{"_license":{"publisher":"endoflife.ai","sources":["Includes data from endoflife.date, MIT licence (https://github.com/endoflife-date/endoflife.date/blob/master/LICENSE)"],"terms":"https://endoflife.ai/terms","notice":"Use of this file is subject to the terms at that URL.","scope":"Licence scope: free for evaluation and for running, securing and planning your own IT estate, including through the official endoflife.ai integrations; a data licence from partners@endoflife.ai is required to use endoflife.ai data to assess, rate, underwrite, audit, research or report on other organisations, in any product, service or deliverable for third parties, to redistribute or resell it, or to store it in bulk to build a dataset. Data that originates from endoflife.date stays under its MIT licence and CISA KEV records stay public domain; the licence requirement applies only to what endoflife.ai adds.","build_date":"2026-10-17"},"generated":"2026-10-17","about":"Package URLs (purl) that resolve an SBOM component to a tracked endoflife.ai product. Match by normalised purl (type + namespace/name, version stripped, lowercased) via `lookup`; never by name when a purl is present. Upstream identifiers are maintained by endoflife.date; registry-derived ones come from the same package ids the custom-product freshness verifier trusts; overrides carry their own basis.","sources":{"upstream":"https://endoflife.date/api/v1/products/<slug> identifiers[type=purl]","registry":"tools/verify-custom-products.mjs (npm/maven/pypi/github ids)","override":"data/purl-overrides.json"},"counts":{"products_with_purl":376,"products_unmapped":307,"products_undisposed":0,"purls":1307,"by_type":{"swid":1,"docker":244,"github":252,"npm":51,"rpm":171,"golang":37,"pypi":12,"deb":83,"apk":56,"maven":140,"oci":45,"generic":46,"composer":33,"scoop":50,"chocolatey":27,"winget":12,"nuget":19,"gem":6,"brew":17,"alpm":3,"cargo":1,"hex":1},"upstream_products_fetched":484,"upstream_errors":0},"upstream_errors":[],"unmapped":{"adobe-acrobat":"Proprietary desktop application distributed only as Adobe installers and Creative Cloud downloads; no package-registry artefact (2026-10-10, name check only; no npm, NuGet or Docker Hub query was made).","adobe-experience-manager":"Proprietary server distributed only through Adobe's Software Distribution portal (2026-10-10). HOMONYM: Maven artefacts under com.adobe.aem (aem-sdk-api, uber-jar) and the ACS AEM Commons project are SDKs and community libraries, not the product; never map.","alibaba-ack":"Managed cloud service (Alibaba Cloud Container Service for Kubernetes); not distributed as a package or image, checked none on 2026-09-09.","amazon-aurora-mysql":"Managed AWS database service (Amazon Aurora MySQL-Compatible Edition); it is not distributed as a package or image, so no registry can carry it, checked none on 2026-09-09.","amazon-aurora-postgresql":"Managed AWS database service (Amazon Aurora PostgreSQL-Compatible Edition); not distributed as a package or image, checked none on 2026-09-09.","amazon-documentdb":"Managed AWS database service; not distributed as a package or image, checked none on 2026-09-09.","amazon-eks":"Managed cloud service (Amazon Elastic Kubernetes Service); the control plane is not distributed as a package or Docker Hub image, checked none on 2026-09-09.","amazon-elasticache-redis":"Managed AWS cache service; not distributed as a package or image, checked none on 2026-09-09.","amazon-elasticsearch":"Managed AWS service (legacy Amazon Elasticsearch Service); not distributed as a package or image, checked none on 2026-09-09.","amazon-finspace":"Managed AWS service (Amazon FinSpace, ending support 2026-10-07); not distributed as a package or image, checked none on 2026-09-22.","amazon-glue":"Managed AWS ETL service; not distributed as a package or image, checked none on 2026-09-09.","amazon-lookout-for-equipment":"Managed AWS service (Amazon Lookout for Equipment, ending support 2026-10-07); not distributed as a package or image, checked none on 2026-09-22.","amazon-mq-activemq":"Managed AWS broker service (Amazon MQ for ActiveMQ); the broker software is ActiveMQ, tracked separately, and the service itself is not a package, checked none on 2026-09-09.","amazon-mq-rabbitmq":"Managed AWS broker service (Amazon MQ for RabbitMQ); the broker software is RabbitMQ, tracked separately, and the service itself is not a package, checked none on 2026-09-09.","amazon-msk":"Managed AWS streaming service (Amazon Managed Streaming for Apache Kafka); not distributed as a package or image, checked none on 2026-09-09.","amazon-neptune":"Managed AWS graph database service; not distributed as a package or image, checked none on 2026-09-09.","amazon-opensearch":"Managed AWS service (Amazon OpenSearch Service); not distributed as a package or image, checked none on 2026-09-09.","amazon-rds-mariadb":"Managed AWS database service (RDS for MariaDB); not distributed as a package or image, checked none on 2026-09-09.","amazon-rds-mysql":"Managed AWS database service (RDS for MySQL); not distributed as a package or image, checked none on 2026-09-09.","amazon-rds-postgresql":"Managed AWS database service (RDS for PostgreSQL); not distributed as a package or image, checked none on 2026-09-09.","android":"Mobile OS (Android platform releases); AOSP is distributed from android.googlesource.com and device images from OEMs, no official Docker Hub image (checked library/android on 2026-09-09).","antix":"Linux distribution distributed as ISOs from antixlinux.com; no official Docker Hub image (library/antix 404 on 2026-09-09).","apache-subversion":"Version-control server whose canonical source is Subversion's own repository at svn.apache.org; the GitHub repo apache/subversion describes itself as \"Mirror of Apache Subversion\" (checked 2026-09-09) and there is no official Docker Hub image (library/subversion 404), so no purl is added.","apple-watch":"Hardware (Apple Watch models); not a package, checked none on 2026-09-09.","arista-eos":"Network operating system distributed only as switch images from the Arista software download portal (login). Registry lookups 2026-10-09: npm arista-eos and PyPI arista-eos return 404; NuGet search 'arista eos' returns 0; Docker Hub arista/eos, arista/ceos, aristanetworks/eos, aristanetworks/ceos and aristanetworks/veos return 404. HOMONYMS: Docker Hub search 'ceos' returns only personal re-uploads of the cEOS-lab container (e.g. harsha258/ceos 'Arista cEOS image 4.32.0F'), not published by Arista, and the aristanetworks namespace holds Arista's build and tooling images (eossdk, cloudeos-init, ceosr-init, base), not EOS releases; never map either.","artifactory":"Commercial binary repository (JFrog Artifactory); images are served only from releases-docker.jfrog.io and installers from jfrog.com, not Docker Hub (jfrog/artifactory-oss and library/artifactory both 404 on 2026-09-09), and there is no registry package for the server itself.","atlassian-data-center":"Umbrella lifecycle page for the Atlassian Data Center program, not one product; the individual products (Jira Software, Confluence, Bitbucket, Bamboo) carry their own dispositions, checked none on 2026-09-09.","aws-app-mesh":"Managed AWS service (App Mesh, retired); not distributed as a package or image, checked none on 2026-09-09.","aws-iot-greengrass-v1":"Managed AWS service (AWS IoT Greengrass V1, ending support 2026-10-07); not distributed as a package or image, checked none on 2026-09-22.","aws-lambda":"Managed AWS compute service (Lambda runtimes); the runtimes are not distributed as a package or Docker Hub image (AWS base images live on ECR Public, not a purl type in scope), checked none on 2026-09-09.","aws-proton":"Managed AWS service (AWS Proton, ending support 2026-10-07); not distributed as a package or image, checked none on 2026-09-22.","aws-waf-classic":"Managed AWS service (AWS WAF Classic, ending support 2026-10-07); not distributed as a package or image, checked none on 2026-09-22.","azure-database-for-mysql":"Managed Azure database service; not distributed as a package or image, checked none on 2026-09-09.","azure-database-for-postgresql":"Managed Azure database service; not distributed as a package or image, checked none on 2026-09-09.","azure-devops-server":"Proprietary Windows server product (Azure DevOps Server); distributed only from Microsoft downloads and the Volume Licensing center, checked Docker Hub library and NuGet naming on 2026-09-09.","azure-kubernetes-service":"Managed Azure service (AKS); the control plane is not distributed as a package or image, checked none on 2026-09-09.","barracuda-cloudgen-firewall":"Hardware (Barracuda CloudGen Firewall appliances); firmware distributed only through Barracuda Cloud Control and the Barracuda download portal, checked none on 2026-10-10.","barracuda-web-application-firewall":"Hardware (Barracuda WAF appliances); firmware distributed only by Barracuda, checked none on 2026-10-10.","big-ip":"Hardware and virtual appliance line (F5 BIG-IP); TMOS is distributed only from F5 downloads, checked Docker Hub library naming on 2026-09-09.","blender":"Desktop application whose canonical source is projects.blender.org (Gitea); github.com/blender/blender self-describes as \"Official mirror of Blender\" (checked 2026-09-09), library/blender is 404, and the PyPI package bpy (\"Blender as a Python module\") is the embeddable module rather than the application, so no purl is added.","cdh":"Retired commercial distribution (Cloudera Distribution of Hadoop); parcels were served only from Cloudera's archive (now authenticated) and no public registry carries the platform release, checked Docker Hub and Maven Central naming on 2026-09-09.","centos-stream":"Linux distribution whose images are published on quay.io/centos/centos (outside Docker Hub); no official Docker Hub image (library/centos-stream 404 on 2026-09-09; library/centos is CentOS Linux, already mapped to the centos product).","checkpoint-appliances":"Hardware (Check Point security gateway appliances); not a package; Gaia images are distributed only from Check Point's support center, checked none on 2026-10-11.","checkpoint-gaia":"Proprietary security OS (Check Point Gaia); distributed only from Check Point's support center, checked Docker Hub library naming on 2026-09-09.","chrome":"Proprietary browser (Google Chrome); distributed only through Google installers and OS repositories (the open-source Chromium is a different product), checked Docker Hub library naming on 2026-09-09.","chromecast":"Consumer streaming hardware (Google Chromecast models); not distributed as a package or image. Checked 2026-09-21: no registry record applies.","cisco-anyconnect":"Proprietary VPN client (Cisco AnyConnect / Secure Client); distributed only from Cisco Software Central, checked Docker Hub library, npm and PyPI naming on 2026-09-09.","cisco-asa":"Proprietary firewall OS (Cisco ASA software); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-asa-5500-x":"Hardware (Cisco ASA 5500-X appliances); not a package, checked none on 2026-09-09.","cisco-fmc":"Proprietary management software (Cisco Secure Firewall Management Center); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-ftd":"Proprietary firewall OS (Cisco Secure Firewall Threat Defense); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-ios":"Proprietary network OS (Cisco IOS); distributed only from Cisco Software Central; Docker Hub library/ios and library/cisco-ios return 404 (checked 2026-10-09).","cisco-ios-xe":"Proprietary network OS (Cisco IOS XE); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-ios-xr":"Proprietary network OS (Cisco IOS XR); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-ise":"Proprietary appliance software (Cisco Identity Services Engine); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-meraki":"Hardware (Cisco Meraki MX/MS/MR/MV/MG appliances); cloud-managed firmware is delivered only through the Meraki dashboard, checked none on 2026-10-10.","cisco-nxos":"Proprietary network OS (Cisco NX-OS); distributed only from Cisco Software Central; Docker Hub library/nx-os and library/nxos return 404 (checked 2026-10-09).","cisco-rv":"Hardware (Cisco Small Business RV routers); firmware is distributed only from Cisco Software Central, checked none on 2026-09-09.","cisco-sdwan":"Proprietary controller/edge software (Cisco Catalyst SD-WAN); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","cisco-secure-email-gateway":"Proprietary appliance OS (Cisco AsyncOS for Secure Email Gateway); distributed only from Cisco Software Central, no package registry or container image, checked 2026-09-14.","cisco-ucm":"Proprietary appliance software (Cisco Unified Communications Manager); distributed only from Cisco Software Central, checked Docker Hub library naming on 2026-09-09.","citrix-hypervisor":"Proprietary hypervisor ISO delivered from xenserver.com/downloads; no public package registry. The open-source Xen Project hypervisor is a different product. Checked 2026-10-10.","citrix-vad":"Proprietary virtualization suite (Citrix Virtual Apps and Desktops); distributed only from Citrix downloads, checked Docker Hub library naming on 2026-09-09.","citrix-workspace-app":"Proprietary client delivered from citrix.com downloads and OS app stores; the winget identifier Citrix.Workspace is not a purl type. Checked 2026-10-10.","claude":"AI model family (Anthropic Claude); a hosted model is not a package, image or source repository, checked none on 2026-09-09.","cloudera-base":"Commercial subscription-gated platform (Cloudera Base on Premises); Cloudera distributes it only from its authenticated archive, no public registry carries the platform release, checked Docker Hub, PyPI and Maven Central naming on 2026-09-09.","cloudera-data-flow":"Managed Cloudera cloud service (Cloudera DataFlow for Cloud); subscription-gated, not distributed as a package or image, checked none on 2026-09-09.","cloudera-data-services":"Commercial subscription-gated platform (Cloudera Data Services on Premises); distributed only from Cloudera's authenticated archive, no public registry, checked Docker Hub, PyPI and Maven Central naming on 2026-09-09.","cloudera-on-cloud":"Managed Cloudera cloud service (Cloudera on Cloud / CDP Public Cloud); subscription-gated, not distributed as a package or image, checked none on 2026-09-09.","cloudera-platform":"Commercial subscription-gated platform (Cloudera Platform / CDP); distributed only from Cloudera's authenticated archive, no public registry, checked Docker Hub, PyPI and Maven Central naming on 2026-09-09.","cloudlinux":"Commercial OS distributed as ISOs and a conversion script from CloudLinux; no official Docker Hub image (library/cloudlinux 404 on 2026-10-09); the cloudlinuxinc namespace holds only centos8-python38, vmalert and cloudlinux-grafana, none of them the OS.","commvault":"Proprietary backup platform (Commvault); distributed only from Commvault's Maintenance Advantage portal, checked Docker Hub library naming on 2026-09-09.","controlm":"Proprietary workload automation (BMC Control-M); distributed only from BMC's EPD portal, checked Docker Hub library naming on 2026-09-09.","cortex-xdr":"Proprietary endpoint agent (Palo Alto Cortex XDR); distributed only from the Cortex console, checked Docker Hub library, npm and PyPI naming on 2026-09-09.","cos":"Google Container-Optimized OS, a Compute Engine VM image family published only as GCE images; it is not a package or Docker Hub image (checked library/cos on 2026-09-09).","dce":"Proprietary Kubernetes platform (DaoCloud Enterprise); distributed only by DaoCloud, checked Docker Hub library naming on 2026-09-09.","devuan":"Linux distribution distributed as ISOs and apt repositories from devuan.org; no official Docker Hub image (library/devuan 404 on 2026-09-09).","dlink-routers":"Hardware (D-Link legacy routers, cameras and NAS); firmware is distributed only from D-Link support pages, checked none on 2026-09-09.","dotnetfx":"Windows framework whose container images are served from mcr.microsoft.com/dotnet/framework; the Docker Hub listing microsoft/dotnet-framework exists (200, \"Official images for the .NET Framework, ASP.NET, and Windows Communication Framework (WCF)\") but has 0 tags and 0 pulls, a redirect stub that cannot be pulled; checked hub.docker.com tags endpoint on 2026-09-09; NuGet carries no .NET Framework runtime package.","draytek-vigor":"Hardware (DrayTek Vigor routers); firmware is distributed only from DrayTek, checked none on 2026-09-09.","esxi":"Proprietary hypervisor (VMware ESXi); distributed only from the Broadcom support portal, checked Docker Hub library naming on 2026-09-09.","eurolinux":"Discontinued RHEL rebuild; Docker Hub eurolinux/eurolinux-9 exists (200, \"Official EuroLinux 9 Base Image, UBI compatible\", last pushed 2024-10-01) but no EuroLinux page reachable on 2026-09-09 (docs.euro-linux.com, github.com/EuroLinux) names that Hub org, so it is not added; library/eurolinux is 404.","exim":"Mail server whose own README states \"IMPORTANT NOTE - EXIM NO LONGER USES GITHUB\" and names code.exim.org/exim/exim.git as the repository (checked 2026-09-09), so github.com/Exim/exim is a stale mirror and is not added; library/exim is 404.","fairphone":"Hardware (Fairphone handsets); not a package, checked none on 2026-09-09.","filemaker":"Proprietary database platform (Claris FileMaker); distributed only from Claris, checked Docker Hub library naming on 2026-09-09.","forgejo":"Git forge whose canonical source and container image are both on Codeberg (codeberg.org/forgejo/forgejo, named by forgejo.org/docs installation/docker, checked 2026-09-09); library/forgejo is 404 and no Docker Hub org is named by the project.","fortiadc":"Proprietary appliance firmware (Fortinet FortiADC); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortianalyzer":"Proprietary appliance firmware (Fortinet FortiAnalyzer); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortiap-hardware":"Hardware (Fortinet FortiAP access points); FortiAP firmware is distributed only through the Fortinet support portal, checked none on 2026-10-16.","fortiauthenticator":"Proprietary appliance firmware (Fortinet FortiAuthenticator); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","forticlient-ems":"Proprietary server software (FortiClient EMS); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortiextender":"Hardware (Fortinet FortiExtender cellular gateways); firmware is distributed only through the Fortinet support portal, checked none on 2026-10-16.","fortigate-appliances":"Hardware (Fortinet FortiGate, FortiWiFi and FortiGate Rugged appliances); FortiOS firmware is distributed only through the Fortinet support portal, checked none on 2026-10-16.","fortimail":"Proprietary appliance firmware (Fortinet FortiMail); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortimanager":"Proprietary appliance firmware (Fortinet FortiManager); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortinac":"Proprietary appliance software (Fortinet FortiNAC); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortinac-f":"Proprietary appliance software (Fortinet FortiNAC-F, FortiNAC-OS); distributed only from Fortinet's support portal, same disposition as fortinac; checked 2026-10-07.","fortinet-security-appliances":"Hardware (Fortinet FortiManager, FortiAnalyzer, FortiWeb, FortiMail, FortiADC and related appliance models); firmware is distributed only through the Fortinet support portal, checked none on 2026-10-16.","fortios":"Proprietary firewall firmware (Fortinet FortiOS); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortiproxy":"Proprietary appliance firmware (Fortinet FortiProxy); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortisandbox":"Proprietary appliance firmware (Fortinet FortiSandbox); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","fortiswitch-hardware":"Hardware (Fortinet FortiSwitch models); FortiSwitchOS firmware is distributed only through the Fortinet support portal, checked none on 2026-10-16.","fortiweb":"Proprietary appliance firmware (Fortinet FortiWeb); distributed only from Fortinet's support portal, checked Docker Hub library naming on 2026-09-09.","freebsd":"BSD operating system distributed as installer images from freebsd.org; no official Docker Hub image (library/freebsd 404 on 2026-09-09).","freedesktop-sdk":"Flatpak runtime (freedesktop-sdk) built on gitlab.com/freedesktop-sdk and distributed only through Flathub, no registry purl type or Docker Hub image (checked library/freedesktop-sdk on 2026-09-09).","goanywhere-mft":"Proprietary MFT server installed with Fortra's own installer from the customer portal; no public package registry; checked 2026-10-16.","google-kubernetes-engine":"Managed Google Cloud service (GKE); the control plane is not distributed as a package or image, checked none on 2026-09-09.","google-nexus":"Hardware (Google Nexus devices); not a package, checked none on 2026-09-09.","gstreamer":"Multimedia framework whose canonical source is gitlab.freedesktop.org/gstreamer; github.com/GStreamer/gstreamer is a mirror (not named as primary by gstreamer.freedesktop.org; checked 2026-09-09) and library/gstreamer is 404, so no purl is added.","hdp":"Retired commercial distribution (Hortonworks Data Platform); repositories were served only from Hortonworks/Cloudera archives (now authenticated), no public registry, checked Docker Hub and Maven Central naming on 2026-09-09.","heroku-postgres":"Managed Heroku database service; not distributed as a package or image, checked none on 2026-09-09.","horizon":"Proprietary VDI platform (Omnissa Horizon); distributed only from Omnissa's customer portal, checked Docker Hub library naming on 2026-09-09.","ibm-aix":"Proprietary Unix (IBM AIX); distributed only through IBM Entitled Systems Support, checked Docker Hub library naming on 2026-09-09.","ibm-db2":"Commercial database whose current images are published on IBM's own registry icr.io (outside the purl types in scope); the legacy Docker Hub record ibmcom/db2 exists (200, \"Db2 - The AI Database\", last pushed 2022-10-19) but no IBM page reachable on 2026-09-09 names the ibmcom org (ibm.com/docs renders client-side), so it is not added.","ibm-i":"Proprietary OS (IBM i); distributed only through IBM Entitled Systems Support, checked none on 2026-09-09.","ibm-mq":"Commercial message broker whose current images are published as icr.io/ibm-messaging/mq per the ibm-messaging/mq-container usage docs (outside the purl types in scope); the legacy Docker Hub record ibmcom/mq exists (200, \"IBM MQ Advanced for Developers\", last pushed 2021-12-06) but IBM's current docs no longer name it, so it is not added; checked 2026-09-09.","ibm-netezza":"Data warehouse appliances and their proprietary software (IBM Netezza, PureData System for Analytics, Cloud Pak for Data System); delivered as hardware or through IBM Fix Central and IBM Cloud, not as a package or public image. Checked Docker Hub library naming on 2026-10-01.","ibm-websphere":"Commercial application server; IBM moved its images to IBM Container Registry (icr.io, outside the purl types in scope). Docker Hub ibmcom/websphere-traditional exists but describes itself as 'Sunsetted IBM WebSphere Application Server traditional images. Switch to IBM Container Registry(ICR)' (last updated 2025-07-10, re-read 2026-10-09), so it is not added, same disposition as ibm-mq; library/websphere-traditional returns 404. HOMONYMS: Docker Hub library/websphere-liberty and ibmcom/websphere-liberty are WebSphere Liberty, and library/open-liberty and Maven io.openliberty are Open Liberty; none is the traditional server. Checked 2026-10-09.","idl":"Proprietary scientific language (NV5 IDL); distributed only from NV5 Geospatial, checked PyPI and Docker Hub library naming on 2026-09-09.","intel-processors":"Hardware (Intel CPU families); not a package, checked none on 2026-09-09.","internet-explorer":"Retired Windows component (Internet Explorer); never distributed as a package, checked none on 2026-09-09.","ios":"Proprietary mobile OS (Apple iOS); distributed only through Apple software update, checked Docker Hub library naming on 2026-09-09.","ipad":"Hardware (iPad models); not a package, checked none on 2026-09-09.","ipados":"Proprietary tablet OS (Apple iPadOS); distributed only through Apple software update, checked none on 2026-09-09.","iphone":"Hardware (iPhone models); not a package, checked none on 2026-09-09.","ivanti-connect-secure":"Proprietary appliance software (Ivanti Connect Secure); distributed only from Ivanti's licensing portal, checked Docker Hub library naming on 2026-09-09.","ivanti-csa":"Proprietary appliance (Ivanti Cloud Services Appliance); distributed only from Ivanti's portal, checked Docker Hub library naming on 2026-09-09.","ivanti-epm":"Proprietary Windows server software (Ivanti Endpoint Manager); distributed only from Ivanti's portal, checked Docker Hub library and NuGet naming on 2026-09-09.","ivanti-epmm":"Proprietary appliance (ISO) distributed from support.mobileiron.com behind a login (2026-10-10).","ivanti-isa":"Proprietary appliance (Ivanti Secure Appliance ISA/PSA); not a package, checked none on 2026-09-09.","ivanti-policy-secure":"Proprietary appliance software (Ivanti Policy Secure); distributed only from Ivanti's portal, checked Docker Hub library naming on 2026-09-09.","ivanti-sentry":"Proprietary appliance (ISO) distributed from support.mobileiron.com behind a login (2026-10-10).","jfrog-xray":"Commercial security scanner (JFrog Xray), same distribution model as artifactory: server images come from releases-docker.jfrog.io (the registry answers 401 without credentials) and installers from jfrog.com; there is no registry package for the server itself. Registry lookups 2026-10-11: Docker Hub jfrog/xray-server, jfrog/xray and library/xray all 404; npm jfrog-xray 404. Added while wiring batches 4 and 6 because purl-harvest --strict listed it undisposed (upstream product added in d6faa29).","juniper-ex":"Hardware (Juniper EX Series switches); not a package, checked none on 2026-10-11.","juniper-mx":"Hardware (Juniper MX and M Series routers); not a package, checked none on 2026-10-11.","juniper-qfx":"Hardware (Juniper QFX Series switches); not a package, checked none on 2026-10-11.","juniper-srx":"Hardware (Juniper SRX Series); not a package, checked none on 2026-09-09.","junos":"Proprietary network OS (Juniper Junos OS); distributed only from Juniper's support portal (the Hub image juniper/crpd is the containerized routing daemon, a separate product form), checked Docker Hub library naming on 2026-09-09.","kaseya-vsa":"Proprietary RMM server installed with Kaseya's own installer; the Docker Hub kaseya namespace (6 repos on 2026-10-09: appliance-collector-unitrends, appliance-proxy-unitrends, appliance-agent, watchtower, autoheal, utmsp-backend-test) holds Unitrends appliance and utility images, none of them VSA.","kde-plasma":"Desktop environment (KDE Plasma) sourced from invent.kde.org and shipped by distributions; no registry package or official container image (checked library/kde-plasma on 2026-09-09).","kindle":"Hardware (Amazon Kindle devices); not a package, checked none on 2026-09-09.","libreoffice":"Desktop suite whose canonical source is gerrit.libreoffice.org; github.com/LibreOffice/core self-describes as \"Read-only LibreOffice core repo\" (checked 2026-09-09) and library/libreoffice is 404, so no purl is added.","liferay-dxp":"Proprietary DXP bundles download from Liferay's customer portal; the public Docker Hub liferay/dxp image is not mapped because its tags mix fix-pack and quarterly naming we have not verified against every cycle; checked 2026-10-16.","lineageos":"Community Android distribution (LineageOS); distributed as device images from download.lineageos.org, no registry or official container image (checked library/lineageos on 2026-09-09).","linuxmint":"Linux distribution distributed as ISOs from linuxmint.com; no official Docker Hub image (library/linuxmint 404 on 2026-09-09).","looker":"Managed Google Cloud BI service (Looker, Google Cloud core); not distributed as a package or image, checked none on 2026-09-09.","lua":"Language runtime distributed as a tarball from lua.org; github.com/lua/lua self-describes as \"A copy of the Lua development repository... Mirrored irregularly\" and lua.org/download.html does not name a registry or repo (checked 2026-09-09); library/lua is 404.","macos":"Proprietary desktop OS (Apple macOS); distributed only through Apple software update, checked Docker Hub library naming on 2026-09-09.","manageengine-endpoint-central":"Proprietary on-premises server delivered as installers from manageengine.com; no public package registry (no official Docker Hub image). Checked 2026-10-10.","microsoft-365-apps":"Proprietary desktop suite (Microsoft 365 Apps); distributed only through the Office Deployment Tool, Microsoft installers and Intune, no package registry, checked 2026-09-10.","microsoft-ata":"Proprietary Microsoft on-premises security product installed from Microsoft media, not a package; checked 2026-10-16.","microsoft-biztalk-server":"Proprietary Windows server software (BizTalk Server); installed from Volume Licensing media, not a package; checked 2026-10-09.","microsoft-build-of-openjdk":"OpenJDK distribution served only from microsoft.com downloads and mcr.microsoft.com/openjdk/jdk; no Docker Hub image (library/microsoft-openjdk and microsoft/openjdk both 404 on 2026-09-09).","microsoft-configmgr":"Proprietary Windows server software (Microsoft Configuration Manager); installed from Volume Licensing baseline media and in-console updates, not a package, checked none on 2026-10-09.","microsoft-dynamics-ax":"Proprietary ERP server software (Dynamics AX); partner-distributed installation media, not a package; checked 2026-10-09.","microsoft-dynamics-business-central":"Proprietary ERP server software (Business Central on-premises); installed from Microsoft's update packages through partners, not a package-manager package (AL extensions and NuGet symbol feeds are not the server); checked 2026-10-09.","microsoft-dynamics-crm":"Proprietary CRM server software (Dynamics CRM on-premises); installation media and update rollups, not a package; checked 2026-10-09.","microsoft-dynamics-customer-engagement":"Proprietary server software (Dynamics 365 Customer Engagement on-premises); installation media and cumulative updates from Microsoft Support, not a package; checked 2026-10-09.","microsoft-dynamics-gp":"Proprietary ERP software (Dynamics GP); partner-distributed installation media and updates, not a package; checked 2026-10-09.","microsoft-dynamics-nav":"Proprietary ERP server software (Dynamics NAV); partner-distributed installation media and cumulative updates, not a package; checked 2026-10-09.","microsoft-dynamics-sl":"Proprietary ERP software (Dynamics SL); partner-distributed installation media, not a package; checked 2026-10-09.","microsoft-edge":"Proprietary browser (Microsoft Edge); distributed only through Microsoft installers and OS repositories, checked Docker Hub library naming on 2026-09-09.","microsoft-entra-connect":"Proprietary Windows server software (Microsoft Entra Connect Sync); downloaded from the Microsoft Entra admin center, not a package, checked none on 2026-10-09.","microsoft-host-integration-server":"Proprietary Microsoft server software installed from Volume Licensing media, not a package; checked 2026-10-16.","microsoft-hyper-v-server":"Operating-system SKU (a free, Hyper-V-only edition of Windows Server) installed from Microsoft ISO media; not a package. Checked 2026-10-11.","microsoft-identity-manager":"Proprietary Microsoft identity server installed from Volume Licensing media, not a package; checked 2026-10-16.","microsoft-project":"Proprietary Microsoft desktop application installed through Click-to-Run or Volume Licensing, not a package registry; checked 2026-10-16.","microsoft-project-server":"Proprietary Microsoft server (part of SharePoint Server Enterprise for 2016 and later), installed from Volume Licensing media, not a package; checked 2026-10-16.","microsoft-skype-for-business-server":"Proprietary Windows server software (Skype for Business Server); downloaded from the Microsoft 365 admin center or Volume Licensing and updated by cumulative updates, not a package; checked 2026-10-09.","microsoft-system-center":"Proprietary Windows server software suite (System Center); distributed through the Volume Licensing Service Center, not a package, checked none on 2026-10-09.","microsoft-visio":"Proprietary Microsoft desktop application installed through Click-to-Run or Volume Licensing, not a package registry; checked 2026-10-16.","moodle":"LMS whose canonical git is git.moodle.org (github.com/moodle/moodle is Moodle HQ's mirror); moodle.org and docs.moodle.org returned Cloudflare 403 on 2026-09-09 so the mirror relationship could not be re-read from the vendor, and library/moodle is 404, so no purl is added.","motorola-mobility":"Hardware (Motorola handsets); not a package, checked none on 2026-09-09.","msexchange":"Proprietary server product (Microsoft Exchange Server); distributed only from Microsoft downloads and Volume Licensing, checked Docker Hub library naming on 2026-09-09.","mssqlserver":"Commercial database whose Linux images are served from mcr.microsoft.com/mssql/server; the Docker Hub listing microsoft/mssql-server exists (200, \"Official images for Microsoft SQL Server based on Ubuntu\") but has 0 tags and 0 pulls, i.e. a redirect stub that cannot be pulled, so no scanner would emit it; checked hub.docker.com tags endpoint on 2026-09-09.","mulesoft-runtime":"Commercial integration runtime (MuleSoft Mule runtime); distributed only from MuleSoft's authenticated support portal and Nexus, checked Docker Hub library and Maven Central naming on 2026-09-09.","mxlinux":"Linux distribution distributed as ISOs from mxlinux.org; no official Docker Hub image (library/mxlinux 404 on 2026-09-09).","netapp-ontap":"Proprietary storage OS (NetApp ONTAP); distributed only from the NetApp support site, checked Docker Hub library naming on 2026-09-09.","netbackup-appliance-os":"Proprietary appliance OS (Veritas NetBackup Appliance); distributed only from Veritas' download center, checked none on 2026-09-09.","netbsd":"BSD operating system distributed as installer images from netbsd.org; no official Docker Hub image (library/netbsd 404 on 2026-09-09).","netscaler-adc":"Proprietary ADC firmware (NetScaler ADC MPX/VPX builds); distributed only from NetScaler's download portal (NetScaler CPX on Docker Hub is a separate container form not tracked by this page), checked Docker Hub library naming on 2026-09-09.","netscaler-mpx":"Hardware (NetScaler MPX/SDX appliances); not a package, checked none on 2026-09-09.","nixos":"Linux distribution (NixOS) distributed as ISOs and channels from nixos.org; no official Docker Hub image for the OS itself (checked library/nixos on 2026-09-09; the nixos/nix image is the Nix package manager, mapped under the nix