2012 Red Hat, Inc.",
      "externalRefs": [
        {
          "referenceCategory": "OTHER",
          "referenceType": "awa-notice",
          "referenceLocator": "packages/front/office/oconv-fonts/vendor/NOTICE-liberation"
        },
        {
          "referenceCategory": "OTHER",
          "referenceType": "awa-provenance",
          "referenceLocator": "packages/front/office/oconv-fonts/vendor/PROVENANCE.json#trees[id=liberation]"
        }
      ],
      "comment": "gap:license-concluded — no owner conclusion recorded\nprovenance: PROVENANCE.json trees[id=liberation] sha256=7191c669bf38899f73a2094ed00f7b800553364f90e2637010a69c0e268f25d0 — a digest of the COMMITTED SUBSET, NOT an archive checksum, therefore not emitted in checksums[] (gap:sha256-semantics)\nsubset: vendored files per vendor/NOTICE-liberation § Files vendored; upstream notice: Liberation Fonts 2.1.5 (Red Hat, Inc.; digitized data (c) 2010 Google Corporation). SIL OFL 1.1 with Reserved Font Names Liberation, Arimo, Tinos, Cousine. See vendor/NOTICE-liberation and vendor/OFL.txt."
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-Package-awacloud-oconv-fonts"
    },
    {
      "spdxElementId": "SPDXRef-Package-awacloud-oconv-fonts",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-vendor-liberation"
    }
  ]
}