product).","nokia":"Hardware (HMD Nokia handsets); not a package, checked none on 2026-09-09.","nura":"Nura is a Linux distribution (endoflife.date category os; release policy at docs.nura.eco), an operating system rather than a package in a registry; no purl type identifies the distribution itself. Checked 2026-10-15.","nutanix-aos":"Proprietary hyperconverged OS (Nutanix AOS); distributed only from the Nutanix support portal, checked none on 2026-09-09.","nutanix-files":"Proprietary file service (Nutanix Files); distributed only from the Nutanix support portal, checked none on 2026-09-09.","nutanix-prism":"Proprietary management plane (Nutanix Prism Central); distributed only from the Nutanix support portal, checked none on 2026-09-09.","nvidia":"Proprietary NVIDIA datacenter driver branches; distributed as vendor installers and OS repositories only (Docker Hub nvidia/cuda is the CUDA toolkit image, not the driver), checked Docker Hub library and PyPI naming on 2026-09-09.","nvidia-gpu":"Hardware (NVIDIA GPU architectures); not a package, checked none on 2026-09-09.","office":"Proprietary desktop suite (Microsoft Office); distributed only through Microsoft installers, checked none on 2026-09-09.","office-online-server":"Proprietary server product (Office Online Server); distributed only through the Volume Licensing Service Center, checked none on 2026-09-09.","oneplus":"Hardware (OnePlus devices); not a package, checked none on 2026-09-09.","openbsd":"BSD operating system distributed as installer images from openbsd.org; no official Docker Hub image (library/openbsd 404 on 2026-09-09).","oracle-adf":"Proprietary framework shipped inside Oracle JDeveloper and the Fusion Middleware Infrastructure installer; its Maven artifacts sit in Oracle's authenticated maven.oracle.com, not Maven Central. Registry lookups 2026-10-09: npm oracle-adf returns 404; Docker Hub search 'oracle adf' returns no ADF image.","oracle-apex":"Commercial Oracle Database application (Oracle APEX); distributed only from oracle.com downloads, checked Docker Hub library naming on 2026-09-09.","oracle-ebs":"Proprietary ERP suite licensed and delivered through Oracle Support (eDelivery and My Oracle Support patches); no package registry. Registry lookups 2026-10-09: npm oracle-ebs and PyPI oracle-ebs return 404; NuGet search 'e-business suite' returns 0.","oracle-endeca":"Oracle Endeca / Commerce Guided Search installers distributed only through Oracle Software Delivery Cloud; no public package coordinates. Checked 2026-10-11.","oracle-forms":"Proprietary Oracle middleware distributed only through Oracle eDelivery (login required, per the Forms downloads page) and container-registry.oracle.com; no public package registry. Registry lookups 2026-10-09: npm oracle-forms and PyPI oracle-forms return 404; Docker Hub oracle/forms returns 404 and search 'oracle forms' returns only Oracle Linux and unrelated images. HOMONYM: NuGet Ndapi ('A .NET wrapper for Oracle Forms 6i and 12c Open API', Felipe Zorzo) is a third-party library for Forms module files, not the product; never map it.","oracle-graalvm":"Commercial GraalVM distribution (Oracle GraalVM); served only from oracle.com and container-registry.oracle.com; the source repository oracle/graal is attributed to the graalvm-ce product (checked library/graalvm on 2026-09-09).","oracle-http-server":"Proprietary Oracle middleware (Apache-based but Oracle-built) distributed only through Oracle eDelivery and container-registry.oracle.com; no public package registry. Registry lookups 2026-10-09: npm oracle-http-server returns 404; Docker Hub oracle/ohs returns 404. HOMONYM: never map Apache httpd purls (pkg:docker/library/httpd etc.) to it.","oracle-identity-management":"Oracle Fusion Middleware installers distributed only through Oracle Software Delivery Cloud and My Oracle Support; no Maven, npm or OS-package coordinates. Checked 2026-10-11.","oracle-jdk":"Commercial JDK build (Oracle JDK); served only from oracle.com and container-registry.oracle.com; Docker Hub library/openjdk is the OpenJDK build, a different product (checked library/oracle-jdk on 2026-09-09).","oracle-peoplesoft":"Proprietary ERP applications delivered as PeopleSoft Update Images through My Oracle Support; no package registry. Registry lookups 2026-10-09: npm peoplesoft and oracle-peoplesoft and PyPI peoplesoft return 404; Docker Hub library/peoplesoft returns 404. HOMONYMS: Docker Hub search 'peoplesoft' returns only third-party images (scrapers, a honeypot emulating PeopleSoft, personal builds) and NuGet 'peoplesoft' only an SSO toolkit; never map any of them.","oracle-soa-suite":"Proprietary Oracle middleware distributed only through Oracle eDelivery and container-registry.oracle.com; no public package registry. Registry lookups 2026-10-09: npm oracle-soa-suite returns 404; Docker Hub oracle/soasuite returns 404; NuGet search 'oracle soa' returns 0.","oracle-solaris":"Commercial Unix (Oracle Solaris); distributed only from Oracle's support portal, checked Docker Hub library naming on 2026-09-09.","oracle-upk":"Windows desktop authoring tool distributed through Oracle Software Delivery Cloud; no package coordinates. Checked 2026-10-11.","oracle-weblogic":"Commercial application server (Oracle WebLogic Server); distributed only from oracle.com and container-registry.oracle.com with no public package registry (checked library/weblogic on 2026-09-09).","pa-series":"Hardware (Palo Alto Networks PA-Series firewalls); not a package, checked none on 2026-09-09.","palo-alto-expedition":"Retired proprietary migration tool (Palo Alto Networks Expedition); distributed only from the Palo Alto support portal, checked Docker Hub library, PyPI and npm naming on 2026-09-09.","pangp":"Proprietary VPN client (Palo Alto GlobalProtect app); distributed only from the Palo Alto customer portal, checked Docker Hub library, npm and PyPI naming on 2026-09-09.","panos":"Proprietary firewall OS (Palo Alto PAN-OS); distributed only from the Palo Alto customer portal, checked Docker Hub library naming on 2026-09-09.","papercut-ng-mf":"Proprietary print-management server (PaperCut NG/MF); distributed only as vendor installers from papercut.com, checked Docker Hub library, npm and NuGet naming on 2026-09-09.","pci-dss":"Compliance standard (PCI Security Standards Council); a standard is not a package, checked none on 2026-09-09.","pixel":"Hardware (Google Pixel handsets); not a package, checked none on 2026-09-09.","pixel-watch":"Hardware (Google Pixel Watch); not a package, checked none on 2026-09-09.","pop-os":"Linux distribution distributed as ISOs from system76.com; no official Docker Hub image (library/pop-os 404 on 2026-09-09).","postfix":"Mail server distributed as a tarball from postfix.org with source history at github.com/vdukhovni/postfix, a maintainer's personal mirror rather than the project's primary repo (checked 2026-09-09); library/postfix is 404.","postmarketos":"Mobile Linux distribution (postmarketOS); distributed as device images and its source lives on gitlab.postmarketos.org, no official Docker Hub image (checked library/postmarketos on 2026-09-09).","progress-kemp-loadmaster":"Hardware and virtual appliances; LMOS firmware is distributed only from Kemp's firmware download page behind a Kemp ID. Checked 2026-10-11.","progress-moveit-automation":"Proprietary server distributed only as vendor installers from Progress; same registry check and same MoveIt robotics homonym as progress-moveit-transfer (2026-10-09).","progress-moveit-transfer":"Proprietary server distributed only as vendor installers from Progress; checked npm, NuGet and Docker Hub naming 2026-10-09. HOMONYM: Docker Hub moveit/moveit and npm moveit are the ROS MoveIt robotics framework, and NuGet Progress.Sitefinity.MOVEit is a Sitefinity connector; never map either.","progress-whatsup-gold":"Proprietary server distributed only as vendor installers from Progress; NuGet search for whatsup gold returns nothing (2026-10-09).","progress-ws-ftp-server":"Proprietary server distributed only as vendor installers from Progress. Registry lookups 2026-10-09: npm ws_ftp, ws-ftp, ws-ftp-server and wsftp-server return 404; Docker Hub library/ws_ftp, library/wsftp and library/ws-ftp return 404; NuGet search ws_ftp and wsftp return 0 packages. HOMONYM: npm wsftp (0.1.0, \"WebSocket file transfer protocol\") is unrelated; never map it.","proxmox-ve":"Hypervisor platform whose canonical source is git.proxmox.com; github.com/proxmox/pve-manager self-describes as \"Read-Only mirror\" (checked 2026-09-09) and library/proxmox is 404; distributed only as ISOs and Debian packages from Proxmox's own repositories.","qnap-nas":"Hardware (QNAP NAS models); firmware (QTS/QuTS hero) is distributed only from QNAP, checked none on 2026-09-09.","raspberry-pi":"Hardware (Raspberry Pi boards); not a package, checked none on 2026-09-09.","red-hat-ansible-automation-platform":"Commercial platform bundle (Red Hat Ansible Automation Platform); distributed only from the Red Hat customer portal and registry.redhat.io (ansible-core on PyPI is the upstream engine, mapped under ansible-core), checked Docker Hub library naming on 2026-09-09.","red-hat-openshift":"Commercial platform (Red Hat OpenShift Container Platform); images and installers are served only from registry.redhat.io and console.redhat.com (the OKD community distribution is separate), checked library/openshift on 2026-09-09.","redhat-jboss-eap":"Commercial application server (Red Hat JBoss EAP); images served only from registry.redhat.io and binaries from the Red Hat customer portal (WildFly on Docker Hub is the upstream, a different product), checked library/jboss-eap on 2026-09-09.","redhat-jboss-web-server":"Commercial web server distribution (Red Hat JBoss Web Server, Tomcat-based); binaries only from the Red Hat customer portal and images only from registry.redhat.io (jboss-webserver-*); Apache Tomcat on Docker Hub is the upstream, a different product. Checked 2026-09-22.","redhat-openstack":"Commercial OpenStack distribution; containers come from registry.redhat.io (rhosp-rhel9/*, rhoso-*), not a public registry. Docker Hub 'openstack' search returns only personal images, and PyPI has no 'openstack' package (404); openstacksdk and the service packages are upstream components, not this product. Checked 2026-10-09.","redhat-satellite":"Commercial management product (Red Hat Satellite); distributed only from the Red Hat customer portal and registry.redhat.io, checked Docker Hub library naming on 2026-09-09.","redhat-virtualization":"Commercial virtualization platform; RHV Manager and RHV-H images are served only from the Red Hat customer portal and Red Hat CDN. Docker Hub ovirt-engine images (openeuler/ovirt-engine and personal builds) are the oVirt community upstream, a different product; checked 2026-10-09.","rhel":"Commercial enterprise Linux (Red Hat Enterprise Linux); RHEL base images are served from registry.redhat.io and the Docker Hub redhat/ubi9 image is Universal Base Image, a separate freely redistributable subset, so no Hub image names RHEL itself (checked library/rhel on 2026-09-09).","routeros":"Proprietary router OS (MikroTik RouterOS); distributed only from mikrotik.com downloads, checked Docker Hub library naming on 2026-09-09.","samsung-galaxy-tab":"Hardware (Samsung Galaxy Tab tablets); not a package, checked none on 2026-09-09.","samsung-galaxy-watch":"Hardware (Samsung Galaxy Watch); not a package, checked none on 2026-09-09.","samsung-mobile":"Hardware (Samsung Galaxy handsets); not a package, checked none on 2026-09-09.","sap-businessobjects":"Proprietary suite delivered through the SAP Software Download Center (S-user login); no public package registry. Checked 2026-10-10.","sap-ecc":"Proprietary ERP (SAP ECC 6.0 / Business Suite 7); distributed only from the SAP Software Download Center, checked none on 2026-09-09.","sap-netweaver":"Proprietary platform delivered through the SAP Software Download Center (S-user login); no public package registry. Checked 2026-10-10.","sharepoint":"Proprietary server product (Microsoft SharePoint Server); distributed only from Microsoft downloads and Volume Licensing, checked Docker Hub library naming on 2026-09-09.","sitecore":"Proprietary CMS; Sitecore's container images live on scr.sitecore.com and its NuGet packages on Sitecore's own feed, neither a public registry with a purl type we resolve; checked 2026-10-16.","slackware":"Linux distribution distributed as ISOs and mirrors from slackware.com; no official Docker Hub image (library/slackware 404 on 2026-09-09; the vbatts/slackware image is third-party).","sles":"Commercial enterprise Linux (SUSE Linux Enterprise Server); base images are served only from registry.suse.com, not Docker Hub (checked library/sles on 2026-09-09).","sns-firmware":"Proprietary appliance firmware (Stormshield Network Security); distributed only from Stormshield's MyStormshield portal, checked Docker Hub library naming on 2026-09-09.","sns-hardware":"Hardware (Stormshield Network Security appliances); not a package, checked none on 2026-09-09.","sns-smc":"Proprietary appliance software (Stormshield Management Center virtual appliance); distributed only from Stormshield's portal, checked Docker Hub library naming on 2026-09-09.","solarwinds-orion":"Proprietary platform distributed only as vendor installers from SolarWinds (2026-10-09). HOMONYM: Docker Hub solarwinds/orion is 'Deployed containers for the SolarWinds Orion product suite' (container-monitoring agent containers), not the platform; NuGet SolarWinds.Api is a third-party client (Panoramic Data Limited) and SolarWindsAPM.* are APM agents. Never map any of them.","solarwinds-serv-u":"Proprietary server distributed only as vendor installers from SolarWinds; checked npm, NuGet and Docker Hub 2026-10-09. HOMONYM: npm 'serv_u_ftp_server_6_4_0_5_corporate_edition_updated_mm5p' is not a SolarWinds package (spam name); never map.","solarwinds-web-help-desk":"Proprietary server distributed only as vendor installers from SolarWinds; npm, NuGet and Docker Hub have no Web Help Desk package (2026-10-09).","sonarqube-community":"pkg:docker/library/sonarqube ships the Community Build and the commercial Server editions as tags of one image (Hub full description lists community, developer, enterprise and datacenter tags), so the image name alone cannot identify which product an SBOM component is; refused as ambiguous rather than assigned to either. Checked hub.docker.com/v2/repositories/library/sonarqube/ on 2026-09-09.","sonarqube-server":"pkg:docker/library/sonarqube ships the Community Build and the commercial Server editions as tags of one image (Hub full description lists community, developer, enterprise and datacenter tags), so the image name alone cannot identify which product an SBOM component is; refused as ambiguous rather than assigned to either. Checked hub.docker.com/v2/repositories/library/sonarqube/ on 2026-09-09.","sonicos":"Proprietary firewall firmware (SonicWall SonicOS); distributed only from MySonicWall, checked Docker Hub library naming on 2026-09-09.","sonicwall-email-security":"Proprietary appliance software (SonicWall Email Security firmware); distributed only from MySonicWall, checked Docker Hub library naming on 2026-09-09.","sonicwall-email-security-appliances":"Hardware (SonicWall Email Security appliances); not a package, checked none on 2026-09-09.","sonicwall-firewalls":"Hardware (SonicWall TZ/NSa/NSsp appliances); not a package, checked none on 2026-09-09.","sonicwall-nsm":"Proprietary on-premises management server (SonicWall Network Security Manager On-Prem) delivered as a virtual appliance image from MySonicWall only; no public package registry or Docker Hub library image, checked 2026-10-11.","sonicwall-sma100":"Proprietary appliance (SonicWall SMA 100 series firmware); distributed only from MySonicWall, checked Docker Hub library naming on 2026-09-09.","sonicwall-sma1000":"Proprietary appliance (SonicWall SMA 1000 series firmware); distributed only from MySonicWall, checked Docker Hub library naming on 2026-09-09.","sonicwall-sonicwave":"Hardware (SonicWall SonicWave and SonicPoint access points); firmware distributed only through the managing firewall, Wireless Network Manager and MySonicWall, checked none on 2026-10-11.","sony-xperia":"Hardware (Sony Xperia handsets); not a package, checked none on 2026-09-09.","sophos-firewall":"Proprietary firewall firmware (Sophos Firewall OS); distributed only from Sophos Central/licensing portal, checked Docker Hub library naming on 2026-09-09.","sophos-firewall-appliances":"Hardware (Sophos XGS/XG/SG appliances); not a package, checked none on 2026-09-09.","sophos-utm":"Proprietary firewall firmware (Sophos UTM); distributed only from Sophos, checked Docker Hub library naming on 2026-09-09.","steamos":"Valve's appliance OS (SteamOS); distributed only as recovery images from Valve, no official container image (checked library/steamos on 2026-09-09).","surface":"Hardware (Microsoft Surface devices); not a package, checked none on 2026-09-09.","suse-linux-micro":"Commercial container-host OS (SUSE Linux Micro); images are served only from registry.suse.com, not Docker Hub (checked library/suse-linux-micro on 2026-09-09).","suse-manager":"Commercial management product (SUSE Manager / Multi-Linux Manager); distributed only through SUSE Customer Center and registry.suse.com, checked Docker Hub library naming on 2026-09-09.","synology-dsm":"NAS operating system distributed only from the Synology Download Center as .pat images, checked none on 2026-10-10.","tails":"Live-boot privacy OS (Tails); distributed only as ISO/USB images, no container image by design (checked library/tails on 2026-09-09).","tls":"Protocol specification (IETF TLS RFCs); a standard is not a package, checked none on 2026-09-09.","trend-micro-apex-central":"Proprietary server distributed from Trend Micro's Download Center (2026-10-10).","trend-micro-apex-one":"Proprietary server and agent distributed from Trend Micro's Download Center (2026-10-10). HOMONYM: Docker Hub 'trendmicro/*' images are Cloud One / Vision One components, not Apex One; never map.","truenas":"Storage appliance OS distributed as ISOs and update trains from truenas.com; it is assembled from many repos (truenas/middleware is only the middleware component) and has no official container image (library/truenas 404 on 2026-09-09).","tvos":"Proprietary OS (Apple tvOS); distributed only through Apple software update, checked none on 2026-09-09.","ubiquiti-unifi":"Hardware (Ubiquiti UniFi devices); firmware distributed only from ui.com, checked none on 2026-10-10.","vcenter":"Proprietary management appliance (VMware vCenter Server); distributed only from the Broadcom support portal, checked Docker Hub library naming on 2026-09-09.","veeam-backup-and-replication":"Proprietary backup product (Veeam Backup & Replication); distributed only from veeam.com downloads, checked Docker Hub library and NuGet naming on 2026-09-09.","veeam-backup-for-microsoft-365":"Proprietary backup product (Veeam Backup for Microsoft 365); distributed only from veeam.com downloads, checked none on 2026-09-09.","veeam-one":"Proprietary monitoring product (Veeam ONE); distributed only from veeam.com downloads, checked none on 2026-09-09.","virtualbox":"Desktop hypervisor (Oracle VirtualBox); distributed only as installers from virtualbox.org and OS repositories, checked Docker Hub library naming on 2026-09-09.","visionos":"Proprietary OS (Apple visionOS); distributed only through Apple software update, checked none on 2026-09-09.","visual-cobol":"Proprietary compiler suite (Rocket/Micro Focus Visual COBOL); distributed only from the vendor's licensing portal, checked NuGet and Docker Hub library naming on 2026-09-09.","visual-studio":"Proprietary IDE (Microsoft Visual Studio); distributed only through Microsoft's installer, checked Docker Hub library and NuGet naming on 2026-09-09.","vmware-aria-automation":"Proprietary appliance delivered through the Broadcom support portal; no public package registry. Checked 2026-10-10.","vmware-aria-operations":"Proprietary appliance delivered through the Broadcom support portal; no public package registry. Checked 2026-10-10.","vmware-cloud-foundation":"Proprietary platform bundle (VMware Cloud Foundation); distributed only from the Broadcom support portal, checked none on 2026-09-09.","vmware-harbor-registry":"Proprietary VMware Tanzu Application Service tile (VMware Harbor Registry) distributed only through the Broadcom support portal; the open-source Harbor project it wraps is a different product, checked Docker Hub library naming on 2026-09-09.","vmware-nsx":"Proprietary appliance images (OVA) delivered through the Broadcom support portal; no public package registry. Checked 2026-10-10.","vmware-srm":"Proprietary DR appliance (VMware Site Recovery Manager); distributed only from the Broadcom support portal, checked none on 2026-09-09.","vmware-tools":"The proprietary VMware Tools ISO/MSI is delivered through the Broadcom support portal and bundled with ESXi. HOMONYM: open-vm-tools (pkg:github/vmware/open-vm-tools, and the distro packages pkg:deb/debian/open-vm-tools, pkg:rpm/redhat/open-vm-tools) is the open-source Linux implementation that follows the distribution's lifecycle; Broadcom KB 313371 says the lifecycle matrix does not apply to it. Never map those purls here. Checked 2026-10-10.","watchguard-firebox":"Hardware and proprietary firmware (WatchGuard Firebox / Fireware); distributed only from WatchGuard's portal, checked none on 2026-09-09.","watchos":"Proprietary OS (Apple watchOS); distributed only through Apple software update, checked none on 2026-09-09.","windows":"Proprietary desktop OS (Windows client); distributed only as Microsoft installation media (Windows container base images are on mcr.microsoft.com, not Docker Hub; checked library/windows on 2026-09-09).","windows-embedded":"Proprietary embedded OS (Windows Embedded); distributed only through Microsoft OEM channels, checked none on 2026-09-09.","windows-powershell":"Windows PowerShell 5.1 is a built-in Windows component, not distributed as a package (the GitHub PowerShell/PowerShell repo and the powershell npm/nuget names are PowerShell 7, a different product), checked none on 2026-09-09.","windows-server":"Proprietary server OS (Windows Server); distributed only as Microsoft installation media (windows/servercore images live on mcr.microsoft.com, not Docker Hub; checked library/windows on 2026-09-09).","windows-server-core":"Proprietary server OS SKU (Windows Server Core); distributed only as Microsoft installation media (the servercore container image is on mcr.microsoft.com, not Docker Hub; checked library/windows on 2026-09-09).","xcp-ng":"Virtualization platform distributed as ISOs from xcp-ng.org; github.com/xcp-ng/xcp is only its issue tracker (\"Entry point for issues and wiki\"), not a source repo, and library/xcp-ng is 404 (checked 2026-09-09).","yocto":"Build system release series (Yocto Project) sourced from git.yoctoproject.org; it is a framework that produces images, not a package or container image (checked library/yocto on 2026-09-09).","zerto":"Proprietary DR platform (HPE Zerto); distributed only from the Zerto/HPE support portal, checked none on 2026-09-09.","zimbra":"Proprietary collaboration suite (Zimbra Collaboration); Zimbra publishes releases only on its own download and wiki pages with no public package registry, checked Docker Hub library naming on 2026-09-09.","zos":"Proprietary mainframe OS (IBM z/OS); distributed only through IBM Shopz, checked none on 2026-09-09.","zyxel-nas":"Hardware (Zyxel NAS models); firmware distributed only from Zyxel, checked none on 2026-09-09.","zyxel-usg":"Hardware and proprietary firmware (Zyxel USG/ZyWALL/VPN); distributed only from Zyxel, checked none on 2026-09-09."},"undisposed":[],"products":{"adonisjs":{"purl":["pkg:github/adonisjs/core","pkg:npm/%40adonisjs/core"],"sources":{"pkg:github/adonisjs/core":"upstream","pkg:npm/%40adonisjs/core":"upstream"}},"akeneo-pim":{"purl":["pkg:github/akeneo/pim-community-dev"],"sources":{"pkg:github/akeneo/pim-community-dev":"upstream"}},"alibaba-dragonwell":{"purl":["pkg:docker/alibabadragonwell/dragonwell","pkg:rpm/aliyun/java-1.8.0-alibaba-dragonwell?repository_url=http://mirrors.aliyun.com/alinux/2.1903/plus/x86_64/"],"sources":{"pkg:docker/alibabadragonwell/dragonwell":"upstream","pkg:rpm/aliyun/java-1.8.0-alibaba-dragonwell?repository_url=http://mirrors.aliyun.com/alinux/2.1903/plus/x86_64/":"upstream"}},"almalinux":{"purl":["pkg:docker/library/almalinux"],"sources":{"pkg:docker/library/almalinux":"override"},"basis":"pkg:docker/library/almalinux: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"The official build of AlmaLinux OS.\")."},"alpine-linux":{"purl":["pkg:swid/alpine?tag_id=alpine","pkg:docker/library/alpine"],"sources":{"pkg:swid/alpine?tag_id=alpine":"upstream","pkg:docker/library/alpine":"override"},"basis":"pkg:docker/library/alpine: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"A minimal Docker image based on Alpine Linux with a complete package i\")."},"amazon-cdk":{"purl":["pkg:npm/aws-cdk","pkg:golang/github.com/aws/aws-cdk-go/awscdk/v2","pkg:github/aws/aws-cdk-go"],"sources":{"pkg:npm/aws-cdk":"upstream","pkg:golang/github.com/aws/aws-cdk-go/awscdk/v2":"upstream","pkg:github/aws/aws-cdk-go":"upstream"}},"amazon-corretto":{"purl":["pkg:docker/library/amazoncorretto","pkg:github/corretto/corretto-27","pkg:github/corretto/corretto-26","pkg:github/corretto/corretto-25","pkg:github/corretto/corretto-24","pkg:github/corretto/corretto-23","pkg:github/corretto/corretto-22","pkg:github/corretto/corretto-21","pkg:github/corretto/corretto-20","pkg:github/corretto/corretto-19","pkg:github/corretto/corretto-18","pkg:github/corretto/corretto-17","pkg:github/corretto/corretto-11","pkg:github/corretto/corretto-8"],"sources":{"pkg:docker/library/amazoncorretto":"upstream","pkg:github/corretto/corretto-27":"upstream","pkg:github/corretto/corretto-26":"upstream","pkg:github/corretto/corretto-25":"upstream","pkg:github/corretto/corretto-24":"upstream","pkg:github/corretto/corretto-23":"upstream","pkg:github/corretto/corretto-22":"upstream","pkg:github/corretto/corretto-21":"upstream","pkg:github/corretto/corretto-20":"upstream","pkg:github/corretto/corretto-19":"upstream","pkg:github/corretto/corretto-18":"upstream","pkg:github/corretto/corretto-17":"upstream","pkg:github/corretto/corretto-11":"upstream","pkg:github/corretto/corretto-8":"upstream"}},"amazon-linux":{"purl":["pkg:docker/library/amazonlinux"],"sources":{"pkg:docker/library/amazonlinux":"upstream"}},"angular":{"purl":["pkg:npm/%40angular/core","pkg:github/angular/angular"],"sources":{"pkg:npm/%40angular/core":"upstream","pkg:github/angular/angular":"upstream"}},"angularjs":{"purl":["pkg:npm/angular","pkg:github/angular/angular.js"],"sources":{"pkg:npm/angular":"upstream","pkg:github/angular/angular.js":"upstream"}},"ansible":{"purl":["pkg:pypi/ansible","pkg:deb/debian/ansible","pkg:apk/alpine/ansible","pkg:github/ansible/ansible"],"sources":{"pkg:pypi/ansible":"upstream","pkg:deb/debian/ansible":"upstream","pkg:apk/alpine/ansible":"upstream","pkg:github/ansible/ansible":"upstream"}},"ansible-core":{"purl":["pkg:pypi/ansible-core"],"sources":{"pkg:pypi/ansible-core":"override"},"basis":"pkg:pypi/ansible-core: pypi.org/pypi/ansible-core/json verified live on 2026-09-09 (summary: \"Radically simple IT automation\"; project_urls point at github.com/ansible/ansible; docs.ansible.com installation guide names the ansible-core package). The GitHub repository ansible/ansible is already the upstream identifier of the ansible product and is not repeated here."},"ant":{"purl":["pkg:deb/debian/ant","pkg:deb/ubuntu/ant","pkg:github/apache/ant","pkg:maven/org.apache.ant/ant","pkg:rpm/fedora/ant"],"sources":{"pkg:deb/debian/ant":"upstream","pkg:deb/ubuntu/ant":"upstream","pkg:github/apache/ant":"upstream","pkg:maven/org.apache.ant/ant":"upstream","pkg:rpm/fedora/ant":"upstream"}},"apache-activemq":{"purl":["pkg:maven/org.apache.activemq/activemq-broker","pkg:maven/org.apache.activemq/activemq-client","pkg:maven/org.apache.activemq/activemq-all"],"sources":{"pkg:maven/org.apache.activemq/activemq-broker":"upstream","pkg:maven/org.apache.activemq/activemq-client":"override","pkg:maven/org.apache.activemq/activemq-all":"override"},"basis":"pkg:maven/org.apache.activemq/activemq-client and activemq-all: client and aggregate artifacts released with every ActiveMQ Classic version. Verified 2026-09-21: repo1.maven.org maven-metadata.xml exists for each coordinate and its version numbers follow the product's release lines. Added after an enterprise SBOM scanner asked the API for Java components by Maven coordinates on 2026-09-17."},"apache-airflow":{"purl":["pkg:docker/apache/airflow","pkg:docker/bitnami/airflow","pkg:oci/airflow?repository_url=cgr.dev/chainguard","pkg:pypi/apache-airflow"],"sources":{"pkg:docker/apache/airflow":"upstream","pkg:docker/bitnami/airflow":"upstream","pkg:oci/airflow?repository_url=cgr.dev/chainguard":"upstream","pkg:pypi/apache-airflow":"upstream"}},"apache-apisix":{"purl":["pkg:docker/apache/apisix","pkg:github/apache/apisix"],"sources":{"pkg:docker/apache/apisix":"override","pkg:github/apache/apisix":"override"},"basis":"pkg:docker/apache/apisix: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/apache/apisix/ on 2026-09-09 (Hub description: \"Apache APISIX: Cloud-Native API Gateway\"); org apache is the ASF's own: apisix.apache.org/docs/apisix/installation-guide/ names apache/apisix. | pkg:github/apache/apisix: github.com/apache/apisix verified live on 2026-09-09 (og:title \"GitHub - apache/apisix: The Cloud-Native API Gateway and AI Gateway\")."},"apache-artemis":{"purl":["pkg:github/apache/artemis"],"sources":{"pkg:github/apache/artemis":"upstream"}},"apache-camel":{"purl":["pkg:docker/apache/camel","pkg:github/apache/camel","pkg:maven/org.apache.camel/camel"],"sources":{"pkg:docker/apache/camel":"upstream","pkg:github/apache/camel":"upstream","pkg:maven/org.apache.camel/camel":"upstream"}},"apache-cassandra":{"purl":["pkg:github/apache/cassandra","pkg:maven/org.apache.cassandra/apache-cassandra","pkg:docker/library/cassandra"],"sources":{"pkg:github/apache/cassandra":"upstream","pkg:maven/org.apache.cassandra/apache-cassandra":"upstream","pkg:docker/library/cassandra":"override"},"basis":"pkg:docker/library/cassandra: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Apache Cassandra is an open-source distributed storage system.\")."},"apache-celeborn":{"purl":["pkg:github/apache/celeborn"],"sources":{"pkg:github/apache/celeborn":"upstream"}},"apache-commons":{"purl":["pkg:maven/org.apache.commons/commons-lang3","pkg:maven/commons-io/commons-io","pkg:maven/org.apache.commons/commons-collections4","pkg:maven/org.apache.commons/commons-text","pkg:maven/org.apache.commons/commons-compress","pkg:maven/commons-codec/commons-codec","pkg:maven/commons-beanutils/commons-beanutils"],"sources":{"pkg:maven/org.apache.commons/commons-lang3":"override","pkg:maven/commons-io/commons-io":"override","pkg:maven/org.apache.commons/commons-collections4":"override","pkg:maven/org.apache.commons/commons-text":"override","pkg:maven/org.apache.commons/commons-compress":"override","pkg:maven/commons-codec/commons-codec":"override","pkg:maven/commons-beanutils/commons-beanutils":"override"},"basis":"One artifact per tracked cycle (lang-3, io-2, collections-4, text-1, compress-1, codec-1, beanutils-1), the same coordinates tools/verify-custom-products.mjs checks. pkg:maven/org.apache.commons/commons-lang3: repo1.maven.org/maven2/org/apache/commons/commons-lang3/maven-metadata.xml verified live on 2026-09-09 (latest 3.20.0; POM name \"Apache Commons Lang\"). | pkg:maven/commons-io/commons-io: repo1.maven.org/maven2/commons-io/commons-io/maven-metadata.xml verified live on 2026-09-09 (latest 2.22.0; POM name \"Apache Commons IO\"). | pkg:maven/org.apache.commons/commons-collections4: .../commons-collections4/maven-metadata.xml verified live on 2026-09-09 (latest 4.6.0; POM name \"Apache Commons Collections\"). | pkg:maven/org.apache.commons/commons-text: .../commons-text/maven-metadata.xml verified live on 2026-09-09 (latest 1.15.0; POM name \"Apache Commons Text\"). | pkg:maven/org.apache.commons/commons-compress: .../commons-compress/maven-metadata.xml verified live on 2026-09-09 (latest 1.28.0; POM description \"Apache Commons Compress defines an API for working with compression and archive formats...\"). | pkg:maven/commons-codec/commons-codec: repo1.maven.org/maven2/commons-codec/commons-codec/maven-metadata.xml verified live on 2026-09-09 (latest 1.22.1; POM name \"Apache Commons Codec\"). | pkg:maven/commons-beanutils/commons-beanutils: repo1.maven.org/maven2/commons-beanutils/commons-beanutils/maven-metadata.xml verified live on 2026-09-09 (latest 1.11.0; POM name \"Apache Commons BeanUtils\")."},"apache-couchdb":{"purl":["pkg:github/apache/couchdb","pkg:docker/apache/couchdb","pkg:docker/library/couchdb","pkg:docker/bitnami/couchdb","pkg:docker/rapidfort/couchdb-official"],"sources":{"pkg:github/apache/couchdb":"upstream","pkg:docker/apache/couchdb":"upstream","pkg:docker/library/couchdb":"upstream","pkg:docker/bitnami/couchdb":"upstream","pkg:docker/rapidfort/couchdb-official":"upstream"}},"apache-cxf":{"purl":["pkg:maven/org.apache.cxf/cxf-core"],"sources":{"pkg:maven/org.apache.cxf/cxf-core":"registry"},"basis":"pkg:maven/org.apache.cxf/cxf-core: the core artifact every CXF deployment carries; versions on repo1.maven.org match the cycles served (read 2026-10-14)."},"apache-flink":{"purl":["pkg:github/apache/flink","pkg:docker/library/flink","pkg:docker/apache/flink"],"sources":{"pkg:github/apache/flink":"upstream","pkg:docker/library/flink":"upstream","pkg:docker/apache/flink":"upstream"}},"apache-groovy":{"purl":["pkg:maven/org.apache.groovy/groovy","pkg:maven/org.codehaus.groovy/groovy","pkg:maven/org.codehaus.groovy/groovy-all","pkg:docker/library/groovy"],"sources":{"pkg:maven/org.apache.groovy/groovy":"upstream","pkg:maven/org.codehaus.groovy/groovy":"upstream","pkg:maven/org.codehaus.groovy/groovy-all":"upstream","pkg:docker/library/groovy":"override"},"basis":"pkg:docker/library/groovy: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Apache Groovy is a multi-faceted language for the Java platform.\")."},"apache-hadoop":{"purl":["pkg:docker/apache/hadoop","pkg:github/apache/hadoop","pkg:maven/org.apache.hadoop/hadoop-core"],"sources":{"pkg:docker/apache/hadoop":"upstream","pkg:github/apache/hadoop":"upstream","pkg:maven/org.apache.hadoop/hadoop-core":"upstream"}},"apache-hop":{"purl":["pkg:docker/apache/hop","pkg:github/apache/hop"],"sources":{"pkg:docker/apache/hop":"override","pkg:github/apache/hop":"override"},"basis":"pkg:docker/apache/hop: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/apache/hop/ on 2026-09-09 (Hub description: \"Apache Hop\"); org apache is the ASF's own (proven via apisix.apache.org naming apache/apisix in the same org; hop.apache.org's docker page URL returned 404 on 2026-09-09). | pkg:github/apache/hop: github.com/apache/hop verified live on 2026-09-09 (og:title \"GitHub - apache/hop: Hop Orchestration Platform\"; hop.apache.org/download/ links github.com/apache/hop)."},"apache-http-server":{"purl":["pkg:github/apache/httpd","pkg:rpm/fedora/httpd","pkg:rpm/redhat/httpd","pkg:generic/httpd","pkg:docker/library/httpd"],"sources":{"pkg:github/apache/httpd":"upstream","pkg:rpm/fedora/httpd":"upstream","pkg:rpm/redhat/httpd":"upstream","pkg:generic/httpd":"override","pkg:docker/library/httpd":"override"},"basis":"pkg:generic/httpd: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/httpd: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"The Apache HTTP Server Project\")."},"apache-kafka":{"purl":["pkg:github/apache/kafka"],"sources":{"pkg:github/apache/kafka":"upstream"}},"apache-lucene":{"purl":["pkg:maven/org.apache.lucene/lucene-core","pkg:github/apache/lucene"],"sources":{"pkg:maven/org.apache.lucene/lucene-core":"override","pkg:github/apache/lucene":"override"},"basis":"pkg:maven/org.apache.lucene/lucene-core: repo1.maven.org/maven2/org/apache/lucene/lucene-core/maven-metadata.xml verified live on 2026-09-09 (latest 10.5.1; POM name \"Apache Lucene (module: core)\"; lucene.apache.org/core/downloads.html names the lucene-core jar). | pkg:github/apache/lucene: github.com/apache/lucene verified live on 2026-09-09 (og:title \"GitHub - apache/lucene: Apache Lucene open-source search software\")."},"apache-maven":{"purl":["pkg:deb/debian/maven","pkg:deb/ubuntu/maven","pkg:github/apache/maven","pkg:maven/org.apache.maven/maven","pkg:rpm/opensuse/maven"],"sources":{"pkg:deb/debian/maven":"upstream","pkg:deb/ubuntu/maven":"upstream","pkg:github/apache/maven":"upstream","pkg:maven/org.apache.maven/maven":"upstream","pkg:rpm/opensuse/maven":"upstream"}},"apache-nifi":{"purl":["pkg:docker/apache/nifi","pkg:github/apache/nifi","pkg:maven/org.apache.nifi/nifi"],"sources":{"pkg:docker/apache/nifi":"upstream","pkg:github/apache/nifi":"upstream","pkg:maven/org.apache.nifi/nifi":"upstream"}},"apache-pulsar":{"purl":["pkg:docker/apachepulsar/pulsar","pkg:maven/org.apache.pulsar/pulsar","pkg:maven/org.apache.pulsar/pulsar-broker","pkg:github/apache/pulsar"],"sources":{"pkg:docker/apachepulsar/pulsar":"override","pkg:maven/org.apache.pulsar/pulsar":"override","pkg:maven/org.apache.pulsar/pulsar-broker":"override","pkg:github/apache/pulsar":"override"},"basis":"pkg:docker/apachepulsar/pulsar: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/apachepulsar/pulsar/ on 2026-09-09 (Hub description: \"Apache Pulsar - Distributed pub/sub messaging system\"); org apachepulsar is the project's own: pulsar.apache.org/docs/next/getting-started-docker/ names apachepulsar/pulsar. | pkg:maven/org.apache.pulsar/pulsar: repo1.maven.org/maven2/org/apache/pulsar/pulsar/maven-metadata.xml verified live on 2026-09-09 (latest 5.0.0-M1; POM name \"Apache Pulsar\", description \"Pulsar is a distributed pub-sub messaging platform...\"). | pkg:maven/org.apache.pulsar/pulsar-broker: repo1.maven.org/maven2/org/apache/pulsar/pulsar-broker/maven-metadata.xml verified live on 2026-09-09 (latest 5.0.0-M1; the broker module of the same release). | pkg:github/apache/pulsar: github.com/apache/pulsar verified live on 2026-09-09 (og:title \"GitHub - apache/pulsar: Apache Pulsar - distributed pub-sub messaging system\")."},"apache-spark":{"purl":["pkg:github/apache/spark","pkg:docker/library/spark"],"sources":{"pkg:github/apache/spark":"upstream","pkg:docker/library/spark":"override"},"basis":"pkg:docker/library/spark: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Apache Spark - A unified analytics engine for large-scale data process\")."},"apache-struts":{"purl":["pkg:maven/org.apache.struts/struts2-core"],"sources":{"pkg:maven/org.apache.struts/struts2-core":"upstream"}},"apache-tapestry":{"purl":["pkg:maven/org.apache.tapestry/tapestry-core"],"sources":{"pkg:maven/org.apache.tapestry/tapestry-core":"registry"}},"api-platform":{"purl":["pkg:composer/api-platform/core","pkg:github/api-platform/core"],"sources":{"pkg:composer/api-platform/core":"upstream","pkg:github/api-platform/core":"upstream"}},"arangodb":{"purl":["pkg:generic/arangodb","pkg:docker/library/arangodb"],"sources":{"pkg:generic/arangodb":"override","pkg:docker/library/arangodb":"override"},"basis":"pkg:generic/arangodb: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/arangodb: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"ArangoDB - a scalable graph database system to drive value from connec\")."},"argo-cd":{"purl":["pkg:docker/argoproj/argocd","pkg:oci/argocd?repository_url=quay.io/argoproj","pkg:oci/argocd?repository_url=ghcr.io/argoproj","pkg:github/argoproj/argo-cd"],"sources":{"pkg:docker/argoproj/argocd":"upstream","pkg:oci/argocd?repository_url=quay.io/argoproj":"upstream","pkg:oci/argocd?repository_url=ghcr.io/argoproj":"upstream","pkg:github/argoproj/argo-cd":"upstream"}},"argo-workflows":{"purl":["pkg:github/argoproj/argo-workflows","pkg:docker/argoproj/argocli","pkg:docker/argoproj/workflow-controller"],"sources":{"pkg:github/argoproj/argo-workflows":"upstream","pkg:docker/argoproj/argocli":"upstream","pkg:docker/argoproj/workflow-controller":"upstream"}},"authentik":{"purl":["pkg:github/goauthentik/authentik","pkg:docker/authentik/server"],"sources":{"pkg:github/goauthentik/authentik":"upstream","pkg:docker/authentik/server":"upstream"}},"axios":{"purl":["pkg:npm/axios","pkg:github/axios/axios"],"sources":{"pkg:npm/axios":"registry","pkg:github/axios/axios":"override"},"basis":"pkg:npm/axios: registry.npmjs.org/axios verified live on 2026-09-10 (dist-tag latest 1.20.0, v0x 0.33.0; repository git+https://github.com/axios/axios.git). pkg:github/axios/axios: api.github.com/repos/axios/axios verified live on 2026-09-10 (default branch v1.x, the project primary repository; its tags were cross-checked against the npm publish dates served)."},"azul-zulu":{"purl":["pkg:docker/library/azul-zulu","pkg:docker/azul/zulu-openjdk"],"sources":{"pkg:docker/library/azul-zulu":"override","pkg:docker/azul/zulu-openjdk":"override"},"basis":"pkg:docker/library/azul-zulu: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/azul-zulu/ on 2026-09-09 (Hub description: \"Azul Zulu is a fully tested, compatibility verified, and trusted binary distribution of OpenJDK.\"; docs.azul.com/core/install/linux-ca-docker says \"Since early 2026, Azul Zulu CA images are available as Docker Official Images on hub.docker.com/_/azul-zulu\"). | pkg:docker/azul/zulu-openjdk: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/azul/zulu-openjdk/ on 2026-09-09 (Hub description: \"Azul Zulu on Ubuntu Linux\"); org azul is Azul's own: docs.azul.com/core/install/linux-ca-docker names azul/zulu-openjdk."},"backdrop":{"purl":["pkg:docker/library/backdrop"],"sources":{"pkg:docker/library/backdrop":"override"},"basis":"pkg:docker/library/backdrop: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"The comprehensive CMS for small to medium sized businesses and non-pro\")."},"bamboo":{"purl":["pkg:docker/atlassian/bamboo"],"sources":{"pkg:docker/atlassian/bamboo":"override"},"basis":"pkg:docker/atlassian/bamboo: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/atlassian/bamboo/ on 2026-09-09 (Hub description field is empty; last pushed 2026-09-05); org atlassian is Atlassian's own: bitbucket.org/atlassian-docker/docker-bamboo-server README states the image is published as atlassian/bamboo (atlassian/bamboo-server ceased updates 2024-02-15)."},"bazel":{"purl":["pkg:github/bazelbuild/bazel","pkg:oci/bazel?repository_url=cgr.dev/chainguard"],"sources":{"pkg:github/bazelbuild/bazel":"upstream","pkg:oci/bazel?repository_url=cgr.dev/chainguard":"upstream"}},"beats":{"purl":["pkg:generic/filebeat","pkg:generic/metricbeat","pkg:generic/auditbeat","pkg:generic/heartbeat","pkg:generic/packetbeat"],"sources":{"pkg:generic/filebeat":"override","pkg:generic/metricbeat":"override","pkg:generic/auditbeat":"override","pkg:generic/heartbeat":"override","pkg:generic/packetbeat":"override"},"basis":"pkg:generic/filebeat: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:generic/metricbeat: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:generic/auditbeat: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:generic/heartbeat: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:generic/packetbeat: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"behat":{"purl":["pkg:composer/behat/behat","pkg:github/behat/behat"],"sources":{"pkg:composer/behat/behat":"upstream","pkg:github/behat/behat":"upstream"}},"bellsoft-liberica":{"purl":["pkg:docker/bellsoft/liberica-openjdk-alpine","pkg:docker/bellsoft/liberica-openjre-alpine","pkg:docker/bellsoft/liberica-openjdk-alpine-musl","pkg:docker/bellsoft/liberica-openjre-alpine-musl","pkg:docker/bellsoft/liberica-openjdk-debian","pkg:docker/bellsoft/liberica-openjre-debian","pkg:docker/bellsoft/liberica-openjdk-centos","pkg:docker/bellsoft/liberica-openjre-centos","pkg:oci/liberica-openjdk-alpine?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjre-alpine?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjdk-alpine-musl?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjre-alpine-musl?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjdk-debian?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjre-debian?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjdk-centos?repository_url=ghcr.io/bell-sw","pkg:oci/liberica-openjre-centos?repository_url=ghcr.io/bell-sw","pkg:scoop/liberica-jdk","pkg:scoop/liberica-lts-jdk","pkg:scoop/liberica-lite-jdk","pkg:scoop/liberica-lite-lts-jdk","pkg:scoop/liberica-full-jdk","pkg:scoop/liberica-full-lts-jdk","pkg:scoop/liberica-jre","pkg:scoop/liberica-lts-jre","pkg:scoop/liberica-full-jre","pkg:scoop/liberica-full-lts-jre","pkg:scoop/liberica8-jre","pkg:scoop/liberica8-jdk","pkg:scoop/liberica8-full-jre","pkg:scoop/liberica8-full-jdk","pkg:scoop/liberica11-jre","pkg:scoop/liberica11-jdk","pkg:scoop/liberica11-full-jre","pkg:scoop/liberica11-full-jdk","pkg:scoop/liberica11-lite-jdk","pkg:scoop/liberica12-jre","pkg:scoop/liberica12-jdk","pkg:scoop/liberica12-lite-jdk","pkg:scoop/liberica13-jre","pkg:scoop/liberica13-jdk","pkg:scoop/liberica13-full-jre","pkg:scoop/liberica13-full-jdk","pkg:scoop/liberica13-lite-jdk","pkg:scoop/liberica14-jre","pkg:scoop/liberica14-jdk","pkg:scoop/liberica14-full-jre","pkg:scoop/liberica14-full-jdk","pkg:scoop/liberica14-lite-jdk","pkg:scoop/liberica15-jre","pkg:scoop/liberica15-jdk","pkg:scoop/liberica15-full-jre","pkg:scoop/liberica15-lite-jdk","pkg:scoop/liberica15-full-jdk","pkg:scoop/liberica16-jre","pkg:scoop/liberica16-jdk","pkg:scoop/liberica16-full-jre","pkg:scoop/liberica16-full-jdk","pkg:scoop/liberica16-lite-jdk","pkg:scoop/liberica17-jre","pkg:scoop/liberica17-jdk","pkg:scoop/liberica17-full-jre","pkg:scoop/liberica17-full-jdk","pkg:scoop/liberica17-lite-jdk","pkg:chocolatey/liberica11jdk","pkg:chocolatey/liberica11jdkfull","pkg:chocolatey/liberica11jre","pkg:chocolatey/liberica11jrefull","pkg:chocolatey/liberica17jdk","pkg:chocolatey/liberica17jdkfull","pkg:chocolatey/liberica17jdklite","pkg:chocolatey/liberica17jre","pkg:chocolatey/liberica17jrefull","pkg:chocolatey/liberica21jdk","pkg:chocolatey/liberica21jdkfull","pkg:chocolatey/liberica21jdklite","pkg:chocolatey/liberica21jre","pkg:chocolatey/liberica21jrefull","pkg:chocolatey/liberica8jdk","pkg:chocolatey/liberica8jre","pkg:chocolatey/libericajdk","pkg:chocolatey/libericajdkfull","pkg:chocolatey/libericajdklite","pkg:chocolatey/libericajre","pkg:chocolatey/libericajrefull","pkg:winget/BellSoft.LibericaJDK.8","pkg:winget/BellSoft.LibericaJDK.11","pkg:winget/BellSoft.LibericaJDK.14","pkg:winget/BellSoft.LibericaJDK.15","pkg:winget/BellSoft.LibericaJDK.16","pkg:winget/BellSoft.LibericaJDK.17","pkg:winget/BellSoft.LibericaJDK.18","pkg:winget/BellSoft.LibericaJDK.19","pkg:apk/alpine/bellsoft-java11?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java11-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java11-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java11-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java15?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java15-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java15-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java16?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java16-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java16-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java16-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java17?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java17-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java17-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java17-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java18?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java18-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java18-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java18-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java19?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java19-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java19-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java19-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java20?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java20-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java20-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java20-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java21?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java21-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java21-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java21-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java22?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java22-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java22-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java22-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java23?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java23-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java23-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java23-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java8?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java8-lite?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java8-runtime?repository_url=https://apk.bell-sw.com/main","pkg:apk/alpine/bellsoft-java8-runtime-lite?repository_url=https://apk.bell-sw.com/main","pkg:rpm/bellsoft-java11?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java11-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java11-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java11-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java11-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java12?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java12-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java13?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java13-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java13-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java13-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java13-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java14?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java14-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java14-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java14-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java14-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java15?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java15-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java15-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java15-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java15-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java16?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java16-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java16-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java16-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java16-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java17?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java17-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java17-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java17-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java17-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java18?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java18-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java18-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java18-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java18-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java19?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java19-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java19-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java19-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java19-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java20?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java20-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java20-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java20-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java20-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java21?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java21-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java21-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java21-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java21-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java22?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java22-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java22-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java22-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java22-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java23?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java23-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java23-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java23-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java23-runtime-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java8?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java8-full?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java8-lite?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java8-runtime?repository_url=https://yum.bell-sw.com","pkg:rpm/bellsoft-java8-runtime-full?repository_url=https://yum.bell-sw.com"],"sources":{"pkg:docker/bellsoft/liberica-openjdk-alpine":"upstream","pkg:docker/bellsoft/liberica-openjre-alpine":"upstream","pkg:docker/bellsoft/liberica-openjdk-alpine-musl":"upstream","pkg:docker/bellsoft/liberica-openjre-alpine-musl":"upstream","pkg:docker/bellsoft/liberica-openjdk-debian":"upstream","pkg:docker/bellsoft/liberica-openjre-debian":"upstream","pkg:docker/bellsoft/liberica-openjdk-centos":"upstream","pkg:docker/bellsoft/liberica-openjre-centos":"upstream","pkg:oci/liberica-openjdk-alpine?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjre-alpine?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjdk-alpine-musl?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjre-alpine-musl?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjdk-debian?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjre-debian?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjdk-centos?repository_url=ghcr.io/bell-sw":"upstream","pkg:oci/liberica-openjre-centos?repository_url=ghcr.io/bell-sw":"upstream","pkg:scoop/liberica-jdk":"upstream","pkg:scoop/liberica-lts-jdk":"upstream","pkg:scoop/liberica-lite-jdk":"upstream","pkg:scoop/liberica-lite-lts-jdk":"upstream","pkg:scoop/liberica-full-jdk":"upstream","pkg:scoop/liberica-full-lts-jdk":"upstream","pkg:scoop/liberica-jre":"upstream","pkg:scoop/liberica-lts-jre":"upstream","pkg:scoop/liberica-full-jre":"upstream","pkg:scoop/liberica-full-lts-jre":"upstream","pkg:scoop/liberica8-jre":"upstream","pkg:scoop/liberica8-jdk":"upstream","pkg:scoop/liberica8-full-jre":"upstream","pkg:scoop/liberica8-full-jdk":"upstream","pkg:scoop/liberica11-jre":"upstream","pkg:scoop/liberica11-jdk":"upstream","pkg:scoop/liberica11-full-jre":"upstream","pkg:scoop/liberica11-full-jdk":"upstream","pkg:scoop/liberica11-lite-jdk":"upstream","pkg:scoop/liberica12-jre":"upstream","pkg:scoop/liberica12-jdk":"upstream","pkg:scoop/liberica12-lite-jdk":"upstream","pkg:scoop/liberica13-jre":"upstream","pkg:scoop/liberica13-jdk":"upstream","pkg:scoop/liberica13-full-jre":"upstream","pkg:scoop/liberica13-full-jdk":"upstream","pkg:scoop/liberica13-lite-jdk":"upstream","pkg:scoop/liberica14-jre":"upstream","pkg:scoop/liberica14-jdk":"upstream","pkg:scoop/liberica14-full-jre":"upstream","pkg:scoop/liberica14-full-jdk":"upstream","pkg:scoop/liberica14-lite-jdk":"upstream","pkg:scoop/liberica15-jre":"upstream","pkg:scoop/liberica15-jdk":"upstream","pkg:scoop/liberica15-full-jre":"upstream","pkg:scoop/liberica15-lite-jdk":"upstream","pkg:scoop/liberica15-full-jdk":"upstream","pkg:scoop/liberica16-jre":"upstream","pkg:scoop/liberica16-jdk":"upstream","pkg:scoop/liberica16-full-jre":"upstream","pkg:scoop/liberica16-full-jdk":"upstream","pkg:scoop/liberica16-lite-jdk":"upstream","pkg:scoop/liberica17-jre":"upstream","pkg:scoop/liberica17-jdk":"upstream","pkg:scoop/liberica17-full-jre":"upstream","pkg:scoop/liberica17-full-jdk":"upstream","pkg:scoop/liberica17-lite-jdk":"upstream","pkg:chocolatey/liberica11jdk":"upstream","pkg:chocolatey/liberica11jdkfull":"upstream","pkg:chocolatey/liberica11jre":"upstream","pkg:chocolatey/liberica11jrefull":"upstream","pkg:chocolatey/liberica17jdk":"upstream","pkg:chocolatey/liberica17jdkfull":"upstream","pkg:chocolatey/liberica17jdklite":"upstream","pkg:chocolatey/liberica17jre":"upstream","pkg:chocolatey/liberica17jrefull":"upstream","pkg:chocolatey/liberica21jdk":"upstream","pkg:chocolatey/liberica21jdkfull":"upstream","pkg:chocolatey/liberica21jdklite":"upstream","pkg:chocolatey/liberica21jre":"upstream","pkg:chocolatey/liberica21jrefull":"upstream","pkg:chocolatey/liberica8jdk":"upstream","pkg:chocolatey/liberica8jre":"upstream","pkg:chocolatey/libericajdk":"upstream","pkg:chocolatey/libericajdkfull":"upstream","pkg:chocolatey/libericajdklite":"upstream","pkg:chocolatey/libericajre":"upstream","pkg:chocolatey/libericajrefull":"upstream","pkg:winget/BellSoft.LibericaJDK.8":"upstream","pkg:winget/BellSoft.LibericaJDK.11":"upstream","pkg:winget/BellSoft.LibericaJDK.14":"upstream","pkg:winget/BellSoft.LibericaJDK.15":"upstream","pkg:winget/BellSoft.LibericaJDK.16":"upstream","pkg:winget/BellSoft.LibericaJDK.17":"upstream","pkg:winget/BellSoft.LibericaJDK.18":"upstream","pkg:winget/BellSoft.LibericaJDK.19":"upstream","pkg:apk/alpine/bellsoft-java11?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java11-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java11-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java11-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java15?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java15-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java15-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java16?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java16-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java16-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java16-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java17?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java17-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java17-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java17-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java18?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java18-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java18-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java18-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java19?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java19-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java19-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java19-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java20?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java20-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java20-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java20-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java21?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java21-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java21-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java21-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java22?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java22-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java22-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java22-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java23?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java23-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java23-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java23-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java8?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java8-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java8-runtime?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:apk/alpine/bellsoft-java8-runtime-lite?repository_url=https://apk.bell-sw.com/main":"upstream","pkg:rpm/bellsoft-java11?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java11-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java11-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java11-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java11-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java12?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java12-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java13?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java13-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java13-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java13-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java13-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java14?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java14-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java14-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java14-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java14-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java15?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java15-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java15-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java15-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java15-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java16?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java16-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java16-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java16-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java16-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java17?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java17-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java17-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java17-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java17-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java18?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java18-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java18-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java18-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java18-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java19?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java19-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java19-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java19-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java19-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java20?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java20-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java20-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java20-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java20-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java21?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java21-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java21-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java21-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java21-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java22?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java22-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java22-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java22-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java22-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java23?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java23-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java23-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java23-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java23-runtime-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java8?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java8-full?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java8-lite?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java8-runtime?repository_url=https://yum.bell-sw.com":"upstream","pkg:rpm/bellsoft-java8-runtime-full?repository_url=https://yum.bell-sw.com":"upstream"}},"bigbluebutton":{"purl":["pkg:github/bigbluebutton/bigbluebutton"],"sources":{"pkg:github/bigbluebutton/bigbluebutton":"override"},"basis":"pkg:github/bigbluebutton/bigbluebutton: github.com/bigbluebutton/bigbluebutton verified live on 2026-09-09 (og:title \"GitHub - bigbluebutton/bigbluebutton: A complete web conferencing system for virtual classes and more!\"; docs.bigbluebutton.org/development/guide/ links this repo). No Docker Hub image: library/bigbluebutton and bigbluebutton/bigbluebutton both 404 on 2026-09-09."},"bind-9":{"purl":["pkg:docker/internetsystemsconsortium/bind9"],"sources":{"pkg:docker/internetsystemsconsortium/bind9":"upstream"}},"bitbucket":{"purl":["pkg:docker/atlassian/bitbucket"],"sources":{"pkg:docker/atlassian/bitbucket":"override"},"basis":"pkg:docker/atlassian/bitbucket: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/atlassian/bitbucket/ on 2026-09-09 (Hub description field is empty; last pushed 2026-09-07); org atlassian is Atlassian's own: bitbucket.org/atlassian-docker/docker-atlassian-bitbucket-server README states the image is published as atlassian/bitbucket (atlassian/bitbucket-server ceased updates 2024-02-15)."},"bitcoin-core":{"purl":["pkg:github/bitcoin/bitcoin"],"sources":{"pkg:github/bitcoin/bitcoin":"override"},"basis":"pkg:github/bitcoin/bitcoin: github.com/bitcoin/bitcoin verified live on 2026-09-09 (og:title \"GitHub - bitcoin/bitcoin: Bitcoin Core integration/staging tree\")."},"bootstrap":{"purl":["pkg:npm/bootstrap","pkg:nuget/bootstrap","pkg:gem/bootstrap","pkg:composer/twbs/bootstrap","pkg:github/twbs/bootstrap"],"sources":{"pkg:npm/bootstrap":"upstream","pkg:nuget/bootstrap":"upstream","pkg:gem/bootstrap":"upstream","pkg:composer/twbs/bootstrap":"upstream","pkg:github/twbs/bootstrap":"upstream"}},"boundary":{"purl":["pkg:golang/github.com/hashicorp/boundary","pkg:docker/hashicorp/boundary","pkg:github/hashicorp/boundary"],"sources":{"pkg:golang/github.com/hashicorp/boundary":"override","pkg:docker/hashicorp/boundary":"override","pkg:github/hashicorp/boundary":"override"},"basis":"pkg:golang/github.com/hashicorp/boundary: proxy.golang.org/github.com/hashicorp/boundary/@v/list verified live on 2026-09-09 (81 versions). | pkg:docker/hashicorp/boundary: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/hashicorp/boundary/ on 2026-09-09 (Hub description: \"Boundary provides simple and secure access to hosts and services.\"); org hashicorp is HashiCorp's own: developer.hashicorp.com/boundary/install names hashicorp/boundary. | pkg:github/hashicorp/boundary: github.com/hashicorp/boundary verified live on 2026-09-09 (og:title \"GitHub - hashicorp/boundary: Boundary enables identity-based access management for dynamic infrastructure.\")."},"bun":{"purl":["pkg:docker/oven/bun","pkg:github/oven-sh/bun","pkg:brew/oven-sh/bun/bun","pkg:npm/bun","pkg:scoop/bun","pkg:generic/bun"],"sources":{"pkg:docker/oven/bun":"upstream","pkg:github/oven-sh/bun":"upstream","pkg:brew/oven-sh/bun/bun":"upstream","pkg:npm/bun":"upstream","pkg:scoop/bun":"upstream","pkg:generic/bun":"override"},"basis":"pkg:generic/bun: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"cachet":{"purl":["pkg:composer/cachethq/cachet","pkg:github/cachethq/cachet"],"sources":{"pkg:composer/cachethq/cachet":"upstream","pkg:github/cachethq/cachet":"upstream"}},"caddy":{"purl":["pkg:alpm/caddy","pkg:apk/alpine/caddy","pkg:brew/caddy","pkg:chocolatey/caddy","pkg:deb/debian/caddy","pkg:deb/ubuntu/caddy","pkg:docker/library/caddy","pkg:github/caddyserver/caddy","pkg:golang/github.com/caddyserver/caddy/v2","pkg:oci/caddy?repository_url=quay.io/repository/caddy","pkg:rpm/fedora/caddy","pkg:scoop/caddy"],"sources":{"pkg:alpm/caddy":"upstream","pkg:apk/alpine/caddy":"upstream","pkg:brew/caddy":"upstream","pkg:chocolatey/caddy":"upstream","pkg:deb/debian/caddy":"upstream","pkg:deb/ubuntu/caddy":"upstream","pkg:docker/library/caddy":"upstream","pkg:github/caddyserver/caddy":"upstream","pkg:golang/github.com/caddyserver/caddy/v2":"upstream","pkg:oci/caddy?repository_url=quay.io/repository/caddy":"upstream","pkg:rpm/fedora/caddy":"upstream","pkg:scoop/caddy":"upstream"}},"cakephp":{"purl":["pkg:composer/cakephp/cakephp","pkg:github/cakephp/cakephp"],"sources":{"pkg:composer/cakephp/cakephp":"override","pkg:github/cakephp/cakephp":"override"},"basis":"pkg:composer/cakephp/cakephp: repo.packagist.org/p2/cakephp/cakephp.json verified live on 2026-09-09 (description: \"The CakePHP framework\"; homepage cakephp.org; version 5.4.2). | pkg:github/cakephp/cakephp: github.com/cakephp/cakephp verified live on 2026-09-09 (og:title \"GitHub - cakephp/cakephp: CakePHP: The Rapid Development Framework for PHP - Official Repository\")."},"calico":{"purl":["pkg:github/projectcalico/calico","pkg:docker/calico/cni"],"sources":{"pkg:github/projectcalico/calico":"upstream","pkg:docker/calico/cni":"upstream"}},"centos":{"purl":["pkg:docker/library/centos"],"sources":{"pkg:docker/library/centos":"override"},"basis":"pkg:docker/library/centos: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"DEPRECATED; The official build of CentOS.\"). pkg:docker/library/centos: image marked DEPRECATED on Hub (successor (none: CentOS Linux ended)); an SBOM naming it is still this product."},"centreon":{"purl":["pkg:github/centreon/centreon"],"sources":{"pkg:github/centreon/centreon":"override"},"basis":"pkg:github/centreon/centreon: github.com/centreon/centreon verified live on 2026-09-09 (og:title \"GitHub - centreon/centreon: Centreon is a network, system and application monitoring tool...\"; docs.centreon.com links the github.com/centreon org). No Docker Hub image: centreon/centreon 404 on 2026-09-09."},"ceph":{"purl":["pkg:github/ceph/ceph"],"sources":{"pkg:github/ceph/ceph":"upstream"},"basis":"github.com/ceph/ceph is the project's source repository (GitHub API repos/ceph/ceph read 2026-09-21, not archived); release tags carry the version numbers we track. Upstream lists no identifiers for the product."},"cert-manager":{"purl":["pkg:golang/github.com/cert-manager/cert-manager","pkg:github/cert-manager/cert-manager"],"sources":{"pkg:golang/github.com/cert-manager/cert-manager":"override","pkg:github/cert-manager/cert-manager":"override"},"basis":"pkg:golang/github.com/cert-manager/cert-manager: proxy.golang.org/github.com/cert-manager/cert-manager/@v/list verified live on 2026-09-09 (260 versions). | pkg:github/cert-manager/cert-manager: github.com/cert-manager/cert-manager verified live on 2026-09-09 (og:title \"GitHub - cert-manager/cert-manager: Automatically provision and manage TLS certificates in Kubernetes\"). Images are on quay.io, not Docker Hub (library/cert-manager 404)."},"cfengine":{"purl":["pkg:brew/cfengine"],"sources":{"pkg:brew/cfengine":"upstream"}},"checkmk":{"purl":["pkg:github/Checkmk/checkmk"],"sources":{"pkg:github/Checkmk/checkmk":"upstream"}},"chef-infra-client":{"purl":["pkg:gem/chef","pkg:github/chef/chef"],"sources":{"pkg:gem/chef":"override","pkg:github/chef/chef":"override"},"basis":"pkg:gem/chef: rubygems.org/api/v1/gems/chef.json verified live on 2026-09-09 (info: \"A systems integration framework, built to bring the benefits of configuration management to your entire infrastructure.\"; homepage chef.io; source github.com/chef/chef; version 19.3.15 matches the tracked cycle 19 latest). | pkg:github/chef/chef: github.com/chef/chef verified live on 2026-09-09 (og:title \"GitHub - chef/chef: Chef Infra, a powerful automation platform...\")."},"chef-infra-server":{"purl":["pkg:github/chef/chef-server"],"sources":{"pkg:github/chef/chef-server":"override"},"basis":"pkg:github/chef/chef-server: github.com/chef/chef-server verified live on 2026-09-09 (og:title \"GitHub - chef/chef-server: Chef Infra Server is a hub for configuration data...\")."},"chef-inspec":{"purl":["pkg:gem/inspec","pkg:github/inspec/inspec"],"sources":{"pkg:gem/inspec":"override","pkg:github/inspec/inspec":"override"},"basis":"pkg:gem/inspec: rubygems.org/api/v1/gems/inspec.json verified live on 2026-09-09 (info: \"InSpec provides a framework for creating end-to-end infrastructure tests...\"; homepage github.com/inspec/inspec; version 7.2.1). | pkg:github/inspec/inspec: github.com/inspec/inspec verified live on 2026-09-09 (og:title \"GitHub - inspec/inspec: InSpec: Auditing and Testing Framework\")."},"chef-supermarket":{"purl":["pkg:github/chef/supermarket"],"sources":{"pkg:github/chef/supermarket":"override"},"basis":"pkg:github/chef/supermarket: github.com/chef/supermarket verified live on 2026-09-09 (og:title \"GitHub - chef/supermarket: Chef's community platform\")."},"chef-workstation":{"purl":["pkg:github/chef/chef-workstation"],"sources":{"pkg:github/chef/chef-workstation":"override"},"basis":"pkg:github/chef/chef-workstation: github.com/chef/chef-workstation verified live on 2026-09-09 (og:title \"GitHub - chef/chef-workstation: Chef Workstation gives you everything you need to get started with Chef...\")."},"cilium":{"purl":["pkg:github/cilium/cilium","pkg:docker/cilium/cilium"],"sources":{"pkg:github/cilium/cilium":"upstream","pkg:docker/cilium/cilium":"upstream"}},"ckeditor":{"purl":["pkg:npm/ckeditor5","pkg:npm/ckeditor4","pkg:github/ckeditor/ckeditor5","pkg:github/ckeditor/ckeditor4"],"sources":{"pkg:npm/ckeditor5":"override","pkg:npm/ckeditor4":"override","pkg:github/ckeditor/ckeditor5":"override","pkg:github/ckeditor/ckeditor4":"override"},"basis":"pkg:npm/ckeditor5: registry.npmjs.org/ckeditor5 verified live on 2026-09-09 (description: \"A set of ready-to-use rich text editors created with a powerful framework...\"; repository github.com/ckeditor/ckeditor5; ckeditor.com quick-start says \"npm install ckeditor5\"). | pkg:npm/ckeditor4: registry.npmjs.org/ckeditor4 verified live on 2026-09-09 (description: \"JavaScript WYSIWYG web text editor.\"; homepage ckeditor.com/ckeditor-4/; repository github.com/ckeditor/ckeditor4-releases; latest 4.25.2) - covers the CKEditor 4 cycle. | pkg:github/ckeditor/ckeditor5: github.com/ckeditor/ckeditor5 verified live on 2026-09-09 (og:title \"GitHub - ckeditor/ckeditor5: Powerful rich text editor framework...\"). | pkg:github/ckeditor/ckeditor4: github.com/ckeditor/ckeditor4 verified live on 2026-09-09 (og:title \"GitHub - ckeditor/ckeditor4: The best enterprise-grade WYSIWYG editor...\")."},"clamav":{"purl":["pkg:docker/clamav/clamav","pkg:github/Cisco-Talos/clamav"],"sources":{"pkg:docker/clamav/clamav":"override","pkg:github/Cisco-Talos/clamav":"override"},"basis":"pkg:docker/clamav/clamav: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/clamav/clamav/ on 2026-09-09 (Hub description: \"The official Alpine-based Docker images for the ClamAV project.\"); org clamav is the project's own: docs.clamav.net/manual/Installing/Docker.html names clamav/clamav. library/clamav is 404. | pkg:github/Cisco-Talos/clamav: github.com/Cisco-Talos/clamav verified live on 2026-09-09 (og:title \"GitHub - Cisco-Talos/clamav: ClamAV - Documentation is here: https://docs.clamav.net\")."},"clear-linux":{"purl":["pkg:docker/library/clearlinux"],"sources":{"pkg:docker/library/clearlinux":"upstream"}},"clickhouse":{"purl":["pkg:github/ClickHouse/ClickHouse","pkg:docker/library/clickhouse"],"sources":{"pkg:github/ClickHouse/ClickHouse":"upstream","pkg:docker/library/clickhouse":"upstream"}},"cloud-sql-auth-proxy":{"purl":["pkg:golang/github.com/GoogleCloudPlatform/cloud-sql-proxy/v2","pkg:github/GoogleCloudPlatform/cloud-sql-proxy"],"sources":{"pkg:golang/github.com/GoogleCloudPlatform/cloud-sql-proxy/v2":"override","pkg:github/GoogleCloudPlatform/cloud-sql-proxy":"override"},"basis":"pkg:golang/github.com/GoogleCloudPlatform/cloud-sql-proxy/v2: proxy.golang.org/github.com/!google!cloud!platform/cloud-sql-proxy/v2/@v/list verified live on 2026-09-09 (62 versions, last v2.11.1). | pkg:github/GoogleCloudPlatform/cloud-sql-proxy: github.com/GoogleCloudPlatform/cloud-sql-proxy verified live on 2026-09-09 (og:title \"GitHub - GoogleCloudPlatform/cloud-sql-proxy: A utility for connecting securely to your Cloud SQL instances\"). It is a binary on GitHub, not a managed service."},"cnspec":{"purl":["pkg:github/mondoohq/cnspec","pkg:docker/mondoo/cnspec"],"sources":{"pkg:github/mondoohq/cnspec":"upstream","pkg:docker/mondoo/cnspec":"upstream"}},"cockroachdb":{"purl":["pkg:docker/cockroachdb/cockroach","pkg:golang/github.com/cockroachdb/cockroach","pkg:github/cockroachdb/cockroach"],"sources":{"pkg:docker/cockroachdb/cockroach":"override","pkg:golang/github.com/cockroachdb/cockroach":"override","pkg:github/cockroachdb/cockroach":"override"},"basis":"pkg:docker/cockroachdb/cockroach: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/cockroachdb/cockroach/ on 2026-09-09 (Hub description: \"CockroachDB - Distributed SQL database for always-on customer experiences\"); org cockroachdb is Cockroach Labs' own: cockroachlabs.com/docs/stable/install-cockroachdb-linux links hub.docker.com/r/cockroachdb/cockroach. | pkg:golang/github.com/cockroachdb/cockroach: proxy.golang.org/github.com/cockroachdb/cockroach/@v/list verified live on 2026-09-09 (135 versions). | pkg:github/cockroachdb/cockroach: github.com/cockroachdb/cockroach verified live on 2026-09-09 (og:title \"GitHub - cockroachdb/cockroach: CockroachDB - the cloud native, distributed SQL database...\")."},"coder":{"purl":["pkg:github/coder/coder","pkg:generic/coder","pkg:oci/coder?repository_url=ghcr.io/coder","pkg:winget/Coder.Coder"],"sources":{"pkg:github/coder/coder":"upstream","pkg:generic/coder":"upstream","pkg:oci/coder?repository_url=ghcr.io/coder":"upstream","pkg:winget/Coder.Coder":"upstream"}},"coldfusion":{"purl":["pkg:docker/adobecoldfusion/coldfusion","pkg:docker/adobecoldfusion/coldfusion2025","pkg:docker/adobecoldfusion/coldfusion2023","pkg:docker/adobecoldfusion/coldfusion2021"],"sources":{"pkg:docker/adobecoldfusion/coldfusion":"override","pkg:docker/adobecoldfusion/coldfusion2025":"override","pkg:docker/adobecoldfusion/coldfusion2023":"override","pkg:docker/adobecoldfusion/coldfusion2021":"override"},"basis":"pkg:docker/adobecoldfusion/coldfusion: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/adobecoldfusion/coldfusion/ on 2026-09-09 (Hub description: \"This repository is for ColdFusion images\"); org adobecoldfusion is Adobe's own: helpx.adobe.com/coldfusion/using/docker-images-coldfusion.html links hub.docker.com/u/adobecoldfusion and adobe.com/products/coldfusion-family.html links hub.docker.com/r/adobecoldfusion/coldfusion. | pkg:docker/adobecoldfusion/coldfusion2025: hub.docker.com/v2/repositories/adobecoldfusion/coldfusion2025/ verified live on 2026-09-09 (Hub description: \"The official Adobe ColdFusion Server Docker Image\"). | pkg:docker/adobecoldfusion/coldfusion2023: hub.docker.com/v2/repositories/adobecoldfusion/coldfusion2023/ verified live on 2026-09-09 (Hub description: \"This repository is for ColdFusion 2023 images\"). | pkg:docker/adobecoldfusion/coldfusion2021: hub.docker.com/v2/repositories/adobecoldfusion/coldfusion2021/ verified live on 2026-09-09 (Hub description: \"This repository is for Adobe ColdFusion (2021 Release) images\")."},"cometd":{"purl":["pkg:maven/org.cometd.java/cometd-java-api-server"],"sources":{"pkg:maven/org.cometd.java/cometd-java-api-server":"registry"}},"composer":{"purl":["pkg:composer/composer/composer","pkg:docker/library/composer","pkg:github/composer/composer","pkg:generic/composer"],"sources":{"pkg:composer/composer/composer":"upstream","pkg:docker/library/composer":"upstream","pkg:github/composer/composer":"upstream","pkg:generic/composer":"override"},"basis":"pkg:generic/composer: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"concrete-cms":{"purl":["pkg:composer/concrete5/core","pkg:docker/fehrenbacher/concrete5","pkg:github/concretecms/concretecms"],"sources":{"pkg:composer/concrete5/core":"upstream","pkg:docker/fehrenbacher/concrete5":"upstream","pkg:github/concretecms/concretecms":"upstream"}},"confluence":{"purl":["pkg:docker/atlassian/confluence"],"sources":{"pkg:docker/atlassian/confluence":"override"},"basis":"pkg:docker/atlassian/confluence: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/atlassian/confluence/ on 2026-09-09 (Hub description field is empty; last pushed 2026-09-08); org atlassian is Atlassian's own: bitbucket.org/atlassian-docker/docker-atlassian-confluence-server README states the image is published as atlassian/confluence (atlassian/confluence-server ceased updates 2024-02-15)."},"confluent-platform":{"purl":["pkg:docker/confluentinc/cp-server","pkg:docker/confluentinc/cp-kafka"],"sources":{"pkg:docker/confluentinc/cp-server":"override","pkg:docker/confluentinc/cp-kafka":"override"},"basis":"Docker Hub vendor-org images, verified live via hub.docker.com/v2/repositories/confluentinc/<image>/ on 2026-10-09: cp-kafka (Hub description: \"Official Confluent Docker Image for Kafka (Community Version)\") and cp-server (Confluent Server broker, no Hub description). Both are tagged with Confluent Platform versions, not Kafka versions (newest tags 8.2.4, 8.0.8, 7.9.10, 7.7.12, matching Confluent's patch table), so they resolve to Confluent Platform cycles. Not mapped: the other confluentinc images (Control Center next-gen, Flink and CMF follow their own version lines), cp-enterprise-kafka (Hub says [Deprecated]) and Maven io.confluent component artifacts. HOMONYM: never map these to apache-kafka; the tags are Confluent Platform versions."},"consul":{"purl":["pkg:docker/library/consul","pkg:github/hashicorp/consul","pkg:golang/github.com/hashicorp/consul"],"sources":{"pkg:docker/library/consul":"upstream","pkg:github/hashicorp/consul":"upstream","pkg:golang/github.com/hashicorp/consul":"upstream"}},"containerd":{"purl":["pkg:golang/github.com/containerd/containerd/v2","pkg:golang/github.com/containerd/containerd","pkg:github/containerd/containerd"],"sources":{"pkg:golang/github.com/containerd/containerd/v2":"override","pkg:golang/github.com/containerd/containerd":"override","pkg:github/containerd/containerd":"override"},"basis":"pkg:golang/github.com/containerd/containerd/v2: proxy.golang.org/github.com/containerd/containerd/v2/@v/list verified live on 2026-09-09 (63 versions, last v2.0.9) - the 2.x module path. | pkg:golang/github.com/containerd/containerd: proxy.golang.org/github.com/containerd/containerd/@v/list verified live on 2026-09-09 (229 versions) - the 1.x module path. | pkg:github/containerd/containerd: github.com/containerd/containerd verified live on 2026-09-09 (og:title \"GitHub - containerd/containerd: An open and reliable container runtime\")."},"contao":{"purl":["pkg:composer/contao/contao","pkg:composer/contao/core-bundle","pkg:composer/contao/managed-edition","pkg:github/contao/contao"],"sources":{"pkg:composer/contao/contao":"override","pkg:composer/contao/core-bundle":"override","pkg:composer/contao/managed-edition":"override","pkg:github/contao/contao":"override"},"basis":"pkg:composer/contao/contao: repo.packagist.org/p2/contao/contao.json verified live on 2026-09-09 (description: \"Contao Open Source CMS development package\"; homepage contao.org; version 6.0.0). | pkg:composer/contao/core-bundle: repo.packagist.org/p2/contao/core-bundle.json verified live on 2026-09-09 (description: \"Contao Open Source CMS\"; version 6.0.0) - the package an installed site actually carries. | pkg:composer/contao/managed-edition: repo.packagist.org/p2/contao/managed-edition.json verified live on 2026-09-09 (description: \"Contao Managed Edition\"). | pkg:github/contao/contao: github.com/contao/contao verified live on 2026-09-09 (og:title \"GitHub - contao/contao: Contao Open Source CMS\")."},"contour":{"purl":["pkg:github/projectcontour/contour","pkg:docker/projectcontour/contour","pkg:docker/bitnami/contour","pkg:oci/contour?repository_url=ghcr.io/projectcontour"],"sources":{"pkg:github/projectcontour/contour":"upstream","pkg:docker/projectcontour/contour":"upstream","pkg:docker/bitnami/contour":"upstream","pkg:oci/contour?repository_url=ghcr.io/projectcontour":"upstream"}},"couchbase-server":{"purl":["pkg:docker/library/couchbase","pkg:docker/couchbase/server"],"sources":{"pkg:docker/library/couchbase":"upstream","pkg:docker/couchbase/server":"upstream"}},"craft-cms":{"purl":["pkg:composer/craftcms/cms","pkg:github/craftcms/cms"],"sources":{"pkg:composer/craftcms/cms":"override","pkg:github/craftcms/cms":"override"},"basis":"pkg:composer/craftcms/cms: repo.packagist.org/p2/craftcms/cms.json verified live on 2026-09-09 (description: \"Craft CMS\"; homepage craftcms.com). | pkg:github/craftcms/cms: github.com/craftcms/cms verified live on 2026-09-09 (og:title \"GitHub - craftcms/cms: Build bespoke content experiences with Craft.\")."},"dapr":{"purl":["pkg:golang/github.com/dapr/dapr"],"sources":{"pkg:golang/github.com/dapr/dapr":"override"},"basis":"pkg:golang/github.com/dapr/dapr: proxy.golang.org/github.com/dapr/dapr/@latest verified live on 2026-10-04 (v1.18.4, origin github.com/dapr/dapr)."},"dbt-core":{"purl":["pkg:pypi/dbt-core","pkg:github/dbt-labs/dbt-core"],"sources":{"pkg:pypi/dbt-core":"override","pkg:github/dbt-labs/dbt-core":"override"},"basis":"pkg:pypi/dbt-core: pypi.org/pypi/dbt-core/json verified live on 2026-09-09 (summary: \"With dbt, data analysts and engineers can build analytics the way engineers build applications.\"; project_urls point at github.com/dbt-labs/dbt-core; docs.getdbt.com/docs/core/pip-install names dbt-core). | pkg:github/dbt-labs/dbt-core: github.com/dbt-labs/dbt-core verified live on 2026-09-09 (og:title \"GitHub - dbt-labs/dbt-core: dbt enables data analysts and engineers to transform their data...\")."},"debian":{"purl":["pkg:docker/library/debian"],"sources":{"pkg:docker/library/debian":"override"},"basis":"pkg:docker/library/debian: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Debian is a Linux distribution that's composed entirely of free and op\")."},"deno":{"purl":["pkg:brew/deno","pkg:cargo/deno","pkg:docker/denoland/deno","pkg:github/denoland/deno","pkg:npm/deno","pkg:oci/deno?repository_url=ghcr.io/denoland","pkg:generic/deno"],"sources":{"pkg:brew/deno":"upstream","pkg:cargo/deno":"upstream","pkg:docker/denoland/deno":"upstream","pkg:github/denoland/deno":"upstream","pkg:npm/deno":"upstream","pkg:oci/deno?repository_url=ghcr.io/denoland":"upstream","pkg:generic/deno":"override"},"basis":"pkg:generic/deno: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"dependency-track":{"purl":["pkg:docker/dependencytrack/apiserver","pkg:docker/dependencytrack/frontend","pkg:github/DependencyTrack/dependency-track"],"sources":{"pkg:docker/dependencytrack/apiserver":"override","pkg:docker/dependencytrack/frontend":"override","pkg:github/DependencyTrack/dependency-track":"override"},"basis":"pkg:docker/dependencytrack/apiserver: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/dependencytrack/apiserver/ on 2026-09-09 (Hub description: \"Dependency-Track API Server\"); org dependencytrack is the project's own: the DependencyTrack/dependency-track README links hub.docker.com/r/dependencytrack/apiserver (the project's docker-compose now defaults to ghcr.io/dependencytrack/apiserver). | pkg:docker/dependencytrack/frontend: hub.docker.com/v2/repositories/dependencytrack/frontend/ verified live on 2026-09-09 (Hub description: \"Frontend user interface for Dependency-Track\"). | pkg:github/DependencyTrack/dependency-track: github.com/DependencyTrack/dependency-track verified live on 2026-09-09 (og:title \"GitHub - DependencyTrack/dependency-track: Dependency-Track is an intelligent Component Analysis platform...\")."},"derby":{"purl":["pkg:maven/org.apache.derby/derby"],"sources":{"pkg:maven/org.apache.derby/derby":"registry"}},"discourse":{"purl":["pkg:docker/bitnami/discourse","pkg:docker/discourse/base"],"sources":{"pkg:docker/bitnami/discourse":"upstream","pkg:docker/discourse/base":"upstream"}},"django":{"purl":["pkg:github/django/django","pkg:pypi/django","pkg:docker/library/django"],"sources":{"pkg:github/django/django":"upstream","pkg:pypi/django":"upstream","pkg:docker/library/django":"override"},"basis":"pkg:docker/library/django: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"DEPRECATED; use \"python\" instead\"). pkg:docker/library/django: image marked DEPRECATED on Hub (successor python); an SBOM naming it is still this product."},"docker-engine":{"purl":["pkg:docker/library/docker","pkg:golang/github.com/docker/docker","pkg:github/moby/moby"],"sources":{"pkg:docker/library/docker":"override","pkg:golang/github.com/docker/docker":"override","pkg:github/moby/moby":"override"},"basis":"pkg:docker/library/docker: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/docker/ on 2026-09-09 (Hub description: \"Docker in Docker! (commonly known as \\\"dind\\\")\") - the image ships the Docker Engine daemon and CLI. | pkg:golang/github.com/docker/docker: proxy.golang.org/github.com/docker/docker/@v/list verified live on 2026-09-09 (347 versions) - the engine's Go module path. | pkg:github/moby/moby: github.com/moby/moby verified live on 2026-09-09 (og:title \"GitHub - moby/moby: The Moby Project - a collaborative project for the container ecosystem...\") - the engine's source repository."},"dojo":{"purl":["pkg:npm/dojo"],"sources":{"pkg:npm/dojo":"registry"}},"dom4j":{"purl":["pkg:maven/org.dom4j/dom4j"],"sources":{"pkg:maven/org.dom4j/dom4j":"registry"}},"dotnet":{"purl":["pkg:nuget/Microsoft.NETCore.App","pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64","pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86","pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm","pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64","pkg:nuget/Microsoft.NETCore.App.Runtime.osx-x64","pkg:nuget/Microsoft.NETCore.App.Runtime.osx-arm64","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-arm64","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-arm","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-x64","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-bionic-x64","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-bionic-arm64","pkg:rpm/redhat/dotnet-sdk-8.0","pkg:rpm/redhat/dotnet-sdk-7.0","pkg:rpm/redhat/dotnet-sdk-6.0","pkg:rpm/redhat/dotnet-sdk-5.0","pkg:rpm/redhat/dotnet-sdk-3.1","pkg:rpm/redhat/dotnet-sdk-3.0","pkg:rpm/redhat/dotnet-sdk-2.1"],"sources":{"pkg:nuget/Microsoft.NETCore.App":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.win-x64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.win-arm64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.osx-x64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.osx-arm64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-arm64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-arm":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-x64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-bionic-x64":"upstream","pkg:nuget/Microsoft.NETCore.App.Runtime.linux-bionic-arm64":"upstream","pkg:rpm/redhat/dotnet-sdk-8.0":"upstream","pkg:rpm/redhat/dotnet-sdk-7.0":"upstream","pkg:rpm/redhat/dotnet-sdk-6.0":"upstream","pkg:rpm/redhat/dotnet-sdk-5.0":"upstream","pkg:rpm/redhat/dotnet-sdk-3.1":"upstream","pkg:rpm/redhat/dotnet-sdk-3.0":"upstream","pkg:rpm/redhat/dotnet-sdk-2.1":"upstream"}},"dovecot":{"purl":["pkg:docker/dovecot/dovecot","pkg:github/dovecot/core"],"sources":{"pkg:docker/dovecot/dovecot":"override","pkg:github/dovecot/core":"override"},"basis":"pkg:docker/dovecot/dovecot: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/dovecot/dovecot/ on 2026-09-09 (Hub description: \"Dovecot CE repository\"); org dovecot is the project's own: doc.dovecot.org/latest/installation/docker.html names dovecot/dovecot. | pkg:github/dovecot/core: github.com/dovecot/core verified live on 2026-09-09 (og:title \"GitHub - dovecot/core: Dovecot mail server\")."},"dropwizard":{"purl":["pkg:github/dropwizard/dropwizard"],"sources":{"pkg:github/dropwizard/dropwizard":"upstream"}},"drupal":{"purl":["pkg:composer/drupal/core","pkg:docker/bitnami/drupal","pkg:docker/library/drupal","pkg:github/drupal/core"],"sources":{"pkg:composer/drupal/core":"upstream","pkg:docker/bitnami/drupal":"upstream","pkg:docker/library/drupal":"upstream","pkg:github/drupal/core":"upstream"}},"drush":{"purl":["pkg:composer/drush/drush","pkg:github/drush-ops/drush"],"sources":{"pkg:composer/drush/drush":"upstream","pkg:github/drush-ops/drush":"upstream"}},"duckdb":{"purl":["pkg:pypi/duckdb","pkg:npm/duckdb","pkg:maven/org.duckdb/duckdb_jdbc","pkg:github/duckdb/duckdb"],"sources":{"pkg:pypi/duckdb":"override","pkg:npm/duckdb":"override","pkg:maven/org.duckdb/duckdb_jdbc":"override","pkg:github/duckdb/duckdb":"override"},"basis":"pkg:pypi/duckdb: pypi.org/pypi/duckdb/json verified live on 2026-09-09 (summary: \"DuckDB in-process database\"; documentation URL duckdb.org/docs/stable/clients/python/overview). | pkg:npm/duckdb: registry.npmjs.org/duckdb verified live on 2026-09-09 (description: \"DuckDB node.js API\"; homepage duckdb.org; repository github.com/duckdb/duckdb-node) - DuckDB's own binding that embeds the engine, so its version is the engine version. | pkg:maven/org.duckdb/duckdb_jdbc: repo1.maven.org/maven2/org/duckdb/duckdb_jdbc/maven-metadata.xml verified live on 2026-09-09 (latest 1.5.5.1; POM name \"DuckDB JDBC Driver\", url duckdb.org) - DuckDB's own driver that embeds the engine. | pkg:github/duckdb/duckdb: github.com/duckdb/duckdb verified live on 2026-09-09 (og:title \"GitHub - duckdb/duckdb: DuckDB is an analytical in-process SQL database management system\")."},"eclipse-jetty":{"purl":["pkg:maven/org.eclipse.jetty/jetty-server","pkg:docker/library/jetty"],"sources":{"pkg:maven/org.eclipse.jetty/jetty-server":"upstream","pkg:docker/library/jetty":"override"},"basis":"pkg:docker/library/jetty: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Jetty provides a Web server and javax.servlet container.\")."},"eclipse-temurin":{"purl":["pkg:docker/library/eclipse-temurin"],"sources":{"pkg:docker/library/eclipse-temurin":"override"},"basis":"pkg:docker/library/eclipse-temurin: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Official Images for OpenJDK binaries built by Eclipse Temurin.\")."},"elasticsearch":{"purl":["pkg:deb/debian/elasticsearch","pkg:deb/ubuntu/elasticsearch","pkg:rpm/amzn/elasticsearch","pkg:rpm/redhat/elasticsearch","pkg:rpm/centos/elasticsearch","pkg:github/elastic/elasticsearch","pkg:maven/org.elasticsearch/elasticsearch","pkg:docker/library/elasticsearch"],"sources":{"pkg:deb/debian/elasticsearch":"upstream","pkg:deb/ubuntu/elasticsearch":"upstream","pkg:rpm/amzn/elasticsearch":"upstream","pkg:rpm/redhat/elasticsearch":"upstream","pkg:rpm/centos/elasticsearch":"upstream","pkg:github/elastic/elasticsearch":"upstream","pkg:maven/org.elasticsearch/elasticsearch":"upstream","pkg:docker/library/elasticsearch":"override"},"basis":"pkg:docker/library/elasticsearch: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Elasticsearch is a powerful open source search and analytics engine th\")."},"electron":{"purl":["pkg:npm/electron","pkg:github/electron/electron"],"sources":{"pkg:npm/electron":"override","pkg:github/electron/electron":"override"},"basis":"pkg:npm/electron: registry.npmjs.org/electron verified live on 2026-09-09 (description: \"Build cross platform desktop apps with JavaScript, HTML, and CSS\"; repository github.com/electron/electron; latest 44.3.0 matches the tracked cycle 44 latest; electronjs.org installation page says \"npm install electron --save-dev\"). | pkg:github/electron/electron: github.com/electron/electron verified live on 2026-09-09 (og:title \"GitHub - electron/electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS\")."},"elixir":{"purl":["pkg:generic/elixir","pkg:docker/library/elixir"],"sources":{"pkg:generic/elixir":"override","pkg:docker/library/elixir":"override"},"basis":"pkg:generic/elixir: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/elixir: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Elixir is a dynamic, functional language for building scalable and mai\")."},"elliptic":{"purl":["pkg:npm/elliptic"],"sources":{"pkg:npm/elliptic":"registry"}},"emberjs":{"purl":["pkg:github/emberjs/ember.js","pkg:npm/ember-source"],"sources":{"pkg:github/emberjs/ember.js":"upstream","pkg:npm/ember-source":"upstream"}},"envoy":{"purl":["pkg:docker/envoyproxy/envoy","pkg:docker/envoyproxy/envoy-alpine","pkg:docker/envoyproxy/envoy-alpine-debug","pkg:docker/envoyproxy/envoy-distroless","pkg:docker/bitnami/envoy","pkg:docker/rapidfort/envoy-official","pkg:docker/hashicorp/envoy-fips","pkg:github/envoyproxy/envoy","pkg:golang/github.com/envoyproxy/envoy","pkg:oci/envoy?repository_url=cgr.dev/chainguard","pkg:oci/envoy-fips?repository_url=cgr.dev/chainguard","pkg:generic/envoy"],"sources":{"pkg:docker/envoyproxy/envoy":"upstream","pkg:docker/envoyproxy/envoy-alpine":"upstream","pkg:docker/envoyproxy/envoy-alpine-debug":"upstream","pkg:docker/envoyproxy/envoy-distroless":"upstream","pkg:docker/bitnami/envoy":"upstream","pkg:docker/rapidfort/envoy-official":"upstream","pkg:docker/hashicorp/envoy-fips":"upstream","pkg:github/envoyproxy/envoy":"upstream","pkg:golang/github.com/envoyproxy/envoy":"upstream","pkg:oci/envoy?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/envoy-fips?repository_url=cgr.dev/chainguard":"upstream","pkg:generic/envoy":"override"},"basis":"pkg:generic/envoy: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"erlang":{"purl":["pkg:generic/erlang","pkg:docker/library/erlang"],"sources":{"pkg:generic/erlang":"override","pkg:docker/library/erlang":"override"},"basis":"pkg:generic/erlang: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/erlang: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Erlang is a programming language used to build massively scalable syst\")."},"eslint":{"purl":["pkg:github/eslint/eslint","pkg:npm/eslint"],"sources":{"pkg:github/eslint/eslint":"upstream","pkg:npm/eslint":"upstream"}},"etcd":{"purl":["pkg:docker/bitnami/etcd","pkg:oci/etcd?repository_url=quay.io/repository/coreos","pkg:oci/etcd?repository_url=gcr.io/etcd-development","pkg:github/etcd-io/etcd","pkg:golang/github.com/etcd-io/etcd"],"sources":{"pkg:docker/bitnami/etcd":"upstream","pkg:oci/etcd?repository_url=quay.io/repository/coreos":"upstream","pkg:oci/etcd?repository_url=gcr.io/etcd-development":"upstream","pkg:github/etcd-io/etcd":"upstream","pkg:golang/github.com/etcd-io/etcd":"upstream"}},"express":{"purl":["pkg:github/expressjs/express","pkg:npm/express"],"sources":{"pkg:github/expressjs/express":"upstream","pkg:npm/express":"upstream"}},"external-dns":{"purl":["pkg:github/kubernetes-sigs/external-dns"],"sources":{"pkg:github/kubernetes-sigs/external-dns":"upstream"}},"fastify":{"purl":["pkg:npm/fastify"],"sources":{"pkg:npm/fastify":"registry"}},"fedora":{"purl":["pkg:docker/library/fedora"],"sources":{"pkg:docker/library/fedora":"override"},"basis":"pkg:docker/library/fedora: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Official Docker builds of Fedora\")."},"ffmpeg":{"purl":["pkg:brew/ffmpeg","pkg:deb/debian/ffmpeg","pkg:deb/ubuntu/ffmpeg","pkg:github/ffmpeg/ffmpeg","pkg:rpm/fedora/ffmpeg","pkg:generic/ffmpeg"],"sources":{"pkg:brew/ffmpeg":"upstream","pkg:deb/debian/ffmpeg":"upstream","pkg:deb/ubuntu/ffmpeg":"upstream","pkg:github/ffmpeg/ffmpeg":"upstream","pkg:rpm/fedora/ffmpeg":"upstream","pkg:generic/ffmpeg":"override"},"basis":"pkg:generic/ffmpeg: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"firefox":{"purl":["pkg:apk/alpine/firefox","pkg:deb/debian/firefox-esr","pkg:generic/firefox"],"sources":{"pkg:apk/alpine/firefox":"upstream","pkg:deb/debian/firefox-esr":"upstream","pkg:generic/firefox":"upstream"}},"fluent-bit":{"purl":["pkg:github/fluent/fluent-bit","pkg:docker/fluent/fluent-bit"],"sources":{"pkg:github/fluent/fluent-bit":"upstream","pkg:docker/fluent/fluent-bit":"upstream"}},"flux":{"purl":["pkg:golang/github.com/fluxcd/flux","pkg:github/fluxcd/flux"],"sources":{"pkg:golang/github.com/fluxcd/flux":"override","pkg:github/fluxcd/flux":"override"},"basis":"pkg:golang/github.com/fluxcd/flux: proxy.golang.org/github.com/fluxcd/flux/@v/list verified live on 2026-09-09 (28 versions, last v1.15.0) - this product is Flux v1 (legacy). | pkg:github/fluxcd/flux: github.com/fluxcd/flux verified live on 2026-09-09 (og:title \"GitHub - fluxcd/flux: Successor: https://github.com/fluxcd/flux2\") - the archived Flux v1 repository; Flux 2 is a separate project."},"font-awesome":{"purl":["pkg:github/fortawesome/font-awesome","pkg:npm/%40fortawesome/fontawesome-svg-core"],"sources":{"pkg:github/fortawesome/font-awesome":"upstream","pkg:npm/%40fortawesome/fontawesome-svg-core":"upstream"}},"foreman":{"purl":["pkg:github/theforeman/foreman"],"sources":{"pkg:github/theforeman/foreman":"override"},"basis":"pkg:github/theforeman/foreman: github.com/theforeman/foreman verified live on 2026-09-09 (og:title \"GitHub - theforeman/foreman: an application that automates the lifecycle of servers\"; theforeman.org/contribute.html says \"git clone https://github.com/theforeman/foreman\"). The rubygems name foreman is an unrelated process manager and must not be used."},"foundationdb":{"purl":["pkg:github/apple/foundationdb"],"sources":{"pkg:github/apple/foundationdb":"upstream"}},"gatekeeper":{"purl":["pkg:github/open-policy-agent/gatekeeper","pkg:docker/openpolicyagent/gatekeeper","pkg:oci/gatekeeper?repository_url=cgr.dev/chainguard"],"sources":{"pkg:github/open-policy-agent/gatekeeper":"upstream","pkg:docker/openpolicyagent/gatekeeper":"upstream","pkg:oci/gatekeeper?repository_url=cgr.dev/chainguard":"upstream"}},"gerrit":{"purl":["pkg:docker/gerritcodereview/gerrit"],"sources":{"pkg:docker/gerritcodereview/gerrit":"upstream"}},"ghc":{"purl":["pkg:generic/haskell/ghc"],"sources":{"pkg:generic/haskell/ghc":"override"},"basis":"pkg:generic/haskell/ghc: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"gitea":{"purl":["pkg:github/go-gitea/gitea"],"sources":{"pkg:github/go-gitea/gitea":"registry"}},"github-actions-runner-images":{"purl":["pkg:github/actions/runner-images"],"sources":{"pkg:github/actions/runner-images":"override"},"basis":"pkg:github/actions/runner-images: github.com/actions/runner-images verified live on 2026-09-09 (og:title \"GitHub - actions/runner-images: GitHub Actions runner images\"; docs.github.com about-github-hosted-runners says the images are managed in the actions/runner-images repository)."},"gitlab":{"purl":["pkg:docker/gitlab/gitlab-ce","pkg:docker/gitlab/gitlab-ee"],"sources":{"pkg:docker/gitlab/gitlab-ce":"override","pkg:docker/gitlab/gitlab-ee":"override"},"basis":"pkg:docker/gitlab/gitlab-ce: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/gitlab/gitlab-ce/ on 2026-09-09 (Hub description: \"GitLab Community Edition docker image based on the Omnibus package\"); org gitlab is GitLab's own: docs.gitlab.com/install/docker/installation/ links hub.docker.com/r/gitlab/gitlab-ce/tags and gitlab-ee/tags. | pkg:docker/gitlab/gitlab-ee: hub.docker.com/v2/repositories/gitlab/gitlab-ee/ verified live on 2026-09-09 (Hub description: \"GitLab Enterprise Edition docker image based on the Omnibus package\"). Not pkg:github: gitlabhq/gitlabhq describes itself as \"GitLab CE Mirror\"; canonical source is gitlab.com/gitlab-org/gitlab."},"gitlab-runner":{"purl":["pkg:docker/gitlab/gitlab-runner"],"sources":{"pkg:docker/gitlab/gitlab-runner":"upstream"}},"gleam":{"purl":["pkg:github/gleam-lang/gleam","pkg:oci/gleam?repository_url=ghcr.io/gleam-lang"],"sources":{"pkg:github/gleam-lang/gleam":"upstream","pkg:oci/gleam?repository_url=ghcr.io/gleam-lang":"upstream"}},"go":{"purl":["pkg:generic/go","pkg:docker/library/golang","pkg:docker/circleci/golang","pkg:docker/cimg/go","pkg:docker/bitnami/golang","pkg:brew/go"],"sources":{"pkg:generic/go":"upstream","pkg:docker/library/golang":"upstream","pkg:docker/circleci/golang":"upstream","pkg:docker/cimg/go":"upstream","pkg:docker/bitnami/golang":"upstream","pkg:brew/go":"upstream"}},"goaccess":{"purl":["pkg:docker/allinurl/goaccess"],"sources":{"pkg:docker/allinurl/goaccess":"upstream"}},"godot":{"purl":["pkg:github/godotengine/godot"],"sources":{"pkg:github/godotengine/godot":"override"},"basis":"pkg:github/godotengine/godot: github.com/godotengine/godot verified live on 2026-09-09 (og:title \"GitHub - godotengine/godot: Godot Engine - Multi-platform 2D and 3D game engine\")."},"gorilla":{"purl":["pkg:github/gorilla/context","pkg:github/gorilla/csrf","pkg:github/gorilla/css","pkg:github/gorilla/handlers","pkg:github/gorilla/mux","pkg:github/gorilla/pat","pkg:github/gorilla/rpc","pkg:github/gorilla/schema","pkg:github/gorilla/securecookie","pkg:github/gorilla/sessions","pkg:github/gorilla/websocket","pkg:golang/github.com/gorilla/context","pkg:golang/github.com/gorilla/csrf","pkg:golang/github.com/gorilla/css","pkg:golang/github.com/gorilla/handlers","pkg:golang/github.com/gorilla/mux","pkg:golang/github.com/gorilla/pat","pkg:golang/github.com/gorilla/rpc","pkg:golang/github.com/gorilla/schema","pkg:golang/github.com/gorilla/securecookie","pkg:golang/github.com/gorilla/sessions","pkg:golang/github.com/gorilla/websocket"],"sources":{"pkg:github/gorilla/context":"upstream","pkg:github/gorilla/csrf":"upstream","pkg:github/gorilla/css":"upstream","pkg:github/gorilla/handlers":"upstream","pkg:github/gorilla/mux":"upstream","pkg:github/gorilla/pat":"upstream","pkg:github/gorilla/rpc":"upstream","pkg:github/gorilla/schema":"upstream","pkg:github/gorilla/securecookie":"upstream","pkg:github/gorilla/sessions":"upstream","pkg:github/gorilla/websocket":"upstream","pkg:golang/github.com/gorilla/context":"upstream","pkg:golang/github.com/gorilla/csrf":"upstream","pkg:golang/github.com/gorilla/css":"upstream","pkg:golang/github.com/gorilla/handlers":"upstream","pkg:golang/github.com/gorilla/mux":"upstream","pkg:golang/github.com/gorilla/pat":"upstream","pkg:golang/github.com/gorilla/rpc":"upstream","pkg:golang/github.com/gorilla/schema":"upstream","pkg:golang/github.com/gorilla/securecookie":"upstream","pkg:golang/github.com/gorilla/sessions":"upstream","pkg:golang/github.com/gorilla/websocket":"upstream"}},"graalvm-ce":{"purl":["pkg:github/oracle/graal"],"sources":{"pkg:github/oracle/graal":"override"},"basis":"pkg:github/oracle/graal: github.com/oracle/graal verified live on 2026-09-09 (og:title \"GitHub - oracle/graal: GraalVM compiles applications into native executables...\") - the GraalVM source repository from which Community Edition is built. Container images are on ghcr.io/graalvm, not Docker Hub (library/graalvm 404)."},"gradle":{"purl":["pkg:docker/library/gradle"],"sources":{"pkg:docker/library/gradle":"override"},"basis":"pkg:docker/library/gradle: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Gradle is a fast, reliable, and flexible open-source build tool with a\")."},"grafana":{"purl":["pkg:github/grafana/grafana","pkg:golang/github.com/grafana/grafana","pkg:generic/grafana"],"sources":{"pkg:github/grafana/grafana":"upstream","pkg:golang/github.com/grafana/grafana":"upstream","pkg:generic/grafana":"override"},"basis":"pkg:generic/grafana: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"grafana-loki":{"purl":["pkg:github/grafana/loki","pkg:docker/grafana/loki","pkg:docker/ubuntu/loki","pkg:docker/bitnami/grafana-loki","pkg:oci/loki?repository_url=cgr.dev/chainguard"],"sources":{"pkg:github/grafana/loki":"upstream","pkg:docker/grafana/loki":"upstream","pkg:docker/ubuntu/loki":"upstream","pkg:docker/bitnami/grafana-loki":"upstream","pkg:oci/loki?repository_url=cgr.dev/chainguard":"upstream"}},"grails":{"purl":["pkg:maven/org.apache.grails/grails"],"sources":{"pkg:maven/org.apache.grails/grails":"upstream"}},"graphql-java":{"purl":["pkg:maven/com.graphql-java/graphql-java"],"sources":{"pkg:maven/com.graphql-java/graphql-java":"registry"}},"graylog":{"purl":["pkg:docker/graylog/graylog","pkg:github/Graylog2/graylog2-server"],"sources":{"pkg:docker/graylog/graylog":"override","pkg:github/Graylog2/graylog2-server":"override"},"basis":"pkg:docker/graylog/graylog: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/graylog/graylog/ on 2026-09-09 (Hub description: \"Official Graylog Docker image (automated build)\"); org graylog is Graylog's own: go2docs.graylog.org docker_installation page names graylog/graylog. | pkg:github/Graylog2/graylog2-server: github.com/Graylog2/graylog2-server verified live on 2026-09-09 (og:title \"GitHub - Graylog2/graylog2-server: Free and open log management\")."},"greenlight":{"purl":["pkg:docker/bigbluebutton/greenlight","pkg:github/bigbluebutton/greenlight"],"sources":{"pkg:docker/bigbluebutton/greenlight":"override","pkg:github/bigbluebutton/greenlight":"override"},"basis":"pkg:docker/bigbluebutton/greenlight: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/bigbluebutton/greenlight/ on 2026-09-09 (Hub description: \"Greenlight is a simple front-end application for BigBlueButton\"); org bigbluebutton is the project's own: docs.bigbluebutton.org/greenlight/v3/install/ names bigbluebutton/greenlight. | pkg:github/bigbluebutton/greenlight: github.com/bigbluebutton/greenlight verified live on 2026-09-09 (og:title \"GitHub - bigbluebutton/greenlight: A really simple end-user interface for your BigBlueButton server.\")."},"grumphp":{"purl":["pkg:composer/phpro/grumphp","pkg:github/phpro/grumphp"],"sources":{"pkg:composer/phpro/grumphp":"upstream","pkg:github/phpro/grumphp":"upstream"}},"grunt":{"purl":["pkg:github/gruntjs/grunt","pkg:npm/grunt"],"sources":{"pkg:github/gruntjs/grunt":"upstream","pkg:npm/grunt":"upstream"}},"guava":{"purl":["pkg:maven/com.google.guava/guava"],"sources":{"pkg:maven/com.google.guava/guava":"registry"}},"guzzle":{"purl":["pkg:composer/guzzlehttp/guzzle","pkg:github/guzzle/guzzle"],"sources":{"pkg:composer/guzzlehttp/guzzle":"upstream","pkg:github/guzzle/guzzle":"upstream"}},"h2":{"purl":["pkg:maven/com.h2database/h2"],"sources":{"pkg:maven/com.h2database/h2":"registry"}},"haproxy":{"purl":["pkg:generic/haproxy","pkg:deb/debian/haproxy","pkg:deb/ubuntu/haproxy","pkg:rpm/amzn/haproxy","pkg:rpm/redhat/haproxy","pkg:rpm/centos/haproxy","pkg:apk/alpine/haproxy","pkg:docker/library/haproxy"],"sources":{"pkg:generic/haproxy":"upstream","pkg:deb/debian/haproxy":"upstream","pkg:deb/ubuntu/haproxy":"upstream","pkg:rpm/amzn/haproxy":"upstream","pkg:rpm/redhat/haproxy":"upstream","pkg:rpm/centos/haproxy":"upstream","pkg:apk/alpine/haproxy":"upstream","pkg:docker/library/haproxy":"override"},"basis":"pkg:docker/library/haproxy: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"HAProxy - The Reliable, High Performance TCP/HTTP Load Balancer\")."},"haproxy-ingress":{"purl":["pkg:github/jcmoraisjr/haproxy-ingress"],"sources":{"pkg:github/jcmoraisjr/haproxy-ingress":"upstream"}},"harbor":{"purl":["pkg:github/goharbor/harbor","pkg:docker/goharbor/harbor-core","pkg:docker/goharbor/harbor-exporter","pkg:docker/goharbor/harbor-jobservice","pkg:docker/goharbor/harbor-portal","pkg:docker/goharbor/harbor-registryctl","pkg:docker/goharbor/registry-photon","pkg:docker/bitnami/harbor-registry","pkg:docker/bitnami/harbor-core","pkg:docker/bitnami/harbor-exporter","pkg:docker/bitnami/harbor-jobservice","pkg:docker/bitnami/harbor-portal","pkg:docker/bitnami/harbor-registryctl","pkg:oci/harbor-core?repository_url=cgr.dev/chainguard","pkg:oci/harbor-jobservice?repository_url=cgr.dev/chainguard","pkg:oci/harbor-portal?repository_url=cgr.dev/chainguard","pkg:oci/harbor-registry?repository_url=cgr.dev/chainguard","pkg:oci/harbor-registryctl?repository_url=cgr.dev/chainguard","pkg:oci/harbor-core-fips?repository_url=cgr.dev/chainguard","pkg:oci/harbor-jobservice-fips?repository_url=cgr.dev/chainguard","pkg:oci/harbor-portal-fips?repository_url=cgr.dev/chainguard","pkg:oci/harbor-registry-fips?repository_url=cgr.dev/chainguard","pkg:oci/harbor-registryctl-fips?repository_url=cgr.dev/chainguard","pkg:oci/harbor-core?repository_url=quay.io/goharbor","pkg:oci/harbor-portal?repository_url=quay.io/goharbor","pkg:oci/harbor-jobservice?repository_url=quay.io/goharbor"],"sources":{"pkg:github/goharbor/harbor":"upstream","pkg:docker/goharbor/harbor-core":"upstream","pkg:docker/goharbor/harbor-exporter":"upstream","pkg:docker/goharbor/harbor-jobservice":"upstream","pkg:docker/goharbor/harbor-portal":"upstream","pkg:docker/goharbor/harbor-registryctl":"upstream","pkg:docker/goharbor/registry-photon":"upstream","pkg:docker/bitnami/harbor-registry":"upstream","pkg:docker/bitnami/harbor-core":"upstream","pkg:docker/bitnami/harbor-exporter":"upstream","pkg:docker/bitnami/harbor-jobservice":"upstream","pkg:docker/bitnami/harbor-portal":"upstream","pkg:docker/bitnami/harbor-registryctl":"upstream","pkg:oci/harbor-core?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-jobservice?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-portal?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-registry?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-registryctl?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-core-fips?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-jobservice-fips?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-portal-fips?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-registry-fips?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-registryctl-fips?repository_url=cgr.dev/chainguard":"upstream","pkg:oci/harbor-core?repository_url=quay.io/goharbor":"upstream","pkg:oci/harbor-portal?repository_url=quay.io/goharbor":"upstream","pkg:oci/harbor-jobservice?repository_url=quay.io/goharbor":"upstream"}},"hashicorp-packer":{"purl":["pkg:golang/github.com/hashicorp/packer","pkg:docker/hashicorp/packer","pkg:github/hashicorp/packer"],"sources":{"pkg:golang/github.com/hashicorp/packer":"override","pkg:docker/hashicorp/packer":"override","pkg:github/hashicorp/packer":"override"},"basis":"pkg:golang/github.com/hashicorp/packer: proxy.golang.org/github.com/hashicorp/packer/@v/list verified live on 2026-09-09 (143 versions). | pkg:docker/hashicorp/packer: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/hashicorp/packer/ on 2026-09-09 (Hub description: \"Automatic build of packer from latest source. See README for more information.\"); org hashicorp is HashiCorp's own: developer.hashicorp.com/packer/install names hashicorp/packer. | pkg:github/hashicorp/packer: github.com/hashicorp/packer verified live on 2026-09-09 (og:title \"GitHub - hashicorp/packer: Packer is a tool for creating identical machine images...\")."},"hashicorp-vault":{"purl":["pkg:golang/github.com/hashicorp/vault","pkg:docker/library/vault"],"sources":{"pkg:golang/github.com/hashicorp/vault":"override","pkg:docker/library/vault":"override"},"basis":"pkg:golang/github.com/hashicorp/vault: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/vault: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Vault is a tool for securely accessing secrets via a unified interface\")."},"hazelcast":{"purl":["pkg:maven/com.hazelcast/hazelcast"],"sources":{"pkg:maven/com.hazelcast/hazelcast":"override"},"basis":"Carried unchanged from the published purl map on 2026-10-16: the identifier was derived from the Maven Central registry entry (com.hazelcast:hazelcast) until b431051 moved Hazelcast verification to a manual browser read, which left the product with no purl source and failed purl-harvest --strict. Same identifier, now recorded here."},"hbase":{"purl":["pkg:maven/org.apache.hbase/hbase","pkg:maven/org.apache.hbase/hbase-server","pkg:maven/org.apache.hbase/hbase-client","pkg:maven/org.apache.hbase/hbase-common","pkg:github/apache/hbase"],"sources":{"pkg:maven/org.apache.hbase/hbase":"override","pkg:maven/org.apache.hbase/hbase-server":"override","pkg:maven/org.apache.hbase/hbase-client":"override","pkg:maven/org.apache.hbase/hbase-common":"override","pkg:github/apache/hbase":"override"},"basis":"pkg:maven/org.apache.hbase/hbase: repo1.maven.org/maven2/org/apache/hbase/hbase/maven-metadata.xml verified live on 2026-09-09 (latest 3.0.0; POM name \"Apache HBase\", description \"Apache HBase is the Hadoop database...\"; packaging pom). | pkg:maven/org.apache.hbase/hbase-server: repo1.maven.org/maven2/org/apache/hbase/hbase-server/maven-metadata.xml verified live on 2026-09-09 (latest 3.0.0). | pkg:maven/org.apache.hbase/hbase-client: repo1.maven.org/maven2/org/apache/hbase/hbase-client/maven-metadata.xml verified live on 2026-09-09 (latest 3.0.0) - HBase's own module, versioned with the release. | pkg:maven/org.apache.hbase/hbase-common: repo1.maven.org/maven2/org/apache/hbase/hbase-common/maven-metadata.xml verified live on 2026-09-09 (latest 3.0.0). | pkg:github/apache/hbase: github.com/apache/hbase verified live on 2026-09-09 (og:title \"GitHub - apache/hbase: Apache HBase\"; hbase.apache.org/book.html links github.com/apache/hbase)."},"hibernate-orm":{"purl":["pkg:maven/org.hibernate.orm/hibernate-core","pkg:maven/org.hibernate/hibernate-core"],"sources":{"pkg:maven/org.hibernate.orm/hibernate-core":"upstream","pkg:maven/org.hibernate/hibernate-core":"upstream"}},"hsqldb":{"purl":["pkg:maven/org.hsqldb/hsqldb"],"sources":{"pkg:maven/org.hsqldb/hsqldb":"registry"},"basis":"pkg:maven/org.hsqldb/hsqldb: repo1.maven.org/maven2/org/hsqldb/hsqldb/maven-metadata.xml verified live on 2026-10-07 (20 versions from 2.2.9 to 2.7.4, latest 2.7.4, release 2.7.4, lastUpdated 20241103013715; the directory listing agrees). Not added: the HeroDevs NES build 2.5.2-hsqldb-2.5.4 on the same coordinates, which is served from registry.nes.herodevs.com/maven/ rather than Maven Central; and pkg:github, because the project is hosted on SourceForge (sourceforge.net/projects/hsqldb) and has no primary GitHub repository."},"ibm-semeru-runtime":{"purl":["pkg:docker/library/ibm-semeru-runtimes"],"sources":{"pkg:docker/library/ibm-semeru-runtimes":"override"},"basis":"pkg:docker/library/ibm-semeru-runtimes: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"IBM Semeru Runtimes Official Images for OpenJDK and Eclipse OpenJ9 bin\")."},"icinga":{"purl":["pkg:docker/icinga/icinga2","pkg:github/Icinga/icinga2","pkg:github/Icinga/icinga-core","pkg:chocolatey/icinga2"],"sources":{"pkg:docker/icinga/icinga2":"upstream","pkg:github/Icinga/icinga2":"upstream","pkg:github/Icinga/icinga-core":"upstream","pkg:chocolatey/icinga2":"upstream"}},"icinga-web":{"purl":["pkg:docker/icinga/icingaweb2","pkg:github/Icinga/icingaweb2","pkg:github/Icinga/icinga-web"],"sources":{"pkg:docker/icinga/icingaweb2":"upstream","pkg:github/Icinga/icingaweb2":"upstream","pkg:github/Icinga/icinga-web":"upstream"}},"influxdb":{"purl":["pkg:docker/library/influxdb"],"sources":{"pkg:docker/library/influxdb":"override"},"basis":"pkg:docker/library/influxdb: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"InfluxDB is the open source time series database built for real-time a\")."},"ingress-nginx":{"purl":["pkg:github/kubernetes/ingress-nginx","pkg:golang/k8s.io/ingress-nginx"],"sources":{"pkg:github/kubernetes/ingress-nginx":"override","pkg:golang/k8s.io/ingress-nginx":"override"},"basis":"pkg:github/kubernetes/ingress-nginx: github.com/kubernetes/ingress-nginx verified live on 2026-09-09 (og:title \"GitHub - kubernetes/ingress-nginx: Ingress NGINX Controller for Kubernetes\"; the retirement post kubernetes.io/blog/2025/11/11/ingress-nginx-retirement/ is about this repo). | pkg:golang/k8s.io/ingress-nginx: proxy.golang.org/k8s.io/ingress-nginx/@v/list verified live on 2026-09-09 (module resolves; 1 tagged version, the project does not tag its module). Images are on registry.k8s.io, not Docker Hub (library/ingress-nginx 404)."},"ionic":{"purl":["pkg:github/ionic-team/ionic-framework","pkg:npm/%40ionic/core"],"sources":{"pkg:github/ionic-team/ionic-framework":"upstream","pkg:npm/%40ionic/core":"upstream"}},"isc-dhcp":{"purl":["pkg:docker/networkboot/dhcpd"],"sources":{"pkg:docker/networkboot/dhcpd":"upstream"}},"istio":{"purl":["pkg:brew/istioctl","pkg:docker/istio/base","pkg:docker/istio/pilot","pkg:docker/istio/distroless","pkg:docker/istio/install-cni","pkg:docker/istio/app","pkg:docker/istio/proxyv2","pkg:docker/istio/operator","pkg:github/istio/istio","pkg:generic/istio"],"sources":{"pkg:brew/istioctl":"upstream","pkg:docker/istio/base":"upstream","pkg:docker/istio/pilot":"upstream","pkg:docker/istio/distroless":"upstream","pkg:docker/istio/install-cni":"upstream","pkg:docker/istio/app":"upstream","pkg:docker/istio/proxyv2":"upstream","pkg:docker/istio/operator":"upstream","pkg:github/istio/istio":"upstream","pkg:generic/istio":"override"},"basis":"pkg:generic/istio: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"jackson":{"purl":["pkg:maven/com.fasterxml.jackson.core/jackson-databind","pkg:maven/com.fasterxml.jackson.core/jackson-core"],"sources":{"pkg:maven/com.fasterxml.jackson.core/jackson-databind":"override","pkg:maven/com.fasterxml.jackson.core/jackson-core":"override"},"basis":"pkg:maven/com.fasterxml.jackson.core/jackson-databind and jackson-core: the Jackson 2.x coordinates (3.x moved to tools.jackson.core). Verified 2026-09-21: repo1.maven.org maven-metadata.xml exists for each coordinate and its version numbers follow the product's release lines. Added after an enterprise SBOM scanner asked the API for Java components by Maven coordinates on 2026-09-17."},"jaeger":{"purl":["pkg:docker/jaegertracing/all-in-one","pkg:docker/jaegertracing/jaeger","pkg:golang/github.com/jaegertracing/jaeger","pkg:github/jaegertracing/jaeger"],"sources":{"pkg:docker/jaegertracing/all-in-one":"override","pkg:docker/jaegertracing/jaeger":"override","pkg:golang/github.com/jaegertracing/jaeger":"override","pkg:github/jaegertracing/jaeger":"override"},"basis":"pkg:docker/jaegertracing/all-in-one: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/jaegertracing/all-in-one/ on 2026-09-09 (Hub description: \"Single image that runs all of Jaeger backend components and UI in one container\"); org jaegertracing is the project's own: jaegertracing.io/docs/1.76/getting-started/ runs jaegertracing/all-in-one:1.76.0. | pkg:docker/jaegertracing/jaeger: hub.docker.com/v2/repositories/jaegertracing/jaeger/ verified live on 2026-09-09 (Hub description: \"(experimental) Jaeger V2 based on OpenTelemetry Collector\"; the 2.x docs pull the same jaegertracing/jaeger name from cr.jaegertracing.io). | pkg:golang/github.com/jaegertracing/jaeger: proxy.golang.org/github.com/jaegertracing/jaeger/@v/list verified live on 2026-09-09 (99 versions). | pkg:github/jaegertracing/jaeger: github.com/jaegertracing/jaeger verified live on 2026-09-09 (og:title \"GitHub - jaegertracing/jaeger: CNCF Jaeger, a Distributed Tracing Platform\")."},"jekyll":{"purl":["pkg:gem/jekyll","pkg:github/jekyll/jekyll"],"sources":{"pkg:gem/jekyll":"override","pkg:github/jekyll/jekyll":"override"},"basis":"pkg:gem/jekyll: rubygems.org/api/v1/gems/jekyll.json verified live on 2026-09-09 (info: \"Jekyll is a simple, blog aware, static site generator.\"; homepage jekyllrb.com; version 4.4.1 matches the tracked cycle 4 latest). | pkg:github/jekyll/jekyll: github.com/jekyll/jekyll verified live on 2026-09-09 (og:title \"GitHub - jekyll/jekyll: Jekyll is a blog-aware static site generator in Ruby\")."},"jenkins":{"purl":["pkg:docker/library/jenkins"],"sources":{"pkg:docker/library/jenkins":"override"},"basis":"pkg:docker/library/jenkins: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"DEPRECATED; use \"jenkins/jenkins:lts\" instead\"). pkg:docker/library/jenkins: image marked DEPRECATED on Hub (successor jenkins/jenkins); an SBOM naming it is still this product."},"jhipster":{"purl":["pkg:npm/generator-jhipster","pkg:docker/jhipster/jhipster","pkg:github/jhipster/generator-jhipster"],"sources":{"pkg:npm/generator-jhipster":"override","pkg:docker/jhipster/jhipster":"override","pkg:github/jhipster/generator-jhipster":"override"},"basis":"pkg:npm/generator-jhipster: registry.npmjs.org/generator-jhipster verified live on 2026-09-09 (description: \"Spring Boot + Angular/React/Vue in one handy generator\"; homepage jhipster.tech; latest 9.3.0). | pkg:docker/jhipster/jhipster: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/jhipster/jhipster/ on 2026-09-09 (Hub description: \"Official JHipster Docker image\"); org jhipster is the project's own: jhipster.tech/installation/ links hub.docker.com/r/jhipster/jhipster/. | pkg:github/jhipster/generator-jhipster: github.com/jhipster/generator-jhipster verified live on 2026-09-09 (og:title \"GitHub - jhipster/generator-jhipster: JHipster is a development platform...\")."},"jira-service-management":{"purl":["pkg:docker/atlassian/jira-servicemanagement"],"sources":{"pkg:docker/atlassian/jira-servicemanagement":"override"},"basis":"pkg:docker/atlassian/jira-servicemanagement: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/atlassian/jira-servicemanagement/ on 2026-10-04 (Hub description: Jira Service Management is a fully featured service desk tool used by modern IT teams.); org atlassian is the one recorded as Atlassian own for jira-software."},"jira-software":{"purl":["pkg:docker/atlassian/jira-software"],"sources":{"pkg:docker/atlassian/jira-software":"override"},"basis":"pkg:docker/atlassian/jira-software: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/atlassian/jira-software/ on 2026-09-09 (Hub description: \"Jira Software is a software development tool used by agile teams.\"); org atlassian is Atlassian's own: bitbucket.org/atlassian-docker/docker-atlassian-jira README says \"Check out atlassian/jira-software on Docker Hub\"."},"joomla":{"purl":["pkg:docker/library/joomla"],"sources":{"pkg:docker/library/joomla":"override"},"basis":"pkg:docker/library/joomla: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Joomla! is an open source content management system.\")."},"jquery":{"purl":["pkg:github/jquery/jquery","pkg:maven/org.webjars/jquery","pkg:npm/jquery","pkg:nuget/jQuery"],"sources":{"pkg:github/jquery/jquery":"upstream","pkg:maven/org.webjars/jquery":"upstream","pkg:npm/jquery":"upstream","pkg:nuget/jQuery":"upstream"}},"jquery-ui":{"purl":["pkg:github/jquery/jquery-ui","pkg:maven/org.webjars/jquery-ui","pkg:npm/jquery-ui","pkg:nuget/jQuery.UI.Combined"],"sources":{"pkg:github/jquery/jquery-ui":"upstream","pkg:maven/org.webjars/jquery-ui":"upstream","pkg:npm/jquery-ui":"upstream","pkg:nuget/jQuery.UI.Combined":"upstream"}},"jreleaser":{"purl":["pkg:apk/alpine/jreleaser","pkg:brew/jreleaser","pkg:chocolatey/jreleaser","pkg:github/jreleaser/jreleaser","pkg:docker/jreleaser/jreleaser-alpine","pkg:docker/jreleaser/jreleaser-slim","pkg:docker/jreleaser/jreleaser-ubi","pkg:maven/org.jreleaser/jreleaser","pkg:rpm/fedora/jreleaser","pkg:scoop/jreleaser","pkg:winget/JReleaser.jreleaser"],"sources":{"pkg:apk/alpine/jreleaser":"upstream","pkg:brew/jreleaser":"upstream","pkg:chocolatey/jreleaser":"upstream","pkg:github/jreleaser/jreleaser":"upstream","pkg:docker/jreleaser/jreleaser-alpine":"upstream","pkg:docker/jreleaser/jreleaser-slim":"upstream","pkg:docker/jreleaser/jreleaser-ubi":"upstream","pkg:maven/org.jreleaser/jreleaser":"upstream","pkg:rpm/fedora/jreleaser":"upstream","pkg:scoop/jreleaser":"upstream","pkg:winget/JReleaser.jreleaser":"upstream"},"basis":"pkg:maven/org.jreleaser/jreleaser: repo1.maven.org/maven2/org/jreleaser/jreleaser/maven-metadata.xml verified live on 2026-09-09 (latest 1.26.0; POM description \"JReleaser\", url github.com/jreleaser/jreleaser; jreleaser.org's Maven guide uses groupId org.jreleaser). | pkg:github/jreleaser/jreleaser: github.com/jreleaser/jreleaser verified live on 2026-09-09 (og:title \"GitHub - jreleaser/jreleaser: Release projects quickly and easily with JReleaser\")."},"jruby":{"purl":["pkg:github/jruby/jruby","pkg:maven/org.jruby/jruby"],"sources":{"pkg:github/jruby/jruby":"upstream","pkg:maven/org.jruby/jruby":"upstream"}},"json-java":{"purl":["pkg:maven/org.json/json"],"sources":{"pkg:maven/org.json/json":"registry"}},"jsonpath":{"purl":["pkg:maven/com.jayway.jsonpath/json-path"],"sources":{"pkg:maven/com.jayway.jsonpath/json-path":"registry"}},"julia":{"purl":["pkg:generic/julia","pkg:docker/library/julia"],"sources":{"pkg:generic/julia":"override","pkg:docker/library/julia":"override"},"basis":"pkg:generic/julia: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/julia: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Julia is a high-level, high-performance dynamic programming language f\")."},"karpenter":{"purl":["pkg:github/kubernetes-sigs/karpenter","pkg:oci/karpenter?repository_url=public.ecr.aws/karpenter","pkg:oci/karpenter?repository_url=dhi.io","pkg:oci/karpenter?repository_url=cgr.dev/chainguard"],"sources":{"pkg:github/kubernetes-sigs/karpenter":"upstream","pkg:oci/karpenter?repository_url=public.ecr.aws/karpenter":"upstream","pkg:oci/karpenter?repository_url=dhi.io":"upstream","pkg:oci/karpenter?repository_url=cgr.dev/chainguard":"upstream"}},"keda":{"purl":["pkg:github/kedacore/keda","pkg:oci/keda-admission-webhooks?repository_url=ghcr.io/kedacore","pkg:oci/keda-metrics-apiserver?repository_url=ghcr.io/kedacore","pkg:oci/keda?repository_url=ghcr.io/kedacore"],"sources":{"pkg:github/kedacore/keda":"upstream","pkg:oci/keda-admission-webhooks?repository_url=ghcr.io/kedacore":"upstream","pkg:oci/keda-metrics-apiserver?repository_url=ghcr.io/kedacore":"upstream","pkg:oci/keda?repository_url=ghcr.io/kedacore":"upstream"}},"keycloak":{"purl":["pkg:github/keycloak/keycloak","pkg:maven/org.keycloak/keycloak-core"],"sources":{"pkg:github/keycloak/keycloak":"upstream","pkg:maven/org.keycloak/keycloak-core":"upstream"}},"kiali":{"purl":["pkg:docker/kiali/kiali","pkg:github/kiali/kiali"],"sources":{"pkg:docker/kiali/kiali":"upstream","pkg:github/kiali/kiali":"upstream"}},"kibana":{"purl":["pkg:docker/library/kibana"],"sources":{"pkg:docker/library/kibana":"override"},"basis":"pkg:docker/library/kibana: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Kibana gives shape to any kind of data — structured and unstructured —\")."},"kirby":{"purl":["pkg:composer/getkirby/cms","pkg:github/getkirby/kirby"],"sources":{"pkg:composer/getkirby/cms":"override","pkg:github/getkirby/kirby":"override"},"basis":"pkg:composer/getkirby/cms: repo.packagist.org/p2/getkirby/cms.json verified live on 2026-09-09 (description: \"The Kirby core\"; homepage getkirby.com; source github.com/getkirby/kirby). | pkg:github/getkirby/kirby: github.com/getkirby/kirby verified live on 2026-09-09 (og:title \"GitHub - getkirby/kirby: Kirby's core application folder\")."},"knative":{"purl":["pkg:github/knative/serving"],"sources":{"pkg:github/knative/serving":"upstream"}},"knockout":{"purl":["pkg:npm/knockout"],"sources":{"pkg:npm/knockout":"registry"}},"kong-gateway":{"purl":["pkg:github/Kong/kong"],"sources":{"pkg:github/Kong/kong":"upstream"}},"kotlin":{"purl":["pkg:maven/org.jetbrains.kotlin/kotlin-stdlib","pkg:github/JetBrains/kotlin"],"sources":{"pkg:maven/org.jetbrains.kotlin/kotlin-stdlib":"override","pkg:github/JetBrains/kotlin":"override"},"basis":"pkg:maven/org.jetbrains.kotlin/kotlin-stdlib: repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-stdlib/maven-metadata.xml verified live on 2026-09-09 (latest 2.4.20 matches the tracked cycle 2.4 latest; POM name \"Kotlin Stdlib\", description \"Kotlin Standard Library\", url kotlinlang.org). | pkg:github/JetBrains/kotlin: github.com/JetBrains/kotlin verified live on 2026-09-09 (og:title \"GitHub - JetBrains/kotlin: The Kotlin Programming Language.\")."},"kubernetes":{"purl":["pkg:github/kubernetes/kubernetes"],"sources":{"pkg:github/kubernetes/kubernetes":"upstream"}},"kubernetes-csi-node-driver-registrar":{"purl":["pkg:oci/csi-node-driver-registrar?repository_url=k8s.gcr.io/sig-storage","pkg:github/kubernetes-csi/node-driver-registrar","pkg:golang/github.com/kubernetes-csi/node-driver-registrar"],"sources":{"pkg:oci/csi-node-driver-registrar?repository_url=k8s.gcr.io/sig-storage":"upstream","pkg:github/kubernetes-csi/node-driver-registrar":"upstream","pkg:golang/github.com/kubernetes-csi/node-driver-registrar":"upstream"}},"kubernetes-node-feature-discovery":{"purl":["pkg:github/kubernetes-sigs/node-feature-discovery"],"sources":{"pkg:github/kubernetes-sigs/node-feature-discovery":"upstream"}},"kuma":{"purl":["pkg:docker/kumahq/kuma-cp","pkg:golang/github.com/kumahq/kuma","pkg:github/kumahq/kuma"],"sources":{"pkg:docker/kumahq/kuma-cp":"override","pkg:golang/github.com/kumahq/kuma":"override","pkg:github/kumahq/kuma":"override"},"basis":"pkg:docker/kumahq/kuma-cp: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/kumahq/kuma-cp/ on 2026-09-09 (Hub description field is empty; last pushed 2026-09-09); org kumahq is the project's own: the kumahq/kuma Helm chart values.yaml sets registry docker.io/kumahq and repository kuma-cp. | pkg:golang/github.com/kumahq/kuma: proxy.golang.org/github.com/kumahq/kuma/@v/list verified live on 2026-09-09 (3 tagged versions). | pkg:github/kumahq/kuma: github.com/kumahq/kuma verified live on 2026-09-09 (og:title \"GitHub - kumahq/kuma: The multi-zone service mesh for containers, Kubernetes and VMs...\")."},"kyverno":{"purl":["pkg:github/kyverno/kyverno","pkg:docker/nirmata/kyverno","pkg:oci/kyverno?repository_url=cgr.dev/chainguard"],"sources":{"pkg:github/kyverno/kyverno":"upstream","pkg:docker/nirmata/kyverno":"upstream","pkg:oci/kyverno?repository_url=cgr.dev/chainguard":"upstream"}},"laravel":{"purl":["pkg:composer/laravel/framework","pkg:docker/bitnami/laravel","pkg:github/laravel/framework"],"sources":{"pkg:composer/laravel/framework":"upstream","pkg:docker/bitnami/laravel":"upstream","pkg:github/laravel/framework":"upstream"}},"ldap-account-manager":{"purl":["pkg:github/LDAPAccountManager/lam","pkg:docker/ldapaccountmanager/lam"],"sources":{"pkg:github/LDAPAccountManager/lam":"override","pkg:docker/ldapaccountmanager/lam":"override"},"basis":"pkg:github/LDAPAccountManager/lam: github.com/LDAPAccountManager/lam verified live on 2026-09-09 (og:title \"GitHub - LDAPAccountManager/lam: LDAP Account Manager\"; ldap-account-manager.org/lamcms/releases serves its downloads from github.com/LDAPAccountManager/lam/releases). | pkg:docker/ldapaccountmanager/lam: hub.docker.com/v2/repositories/ldapaccountmanager/lam/ verified live on 2026-09-09 (Hub description: \"LDAP Account Manager\"; full description: \"Deprecated repository. See https://github.com/LDAPAccountManager/docker/pkgs/container/lam for the latest images.\") - the Hub record itself points at the project's GitHub org, which is how the org is known to be the project's; image marked deprecated on Hub (successor ghcr.io/ldapaccountmanager/lam); an SBOM naming it is still this product."},"linux":{"purl":["pkg:generic/linux-kernel"],"sources":{"pkg:generic/linux-kernel":"override"},"basis":"pkg:generic/linux-kernel: Syft linux-kernel cataloger (github.com/anchore/syft, syft/pkg/cataloger/kernel/package.go, read 2026-09-09: const linuxKernelPackageName = \"linux-kernel\" and packageurl.NewPackageURL(packageurl.TypeGeneric, ...)) emits this purl for kernel images it detects in an image or filesystem scan. No pkg:github: torvalds/linux on GitHub is a mirror, canonical is git.kernel.org; no Docker image (library/linux 404)."},"liquibase":{"purl":["pkg:maven/org.liquibase/liquibase-core","pkg:docker/library/liquibase","pkg:docker/liquibase/liquibase","pkg:github/liquibase/liquibase"],"sources":{"pkg:maven/org.liquibase/liquibase-core":"override","pkg:docker/library/liquibase":"override","pkg:docker/liquibase/liquibase":"override","pkg:github/liquibase/liquibase":"override"},"basis":"pkg:maven/org.liquibase/liquibase-core: repo1.maven.org/maven2/org/liquibase/liquibase-core/maven-metadata.xml verified live on 2026-09-09 (latest 5.0.4 matches the tracked cycle 5 latest; POM name \"Liquibase\", description \"Liquibase is a tool for managing and executing database changes.\"). | pkg:docker/library/liquibase: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/liquibase/ on 2026-09-09 (Hub description: \"DEPRECATED; Liquibase is DevOps for your database.\"); image marked DEPRECATED on Hub (successor liquibase/liquibase); an SBOM naming it is still this product. | pkg:docker/liquibase/liquibase: hub.docker.com/v2/repositories/liquibase/liquibase/ verified live on 2026-09-09 (Hub description: \"Liquibase Community\"); org liquibase is Liquibase's own: the official library/liquibase full description tells users to switch to liquibase/liquibase. | pkg:github/liquibase/liquibase: github.com/liquibase/liquibase verified live on 2026-09-09 (og:title \"GitHub - liquibase/liquibase: Main Liquibase Source\")."},"liquibase-secure":{"purl":["pkg:maven/com.liquibase/liquibase-commercial","pkg:maven/org.liquibase/liquibase-commercial","pkg:docker/liquibase/liquibase-secure"],"sources":{"pkg:maven/com.liquibase/liquibase-commercial":"upstream","pkg:maven/org.liquibase/liquibase-commercial":"upstream","pkg:docker/liquibase/liquibase-secure":"upstream"}},"lodash":{"purl":["pkg:npm/lodash"],"sources":{"pkg:npm/lodash":"registry"}},"log4j":{"purl":["pkg:maven/org.apache.logging.log4j/log4j-core","pkg:maven/log4j/log4j","pkg:maven/org.apache.logging.log4j/log4j-api"],"sources":{"pkg:maven/org.apache.logging.log4j/log4j-core":"upstream","pkg:maven/log4j/log4j":"upstream","pkg:maven/org.apache.logging.log4j/log4j-api":"override"},"basis":"pkg:maven/org.apache.logging.log4j/log4j-api: the Log4j 2 API artifact, released in lockstep with log4j-core. Verified 2026-09-21: repo1.maven.org maven-metadata.xml exists for each coordinate and its version numbers follow the product's release lines. Added after an enterprise SBOM scanner asked the API for Java components by Maven coordinates on 2026-09-17."},"logback":{"purl":["pkg:maven/ch.qos.logback/logback-classic","pkg:maven/ch.qos.logback/logback-core"],"sources":{"pkg:maven/ch.qos.logback/logback-classic":"registry","pkg:maven/ch.qos.logback/logback-core":"override"},"basis":"pkg:maven/ch.qos.logback/logback-classic and logback-core: the two artifacts every logback deployment carries, released together under the same version (repo1.maven.org, read 2026-10-15)."},"logstash":{"purl":["pkg:docker/library/logstash"],"sources":{"pkg:docker/library/logstash":"override"},"basis":"pkg:docker/library/logstash: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Logstash is a tool for managing events and logs.\")."},"longhorn":{"purl":["pkg:github/longhorn/longhorn"],"sources":{"pkg:github/longhorn/longhorn":"upstream"}},"loopback":{"purl":["pkg:npm/loopback"],"sources":{"pkg:npm/loopback":"registry"}},"mageia":{"purl":["pkg:docker/library/mageia"],"sources":{"pkg:docker/library/mageia":"override"},"basis":"pkg:docker/library/mageia: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Official Mageia base image\")."},"magento":{"purl":["pkg:composer/magento/community-edition","pkg:github/magento/magento2"],"sources":{"pkg:composer/magento/community-edition":"override","pkg:github/magento/magento2":"override"},"basis":"pkg:composer/magento/community-edition: repo.packagist.org/p2/magento/community-edition.json verified live on 2026-09-09 (description: \"Magento 2 (Open Source)\"; source github.com/magento/magento2; version 2.4.9 matches the tracked latest). magento/product-community-edition and magento/magento2-base are served only from repo.magento.com (Packagist 404 on 2026-09-09) and are not added. | pkg:github/magento/magento2: github.com/magento/magento2 verified live on 2026-09-09 (og:title \"GitHub - magento/magento2: ...\" (Adobe CLA notice); the Packagist record's source URL)."},"mandrel":{"purl":["pkg:github/graalvm/mandrel"],"sources":{"pkg:github/graalvm/mandrel":"override"},"basis":"pkg:github/graalvm/mandrel: github.com/graalvm/mandrel verified live on 2026-09-09 (og:title \"GitHub - graalvm/mandrel: Mandrel is a downstream distribution of the GraalVM community edition...\"; upstream's cycle links point at github.com/graalvm/mandrel/releases)."},"mariadb":{"purl":["pkg:apk/alpine/mariadb","pkg:deb/debian/mariadb","pkg:deb/ubuntu/mariadb","pkg:docker/library/mariadb","pkg:docker/bitnami/mariadb","pkg:docker/bitnami/mariadb-galera","pkg:brew/mariadb","pkg:rpm/amzn/mariadb-server","pkg:rpm/redhat/mariadb-server","pkg:rpm/centos/mariadb-server","pkg:rpm/opensuse/mariadb","pkg:generic/mariadb"],"sources":{"pkg:apk/alpine/mariadb":"upstream","pkg:deb/debian/mariadb":"upstream","pkg:deb/ubuntu/mariadb":"upstream","pkg:docker/library/mariadb":"upstream","pkg:docker/bitnami/mariadb":"upstream","pkg:docker/bitnami/mariadb-galera":"upstream","pkg:brew/mariadb":"upstream","pkg:rpm/amzn/mariadb-server":"upstream","pkg:rpm/redhat/mariadb-server":"upstream","pkg:rpm/centos/mariadb-server":"upstream","pkg:rpm/opensuse/mariadb":"upstream","pkg:generic/mariadb":"override"},"basis":"pkg:generic/mariadb: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"mastodon":{"purl":["pkg:docker/bitnami/mastodon","pkg:docker/tootsuite/mastodon","pkg:docker/linuxserver/mastodon"],"sources":{"pkg:docker/bitnami/mastodon":"upstream","pkg:docker/tootsuite/mastodon":"upstream","pkg:docker/linuxserver/mastodon":"upstream"}},"matomo":{"purl":["pkg:docker/library/matomo","pkg:docker/bitnami/matomo","pkg:github/matomo-org/matomo"],"sources":{"pkg:docker/library/matomo":"upstream","pkg:docker/bitnami/matomo":"upstream","pkg:github/matomo-org/matomo":"upstream"}},"mattermost":{"purl":["pkg:docker/mattermost/mattermost-team-edition","pkg:docker/mattermost/mattermost-enterprise-edition","pkg:golang/github.com/mattermost/mattermost/server/v8","pkg:github/mattermost/mattermost"],"sources":{"pkg:docker/mattermost/mattermost-team-edition":"override","pkg:docker/mattermost/mattermost-enterprise-edition":"override","pkg:golang/github.com/mattermost/mattermost/server/v8":"override","pkg:github/mattermost/mattermost":"override"},"basis":"pkg:docker/mattermost/mattermost-team-edition: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/mattermost/mattermost-team-edition/ on 2026-09-09 (Hub description: \"The official Docker image for Mattermost Team Edition.\"); org mattermost is Mattermost's own: the mattermost/docker repo's docker-compose.yml pulls image mattermost/(MATTERMOST_IMAGE) with env.example MATTERMOST_IMAGE=mattermost-enterprise-edition. | pkg:docker/mattermost/mattermost-enterprise-edition: hub.docker.com/v2/repositories/mattermost/mattermost-enterprise-edition/ verified live on 2026-09-09 (Hub description: \"The official Docker image for Mattermost Enterprise Edition.\"). | pkg:golang/github.com/mattermost/mattermost/server/v8: proxy.golang.org/github.com/mattermost/mattermost/server/v8/@latest verified live on 2026-09-09 (resolves, origin github.com/mattermost/mattermost subdir server). | pkg:github/mattermost/mattermost: github.com/mattermost/mattermost verified live on 2026-09-09 (og:title \"GitHub - mattermost/mattermost: Mattermost is an open source platform for secure collaboration...\")."},"mautic":{"purl":["pkg:github/mautic/mautic/"],"sources":{"pkg:github/mautic/mautic/":"upstream"}},"mediawiki":{"purl":["pkg:docker/library/mediawiki"],"sources":{"pkg:docker/library/mediawiki":"override"},"basis":"pkg:docker/library/mediawiki: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"MediaWiki is a free software open source wiki package written in PHP.\")."},"meilisearch":{"purl":["pkg:docker/getmeili/meilisearch","pkg:github/meilisearch/meilisearch"],"sources":{"pkg:docker/getmeili/meilisearch":"override","pkg:github/meilisearch/meilisearch":"override"},"basis":"pkg:docker/getmeili/meilisearch: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/getmeili/meilisearch/ on 2026-09-09 (Hub description: \"An open-source, fast, and hyper-relevant search engine that fits effortlessly into your projects.\"); org getmeili is Meilisearch's own: meilisearch.com/docs self-hosting Docker guide names getmeili/meilisearch. | pkg:github/meilisearch/meilisearch: github.com/meilisearch/meilisearch verified live on 2026-09-09 (og:title \"GitHub - meilisearch/meilisearch: A lightning-fast search engine API...\"). The npm package meilisearch is the JS client (\"The Meilisearch JS client for Node.js and the browser.\") and is deliberately NOT added."},"memcached":{"purl":["pkg:generic/memcached","pkg:deb/ubuntu/memcached","pkg:deb/debian/memcached","pkg:rpm/amzn/memcached","pkg:rpm/redhat/memcached","pkg:rpm/centos/memcached","pkg:docker/library/memcached"],"sources":{"pkg:generic/memcached":"upstream","pkg:deb/ubuntu/memcached":"upstream","pkg:deb/debian/memcached":"upstream","pkg:rpm/amzn/memcached":"upstream","pkg:rpm/redhat/memcached":"upstream","pkg:rpm/centos/memcached":"upstream","pkg:docker/library/memcached":"upstream"}},"metabase":{"purl":["pkg:github/metabase/metabase","pkg:docker/metabase/metabase"],"sources":{"pkg:github/metabase/metabase":"upstream","pkg:docker/metabase/metabase":"upstream"}},"metallb":{"purl":["pkg:golang/go.universe.tf/metallb","pkg:github/metallb/metallb"],"sources":{"pkg:golang/go.universe.tf/metallb":"override","pkg:github/metallb/metallb":"override"},"basis":"pkg:golang/go.universe.tf/metallb: proxy.golang.org/go.universe.tf/metallb/@v/list verified live on 2026-09-09 (69 versions). | pkg:github/metallb/metallb: github.com/metallb/metallb verified live on 2026-09-09 (og:title \"GitHub - metallb/metallb: A network load-balancer implementation for Kubernetes using standard routing protocols\"). Images are on quay.io, not Docker Hub (library/metallb 404)."},"micrometer":{"purl":["pkg:maven/io.micrometer/micrometer-core","pkg:github/micrometer-metrics/micrometer"],"sources":{"pkg:maven/io.micrometer/micrometer-core":"registry","pkg:github/micrometer-metrics/micrometer":"override"},"basis":"pkg:maven/io.micrometer/micrometer-core: repo1.maven.org/maven2/io/micrometer/micrometer-core/maven-metadata.xml verified live on 2026-09-18 (260 versions, 230 plain releases, highest plain release 1.17.1; the latest tag is the milestone 1.18.0-M1). pkg:github/micrometer-metrics/micrometer: api.github.com/repos/micrometer-metrics/micrometer verified live on 2026-09-18 (default branch main, not archived, Apache-2.0, releases/latest v1.17.1; all 36 first and latest release days served match the GitHub release dates). Not added: the HeroDevs NES builds (version 1.9.17-micrometer-1.9.19 on the same io.micrometer coordinates), which are served from registry.nes.herodevs.com, not Maven Central; and the other io.micrometer artifacts (micrometer-bom, micrometer-observation, the micrometer-registry-* modules), left for a later coverage round."},"micronaut":{"purl":["pkg:github/micronaut-projects/micronaut-core","pkg:maven/io.micronaut/micronaut-core"],"sources":{"pkg:github/micronaut-projects/micronaut-core":"upstream","pkg:maven/io.micronaut/micronaut-core":"upstream"}},"mlflow":{"purl":["pkg:pypi/mlflow"],"sources":{"pkg:pypi/mlflow":"registry"}},"modernizr":{"purl":["pkg:npm/modernizr","pkg:github/Modernizr/Modernizr"],"sources":{"pkg:npm/modernizr":"registry","pkg:github/Modernizr/Modernizr":"override"},"basis":"pkg:npm/modernizr: registry.npmjs.org/modernizr verified live on 2026-09-10 (dist-tag latest 3.13.1; repository git+https://github.com/Modernizr/Modernizr.git; carries only 3.x, first version 3.0.0-pre 2014-10-27). pkg:github/Modernizr/Modernizr: api.github.com/repos/Modernizr/Modernizr verified live on 2026-09-10 (default branch master, the project primary repository; the source of the 2.x tag dates served). Not added: pkg:npm/npm-modernizr, a third-party republish of the 2.8.3 build (single maintainer aibarra988, one version, published 2015-12-01) that HeroDevs NES for NPM Modernizr replaces; not the project own package."},"moment":{"purl":["pkg:npm/moment"],"sources":{"pkg:npm/moment":"registry"}},"mongodb":{"purl":["pkg:deb/debian/mongodb","pkg:deb/ubuntu/mongodb","pkg:rpm/amzn/mongodb-org-server","pkg:rpm/redhat/mongodb-org-server","pkg:rpm/centos/mongodb-org-server","pkg:rpm/amzn/mongodb-enterprise-server","pkg:rpm/redhat/mongodb-enterprise-server","pkg:rpm/centos/mongodb-enterprise-server","pkg:generic/mongodb","pkg:docker/library/mongo"],"sources":{"pkg:deb/debian/mongodb":"upstream","pkg:deb/ubuntu/mongodb":"upstream","pkg:rpm/amzn/mongodb-org-server":"upstream","pkg:rpm/redhat/mongodb-org-server":"upstream","pkg:rpm/centos/mongodb-org-server":"upstream","pkg:rpm/amzn/mongodb-enterprise-server":"upstream","pkg:rpm/redhat/mongodb-enterprise-server":"upstream","pkg:rpm/centos/mongodb-enterprise-server":"upstream","pkg:generic/mongodb":"override","pkg:docker/library/mongo":"override"},"basis":"pkg:generic/mongodb: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/mongo: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"MongoDB document databases provide high availability and easy scalabil\")."},"mysql":{"purl":["pkg:generic/mysql","pkg:docker/library/mysql","pkg:deb/ubuntu/mysql-server","pkg:deb/debian/mysql","pkg:winget/Oracle.MySQL","pkg:chocolatey/mysql","pkg:generic/mysql-server"],"sources":{"pkg:generic/mysql":"upstream","pkg:docker/library/mysql":"upstream","pkg:deb/ubuntu/mysql-server":"upstream","pkg:deb/debian/mysql":"upstream","pkg:winget/Oracle.MySQL":"upstream","pkg:chocolatey/mysql":"upstream","pkg:generic/mysql-server":"override"},"basis":"pkg:generic/mysql-server: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"mysql-connector-j":{"purl":["pkg:maven/com.mysql/mysql-connector-j"],"sources":{"pkg:maven/com.mysql/mysql-connector-j":"registry"}},"neo4j":{"purl":["pkg:github/neo4j/neo4j","pkg:docker/library/neo4j"],"sources":{"pkg:github/neo4j/neo4j":"upstream","pkg:docker/library/neo4j":"override"},"basis":"pkg:docker/library/neo4j: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Neo4j is a highly scalable, robust native graph database.\")."},"neos":{"purl":["pkg:composer/neos/neos"],"sources":{"pkg:composer/neos/neos":"upstream"}},"nestjs":{"purl":["pkg:npm/@nestjs/core"],"sources":{"pkg:npm/@nestjs/core":"registry"}},"nextcloud":{"purl":["pkg:docker/library/nextcloud"],"sources":{"pkg:docker/library/nextcloud":"override"},"basis":"pkg:docker/library/nextcloud: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Nextcloud manual docker image\")."},"nextjs":{"purl":["pkg:npm/next","pkg:github/vercel/next.js"],"sources":{"pkg:npm/next":"upstream","pkg:github/vercel/next.js":"upstream"}},"nexus":{"purl":["pkg:github/sonatype/nexus-public"],"sources":{"pkg:github/sonatype/nexus-public":"upstream"}},"nginx":{"purl":["pkg:generic/nginx","pkg:deb/debian/nginx","pkg:deb/ubuntu/nginx","pkg:rpm/amzn/nginx","pkg:rpm/redhat/nginx","pkg:rpm/centos/nginx","pkg:apk/alpine/nginx","pkg:rpm/opensuse/nginx","pkg:github/nginx/nginx","pkg:docker/library/nginx"],"sources":{"pkg:generic/nginx":"upstream","pkg:deb/debian/nginx":"upstream","pkg:deb/ubuntu/nginx":"upstream","pkg:rpm/amzn/nginx":"upstream","pkg:rpm/redhat/nginx":"upstream","pkg:rpm/centos/nginx":"upstream","pkg:apk/alpine/nginx":"upstream","pkg:rpm/opensuse/nginx":"upstream","pkg:github/nginx/nginx":"upstream","pkg:docker/library/nginx":"override"},"basis":"pkg:docker/library/nginx: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Official build of Nginx.\")."},"nix":{"purl":["pkg:docker/nixos/nix","pkg:github/NixOS/nix"],"sources":{"pkg:docker/nixos/nix":"override","pkg:github/NixOS/nix":"override"},"basis":"pkg:docker/nixos/nix: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/nixos/nix/ on 2026-09-09 (Hub description: \"The Nix package manager.\"); org nixos is the project's own: nix.dev/manual/nix/latest/installation/installing-docker names nixos/nix. | pkg:github/NixOS/nix: github.com/NixOS/nix verified live on 2026-09-09 (og:title \"GitHub - NixOS/nix: Nix, the purely functional package manager\")."},"nodejs":{"purl":["pkg:generic/node","pkg:docker/circleci/node","pkg:docker/library/node","pkg:docker/cimg/node","pkg:docker/bitnami/node","pkg:rpm/redhat/nodejs","pkg:rpm/redhat/nodejs24"],"sources":{"pkg:generic/node":"upstream","pkg:docker/circleci/node":"upstream","pkg:docker/library/node":"upstream","pkg:docker/cimg/node":"upstream","pkg:docker/bitnami/node":"upstream","pkg:rpm/redhat/nodejs":"upstream","pkg:rpm/redhat/nodejs24":"upstream"}},"nomad":{"purl":["pkg:golang/github.com/hashicorp/nomad","pkg:docker/hashicorp/nomad","pkg:github/hashicorp/nomad"],"sources":{"pkg:golang/github.com/hashicorp/nomad":"override","pkg:docker/hashicorp/nomad":"override","pkg:github/hashicorp/nomad":"override"},"basis":"pkg:golang/github.com/hashicorp/nomad: proxy.golang.org/github.com/hashicorp/nomad/@v/list verified live on 2026-09-09 (299 versions). | pkg:docker/hashicorp/nomad: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/hashicorp/nomad/ on 2026-09-09 (Hub description: \"Official Nomad Docker images\"); org hashicorp is HashiCorp's own: developer.hashicorp.com/nomad/install names hashicorp/nomad. | pkg:github/hashicorp/nomad: github.com/hashicorp/nomad verified live on 2026-09-09 (og:title \"GitHub - hashicorp/nomad: Nomad is an easy-to-use, flexible, and performant workload orchestrator...\")."},"notepad-plus-plus":{"purl":["pkg:github/notepad-plus-plus/notepad-plus-plus"],"sources":{"pkg:github/notepad-plus-plus/notepad-plus-plus":"override"},"basis":"pkg:github/notepad-plus-plus/notepad-plus-plus: github.com/notepad-plus-plus/notepad-plus-plus verified live on 2026-09-09 (og:title \"GitHub - notepad-plus-plus/notepad-plus-plus: Notepad++ official repository\")."},"numpy":{"purl":["pkg:pypi/numpy","pkg:github/numpy/numpy"],"sources":{"pkg:pypi/numpy":"upstream","pkg:github/numpy/numpy":"upstream"}},"nuxt":{"purl":["pkg:npm/nuxt","pkg:github/nuxt/nuxt"],"sources":{"pkg:npm/nuxt":"upstream","pkg:github/nuxt/nuxt":"upstream"}},"nvm":{"purl":["pkg:github/nvm-sh/nvm"],"sources":{"pkg:github/nvm-sh/nvm":"upstream"}},"okhttp":{"purl":["pkg:maven/com.squareup.okhttp3/okhttp","pkg:maven/com.squareup.okhttp3/okhttp-jvm","pkg:maven/com.squareup.okhttp3/okhttp-android"],"sources":{"pkg:maven/com.squareup.okhttp3/okhttp":"registry","pkg:maven/com.squareup.okhttp3/okhttp-jvm":"override","pkg:maven/com.squareup.okhttp3/okhttp-android":"override"},"basis":"OkHttp 5 publishes the library as okhttp-jvm and okhttp-android alongside the okhttp coordinate (project README and Maven Central group com.squareup.okhttp3, read 2026-09-20/21); same version numbers as the product."},"oniguruma":{"purl":["pkg:github/kkos/oniguruma","pkg:deb/debian/libonig","pkg:deb/ubuntu/libonig","pkg:rpm/fedora/oniguruma","pkg:apk/alpine/oniguruma","pkg:apk/alpine/oniguruma-dev","pkg:alpm/arch/oniguruma"],"sources":{"pkg:github/kkos/oniguruma":"upstream","pkg:deb/debian/libonig":"upstream","pkg:deb/ubuntu/libonig":"upstream","pkg:rpm/fedora/oniguruma":"upstream","pkg:apk/alpine/oniguruma":"upstream","pkg:apk/alpine/oniguruma-dev":"upstream","pkg:alpm/arch/oniguruma":"upstream"}},"openbao":{"purl":["pkg:github/openbao/openbao","pkg:docker/openbao/openbao","pkg:docker/openbao/openbao-ubi","pkg:oci/openbao?repository_url=ghcr.io/openbao","pkg:oci/openbao-ubi?repository_url=ghcr.io/openbao","pkg:oci/openbao?repository_url=quay.io/openbao","pkg:oci/openbao-ubi?repository_url=quay.io/openbao","pkg:brew/openbao"],"sources":{"pkg:github/openbao/openbao":"upstream","pkg:docker/openbao/openbao":"upstream","pkg:docker/openbao/openbao-ubi":"upstream","pkg:oci/openbao?repository_url=ghcr.io/openbao":"upstream","pkg:oci/openbao-ubi?repository_url=ghcr.io/openbao":"upstream","pkg:oci/openbao?repository_url=quay.io/openbao":"upstream","pkg:oci/openbao-ubi?repository_url=quay.io/openbao":"upstream","pkg:brew/openbao":"upstream"}},"openjdk-builds-from-oracle":{"purl":["pkg:docker/library/openjdk"],"sources":{"pkg:docker/library/openjdk":"override"},"basis":"pkg:docker/library/openjdk: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/openjdk/ on 2026-09-09 (Hub description: \"Pre-release / non-production builds of OpenJDK\"; full description: the only tags still updated are Early Access builds \"sourced from jdk.java.net\", i.e. Oracle's OpenJDK builds). Image marked deprecated for GA tags on Hub (successors eclipse-temurin and other vendor images); an SBOM naming it is still this product."},"opensaml":{"purl":["pkg:maven/org.opensaml/opensaml-core","pkg:maven/org.opensaml/opensaml-core-api","pkg:maven/org.opensaml/opensaml-saml-api","pkg:maven/org.opensaml/opensaml-saml-impl","pkg:maven/org.opensaml/opensaml-soap-impl"],"sources":{"pkg:maven/org.opensaml/opensaml-core":"override","pkg:maven/org.opensaml/opensaml-core-api":"override","pkg:maven/org.opensaml/opensaml-saml-api":"override","pkg:maven/org.opensaml/opensaml-saml-impl":"override","pkg:maven/org.opensaml/opensaml-soap-impl":"override"},"basis":"org.opensaml modules: maven-metadata.xml read on build.shibboleth.net/maven/releases on 2026-09-21 for each coordinate (opensaml-core carries 3.x and 4.x, opensaml-core-api 5.x; the saml and soap modules carry 5.2.3). Maven Central stops at 4.0.1, so the registry route cannot derive these."},"opensearch":{"purl":["pkg:docker/opensearchproject/opensearch"],"sources":{"pkg:docker/opensearchproject/opensearch":"upstream"}},"openssl":{"purl":["pkg:generic/openssl"],"sources":{"pkg:generic/openssl":"override"},"basis":"endoflife.date's own convention for tarball-distributed projects (pkg:generic/<project>, e.g. pkg:generic/node, pkg:generic/postgresql); Syft emits pkg:generic/openssl for OpenSSL binaries it classifies. Added 2026-09-04; upstream lists only CPEs for openssl."},"opensuse":{"purl":["pkg:docker/library/opensuse"],"sources":{"pkg:docker/library/opensuse":"override"},"basis":"pkg:docker/library/opensuse: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"DEPRECATED; for current images by the openSUSE Project see opensuse/le\"). pkg:docker/library/opensuse: image marked DEPRECATED on Hub (successor opensuse/leap); an SBOM naming it is still this product."},"opentofu":{"purl":["pkg:github/opentofu/opentofu","pkg:oci/opentofu?repository_url=ghcr.io/opentofu"],"sources":{"pkg:github/opentofu/opentofu":"upstream","pkg:oci/opentofu?repository_url=ghcr.io/opentofu":"upstream"}},"openvpn":{"purl":["pkg:deb/debian/openvpn","pkg:deb/ubuntu/openvpn","pkg:github/openvpn/openvpn"],"sources":{"pkg:deb/debian/openvpn":"upstream","pkg:deb/ubuntu/openvpn":"upstream","pkg:github/openvpn/openvpn":"upstream"}},"openwrt":{"purl":["pkg:github/openwrt/openwrt"],"sources":{"pkg:github/openwrt/openwrt":"upstream"}},"openzfs":{"purl":["pkg:github/openzfs/zfs"],"sources":{"pkg:github/openzfs/zfs":"override"},"basis":"pkg:github/openzfs/zfs: github.com/openzfs/zfs verified live on 2026-09-09 (og:title \"GitHub - openzfs/zfs: OpenZFS on Linux and FreeBSD\"; openzfs.github.io docs say \"The primary git repository for the project is the zfs repository\" under the openzfs organization)."},"opnsense":{"purl":["pkg:github/opnsense/core"],"sources":{"pkg:github/opnsense/core":"override"},"basis":"pkg:github/opnsense/core: github.com/opnsense/core verified live on 2026-09-09 (og:title \"GitHub - opnsense/core: OPNsense GUI, API and systems backend\"; opnsense.org links github.com/opnsense as the project's source home)."},"oracle-database":{"purl":["pkg:maven/com.oracle.database.jdbc/ojdbc8","pkg:maven/com.oracle.database.jdbc/ojdbc10","pkg:maven/com.oracle.database.jdbc/ojdbc11","pkg:maven/com.oracle.database.jdbc/ojdbc17","pkg:maven/com.oracle.database.jdbc/ucp","pkg:maven/com.oracle.database.jdbc/ucp11","pkg:maven/com.oracle.database.jdbc/ucp17"],"sources":{"pkg:maven/com.oracle.database.jdbc/ojdbc8":"override","pkg:maven/com.oracle.database.jdbc/ojdbc10":"override","pkg:maven/com.oracle.database.jdbc/ojdbc11":"override","pkg:maven/com.oracle.database.jdbc/ojdbc17":"override","pkg:maven/com.oracle.database.jdbc/ucp":"override","pkg:maven/com.oracle.database.jdbc/ucp11":"override","pkg:maven/com.oracle.database.jdbc/ucp17":"override"},"basis":"The database itself has no package URL (binaries and images only from oracle.com and container-registry.oracle.com, checked 2026-09-09). The JDBC thin driver and UCP artifacts under com.oracle.database.jdbc are versioned with database release numbers (ojdbc8 12.2.0.1 to 23.26.3.0.0 across majors 12, 18, 19, 21, 23; ojdbc10 19.x; ojdbc11 21.x and 23.x; ojdbc17 23.x; ucp 11.2 to 23.x; read from each coordinate's maven-metadata.xml on repo1.maven.org 2026-09-21) and Oracle's JDBC FAQ (oracle.com/database/technologies/faq-jdbc.html, read 2026-09-20) states that driver support follows the database release, so a driver version resolves to its database cycle. Added after an enterprise SBOM scanner asked the API for ojdbc11 on 2026-09-17."},"oracle-linux":{"purl":["pkg:oci/oraclelinux?repository_url=container-registry.oracle.com/ords/ocr/ba/os","pkg:oci/oraclelinux?repository_url=ghcr.io/oracle","pkg:docker/library/oraclelinux"],"sources":{"pkg:oci/oraclelinux?repository_url=container-registry.oracle.com/ords/ocr/ba/os":"upstream","pkg:oci/oraclelinux?repository_url=ghcr.io/oracle":"upstream","pkg:docker/library/oraclelinux":"upstream"}},"otobo":{"purl":["pkg:docker/rotheross/otobo","pkg:github/RotherOSS/otobo"],"sources":{"pkg:docker/rotheross/otobo":"override","pkg:github/RotherOSS/otobo":"override"},"basis":"pkg:docker/rotheross/otobo: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/rotheross/otobo/ on 2026-09-09 (Hub description: \"OTOBO Helpdesk System\"); org rotheross is the vendor's own (Rother OSS GmbH): doc.otobo.org installation-docker page runs rotheross/otobo:rel-10_1_10. | pkg:github/RotherOSS/otobo: github.com/RotherOSS/otobo verified live on 2026-09-09 (og:title \"GitHub - RotherOSS/otobo: OTOBO is one of the most flexible web-based ticketing systems...\")."},"ovirt":{"purl":["pkg:github/ovirt/ovirt-engine"],"sources":{"pkg:github/ovirt/ovirt-engine":"upstream"}},"passport":{"purl":["pkg:npm/passport"],"sources":{"pkg:npm/passport":"registry"}},"perl":{"purl":["pkg:apk/alpine/perl","pkg:deb/debian/perl","pkg:deb/debian/perl-base","pkg:generic/perl","pkg:docker/library/perl"],"sources":{"pkg:apk/alpine/perl":"upstream","pkg:deb/debian/perl":"upstream","pkg:deb/debian/perl-base":"upstream","pkg:generic/perl":"upstream","pkg:docker/library/perl":"override"},"basis":"pkg:docker/library/perl: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Perl is a high-level, general-purpose, interpreted, dynamic programmin\")."},"pgadmin":{"purl":["pkg:pypi/pgadmin4"],"sources":{"pkg:pypi/pgadmin4":"override"},"basis":"pkg:pypi/pgadmin4: PyPI project pgadmin4 (summary 'PostgreSQL Tools', home page www.pgadmin.org, latest 9.18 matching the served latest 9.18), read at pypi.org/pypi/pgadmin4/json on 2026-10-14. pgAdmin publishes the same tool as the pgadmin4 wheel; versions follow the product's release numbers."},"phoenix-framework":{"purl":["pkg:hex/phoenix","pkg:github/phoenixframework/phoenix"],"sources":{"pkg:hex/phoenix":"upstream","pkg:github/phoenixframework/phoenix":"upstream"}},"photon":{"purl":["pkg:docker/library/photon"],"sources":{"pkg:docker/library/photon":"override"},"basis":"pkg:docker/library/photon: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Photon OS is an open source minimal Linux container host.\")."},"php":{"purl":["pkg:deb/ubuntu/php","pkg:deb/debian/php","pkg:generic/php","pkg:generic/php-cli","pkg:generic/php-fpm","pkg:docker/library/php"],"sources":{"pkg:deb/ubuntu/php":"upstream","pkg:deb/debian/php":"upstream","pkg:generic/php":"upstream","pkg:generic/php-cli":"upstream","pkg:generic/php-fpm":"upstream","pkg:docker/library/php":"override"},"basis":"pkg:docker/library/php: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"While designed for web development, the PHP scripting language also pr\")."},"phpbb":{"purl":["pkg:composer/phpbb/phpbb","pkg:github/phpbb/phpbb"],"sources":{"pkg:composer/phpbb/phpbb":"override","pkg:github/phpbb/phpbb":"override"},"basis":"pkg:composer/phpbb/phpbb: repo.packagist.org/p2/phpbb/phpbb.json verified live on 2026-09-09 (description: \"phpBB Forum Software application\"; homepage phpbb.com). | pkg:github/phpbb/phpbb: github.com/phpbb/phpbb verified live on 2026-09-09 (og:title \"GitHub - phpbb/phpbb: phpBB Development: phpBB is a popular open-source bulletin board written in PHP...\")."},"phpmyadmin":{"purl":["pkg:apk/alpine/phpmyadmin","pkg:composer/phpmyadmin/phpmyadmin","pkg:deb/debian/phpmyadmin","pkg:deb/ubuntu/phpmyadmin","pkg:github/phpmyadmin/phpmyadmin","pkg:rpm/redhat/phpmyadmin","pkg:rpm/centos/phpmyadmin","pkg:docker/library/phpmyadmin"],"sources":{"pkg:apk/alpine/phpmyadmin":"upstream","pkg:composer/phpmyadmin/phpmyadmin":"upstream","pkg:deb/debian/phpmyadmin":"upstream","pkg:deb/ubuntu/phpmyadmin":"upstream","pkg:github/phpmyadmin/phpmyadmin":"upstream","pkg:rpm/redhat/phpmyadmin":"upstream","pkg:rpm/centos/phpmyadmin":"upstream","pkg:docker/library/phpmyadmin":"upstream"}},"pigeonhole":{"purl":["pkg:github/dovecot/pigeonhole"],"sources":{"pkg:github/dovecot/pigeonhole":"override"},"basis":"pkg:github/dovecot/pigeonhole: github.com/dovecot/pigeonhole verified live on 2026-09-09 (og:title \"GitHub - dovecot/pigeonhole: Pigeonhole project: Sieve support for Dovecot.\")."},"plesk":{"purl":["pkg:docker/plesk/plesk"],"sources":{"pkg:docker/plesk/plesk":"upstream"}},"plone":{"purl":["pkg:docker/library/plone"],"sources":{"pkg:docker/library/plone":"override"},"basis":"pkg:docker/library/plone: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"DEPRECATED. Plone is a free and open source content management system \"). pkg:docker/library/plone: image marked DEPRECATED on Hub (successor plone/plone-backend); an SBOM naming it is still this product."},"pnpm":{"purl":["pkg:brew/pnpm","pkg:github/pnpm/pnpm","pkg:npm/pnpm","pkg:oci/pnpm?repository_url=ghcr.io/pnpm"],"sources":{"pkg:brew/pnpm":"upstream","pkg:github/pnpm/pnpm":"upstream","pkg:npm/pnpm":"upstream","pkg:oci/pnpm?repository_url=ghcr.io/pnpm":"upstream"}},"podman":{"purl":["pkg:golang/github.com/containers/podman/v5","pkg:github/podman-container-tools/podman"],"sources":{"pkg:golang/github.com/containers/podman/v5":"override","pkg:github/podman-container-tools/podman":"override"},"basis":"pkg:golang/github.com/containers/podman/v5: proxy.golang.org/github.com/containers/podman/v5/@v/list verified live on 2026-09-09 (59 versions) - the module path Podman still declares. | pkg:github/podman-container-tools/podman: github.com/containers/podman now redirects (301) to github.com/podman-container-tools/podman, verified live on 2026-09-09 (og:title \"GitHub - podman-container-tools/podman: Podman: A tool for managing OCI containers and pods.\"; podman.io footer links github.com/podman-container-tools/podman). Existing SBOMs may still carry pkg:github/containers/podman."},"postcss":{"purl":["pkg:npm/postcss","pkg:github/postcss/postcss"],"sources":{"pkg:npm/postcss":"registry","pkg:github/postcss/postcss":"override"},"basis":"pkg:npm/postcss: registry.npmjs.org/postcss verified live on 2026-09-18 (dist-tag latest 8.5.28; repository git+https://github.com/postcss/postcss.git). pkg:github/postcss/postcss: api.github.com/repos/postcss/postcss verified live on 2026-09-18 (default branch main, not archived, the project primary repository; tags 5.0.0, 6.0.0, 7.0.0, 7.0.39, 8.0.0 and 8.5.28 cross-checked against the npm publish days served). Not added: @neverendingsupport/postcss, the HeroDevs replacement package, which is served from registry.nes.herodevs.com and returns 404 on the public npm registry."},"postgresql":{"purl":["pkg:generic/postgresql","pkg:docker/library/postgres","pkg:deb/ubuntu/postgresql"],"sources":{"pkg:generic/postgresql":"upstream","pkg:docker/library/postgres":"upstream","pkg:deb/ubuntu/postgresql":"upstream"}},"powershell":{"purl":["pkg:github/powershell/powershell"],"sources":{"pkg:github/powershell/powershell":"upstream"}},"privatebin":{"purl":["pkg:composer/privatebin/privatebin","pkg:docker/privatebin/nginx-fpm-alpine","pkg:github/PrivateBin/PrivateBin"],"sources":{"pkg:composer/privatebin/privatebin":"override","pkg:docker/privatebin/nginx-fpm-alpine":"override","pkg:github/PrivateBin/PrivateBin":"override"},"basis":"pkg:composer/privatebin/privatebin: repo.packagist.org/p2/privatebin/privatebin.json verified live on 2026-09-09 (description: \"PrivateBin is a minimalist, open source online pastebin where the server has zero knowledge of stored data...\"). | pkg:docker/privatebin/nginx-fpm-alpine: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/privatebin/nginx-fpm-alpine/ on 2026-09-09 (Hub description: \"PrivateBin running on an Nginx, php-fpm & Alpine Linux stack\"); org privatebin is the project's own: the PrivateBin/docker-nginx-fpm-alpine README names privatebin/nginx-fpm-alpine. | pkg:github/PrivateBin/PrivateBin: github.com/PrivateBin/PrivateBin verified live on 2026-09-09 (og:title \"GitHub - PrivateBin/PrivateBin: A minimalist, open source online pastebin...\")."},"proftpd":{"purl":["pkg:generic/proftpd"],"sources":{"pkg:generic/proftpd":"override"},"basis":"pkg:generic/proftpd: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"prometheus":{"purl":["pkg:docker/prom/prometheus","pkg:docker/bitnami/prometheus","pkg:docker/rapidfort/prometheus-official","pkg:oci/prometheus?repository_url=quay.io/repository/prometheus","pkg:oci/prometheus?repository_url=cgr.dev/chainguard","pkg:github/prometheus/prometheus","pkg:golang/github.com/prometheus/prometheus"],"sources":{"pkg:docker/prom/prometheus":"upstream","pkg:docker/bitnami/prometheus":"upstream","pkg:docker/rapidfort/prometheus-official":"upstream","pkg:oci/prometheus?repository_url=quay.io/repository/prometheus":"upstream","pkg:oci/prometheus?repository_url=cgr.dev/chainguard":"upstream","pkg:github/prometheus/prometheus":"upstream","pkg:golang/github.com/prometheus/prometheus":"upstream"}},"protobuf":{"purl":["pkg:maven/com.google.protobuf/protobuf-java"],"sources":{"pkg:maven/com.google.protobuf/protobuf-java":"registry"}},"protractor":{"purl":["pkg:npm/protractor"],"sources":{"pkg:npm/protractor":"upstream"}},"proxmox-backup-server":{"purl":["pkg:github/proxmox/proxmox-backup"],"sources":{"pkg:github/proxmox/proxmox-backup":"upstream"}},"proxmox-datacenter-manager":{"purl":["pkg:github/proxmox/proxmox-datacenter-manager"],"sources":{"pkg:github/proxmox/proxmox-datacenter-manager":"upstream"}},"proxmox-mail-gateway":{"purl":["pkg:github/proxmox/pmg-api"],"sources":{"pkg:github/proxmox/pmg-api":"upstream"}},"puppet":{"purl":["pkg:gem/puppet","pkg:github/puppetlabs/puppet"],"sources":{"pkg:gem/puppet":"override","pkg:github/puppetlabs/puppet":"override"},"basis":"pkg:gem/puppet: rubygems.org/api/v1/gems/puppet.json verified live on 2026-09-09 (info: \"Puppet, an automated administrative engine for your Linux, Unix, and Windows systems...\"; homepage github.com/puppetlabs/puppet). | pkg:github/puppetlabs/puppet: github.com/puppetlabs/puppet verified live on 2026-09-09 (og:title \"GitHub - puppetlabs/puppet: Server automation framework and application\")."},"python":{"purl":["pkg:generic/python","pkg:deb/ubuntu/python","pkg:deb/ubuntu/python3.15","pkg:deb/ubuntu/python3.14","pkg:deb/ubuntu/python3.13","pkg:deb/ubuntu/python3.12","pkg:deb/ubuntu/python3.11","pkg:deb/ubuntu/python3.10","pkg:deb/ubuntu/python3.9","pkg:deb/ubuntu/python3.8","pkg:deb/ubuntu/python3.7","pkg:deb/ubuntu/python3.6","pkg:deb/ubuntu/python3.5","pkg:deb/ubuntu/python3.4","pkg:deb/ubuntu/python3.3","pkg:deb/ubuntu/python3.2","pkg:deb/ubuntu/python3.1","pkg:deb/ubuntu/python3.0","pkg:deb/ubuntu/python2.7","pkg:deb/ubuntu/python2.6","pkg:deb/ubuntu/python2.5","pkg:deb/ubuntu/python2.4","pkg:deb/ubuntu/python2.3","pkg:deb/ubuntu/python2.2","pkg:deb/ubuntu/python2.1","pkg:deb/debian/python","pkg:deb/debian/python3.15","pkg:deb/debian/python3.14","pkg:deb/debian/python3.13","pkg:deb/debian/python3.11","pkg:deb/debian/python3.9","pkg:deb/debian/python3.7","pkg:deb/debian/python3.5","pkg:deb/debian/python3.4","pkg:deb/debian/python3.2","pkg:deb/debian/python3.1","pkg:deb/debian/python2.7","pkg:deb/debian/python2.6","pkg:deb/debian/python2.5","pkg:deb/debian/python2.4","pkg:deb/debian/python2.3","pkg:deb/debian/python2.2","pkg:deb/debian/python2.1","pkg:deb/debian/python1.5","pkg:rpm/fedora/python3.15","pkg:rpm/fedora/python3.14","pkg:rpm/fedora/python3.13","pkg:rpm/fedora/python3.12","pkg:rpm/fedora/python3.11","pkg:rpm/fedora/python3.10","pkg:rpm/fedora/python3.9","pkg:rpm/fedora/python3.8","pkg:rpm/fedora/python3.6","pkg:rpm/fedora/python3.5","pkg:rpm/amzn/python","pkg:rpm/amzn/python2","pkg:rpm/amzn/python3","pkg:rpm/redhat/python","pkg:rpm/redhat/python2","pkg:rpm/redhat/python3","pkg:rpm/redhat/python27","pkg:rpm/redhat/python38","pkg:rpm/redhat/python39","pkg:rpm/redhat/python3.11","pkg:rpm/redhat/python3.12","pkg:rpm/centos/python","pkg:rpm/centos/python2","pkg:rpm/centos/python3","pkg:docker/library/python","pkg:docker/circleci/python","pkg:docker/bitnami/python","pkg:github/python/cpython"],"sources":{"pkg:generic/python":"upstream","pkg:deb/ubuntu/python":"upstream","pkg:deb/ubuntu/python3.15":"upstream","pkg:deb/ubuntu/python3.14":"upstream","pkg:deb/ubuntu/python3.13":"upstream","pkg:deb/ubuntu/python3.12":"upstream","pkg:deb/ubuntu/python3.11":"upstream","pkg:deb/ubuntu/python3.10":"upstream","pkg:deb/ubuntu/python3.9":"upstream","pkg:deb/ubuntu/python3.8":"upstream","pkg:deb/ubuntu/python3.7":"upstream","pkg:deb/ubuntu/python3.6":"upstream","pkg:deb/ubuntu/python3.5":"upstream","pkg:deb/ubuntu/python3.4":"upstream","pkg:deb/ubuntu/python3.3":"upstream","pkg:deb/ubuntu/python3.2":"upstream","pkg:deb/ubuntu/python3.1":"upstream","pkg:deb/ubuntu/python3.0":"upstream","pkg:deb/ubuntu/python2.7":"upstream","pkg:deb/ubuntu/python2.6":"upstream","pkg:deb/ubuntu/python2.5":"upstream","pkg:deb/ubuntu/python2.4":"upstream","pkg:deb/ubuntu/python2.3":"upstream","pkg:deb/ubuntu/python2.2":"upstream","pkg:deb/ubuntu/python2.1":"upstream","pkg:deb/debian/python":"upstream","pkg:deb/debian/python3.15":"upstream","pkg:deb/debian/python3.14":"upstream","pkg:deb/debian/python3.13":"upstream","pkg:deb/debian/python3.11":"upstream","pkg:deb/debian/python3.9":"upstream","pkg:deb/debian/python3.7":"upstream","pkg:deb/debian/python3.5":"upstream","pkg:deb/debian/python3.4":"upstream","pkg:deb/debian/python3.2":"upstream","pkg:deb/debian/python3.1":"upstream","pkg:deb/debian/python2.7":"upstream","pkg:deb/debian/python2.6":"upstream","pkg:deb/debian/python2.5":"upstream","pkg:deb/debian/python2.4":"upstream","pkg:deb/debian/python2.3":"upstream","pkg:deb/debian/python2.2":"upstream","pkg:deb/debian/python2.1":"upstream","pkg:deb/debian/python1.5":"upstream","pkg:rpm/fedora/python3.15":"upstream","pkg:rpm/fedora/python3.14":"upstream","pkg:rpm/fedora/python3.13":"upstream","pkg:rpm/fedora/python3.12":"upstream","pkg:rpm/fedora/python3.11":"upstream","pkg:rpm/fedora/python3.10":"upstream","pkg:rpm/fedora/python3.9":"upstream","pkg:rpm/fedora/python3.8":"upstream","pkg:rpm/fedora/python3.6":"upstream","pkg:rpm/fedora/python3.5":"upstream","pkg:rpm/amzn/python":"upstream","pkg:rpm/amzn/python2":"upstream","pkg:rpm/amzn/python3":"upstream","pkg:rpm/redhat/python":"upstream","pkg:rpm/redhat/python2":"upstream","pkg:rpm/redhat/python3":"upstream","pkg:rpm/redhat/python27":"upstream","pkg:rpm/redhat/python38":"upstream","pkg:rpm/redhat/python39":"upstream","pkg:rpm/redhat/python3.11":"upstream","pkg:rpm/redhat/python3.12":"upstream","pkg:rpm/centos/python":"upstream","pkg:rpm/centos/python2":"upstream","pkg:rpm/centos/python3":"upstream","pkg:docker/library/python":"upstream","pkg:docker/circleci/python":"upstream","pkg:docker/bitnami/python":"upstream","pkg:github/python/cpython":"upstream"}},"qt":{"purl":["pkg:generic/qtbase"],"sources":{"pkg:generic/qtbase":"override"},"basis":"pkg:generic/qtbase: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"quarkus-framework":{"purl":["pkg:maven/io.quarkus.platform/quarkus-bom"],"sources":{"pkg:maven/io.quarkus.platform/quarkus-bom":"upstream"}},"quasar":{"purl":["pkg:npm/quasar"],"sources":{"pkg:npm/quasar":"upstream"}},"querydsl":{"purl":["pkg:maven/com.querydsl/querydsl-core"],"sources":{"pkg:maven/com.querydsl/querydsl-core":"registry"},"basis":"pkg:maven/com.querydsl/querydsl-core: the core artifact of the project releases (repo1.maven.org, read 2026-10-14). The io.github.openfeign.querydsl fork is a different artifact and is not mapped."},"rabbitmq":{"purl":["pkg:docker/library/rabbitmq"],"sources":{"pkg:docker/library/rabbitmq":"override"},"basis":"pkg:docker/library/rabbitmq: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"RabbitMQ is an open source multi-protocol messaging broker.\")."},"rails":{"purl":["pkg:gem/rails","pkg:github/rails/rails","pkg:docker/library/rails"],"sources":{"pkg:gem/rails":"upstream","pkg:github/rails/rails":"upstream","pkg:docker/library/rails":"override"},"basis":"pkg:docker/library/rails: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"DEPRECATED; use \"ruby\" instead\"). pkg:docker/library/rails: image marked DEPRECATED on Hub (successor ruby); an SBOM naming it is still this product."},"rancher":{"purl":["pkg:docker/rancher/rancher"],"sources":{"pkg:docker/rancher/rancher":"upstream"}},"ray":{"purl":["pkg:pypi/ray"],"sources":{"pkg:pypi/ray":"registry"}},"react":{"purl":["pkg:github/facebook/react","pkg:npm/react"],"sources":{"pkg:github/facebook/react":"upstream","pkg:npm/react":"upstream"}},"react-native":{"purl":["pkg:github/facebook/react-native","pkg:npm/react-native"],"sources":{"pkg:github/facebook/react-native":"upstream","pkg:npm/react-native":"upstream"}},"reactor-netty":{"purl":["pkg:maven/io.projectreactor.netty/reactor-netty-core","pkg:github/reactor/reactor-netty"],"sources":{"pkg:maven/io.projectreactor.netty/reactor-netty-core":"registry","pkg:github/reactor/reactor-netty":"override"},"basis":"pkg:maven/io.projectreactor.netty/reactor-netty-core: repo1.maven.org/maven2/io/projectreactor/netty/reactor-netty-core/maven-metadata.xml verified live on 2026-09-22 (117 versions; 49 plain releases on the 1.0 line, 32 on 1.1, 19 on 1.2, 8 on 1.3; the latest tag is the milestone 1.4.0-M1, not a release). pkg:github/reactor/reactor-netty: api.github.com/repos/reactor/reactor-netty verified live on 2026-09-22 (default branch main, not archived, Apache-2.0). Not added: the HeroDevs NES builds for the 1.0 line, which are served from registry.nes.herodevs.com rather than Maven Central; and the sibling artifacts on the same coordinates (reactor-netty, the aggregate, plus reactor-netty-http and reactor-netty-examples), left for a later coverage round."},"redhat-build-of-openjdk":{"purl":["pkg:rpm/redhat/java-1.6.0-openjdk","pkg:rpm/redhat/java-1.7.0-openjdk","pkg:rpm/redhat/java-1.7.0-openjdk-headless","pkg:rpm/redhat/java-1.8.0-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk-debug","pkg:rpm/redhat/java-1.8.0-openjdk-headless","pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug","pkg:rpm/redhat/java-11-openjdk","pkg:rpm/redhat/java-11-openjdk-debug","pkg:rpm/redhat/java-11-openjdk-headless-debug","pkg:rpm/redhat/java-1.6.0-openjdk-devel","pkg:rpm/redhat/java-1.7.0-openjdk-devel","pkg:rpm/redhat/java-1.8.0-openjdk-devel","pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug","pkg:rpm/redhat/java-11-openjdk-devel","pkg:rpm/redhat/java-11-openjdk-devel-debug","pkg:rpm/redhat/java-17-openjdk","pkg:rpm/redhat/java-17-openjdk-devel","pkg:rpm/redhat/java-17-openjdk-headless","pkg:rpm/redhat/java-17-openjdk-headless-devel","pkg:rpm/redhat/java-21-openjdk","pkg:rpm/redhat/java-21-openjdk-devel","pkg:rpm/redhat/java-21-openjdk-headless","pkg:rpm/redhat/java-21-openjdk-headless-devel","pkg:rpm/redhat/java-25-openjdk","pkg:rpm/redhat/java-25-openjdk-devel","pkg:rpm/redhat/java-25-openjdk-headless","pkg:rpm/redhat/java-25-openjdk-headless-devel"],"sources":{"pkg:rpm/redhat/java-1.6.0-openjdk":"upstream","pkg:rpm/redhat/java-1.7.0-openjdk":"upstream","pkg:rpm/redhat/java-1.7.0-openjdk-headless":"upstream","pkg:rpm/redhat/java-1.8.0-openjdk":"upstream","pkg:rpm/redhat/java-1.8.0-openjdk-debug":"upstream","pkg:rpm/redhat/java-1.8.0-openjdk-headless":"upstream","pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug":"upstream","pkg:rpm/redhat/java-11-openjdk":"upstream","pkg:rpm/redhat/java-11-openjdk-debug":"upstream","pkg:rpm/redhat/java-11-openjdk-headless-debug":"upstream","pkg:rpm/redhat/java-1.6.0-openjdk-devel":"upstream","pkg:rpm/redhat/java-1.7.0-openjdk-devel":"upstream","pkg:rpm/redhat/java-1.8.0-openjdk-devel":"upstream","pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug":"upstream","pkg:rpm/redhat/java-11-openjdk-devel":"upstream","pkg:rpm/redhat/java-11-openjdk-devel-debug":"upstream","pkg:rpm/redhat/java-17-openjdk":"upstream","pkg:rpm/redhat/java-17-openjdk-devel":"upstream","pkg:rpm/redhat/java-17-openjdk-headless":"upstream","pkg:rpm/redhat/java-17-openjdk-headless-devel":"upstream","pkg:rpm/redhat/java-21-openjdk":"upstream","pkg:rpm/redhat/java-21-openjdk-devel":"upstream","pkg:rpm/redhat/java-21-openjdk-headless":"upstream","pkg:rpm/redhat/java-21-openjdk-headless-devel":"upstream","pkg:rpm/redhat/java-25-openjdk":"upstream","pkg:rpm/redhat/java-25-openjdk-devel":"upstream","pkg:rpm/redhat/java-25-openjdk-headless":"upstream","pkg:rpm/redhat/java-25-openjdk-headless-devel":"upstream"}},"redis":{"purl":["pkg:generic/redis","pkg:deb/ubuntu/redis","pkg:deb/debian/redis","pkg:rpm/amzn/redis","pkg:rpm/redhat/redis","pkg:rpm/centos/redis","pkg:docker/library/redis","pkg:docker/redislabs/redis","pkg:docker/bitnami/redis","pkg:docker/circleci/redis","pkg:docker/cimg/redis","pkg:docker/ubuntu/redis","pkg:brew/redis/redis"],"sources":{"pkg:generic/redis":"upstream","pkg:deb/ubuntu/redis":"upstream","pkg:deb/debian/redis":"upstream","pkg:rpm/amzn/redis":"upstream","pkg:rpm/redhat/redis":"upstream","pkg:rpm/centos/redis":"upstream","pkg:docker/library/redis":"upstream","pkg:docker/redislabs/redis":"upstream","pkg:docker/bitnami/redis":"upstream","pkg:docker/circleci/redis":"upstream","pkg:docker/cimg/redis":"upstream","pkg:docker/ubuntu/redis":"upstream","pkg:brew/redis/redis":"upstream"}},"redmine":{"purl":["pkg:docker/library/redmine"],"sources":{"pkg:docker/library/redmine":"override"},"basis":"pkg:docker/library/redmine: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Redmine is a flexible project management web application written using\")."},"renovate":{"purl":["pkg:npm/renovate","pkg:docker/renovate/renovate","pkg:oci/renovate?repository_url=ghcr.io/renovatebot","pkg:brew/renovate"],"sources":{"pkg:npm/renovate":"upstream","pkg:docker/renovate/renovate":"upstream","pkg:oci/renovate?repository_url=ghcr.io/renovatebot":"upstream","pkg:brew/renovate":"upstream"}},"requirejs":{"purl":["pkg:npm/requirejs"],"sources":{"pkg:npm/requirejs":"registry"}},"robo":{"purl":["pkg:composer/consolidation/robo","pkg:github/consolidation/robo"],"sources":{"pkg:composer/consolidation/robo":"upstream","pkg:github/consolidation/robo":"upstream"}},"rocket-chat":{"purl":["pkg:docker/library/rocket.chat","pkg:docker/rocketchat/rocket.chat","pkg:github/RocketChat/Rocket.Chat"],"sources":{"pkg:docker/library/rocket.chat":"override","pkg:docker/rocketchat/rocket.chat":"override","pkg:github/RocketChat/Rocket.Chat":"override"},"basis":"pkg:docker/library/rocket.chat: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/rocket.chat/ on 2026-09-09 (Hub description: \"The Complete Open Source Chat Solution\"). | pkg:docker/rocketchat/rocket.chat: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/rocketchat/rocket.chat/ on 2026-09-09 (Hub description: \"Official Rocket.Chat docker deployment image.\"); org rocketchat is Rocket.Chat's own: docs.rocket.chat deploy-with-docker page names rocketchat/rocket.chat. | pkg:github/RocketChat/Rocket.Chat: github.com/RocketChat/Rocket.Chat verified live on 2026-09-09 (og:title \"GitHub - RocketChat/Rocket.Chat: The Secure CommsOS for mission-critical operations\")."},"rocky-linux":{"purl":["pkg:docker/library/rockylinux"],"sources":{"pkg:docker/library/rockylinux":"override"},"basis":"pkg:docker/library/rockylinux: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"The official build of Rocky Linux.\")."},"ros":{"purl":["pkg:github/ros/ros"],"sources":{"pkg:github/ros/ros":"upstream"}},"ros-2":{"purl":["pkg:docker/library/ros"],"sources":{"pkg:docker/library/ros":"override"},"basis":"pkg:docker/library/ros: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/ros/ on 2026-09-09 (Hub description: \"The Robot Operating System (ROS) is an open source project for building robot applications.\"); tag list hub.docker.com/v2/repositories/library/ros/tags/ read on 2026-09-09 shows ROS 2 distribution tags (rolling-ros-core-resolute, rolling-ros-core, rolling-ros-base-resolute, rolling-ros-base, rolling, kilted-ros-core-noble) alongside ROS 1 tags, so the image is this product for its ROS 2 tags."},"roundcube":{"purl":["pkg:composer/roundcube/roundcubemail","pkg:docker/roundcube/roundcubemail","pkg:github/roundcube/roundcubemail"],"sources":{"pkg:composer/roundcube/roundcubemail":"override","pkg:docker/roundcube/roundcubemail":"override","pkg:github/roundcube/roundcubemail":"override"},"basis":"pkg:composer/roundcube/roundcubemail: repo.packagist.org/p2/roundcube/roundcubemail.json verified live on 2026-09-09 (description: \"The Roundcube Webmail suite\"; version 1.7.4 matches the tracked cycle 1.7 latest). | pkg:docker/roundcube/roundcubemail: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/roundcube/roundcubemail/ on 2026-09-09 (Hub description: \"The Roundcube Webmail suite\"); org roundcube is the project's own: the roundcube/roundcubemail-docker README names roundcube/roundcubemail. | pkg:github/roundcube/roundcubemail: github.com/roundcube/roundcubemail verified live on 2026-09-09 (og:title \"GitHub - roundcube/roundcubemail: The Roundcube Webmail suite\")."},"rtpengine":{"purl":["pkg:github/sipwise/rtpengine"],"sources":{"pkg:github/sipwise/rtpengine":"override"},"basis":"pkg:github/sipwise/rtpengine: github.com/sipwise/rtpengine verified live on 2026-09-09 (og:title \"GitHub - sipwise/rtpengine: The Sipwise media proxy for Kamailio\")."},"ruby":{"purl":["pkg:alpm/arch/ruby","pkg:brew/ruby","pkg:docker/library/ruby","pkg:generic/ruby","pkg:rpm/fedora/ruby","pkg:rpm/redhat/ruby","pkg:rpm/centos/ruby"],"sources":{"pkg:alpm/arch/ruby":"upstream","pkg:brew/ruby":"upstream","pkg:docker/library/ruby":"upstream","pkg:generic/ruby":"upstream","pkg:rpm/fedora/ruby":"upstream","pkg:rpm/redhat/ruby":"upstream","pkg:rpm/centos/ruby":"upstream"}},"rust":{"purl":["pkg:generic/rust","pkg:docker/library/rust"],"sources":{"pkg:generic/rust":"override","pkg:docker/library/rust":"override"},"basis":"pkg:generic/rust: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan. | pkg:docker/library/rust: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Rust is a systems programming language focused on safety, speed, and c\")."},"salt":{"purl":["pkg:oci/docker-salt-master?repository_url=ghcr.io/cdalvaro","pkg:docker/saltstack/salt"],"sources":{"pkg:oci/docker-salt-master?repository_url=ghcr.io/cdalvaro":"upstream","pkg:docker/saltstack/salt":"upstream"}},"samba":{"purl":["pkg:github/samba-team/samba"],"sources":{"pkg:github/samba-team/samba":"upstream"}},"sapmachine":{"purl":["pkg:docker/library/sapmachine"],"sources":{"pkg:docker/library/sapmachine":"override"},"basis":"pkg:docker/library/sapmachine: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Official SapMachine Docker Image, SAP's build of OpenJDK.\")."},"scala":{"purl":["pkg:maven/org.scala-lang/scala-library","pkg:maven/org.scala-lang/scala3-library_3","pkg:github/scala/scala","pkg:github/scala/scala3"],"sources":{"pkg:maven/org.scala-lang/scala-library":"override","pkg:maven/org.scala-lang/scala3-library_3":"override","pkg:github/scala/scala":"override","pkg:github/scala/scala3":"override"},"basis":"pkg:maven/org.scala-lang/scala-library: repo1.maven.org/maven2/org/scala-lang/scala-library/maven-metadata.xml verified live on 2026-09-09 (latest 3.10.0-RC2; POM url scala-lang.org). | pkg:maven/org.scala-lang/scala3-library_3: repo1.maven.org/maven2/org/scala-lang/scala3-library_3/maven-metadata.xml verified live on 2026-09-09 (latest 3.10.0-RC2; POM url scala-lang.org). | pkg:github/scala/scala: github.com/scala/scala verified live on 2026-09-09 (og:title \"GitHub - scala/scala: Scala 2 compiler and standard library...\"). | pkg:github/scala/scala3: github.com/scala/scala3 verified live on 2026-09-09 (og:title \"GitHub - scala/scala3: The Scala 3 compiler, also known as Dotty.\")."},"shopware":{"purl":["pkg:composer/shopware/core","pkg:composer/shopware/platform","pkg:composer/shopware/shopware","pkg:github/shopware/shopware"],"sources":{"pkg:composer/shopware/core":"override","pkg:composer/shopware/platform":"override","pkg:composer/shopware/shopware":"override","pkg:github/shopware/shopware":"override"},"basis":"pkg:composer/shopware/core: repo.packagist.org/p2/shopware/core.json verified live on 2026-09-09 (description: \"Shopware platform is the core for all Shopware ecommerce products.\"; version v6.7.14.0) - Shopware 6. | pkg:composer/shopware/platform: repo.packagist.org/p2/shopware/platform.json verified live on 2026-09-09 (description: \"The Shopware e-commerce core\"; source github.com/shopware/shopware; version v6.7.14.0) - Shopware 6 monorepo package. | pkg:composer/shopware/shopware: repo.packagist.org/p2/shopware/shopware.json verified live on 2026-09-09 (description: \"Shopware is the next generation of open source e-commerce software made in Germany\"; source github.com/shopware5/shopware; version v5.7.20) - Shopware 5. | pkg:github/shopware/shopware: github.com/shopware/shopware verified live on 2026-09-09 (og:title \"GitHub - shopware/shopware: Shopware 6 is an open commerce platform based on Symfony Framework and Vue...\")."},"silverstripe":{"purl":["pkg:composer/silverstripe/cms","pkg:github/silverstripe/silverstripe-installer"],"sources":{"pkg:composer/silverstripe/cms":"upstream","pkg:github/silverstripe/silverstripe-installer":"upstream"}},"slf4j":{"purl":["pkg:maven/org.slf4j/slf4j-api"],"sources":{"pkg:maven/org.slf4j/slf4j-api":"registry"}},"snakeyaml":{"purl":["pkg:maven/org.yaml/snakeyaml"],"sources":{"pkg:maven/org.yaml/snakeyaml":"registry"}},"solr":{"purl":["pkg:docker/library/solr"],"sources":{"pkg:docker/library/solr":"override"},"basis":"pkg:docker/library/solr: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Solr is the blazing-fast, open source, multi-modal search platform bui\")."},"sourcegraph":{"purl":["pkg:docker/sourcegraph/sg"],"sources":{"pkg:docker/sourcegraph/sg":"upstream"}},"splunk":{"purl":["pkg:docker/splunk/splunk"],"sources":{"pkg:docker/splunk/splunk":"override"},"basis":"pkg:docker/splunk/splunk: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/splunk/splunk/ on 2026-09-09 (Hub description: \"The platform for operational intelligence\"); org splunk is Splunk's own: splunk.github.io/docker-splunk/ names splunk/splunk."},"spring-boot":{"purl":["pkg:maven/org.springframework.boot/spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter","pkg:maven/org.springframework.boot/spring-boot-starter-web","pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa","pkg:maven/org.springframework.boot/spring-boot-starter-jdbc","pkg:maven/org.springframework.boot/spring-boot-starter-data-mongodb","pkg:maven/org.springframework.boot/spring-boot-starter-security","pkg:maven/org.springframework.boot/spring-boot-starter-test","pkg:maven/org.springframework.boot/spring-boot-starter-thymeleaf","pkg:maven/org.springframework.boot/spring-boot-starter-amqp","pkg:maven/org.springframework.boot/spring-boot-starter-websocket","pkg:maven/org.springframework.boot/spring-boot-starter-actuator","pkg:maven/org.springframework.boot/spring-boot-starter-undertow","pkg:maven/org.springframework.boot/spring-boot-autoconfigure","pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure","pkg:maven/org.springframework.boot/spring-boot-starter-webflux","pkg:maven/org.springframework.boot/spring-boot-starter-aop","pkg:maven/org.springframework.boot/spring-boot-starter-tomcat","pkg:maven/org.springframework.boot/spring-boot-starter-logging","pkg:maven/org.springframework.boot/spring-boot-starter-batch","pkg:maven/org.springframework.boot/spring-boot-starter-log4j2","pkg:maven/org.springframework.boot/spring-boot-starter-validation","pkg:github/spring-projects/spring-boot"],"sources":{"pkg:maven/org.springframework.boot/spring-boot":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-web":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-jdbc":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-data-mongodb":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-security":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-test":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-thymeleaf":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-amqp":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-websocket":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-actuator":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-undertow":"upstream","pkg:maven/org.springframework.boot/spring-boot-autoconfigure":"upstream","pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-webflux":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-aop":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-tomcat":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-logging":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-batch":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-log4j2":"upstream","pkg:maven/org.springframework.boot/spring-boot-starter-validation":"upstream","pkg:github/spring-projects/spring-boot":"upstream"}},"spring-cloud":{"purl":["pkg:github/spring-cloud/spring-cloud-release","pkg:maven/org.springframework.cloud/spring-cloud-dependencies","pkg:maven/org.springframework.cloud/spring-cloud-commons","pkg:maven/org.springframework.cloud/spring-cloud-config","pkg:maven/org.springframework.cloud/spring-cloud-gateway","pkg:maven/org.springframework.cloud/spring-cloud-netflix"],"sources":{"pkg:github/spring-cloud/spring-cloud-release":"upstream","pkg:maven/org.springframework.cloud/spring-cloud-dependencies":"upstream","pkg:maven/org.springframework.cloud/spring-cloud-commons":"upstream","pkg:maven/org.springframework.cloud/spring-cloud-config":"upstream","pkg:maven/org.springframework.cloud/spring-cloud-gateway":"upstream","pkg:maven/org.springframework.cloud/spring-cloud-netflix":"upstream"}},"spring-framework":{"purl":["pkg:github/spring-projects/spring-framework","pkg:maven/org.springframework/spring-core","pkg:maven/org.springframework/spring-aop","pkg:maven/org.springframework/spring-beans","pkg:maven/org.springframework/spring-context","pkg:maven/org.springframework/spring-expression","pkg:maven/org.springframework/spring-jdbc","pkg:maven/org.springframework/spring-jms","pkg:maven/org.springframework/spring-messaging","pkg:maven/org.springframework/spring-orm","pkg:maven/org.springframework/spring-oxm","pkg:maven/org.springframework/spring-tx","pkg:maven/org.springframework/spring-web","pkg:maven/org.springframework/spring-webmvc","pkg:maven/org.springframework/spring-websocket"],"sources":{"pkg:github/spring-projects/spring-framework":"upstream","pkg:maven/org.springframework/spring-core":"upstream","pkg:maven/org.springframework/spring-aop":"upstream","pkg:maven/org.springframework/spring-beans":"upstream","pkg:maven/org.springframework/spring-context":"upstream","pkg:maven/org.springframework/spring-expression":"upstream","pkg:maven/org.springframework/spring-jdbc":"upstream","pkg:maven/org.springframework/spring-jms":"upstream","pkg:maven/org.springframework/spring-messaging":"upstream","pkg:maven/org.springframework/spring-orm":"upstream","pkg:maven/org.springframework/spring-oxm":"upstream","pkg:maven/org.springframework/spring-tx":"upstream","pkg:maven/org.springframework/spring-web":"upstream","pkg:maven/org.springframework/spring-webmvc":"upstream","pkg:maven/org.springframework/spring-websocket":"upstream"}},"spring-security":{"purl":["pkg:github/spring-projects/spring-security","pkg:maven/org.springframework.security/spring-security-core","pkg:maven/org.springframework.security/spring-security-web","pkg:maven/org.springframework.security/spring-security-config","pkg:maven/org.springframework.security/spring-security-oauth2-core","pkg:maven/org.springframework.security/spring-security-oauth2-client"],"sources":{"pkg:github/spring-projects/spring-security":"upstream","pkg:maven/org.springframework.security/spring-security-core":"upstream","pkg:maven/org.springframework.security/spring-security-web":"upstream","pkg:maven/org.springframework.security/spring-security-config":"upstream","pkg:maven/org.springframework.security/spring-security-oauth2-core":"upstream","pkg:maven/org.springframework.security/spring-security-oauth2-client":"upstream"}},"sqlite":{"purl":["pkg:generic/sqlite","pkg:apk/alpine/sqlite","pkg:github/sqlite/sqlite"],"sources":{"pkg:generic/sqlite":"upstream","pkg:apk/alpine/sqlite":"upstream","pkg:github/sqlite/sqlite":"upstream"}},"sqlite-jdbc":{"purl":["pkg:maven/org.xerial/sqlite-jdbc","pkg:github/xerial/sqlite-jdbc"],"sources":{"pkg:maven/org.xerial/sqlite-jdbc":"registry","pkg:github/xerial/sqlite-jdbc":"override"},"basis":"pkg:maven/org.xerial/sqlite-jdbc: repo1.maven.org/maven2/org/xerial/sqlite-jdbc/maven-metadata.xml verified live on 2026-09-09 (latest 3.53.4.0). pkg:github/xerial/sqlite-jdbc: api.github.com/repos/xerial/sqlite-jdbc verified live on 2026-09-09 (the project primary repository, the source of the release dates served)."},"squid":{"purl":["pkg:deb/debian/squid","pkg:deb/ubuntu/squid","pkg:rpm/amzn/squid","pkg:rpm/redhat/squid","pkg:rpm/centos/squid","pkg:apk/alpine/squid"],"sources":{"pkg:deb/debian/squid":"upstream","pkg:deb/ubuntu/squid":"upstream","pkg:rpm/amzn/squid":"upstream","pkg:rpm/redhat/squid":"upstream","pkg:rpm/centos/squid":"upstream","pkg:apk/alpine/squid":"upstream"}},"statamic":{"purl":["pkg:composer/statamic/cms","pkg:github/statamic/cms"],"sources":{"pkg:composer/statamic/cms":"upstream","pkg:github/statamic/cms":"upstream"}},"strapi":{"purl":["pkg:github/strapi/strapi","pkg:npm/%40strapi/strapi"],"sources":{"pkg:github/strapi/strapi":"upstream","pkg:npm/%40strapi/strapi":"upstream"}},"svelte":{"purl":["pkg:npm/svelte","pkg:github/sveltejs/svelte"],"sources":{"pkg:npm/svelte":"upstream","pkg:github/sveltejs/svelte":"upstream"}},"sylius":{"purl":["pkg:composer/sylius/sylius","pkg:github/sylius/sylius"],"sources":{"pkg:composer/sylius/sylius":"upstream","pkg:github/sylius/sylius":"upstream"}},"symfony":{"purl":["pkg:composer/symfony/symfony","pkg:github/symfony/symfony"],"sources":{"pkg:composer/symfony/symfony":"override","pkg:github/symfony/symfony":"override"},"basis":"pkg:composer/symfony/symfony: repo.packagist.org/p2/symfony/symfony.json verified live on 2026-09-09 (description: \"The Symfony PHP framework\"; homepage symfony.com; version v8.1.6). | pkg:github/symfony/symfony: github.com/symfony/symfony verified live on 2026-09-09 (og:title \"GitHub - symfony/symfony: The Symfony PHP framework\")."},"tailwind-css":{"purl":["pkg:github/tailwindlabs/tailwindcss","pkg:npm/tailwindcss"],"sources":{"pkg:github/tailwindlabs/tailwindcss":"upstream","pkg:npm/tailwindcss":"upstream"}},"tarantool":{"purl":["pkg:docker/tarantool/tarantool","pkg:github/tarantool/tarantool"],"sources":{"pkg:docker/tarantool/tarantool":"override","pkg:github/tarantool/tarantool":"override"},"basis":"pkg:docker/tarantool/tarantool: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/tarantool/tarantool/ on 2026-09-09 (Hub description: \"Tarantool Docker repository\"); org tarantool is the vendor's own: tarantool.io getting-started guide names tarantool/tarantool. | pkg:github/tarantool/tarantool: github.com/tarantool/tarantool verified live on 2026-09-09 (og:title \"GitHub - tarantool/tarantool: Get your data in RAM. Get compute close to data. Enjoy the performance.\")."},"tarteaucitron":{"purl":["pkg:github/AmauriC/tarteaucitron.js","pkg:npm/tarteaucitronjs"],"sources":{"pkg:github/AmauriC/tarteaucitron.js":"upstream","pkg:npm/tarteaucitronjs":"upstream"}},"teamcity":{"purl":["pkg:docker/jetbrains/teamcity-server"],"sources":{"pkg:docker/jetbrains/teamcity-server":"override"},"basis":"pkg:docker/jetbrains/teamcity-server: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/jetbrains/teamcity-server/ on 2026-09-09 (Hub description: \"TeamCity Server - Powerful Continuous Integration and Continuous Delivery out of the box\"); org jetbrains is JetBrains' own: jetbrains.com/teamcity/download/ and the TeamCity help page both link hub.docker.com/r/jetbrains/teamcity-server/."},"telegraf":{"purl":["pkg:docker/library/telegraf"],"sources":{"pkg:docker/library/telegraf":"override"},"basis":"pkg:docker/library/telegraf: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Telegraf is an agent for collecting metrics and writing them to Influx\")."},"teleport":{"purl":["pkg:github/gravitational/teleport"],"sources":{"pkg:github/gravitational/teleport":"upstream"}},"terraform":{"purl":["pkg:github/hashicorp/terraform","pkg:generic/terraform"],"sources":{"pkg:github/hashicorp/terraform":"upstream","pkg:generic/terraform":"upstream"}},"thumbor":{"purl":["pkg:pypi/thumbor","pkg:github/thumbor/thumbor"],"sources":{"pkg:pypi/thumbor":"override","pkg:github/thumbor/thumbor":"override"},"basis":"pkg:pypi/thumbor: pypi.org/pypi/thumbor/json verified live on 2026-09-09 (summary: \"thumbor is an open-source photo thumbnail service by globo.com\"; version 7.8.0 matches the tracked cycle 7.8 latest; the thumbor README says \"pip install thumbor\"). | pkg:github/thumbor/thumbor: github.com/thumbor/thumbor verified live on 2026-09-09 (og:title \"GitHub - thumbor/thumbor: thumbor is an open-source photo thumbnail service by globo.com\"). Images are on ghcr.io (thumbor/thumbor and library/thumbor both 404 on Docker Hub)."},"thymeleaf":{"purl":["pkg:maven/org.thymeleaf/thymeleaf","pkg:maven/org.thymeleaf/thymeleaf-spring5","pkg:maven/org.thymeleaf/thymeleaf-spring6"],"sources":{"pkg:maven/org.thymeleaf/thymeleaf":"registry","pkg:maven/org.thymeleaf/thymeleaf-spring5":"override","pkg:maven/org.thymeleaf/thymeleaf-spring6":"override"},"basis":"pkg:maven/org.thymeleaf/thymeleaf and the Spring integration modules thymeleaf-spring5 and thymeleaf-spring6: maven-metadata.xml verified live 2026-10-08 for each (83, 24 and 11 versions; latest 3.1.5.RELEASE on all three; each 3.0 and 3.1 release published the same day as the core artifact). Not added: thymeleaf-spring3 and thymeleaf-spring4 (3.0 line only), the HeroDevs NES build (served from registry.nes.herodevs.com, not Maven Central), and spring-boot-starter-thymeleaf (belongs to spring-boot)."},"tinymce":{"purl":["pkg:npm/tinymce"],"sources":{"pkg:npm/tinymce":"registry"}},"tomcat":{"purl":["pkg:maven/org.apache.tomcat/tomcat","pkg:github/apache/tomcat","pkg:docker/library/tomcat","pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"],"sources":{"pkg:maven/org.apache.tomcat/tomcat":"upstream","pkg:github/apache/tomcat":"upstream","pkg:docker/library/tomcat":"override","pkg:maven/org.apache.tomcat.embed/tomcat-embed-core":"override"},"basis":"pkg:docker/library/tomcat: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Apache Tomcat is an open source implementation of the Java Servlet and\"). pkg:maven/org.apache.tomcat.embed/tomcat-embed-core: embedded Tomcat, same version numbers as Tomcat itself (what Spring Boot applications carry). Verified 2026-09-21: repo1.maven.org maven-metadata.xml exists for each coordinate and its version numbers follow the product's release lines. Added after an enterprise SBOM scanner asked the API for Java components by Maven coordinates on 2026-09-17."},"traefik":{"purl":["pkg:brew/traefik","pkg:github/traefik/traefik","pkg:generic/traefik","pkg:docker/library/traefik"],"sources":{"pkg:brew/traefik":"upstream","pkg:github/traefik/traefik":"upstream","pkg:generic/traefik":"upstream","pkg:docker/library/traefik":"upstream"}},"twig":{"purl":["pkg:composer/twig/twig","pkg:github/twigphp/Twig"],"sources":{"pkg:composer/twig/twig":"override","pkg:github/twigphp/Twig":"override"},"basis":"pkg:composer/twig/twig: repo.packagist.org/p2/twig/twig.json verified live on 2026-09-09 (description: \"Twig, the flexible, fast, and secure template language for PHP\"; homepage twig.symfony.com; source github.com/twigphp/Twig). | pkg:github/twigphp/Twig: github.com/twigphp/Twig verified live on 2026-09-09 (og:title \"GitHub - twigphp/Twig: Twig, the flexible, fast, and secure template language for PHP\")."},"typo3":{"purl":["pkg:composer/typo3/cms"],"sources":{"pkg:composer/typo3/cms":"upstream"}},"ubuntu":{"purl":["pkg:docker/library/ubuntu"],"sources":{"pkg:docker/library/ubuntu":"override"},"basis":"pkg:docker/library/ubuntu: Docker Hub official image (library namespace), verified live via hub.docker.com/v2/repositories/library/<image>/ on 2026-09-05 (Hub description: \"Ubuntu is a Debian-based Linux operating system based on free software\")."},"umbraco":{"purl":["pkg:nuget/Umbraco.Cms","pkg:github/umbraco/Umbraco-CMS"],"sources":{"pkg:nuget/Umbraco.Cms":"override","pkg:github/umbraco/Umbraco-CMS":"override"},"basis":"pkg:nuget/Umbraco.Cms: api.nuget.org/v3-flatcontainer/umbraco.cms/index.json verified live on 2026-09-09 (318 versions); NuGet search record id \"Umbraco.Cms\", title \"Umbraco CMS\", description \"Installs Umbraco CMS with all default dependencies in your ASP.NET Core project.\". | pkg:github/umbraco/Umbraco-CMS: github.com/umbraco/Umbraco-CMS verified live on 2026-09-09 (og:title \"GitHub - umbraco/Umbraco-CMS: Umbraco is a free and open source .NET content management system...\")."},"unity":{"purl":["pkg:chocolatey/unity"],"sources":{"pkg:chocolatey/unity":"upstream"}},"unrealircd":{"purl":["pkg:docker/bbriggs/unrealircd"],"sources":{"pkg:docker/bbriggs/unrealircd":"upstream"}},"valkey":{"purl":["pkg:github/valkey-io/valkey","pkg:docker/valkey/valkey","pkg:generic/valkey"],"sources":{"pkg:github/valkey-io/valkey":"upstream","pkg:docker/valkey/valkey":"upstream","pkg:generic/valkey":"override"},"basis":"pkg:generic/valkey: Syft binary classifier (github.com/anchore/syft, syft/pkg/cataloger/binary/classifiers.go, read 2026-09-05) emits this purl for the binary it detects in an image or filesystem scan."},"vinyl-cache":{"purl":["pkg:brew/varnish","pkg:docker/library/varnish"],"sources":{"pkg:brew/varnish":"upstream","pkg:docker/library/varnish":"upstream"}},"vitess":{"purl":["pkg:github/vitessio/vitess","pkg:docker/vitess/lite"],"sources":{"pkg:github/vitessio/vitess":"upstream","pkg:docker/vitess/lite":"upstream"}},"vue":{"purl":["pkg:npm/vue","pkg:github/vuejs/vue","pkg:github/vuejs/core"],"sources":{"pkg:npm/vue":"upstream","pkg:github/vuejs/vue":"upstream","pkg:github/vuejs/core":"upstream"}},"vuetify":{"purl":["pkg:npm/vuetify"],"sources":{"pkg:npm/vuetify":"upstream"}},"wagtail":{"purl":["pkg:pypi/wagtail"],"sources":{"pkg:pypi/wagtail":"upstream"}},"weakforced":{"purl":["pkg:github/PowerDNS/weakforced"],"sources":{"pkg:github/PowerDNS/weakforced":"override"},"basis":"pkg:github/PowerDNS/weakforced: github.com/PowerDNS/weakforced verified live on 2026-09-09 (og:title \"GitHub - PowerDNS/weakforced: Anti-Abuse for servers at authentication time\")."},"webpack":{"purl":["pkg:npm/webpack"],"sources":{"pkg:npm/webpack":"registry"}},"weechat":{"purl":["pkg:github/weechat/weechat"],"sources":{"pkg:github/weechat/weechat":"override"},"basis":"pkg:github/weechat/weechat: github.com/weechat/weechat verified live on 2026-09-09 (og:title \"GitHub - weechat/weechat: The extensible chat client.\"; weechat.org/download/ links github.com/weechat/weechat/releases)."},"windows-nano-server":{"purl":["pkg:docker/microsoft/windows-nanoserver"],"sources":{"pkg:docker/microsoft/windows-nanoserver":"upstream"}},"wireshark":{"purl":["pkg:docker/linuxserver/wireshark","pkg:docker/linuxserver/wireshark?repository_url=lscr.io","pkg:winget/WiresharkFoundation.Wireshark","pkg:chocolatey/wireshark"],"sources":{"pkg:docker/linuxserver/wireshark":"upstream","pkg:docker/linuxserver/wireshark?repository_url=lscr.io":"upstream","pkg:winget/WiresharkFoundation.Wireshark":"upstream","pkg:chocolatey/wireshark":"upstream"}},"wordpress":{"purl":["pkg:docker/library/wordpress","pkg:docker/bitnami/wordpress","pkg:docker/bitnami/wordpress-nginx"],"sources":{"pkg:docker/library/wordpress":"upstream","pkg:docker/bitnami/wordpress":"upstream","pkg:docker/bitnami/wordpress-nginx":"upstream"}},"yarn":{"purl":["pkg:github/yarnpkg/berry","pkg:github/yarnpkg/yarn","pkg:npm/yarn"],"sources":{"pkg:github/yarnpkg/berry":"upstream","pkg:github/yarnpkg/yarn":"upstream","pkg:npm/yarn":"upstream"}},"youtrack":{"purl":["pkg:docker/jetbrains/youtrack"],"sources":{"pkg:docker/jetbrains/youtrack":"override"},"basis":"pkg:docker/jetbrains/youtrack: Docker Hub vendor-org image, verified live via hub.docker.com/v2/repositories/jetbrains/youtrack/ on 2026-09-09 (Hub description: \"Official Docker image for JetBrains YouTrack\"); org jetbrains is JetBrains' own: jetbrains.com/help/youtrack/server/youtrack-docker-installation.html names jetbrains/youtrack."},"yui":{"purl":["pkg:npm/yui","pkg:github/yui/yui3"],"sources":{"pkg:npm/yui":"override","pkg:github/yui/yui3":"override"},"basis":"pkg:npm/yui: registry.npmjs.org/yui verified live on 2026-09-09 (description: \"YUI 3 Source\"; repository github.com/yui/yui3; latest 3.18.1 matches the tracked final release). | pkg:github/yui/yui3: github.com/yui/yui3 verified live on 2026-09-09 (og:title \"GitHub - yui/yui3: A library for building richly interactive web applications.\")."},"zabbix":{"purl":["pkg:brew/zabbix","pkg:github/zabbix/zabbix"],"sources":{"pkg:brew/zabbix":"upstream","pkg:github/zabbix/zabbix":"upstream"}},"zentyal":{"purl":["pkg:github/zentyal/zentyal"],"sources":{"pkg:github/zentyal/zentyal":"override"},"basis":"pkg:github/zentyal/zentyal: github.com/zentyal/zentyal verified live on 2026-09-09 (og:title \"GitHub - zentyal/zentyal: Linux Small Business Server\"; zentyal.com/community/ points its bug tracker at github.com/zentyal/zentyal)."},"zookeeper":{"purl":["pkg:maven/org.apache.zookeeper/zookeeper","pkg:github/apache/zookeeper","pkg:docker/library/zookeeper","pkg:deb/debian/zookeeper"],"sources":{"pkg:maven/org.apache.zookeeper/zookeeper":"upstream","pkg:github/apache/zookeeper":"upstream","pkg:docker/library/zookeeper":"upstream","pkg:deb/debian/zookeeper":"upstream"}}},"lookup":{"pkg:alpm/arch/oniguruma":"oniguruma","pkg:alpm/arch/ruby":"ruby","pkg:alpm/caddy":"caddy","pkg:apk/alpine/ansible":"ansible","pkg:apk/alpine/bellsoft-java11":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java11-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java11-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java11-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java15":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java15-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java15-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java16":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java16-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java16-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java16-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java17":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java17-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java17-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java17-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java18":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java18-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java18-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java18-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java19":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java19-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java19-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java19-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java20":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java20-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java20-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java20-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java21":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java21-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java21-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java21-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java22":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java22-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java22-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java22-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java23":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java23-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java23-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java23-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java8":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java8-lite":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java8-runtime":"bellsoft-liberica","pkg:apk/alpine/bellsoft-java8-runtime-lite":"bellsoft-liberica","pkg:apk/alpine/caddy":"caddy","pkg:apk/alpine/firefox":"firefox","pkg:apk/alpine/haproxy":"haproxy","pkg:apk/alpine/jreleaser":"jreleaser","pkg:apk/alpine/mariadb":"mariadb","pkg:apk/alpine/nginx":"nginx","pkg:apk/alpine/oniguruma":"oniguruma","pkg:apk/alpine/oniguruma-dev":"oniguruma","pkg:apk/alpine/perl":"perl","pkg:apk/alpine/phpmyadmin":"phpmyadmin","pkg:apk/alpine/sqlite":"sqlite","pkg:apk/alpine/squid":"squid","pkg:brew/caddy":"caddy","pkg:brew/cfengine":"cfengine","pkg:brew/deno":"deno","pkg:brew/ffmpeg":"ffmpeg","pkg:brew/go":"go","pkg:brew/istioctl":"istio","pkg:brew/jreleaser":"jreleaser","pkg:brew/mariadb":"mariadb","pkg:brew/openbao":"openbao","pkg:brew/oven-sh/bun/bun":"bun","pkg:brew/pnpm":"pnpm","pkg:brew/redis/redis":"redis","pkg:brew/renovate":"renovate","pkg:brew/ruby":"ruby","pkg:brew/traefik":"traefik","pkg:brew/varnish":"vinyl-cache","pkg:brew/zabbix":"zabbix","pkg:cargo/deno":"deno","pkg:chocolatey/caddy":"caddy","pkg:chocolatey/icinga2":"icinga","pkg:chocolatey/jreleaser":"jreleaser","pkg:chocolatey/liberica11jdk":"bellsoft-liberica","pkg:chocolatey/liberica11jdkfull":"bellsoft-liberica","pkg:chocolatey/liberica11jre":"bellsoft-liberica","pkg:chocolatey/liberica11jrefull":"bellsoft-liberica","pkg:chocolatey/liberica17jdk":"bellsoft-liberica","pkg:chocolatey/liberica17jdkfull":"bellsoft-liberica","pkg:chocolatey/liberica17jdklite":"bellsoft-liberica","pkg:chocolatey/liberica17jre":"bellsoft-liberica","pkg:chocolatey/liberica17jrefull":"bellsoft-liberica","pkg:chocolatey/liberica21jdk":"bellsoft-liberica","pkg:chocolatey/liberica21jdkfull":"bellsoft-liberica","pkg:chocolatey/liberica21jdklite":"bellsoft-liberica","pkg:chocolatey/liberica21jre":"bellsoft-liberica","pkg:chocolatey/liberica21jrefull":"bellsoft-liberica","pkg:chocolatey/liberica8jdk":"bellsoft-liberica","pkg:chocolatey/liberica8jre":"bellsoft-liberica","pkg:chocolatey/libericajdk":"bellsoft-liberica","pkg:chocolatey/libericajdkfull":"bellsoft-liberica","pkg:chocolatey/libericajdklite":"bellsoft-liberica","pkg:chocolatey/libericajre":"bellsoft-liberica","pkg:chocolatey/libericajrefull":"bellsoft-liberica","pkg:chocolatey/mysql":"mysql","pkg:chocolatey/unity":"unity","pkg:chocolatey/wireshark":"wireshark","pkg:composer/api-platform/core":"api-platform","pkg:composer/behat/behat":"behat","pkg:composer/cachethq/cachet":"cachet","pkg:composer/cakephp/cakephp":"cakephp","pkg:composer/composer/composer":"composer","pkg:composer/concrete5/core":"concrete-cms","pkg:composer/consolidation/robo":"robo","pkg:composer/contao/contao":"contao","pkg:composer/contao/core-bundle":"contao","pkg:composer/contao/managed-edition":"contao","pkg:composer/craftcms/cms":"craft-cms","pkg:composer/drupal/core":"drupal","pkg:composer/drush/drush":"drush","pkg:composer/getkirby/cms":"kirby","pkg:composer/guzzlehttp/guzzle":"guzzle","pkg:composer/laravel/framework":"laravel","pkg:composer/magento/community-edition":"magento","pkg:composer/neos/neos":"neos","pkg:composer/phpbb/phpbb":"phpbb","pkg:composer/phpmyadmin/phpmyadmin":"phpmyadmin","pkg:composer/phpro/grumphp":"grumphp","pkg:composer/privatebin/privatebin":"privatebin","pkg:composer/roundcube/roundcubemail":"roundcube","pkg:composer/shopware/core":"shopware","pkg:composer/shopware/platform":"shopware","pkg:composer/shopware/shopware":"shopware","pkg:composer/silverstripe/cms":"silverstripe","pkg:composer/statamic/cms":"statamic","pkg:composer/sylius/sylius":"sylius","pkg:composer/symfony/symfony":"symfony","pkg:composer/twbs/bootstrap":"bootstrap","pkg:composer/twig/twig":"twig","pkg:composer/typo3/cms":"typo3","pkg:deb/debian/ansible":"ansible","pkg:deb/debian/ant":"ant","pkg:deb/debian/caddy":"caddy","pkg:deb/debian/elasticsearch":"elasticsearch","pkg:deb/debian/ffmpeg":"ffmpeg","pkg:deb/debian/firefox-esr":"firefox","pkg:deb/debian/haproxy":"haproxy","pkg:deb/debian/libonig":"oniguruma","pkg:deb/debian/mariadb":"mariadb","pkg:deb/debian/maven":"apache-maven","pkg:deb/debian/memcached":"memcached","pkg:deb/debian/mongodb":"mongodb","pkg:deb/debian/mysql":"mysql","pkg:deb/debian/nginx":"nginx","pkg:deb/debian/openvpn":"openvpn","pkg:deb/debian/perl":"perl","pkg:deb/debian/perl-base":"perl","pkg:deb/debian/php":"php","pkg:deb/debian/phpmyadmin":"phpmyadmin","pkg:deb/debian/python":"python","pkg:deb/debian/python1.5":"python","pkg:deb/debian/python2.1":"python","pkg:deb/debian/python2.2":"python","pkg:deb/debian/python2.3":"python","pkg:deb/debian/python2.4":"python","pkg:deb/debian/python2.5":"python","pkg:deb/debian/python2.6":"python","pkg:deb/debian/python2.7":"python","pkg:deb/debian/python3.1":"python","pkg:deb/debian/python3.11":"python","pkg:deb/debian/python3.13":"python","pkg:deb/debian/python3.14":"python","pkg:deb/debian/python3.15":"python","pkg:deb/debian/python3.2":"python","pkg:deb/debian/python3.4":"python","pkg:deb/debian/python3.5":"python","pkg:deb/debian/python3.7":"python","pkg:deb/debian/python3.9":"python","pkg:deb/debian/redis":"redis","pkg:deb/debian/squid":"squid","pkg:deb/debian/zookeeper":"zookeeper","pkg:deb/ubuntu/ant":"ant","pkg:deb/ubuntu/caddy":"caddy","pkg:deb/ubuntu/elasticsearch":"elasticsearch","pkg:deb/ubuntu/ffmpeg":"ffmpeg","pkg:deb/ubuntu/haproxy":"haproxy","pkg:deb/ubuntu/libonig":"oniguruma","pkg:deb/ubuntu/mariadb":"mariadb","pkg:deb/ubuntu/maven":"apache-maven","pkg:deb/ubuntu/memcached":"memcached","pkg:deb/ubuntu/mongodb":"mongodb","pkg:deb/ubuntu/mysql-server":"mysql","pkg:deb/ubuntu/nginx":"nginx","pkg:deb/ubuntu/openvpn":"openvpn","pkg:deb/ubuntu/php":"php","pkg:deb/ubuntu/phpmyadmin":"phpmyadmin","pkg:deb/ubuntu/postgresql":"postgresql","pkg:deb/ubuntu/python":"python","pkg:deb/ubuntu/python2.1":"python","pkg:deb/ubuntu/python2.2":"python","pkg:deb/ubuntu/python2.3":"python","pkg:deb/ubuntu/python2.4":"python","pkg:deb/ubuntu/python2.5":"python","pkg:deb/ubuntu/python2.6":"python","pkg:deb/ubuntu/python2.7":"python","pkg:deb/ubuntu/python3.0":"python","pkg:deb/ubuntu/python3.1":"python","pkg:deb/ubuntu/python3.10":"python","pkg:deb/ubuntu/python3.11":"python","pkg:deb/ubuntu/python3.12":"python","pkg:deb/ubuntu/python3.13":"python","pkg:deb/ubuntu/python3.14":"python","pkg:deb/ubuntu/python3.15":"python","pkg:deb/ubuntu/python3.2":"python","pkg:deb/ubuntu/python3.3":"python","pkg:deb/ubuntu/python3.4":"python","pkg:deb/ubuntu/python3.5":"python","pkg:deb/ubuntu/python3.6":"python","pkg:deb/ubuntu/python3.7":"python","pkg:deb/ubuntu/python3.8":"python","pkg:deb/ubuntu/python3.9":"python","pkg:deb/ubuntu/redis":"redis","pkg:deb/ubuntu/squid":"squid","pkg:docker/adobecoldfusion/coldfusion":"coldfusion","pkg:docker/adobecoldfusion/coldfusion2021":"coldfusion","pkg:docker/adobecoldfusion/coldfusion2023":"coldfusion","pkg:docker/adobecoldfusion/coldfusion2025":"coldfusion","pkg:docker/alibabadragonwell/dragonwell":"alibaba-dragonwell","pkg:docker/allinurl/goaccess":"goaccess","pkg:docker/apache/airflow":"apache-airflow","pkg:docker/apache/apisix":"apache-apisix","pkg:docker/apache/camel":"apache-camel","pkg:docker/apache/couchdb":"apache-couchdb","pkg:docker/apache/flink":"apache-flink","pkg:docker/apache/hadoop":"apache-hadoop","pkg:docker/apache/hop":"apache-hop","pkg:docker/apache/nifi":"apache-nifi","pkg:docker/apachepulsar/pulsar":"apache-pulsar","pkg:docker/argoproj/argocd":"argo-cd","pkg:docker/argoproj/argocli":"argo-workflows","pkg:docker/argoproj/workflow-controller":"argo-workflows","pkg:docker/atlassian/bamboo":"bamboo","pkg:docker/atlassian/bitbucket":"bitbucket","pkg:docker/atlassian/confluence":"confluence","pkg:docker/atlassian/jira-servicemanagement":"jira-service-management","pkg:docker/atlassian/jira-software":"jira-software","pkg:docker/authentik/server":"authentik","pkg:docker/azul/zulu-openjdk":"azul-zulu","pkg:docker/bbriggs/unrealircd":"unrealircd","pkg:docker/bellsoft/liberica-openjdk-alpine":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjdk-alpine-musl":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjdk-centos":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjdk-debian":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjre-alpine":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjre-alpine-musl":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjre-centos":"bellsoft-liberica","pkg:docker/bellsoft/liberica-openjre-debian":"bellsoft-liberica","pkg:docker/bigbluebutton/greenlight":"greenlight","pkg:docker/bitnami/airflow":"apache-airflow","pkg:docker/bitnami/contour":"contour","pkg:docker/bitnami/couchdb":"apache-couchdb","pkg:docker/bitnami/discourse":"discourse","pkg:docker/bitnami/drupal":"drupal","pkg:docker/bitnami/envoy":"envoy","pkg:docker/bitnami/etcd":"etcd","pkg:docker/bitnami/golang":"go","pkg:docker/bitnami/grafana-loki":"grafana-loki","pkg:docker/bitnami/harbor-core":"harbor","pkg:docker/bitnami/harbor-exporter":"harbor","pkg:docker/bitnami/harbor-jobservice":"harbor","pkg:docker/bitnami/harbor-portal":"harbor","pkg:docker/bitnami/harbor-registry":"harbor","pkg:docker/bitnami/harbor-registryctl":"harbor","pkg:docker/bitnami/laravel":"laravel","pkg:docker/bitnami/mariadb":"mariadb","pkg:docker/bitnami/mariadb-galera":"mariadb","pkg:docker/bitnami/mastodon":"mastodon","pkg:docker/bitnami/matomo":"matomo","pkg:docker/bitnami/node":"nodejs","pkg:docker/bitnami/prometheus":"prometheus","pkg:docker/bitnami/python":"python","pkg:docker/bitnami/redis":"redis","pkg:docker/bitnami/wordpress":"wordpress","pkg:docker/bitnami/wordpress-nginx":"wordpress","pkg:docker/calico/cni":"calico","pkg:docker/cilium/cilium":"cilium","pkg:docker/cimg/go":"go","pkg:docker/cimg/node":"nodejs","pkg:docker/cimg/redis":"redis","pkg:docker/circleci/golang":"go","pkg:docker/circleci/node":"nodejs","pkg:docker/circleci/python":"python","pkg:docker/circleci/redis":"redis","pkg:docker/clamav/clamav":"clamav","pkg:docker/cockroachdb/cockroach":"cockroachdb","pkg:docker/confluentinc/cp-kafka":"confluent-platform","pkg:docker/confluentinc/cp-server":"confluent-platform","pkg:docker/couchbase/server":"couchbase-server","pkg:docker/denoland/deno":"deno","pkg:docker/dependencytrack/apiserver":"dependency-track","pkg:docker/dependencytrack/frontend":"dependency-track","pkg:docker/discourse/base":"discourse","pkg:docker/dovecot/dovecot":"dovecot","pkg:docker/envoyproxy/envoy":"envoy","pkg:docker/envoyproxy/envoy-alpine":"envoy","pkg:docker/envoyproxy/envoy-alpine-debug":"envoy","pkg:docker/envoyproxy/envoy-distroless":"envoy","pkg:docker/fehrenbacher/concrete5":"concrete-cms","pkg:docker/fluent/fluent-bit":"fluent-bit","pkg:docker/gerritcodereview/gerrit":"gerrit","pkg:docker/getmeili/meilisearch":"meilisearch","pkg:docker/gitlab/gitlab-ce":"gitlab","pkg:docker/gitlab/gitlab-ee":"gitlab","pkg:docker/gitlab/gitlab-runner":"gitlab-runner","pkg:docker/goharbor/harbor-core":"harbor","pkg:docker/goharbor/harbor-exporter":"harbor","pkg:docker/goharbor/harbor-jobservice":"harbor","pkg:docker/goharbor/harbor-portal":"harbor","pkg:docker/goharbor/harbor-registryctl":"harbor","pkg:docker/goharbor/registry-photon":"harbor","pkg:docker/grafana/loki":"grafana-loki","pkg:docker/graylog/graylog":"graylog","pkg:docker/hashicorp/boundary":"boundary","pkg:docker/hashicorp/envoy-fips":"envoy","pkg:docker/hashicorp/nomad":"nomad","pkg:docker/hashicorp/packer":"hashicorp-packer","pkg:docker/icinga/icinga2":"icinga","pkg:docker/icinga/icingaweb2":"icinga-web","pkg:docker/internetsystemsconsortium/bind9":"bind-9","pkg:docker/istio/app":"istio","pkg:docker/istio/base":"istio","pkg:docker/istio/distroless":"istio","pkg:docker/istio/install-cni":"istio","pkg:docker/istio/operator":"istio","pkg:docker/istio/pilot":"istio","pkg:docker/istio/proxyv2":"istio","pkg:docker/jaegertracing/all-in-one":"jaeger","pkg:docker/jaegertracing/jaeger":"jaeger","pkg:docker/jetbrains/teamcity-server":"teamcity","pkg:docker/jetbrains/youtrack":"youtrack","pkg:docker/jhipster/jhipster":"jhipster","pkg:docker/jreleaser/jreleaser-alpine":"jreleaser","pkg:docker/jreleaser/jreleaser-slim":"jreleaser","pkg:docker/jreleaser/jreleaser-ubi":"jreleaser","pkg:docker/kiali/kiali":"kiali","pkg:docker/kumahq/kuma-cp":"kuma","pkg:docker/ldapaccountmanager/lam":"ldap-account-manager","pkg:docker/library/almalinux":"almalinux","pkg:docker/library/alpine":"alpine-linux","pkg:docker/library/amazoncorretto":"amazon-corretto","pkg:docker/library/amazonlinux":"amazon-linux","pkg:docker/library/arangodb":"arangodb","pkg:docker/library/azul-zulu":"azul-zulu","pkg:docker/library/backdrop":"backdrop","pkg:docker/library/caddy":"caddy","pkg:docker/library/cassandra":"apache-cassandra","pkg:docker/library/centos":"centos","pkg:docker/library/clearlinux":"clear-linux","pkg:docker/library/clickhouse":"clickhouse","pkg:docker/library/composer":"composer","pkg:docker/library/consul":"consul","pkg:docker/library/couchbase":"couchbase-server","pkg:docker/library/couchdb":"apache-couchdb","pkg:docker/library/debian":"debian","pkg:docker/library/django":"django","pkg:docker/library/docker":"docker-engine","pkg:docker/library/drupal":"drupal","pkg:docker/library/eclipse-temurin":"eclipse-temurin","pkg:docker/library/elasticsearch":"elasticsearch","pkg:docker/library/elixir":"elixir","pkg:docker/library/erlang":"erlang","pkg:docker/library/fedora":"fedora","pkg:docker/library/flink":"apache-flink","pkg:docker/library/golang":"go","pkg:docker/library/gradle":"gradle","pkg:docker/library/groovy":"apache-groovy","pkg:docker/library/haproxy":"haproxy","pkg:docker/library/httpd":"apache-http-server","pkg:docker/library/ibm-semeru-runtimes":"ibm-semeru-runtime","pkg:docker/library/influxdb":"influxdb","pkg:docker/library/jenkins":"jenkins","pkg:docker/library/jetty":"eclipse-jetty","pkg:docker/library/joomla":"joomla","pkg:docker/library/julia":"julia","pkg:docker/library/kibana":"kibana","pkg:docker/library/liquibase":"liquibase","pkg:docker/library/logstash":"logstash","pkg:docker/library/mageia":"mageia","pkg:docker/library/mariadb":"mariadb","pkg:docker/library/matomo":"matomo","pkg:docker/library/mediawiki":"mediawiki","pkg:docker/library/memcached":"memcached","pkg:docker/library/mongo":"mongodb","pkg:docker/library/mysql":"mysql","pkg:docker/library/neo4j":"neo4j","pkg:docker/library/nextcloud":"nextcloud","pkg:docker/library/nginx":"nginx","pkg:docker/library/node":"nodejs","pkg:docker/library/openjdk":"openjdk-builds-from-oracle","pkg:docker/library/opensuse":"opensuse","pkg:docker/library/oraclelinux":"oracle-linux","pkg:docker/library/perl":"perl","pkg:docker/library/photon":"photon","pkg:docker/library/php":"php","pkg:docker/library/phpmyadmin":"phpmyadmin","pkg:docker/library/plone":"plone","pkg:docker/library/postgres":"postgresql","pkg:docker/library/python":"python","pkg:docker/library/rabbitmq":"rabbitmq","pkg:docker/library/rails":"rails","pkg:docker/library/redis":"redis","pkg:docker/library/redmine":"redmine","pkg:docker/library/rocket.chat":"rocket-chat","pkg:docker/library/rockylinux":"rocky-linux","pkg:docker/library/ros":"ros-2","pkg:docker/library/ruby":"ruby","pkg:docker/library/rust":"rust","pkg:docker/library/sapmachine":"sapmachine","pkg:docker/library/solr":"solr","pkg:docker/library/spark":"apache-spark","pkg:docker/library/telegraf":"telegraf","pkg:docker/library/tomcat":"tomcat","pkg:docker/library/traefik":"traefik","pkg:docker/library/ubuntu":"ubuntu","pkg:docker/library/varnish":"vinyl-cache","pkg:docker/library/vault":"hashicorp-vault","pkg:docker/library/wordpress":"wordpress","pkg:docker/library/zookeeper":"zookeeper","pkg:docker/linuxserver/mastodon":"mastodon","pkg:docker/linuxserver/wireshark":"wireshark","pkg:docker/liquibase/liquibase":"liquibase","pkg:docker/liquibase/liquibase-secure":"liquibase-secure","pkg:docker/mattermost/mattermost-enterprise-edition":"mattermost","pkg:docker/mattermost/mattermost-team-edition":"mattermost","pkg:docker/metabase/metabase":"metabase","pkg:docker/microsoft/windows-nanoserver":"windows-nano-server","pkg:docker/mondoo/cnspec":"cnspec","pkg:docker/networkboot/dhcpd":"isc-dhcp","pkg:docker/nirmata/kyverno":"kyverno","pkg:docker/nixos/nix":"nix","pkg:docker/openbao/openbao":"openbao","pkg:docker/openbao/openbao-ubi":"openbao","pkg:docker/openpolicyagent/gatekeeper":"gatekeeper","pkg:docker/opensearchproject/opensearch":"opensearch","pkg:docker/oven/bun":"bun","pkg:docker/plesk/plesk":"plesk","pkg:docker/privatebin/nginx-fpm-alpine":"privatebin","pkg:docker/projectcontour/contour":"contour","pkg:docker/prom/prometheus":"prometheus","pkg:docker/rancher/rancher":"rancher","pkg:docker/rapidfort/couchdb-official":"apache-couchdb","pkg:docker/rapidfort/envoy-official":"envoy","pkg:docker/rapidfort/prometheus-official":"prometheus","pkg:docker/redislabs/redis":"redis","pkg:docker/renovate/renovate":"renovate","pkg:docker/rocketchat/rocket.chat":"rocket-chat","pkg:docker/rotheross/otobo":"otobo","pkg:docker/roundcube/roundcubemail":"roundcube","pkg:docker/saltstack/salt":"salt","pkg:docker/sourcegraph/sg":"sourcegraph","pkg:docker/splunk/splunk":"splunk","pkg:docker/tarantool/tarantool":"tarantool","pkg:docker/tootsuite/mastodon":"mastodon","pkg:docker/ubuntu/loki":"grafana-loki","pkg:docker/ubuntu/redis":"redis","pkg:docker/valkey/valkey":"valkey","pkg:docker/vitess/lite":"vitess","pkg:gem/bootstrap":"bootstrap","pkg:gem/chef":"chef-infra-client","pkg:gem/inspec":"chef-inspec","pkg:gem/jekyll":"jekyll","pkg:gem/puppet":"puppet","pkg:gem/rails":"rails","pkg:generic/arangodb":"arangodb","pkg:generic/auditbeat":"beats","pkg:generic/bun":"bun","pkg:generic/coder":"coder","pkg:generic/composer":"composer","pkg:generic/deno":"deno","pkg:generic/elixir":"elixir","pkg:generic/envoy":"envoy","pkg:generic/erlang":"erlang","pkg:generic/ffmpeg":"ffmpeg","pkg:generic/filebeat":"beats","pkg:generic/firefox":"firefox","pkg:generic/go":"go","pkg:generic/grafana":"grafana","pkg:generic/haproxy":"haproxy","pkg:generic/haskell/ghc":"ghc","pkg:generic/heartbeat":"beats","pkg:generic/httpd":"apache-http-server","pkg:generic/istio":"istio","pkg:generic/julia":"julia","pkg:generic/linux-kernel":"linux","pkg:generic/mariadb":"mariadb","pkg:generic/memcached":"memcached","pkg:generic/metricbeat":"beats","pkg:generic/mongodb":"mongodb","pkg:generic/mysql":"mysql","pkg:generic/mysql-server":"mysql","pkg:generic/nginx":"nginx","pkg:generic/node":"nodejs","pkg:generic/openssl":"openssl","pkg:generic/packetbeat":"beats","pkg:generic/perl":"perl","pkg:generic/php":"php","pkg:generic/php-cli":"php","pkg:generic/php-fpm":"php","pkg:generic/postgresql":"postgresql","pkg:generic/proftpd":"proftpd","pkg:generic/python":"python","pkg:generic/qtbase":"qt","pkg:generic/redis":"redis","pkg:generic/ruby":"ruby","pkg:generic/rust":"rust","pkg:generic/sqlite":"sqlite","pkg:generic/terraform":"terraform","pkg:generic/traefik":"traefik","pkg:generic/valkey":"valkey","pkg:github/actions/runner-images":"github-actions-runner-images","pkg:github/adonisjs/core":"adonisjs","pkg:github/akeneo/pim-community-dev":"akeneo-pim","pkg:github/amauric/tarteaucitron.js":"tarteaucitron","pkg:github/angular/angular":"angular","pkg:github/angular/angular.js":"angularjs","pkg:github/ansible/ansible":"ansible","pkg:github/apache/ant":"ant","pkg:github/apache/apisix":"apache-apisix","pkg:github/apache/artemis":"apache-artemis","pkg:github/apache/camel":"apache-camel","pkg:github/apache/cassandra":"apache-cassandra","pkg:github/apache/celeborn":"apache-celeborn","pkg:github/apache/couchdb":"apache-couchdb","pkg:github/apache/flink":"apache-flink","pkg:github/apache/hadoop":"apache-hadoop","pkg:github/apache/hbase":"hbase","pkg:github/apache/hop":"apache-hop","pkg:github/apache/httpd":"apache-http-server","pkg:github/apache/kafka":"apache-kafka","pkg:github/apache/lucene":"apache-lucene","pkg:github/apache/maven":"apache-maven","pkg:github/apache/nifi":"apache-nifi","pkg:github/apache/pulsar":"apache-pulsar","pkg:github/apache/spark":"apache-spark","pkg:github/apache/tomcat":"tomcat","pkg:github/apache/zookeeper":"zookeeper","pkg:github/api-platform/core":"api-platform","pkg:github/apple/foundationdb":"foundationdb","pkg:github/argoproj/argo-cd":"argo-cd","pkg:github/argoproj/argo-workflows":"argo-workflows","pkg:github/aws/aws-cdk-go":"amazon-cdk","pkg:github/axios/axios":"axios","pkg:github/bazelbuild/bazel":"bazel","pkg:github/behat/behat":"behat","pkg:github/bigbluebutton/bigbluebutton":"bigbluebutton","pkg:github/bigbluebutton/greenlight":"greenlight","pkg:github/bitcoin/bitcoin":"bitcoin-core","pkg:github/cachethq/cachet":"cachet","pkg:github/caddyserver/caddy":"caddy","pkg:github/cakephp/cakephp":"cakephp","pkg:github/centreon/centreon":"centreon","pkg:github/ceph/ceph":"ceph","pkg:github/cert-manager/cert-manager":"cert-manager","pkg:github/checkmk/checkmk":"checkmk","pkg:github/chef/chef":"chef-infra-client","pkg:github/chef/chef-server":"chef-infra-server","pkg:github/chef/chef-workstation":"chef-workstation","pkg:github/chef/supermarket":"chef-supermarket","pkg:github/cilium/cilium":"cilium","pkg:github/cisco-talos/clamav":"clamav","pkg:github/ckeditor/ckeditor4":"ckeditor","pkg:github/ckeditor/ckeditor5":"ckeditor","pkg:github/clickhouse/clickhouse":"clickhouse","pkg:github/cockroachdb/cockroach":"cockroachdb","pkg:github/coder/coder":"coder","pkg:github/composer/composer":"composer","pkg:github/concretecms/concretecms":"concrete-cms","pkg:github/consolidation/robo":"robo","pkg:github/containerd/containerd":"containerd","pkg:github/contao/contao":"contao","pkg:github/corretto/corretto-11":"amazon-corretto","pkg:github/corretto/corretto-17":"amazon-corretto","pkg:github/corretto/corretto-18":"amazon-corretto","pkg:github/corretto/corretto-19":"amazon-corretto","pkg:github/corretto/corretto-20":"amazon-corretto","pkg:github/corretto/corretto-21":"amazon-corretto","pkg:github/corretto/corretto-22":"amazon-corretto","pkg:github/corretto/corretto-23":"amazon-corretto","pkg:github/corretto/corretto-24":"amazon-corretto","pkg:github/corretto/corretto-25":"amazon-corretto","pkg:github/corretto/corretto-26":"amazon-corretto","pkg:github/corretto/corretto-27":"amazon-corretto","pkg:github/corretto/corretto-8":"amazon-corretto","pkg:github/craftcms/cms":"craft-cms","pkg:github/dbt-labs/dbt-core":"dbt-core","pkg:github/denoland/deno":"deno","pkg:github/dependencytrack/dependency-track":"dependency-track","pkg:github/django/django":"django","pkg:github/dovecot/core":"dovecot","pkg:github/dovecot/pigeonhole":"pigeonhole","pkg:github/dropwizard/dropwizard":"dropwizard","pkg:github/drupal/core":"drupal","pkg:github/drush-ops/drush":"drush","pkg:github/duckdb/duckdb":"duckdb","pkg:github/elastic/elasticsearch":"elasticsearch","pkg:github/electron/electron":"electron","pkg:github/emberjs/ember.js":"emberjs","pkg:github/envoyproxy/envoy":"envoy","pkg:github/eslint/eslint":"eslint","pkg:github/etcd-io/etcd":"etcd","pkg:github/expressjs/express":"express","pkg:github/facebook/react":"react","pkg:github/facebook/react-native":"react-native","pkg:github/ffmpeg/ffmpeg":"ffmpeg","pkg:github/fluent/fluent-bit":"fluent-bit","pkg:github/fluxcd/flux":"flux","pkg:github/fortawesome/font-awesome":"font-awesome","pkg:github/getkirby/kirby":"kirby","pkg:github/gleam-lang/gleam":"gleam","pkg:github/go-gitea/gitea":"gitea","pkg:github/goauthentik/authentik":"authentik","pkg:github/godotengine/godot":"godot","pkg:github/goharbor/harbor":"harbor","pkg:github/googlecloudplatform/cloud-sql-proxy":"cloud-sql-auth-proxy","pkg:github/gorilla/context":"gorilla","pkg:github/gorilla/csrf":"gorilla","pkg:github/gorilla/css":"gorilla","pkg:github/gorilla/handlers":"gorilla","pkg:github/gorilla/mux":"gorilla","pkg:github/gorilla/pat":"gorilla","pkg:github/gorilla/rpc":"gorilla","pkg:github/gorilla/schema":"gorilla","pkg:github/gorilla/securecookie":"gorilla","pkg:github/gorilla/sessions":"gorilla","pkg:github/gorilla/websocket":"gorilla","pkg:github/graalvm/mandrel":"mandrel","pkg:github/grafana/grafana":"grafana","pkg:github/grafana/loki":"grafana-loki","pkg:github/gravitational/teleport":"teleport","pkg:github/graylog2/graylog2-server":"graylog","pkg:github/gruntjs/grunt":"grunt","pkg:github/guzzle/guzzle":"guzzle","pkg:github/hashicorp/boundary":"boundary","pkg:github/hashicorp/consul":"consul","pkg:github/hashicorp/nomad":"nomad","pkg:github/hashicorp/packer":"hashicorp-packer","pkg:github/hashicorp/terraform":"terraform","pkg:github/icinga/icinga-core":"icinga","pkg:github/icinga/icinga-web":"icinga-web","pkg:github/icinga/icinga2":"icinga","pkg:github/icinga/icingaweb2":"icinga-web","pkg:github/inspec/inspec":"chef-inspec","pkg:github/ionic-team/ionic-framework":"ionic","pkg:github/istio/istio":"istio","pkg:github/jaegertracing/jaeger":"jaeger","pkg:github/jcmoraisjr/haproxy-ingress":"haproxy-ingress","pkg:github/jekyll/jekyll":"jekyll","pkg:github/jetbrains/kotlin":"kotlin","pkg:github/jhipster/generator-jhipster":"jhipster","pkg:github/jquery/jquery":"jquery","pkg:github/jquery/jquery-ui":"jquery-ui","pkg:github/jreleaser/jreleaser":"jreleaser","pkg:github/jruby/jruby":"jruby","pkg:github/kedacore/keda":"keda","pkg:github/keycloak/keycloak":"keycloak","pkg:github/kiali/kiali":"kiali","pkg:github/kkos/oniguruma":"oniguruma","pkg:github/knative/serving":"knative","pkg:github/kong/kong":"kong-gateway","pkg:github/kubernetes-csi/node-driver-registrar":"kubernetes-csi-node-driver-registrar","pkg:github/kubernetes-sigs/external-dns":"external-dns","pkg:github/kubernetes-sigs/karpenter":"karpenter","pkg:github/kubernetes-sigs/node-feature-discovery":"kubernetes-node-feature-discovery","pkg:github/kubernetes/ingress-nginx":"ingress-nginx","pkg:github/kubernetes/kubernetes":"kubernetes","pkg:github/kumahq/kuma":"kuma","pkg:github/kyverno/kyverno":"kyverno","pkg:github/laravel/framework":"laravel","pkg:github/ldapaccountmanager/lam":"ldap-account-manager","pkg:github/liquibase/liquibase":"liquibase","pkg:github/longhorn/longhorn":"longhorn","pkg:github/magento/magento2":"magento","pkg:github/matomo-org/matomo":"matomo","pkg:github/mattermost/mattermost":"mattermost","pkg:github/mautic/mautic/":"mautic","pkg:github/meilisearch/meilisearch":"meilisearch","pkg:github/metabase/metabase":"metabase","pkg:github/metallb/metallb":"metallb","pkg:github/micrometer-metrics/micrometer":"micrometer","pkg:github/micronaut-projects/micronaut-core":"micronaut","pkg:github/moby/moby":"docker-engine","pkg:github/modernizr/modernizr":"modernizr","pkg:github/mondoohq/cnspec":"cnspec","pkg:github/neo4j/neo4j":"neo4j","pkg:github/nginx/nginx":"nginx","pkg:github/nixos/nix":"nix","pkg:github/notepad-plus-plus/notepad-plus-plus":"notepad-plus-plus","pkg:github/numpy/numpy":"numpy","pkg:github/nuxt/nuxt":"nuxt","pkg:github/nvm-sh/nvm":"nvm","pkg:github/open-policy-agent/gatekeeper":"gatekeeper","pkg:github/openbao/openbao":"openbao","pkg:github/opentofu/opentofu":"opentofu","pkg:github/openvpn/openvpn":"openvpn","pkg:github/openwrt/openwrt":"openwrt","pkg:github/openzfs/zfs":"openzfs","pkg:github/opnsense/core":"opnsense","pkg:github/oracle/graal":"graalvm-ce","pkg:github/oven-sh/bun":"bun","pkg:github/ovirt/ovirt-engine":"ovirt","pkg:github/phoenixframework/phoenix":"phoenix-framework","pkg:github/phpbb/phpbb":"phpbb","pkg:github/phpmyadmin/phpmyadmin":"phpmyadmin","pkg:github/phpro/grumphp":"grumphp","pkg:github/pnpm/pnpm":"pnpm","pkg:github/podman-container-tools/podman":"podman","pkg:github/postcss/postcss":"postcss","pkg:github/powerdns/weakforced":"weakforced","pkg:github/powershell/powershell":"powershell","pkg:github/privatebin/privatebin":"privatebin","pkg:github/projectcalico/calico":"calico","pkg:github/projectcontour/contour":"contour","pkg:github/prometheus/prometheus":"prometheus","pkg:github/proxmox/pmg-api":"proxmox-mail-gateway","pkg:github/proxmox/proxmox-backup":"proxmox-backup-server","pkg:github/proxmox/proxmox-datacenter-manager":"proxmox-datacenter-manager","pkg:github/puppetlabs/puppet":"puppet","pkg:github/python/cpython":"python","pkg:github/rails/rails":"rails","pkg:github/reactor/reactor-netty":"reactor-netty","pkg:github/rocketchat/rocket.chat":"rocket-chat","pkg:github/ros/ros":"ros","pkg:github/rotheross/otobo":"otobo","pkg:github/roundcube/roundcubemail":"roundcube","pkg:github/samba-team/samba":"samba","pkg:github/scala/scala":"scala","pkg:github/scala/scala3":"scala","pkg:github/shopware/shopware":"shopware","pkg:github/silverstripe/silverstripe-installer":"silverstripe","pkg:github/sipwise/rtpengine":"rtpengine","pkg:github/sonatype/nexus-public":"nexus","pkg:github/spring-cloud/spring-cloud-release":"spring-cloud","pkg:github/spring-projects/spring-boot":"spring-boot","pkg:github/spring-projects/spring-framework":"spring-framework","pkg:github/spring-projects/spring-security":"spring-security","pkg:github/sqlite/sqlite":"sqlite","pkg:github/statamic/cms":"statamic","pkg:github/strapi/strapi":"strapi","pkg:github/sveltejs/svelte":"svelte","pkg:github/sylius/sylius":"sylius","pkg:github/symfony/symfony":"symfony","pkg:github/tailwindlabs/tailwindcss":"tailwind-css","pkg:github/tarantool/tarantool":"tarantool","pkg:github/theforeman/foreman":"foreman","pkg:github/thumbor/thumbor":"thumbor","pkg:github/traefik/traefik":"traefik","pkg:github/twbs/bootstrap":"bootstrap","pkg:github/twigphp/twig":"twig","pkg:github/umbraco/umbraco-cms":"umbraco","pkg:github/valkey-io/valkey":"valkey","pkg:github/vercel/next.js":"nextjs","pkg:github/vitessio/vitess":"vitess","pkg:github/vuejs/core":"vue","pkg:github/vuejs/vue":"vue","pkg:github/weechat/weechat":"weechat","pkg:github/xerial/sqlite-jdbc":"sqlite-jdbc","pkg:github/yarnpkg/berry":"yarn","pkg:github/yarnpkg/yarn":"yarn","pkg:github/yui/yui3":"yui","pkg:github/zabbix/zabbix":"zabbix","pkg:github/zentyal/zentyal":"zentyal","pkg:golang/github.com/aws/aws-cdk-go/awscdk/v2":"amazon-cdk","pkg:golang/github.com/caddyserver/caddy/v2":"caddy","pkg:golang/github.com/cert-manager/cert-manager":"cert-manager","pkg:golang/github.com/cockroachdb/cockroach":"cockroachdb","pkg:golang/github.com/containerd/containerd":"containerd","pkg:golang/github.com/containerd/containerd/v2":"containerd","pkg:golang/github.com/containers/podman/v5":"podman","pkg:golang/github.com/dapr/dapr":"dapr","pkg:golang/github.com/docker/docker":"docker-engine","pkg:golang/github.com/envoyproxy/envoy":"envoy","pkg:golang/github.com/etcd-io/etcd":"etcd","pkg:golang/github.com/fluxcd/flux":"flux","pkg:golang/github.com/googlecloudplatform/cloud-sql-proxy/v2":"cloud-sql-auth-proxy","pkg:golang/github.com/gorilla/context":"gorilla","pkg:golang/github.com/gorilla/csrf":"gorilla","pkg:golang/github.com/gorilla/css":"gorilla","pkg:golang/github.com/gorilla/handlers":"gorilla","pkg:golang/github.com/gorilla/mux":"gorilla","pkg:golang/github.com/gorilla/pat":"gorilla","pkg:golang/github.com/gorilla/rpc":"gorilla","pkg:golang/github.com/gorilla/schema":"gorilla","pkg:golang/github.com/gorilla/securecookie":"gorilla","pkg:golang/github.com/gorilla/sessions":"gorilla","pkg:golang/github.com/gorilla/websocket":"gorilla","pkg:golang/github.com/grafana/grafana":"grafana","pkg:golang/github.com/hashicorp/boundary":"boundary","pkg:golang/github.com/hashicorp/consul":"consul","pkg:golang/github.com/hashicorp/nomad":"nomad","pkg:golang/github.com/hashicorp/packer":"hashicorp-packer","pkg:golang/github.com/hashicorp/vault":"hashicorp-vault","pkg:golang/github.com/jaegertracing/jaeger":"jaeger","pkg:golang/github.com/kubernetes-csi/node-driver-registrar":"kubernetes-csi-node-driver-registrar","pkg:golang/github.com/kumahq/kuma":"kuma","pkg:golang/github.com/mattermost/mattermost/server/v8":"mattermost","pkg:golang/github.com/prometheus/prometheus":"prometheus","pkg:golang/go.universe.tf/metallb":"metallb","pkg:golang/k8s.io/ingress-nginx":"ingress-nginx","pkg:hex/phoenix":"phoenix-framework","pkg:maven/ch.qos.logback/logback-classic":"logback","pkg:maven/ch.qos.logback/logback-core":"logback","pkg:maven/com.fasterxml.jackson.core/jackson-core":"jackson","pkg:maven/com.fasterxml.jackson.core/jackson-databind":"jackson","pkg:maven/com.google.guava/guava":"guava","pkg:maven/com.google.protobuf/protobuf-java":"protobuf","pkg:maven/com.graphql-java/graphql-java":"graphql-java","pkg:maven/com.h2database/h2":"h2","pkg:maven/com.hazelcast/hazelcast":"hazelcast","pkg:maven/com.jayway.jsonpath/json-path":"jsonpath","pkg:maven/com.liquibase/liquibase-commercial":"liquibase-secure","pkg:maven/com.mysql/mysql-connector-j":"mysql-connector-j","pkg:maven/com.oracle.database.jdbc/ojdbc10":"oracle-database","pkg:maven/com.oracle.database.jdbc/ojdbc11":"oracle-database","pkg:maven/com.oracle.database.jdbc/ojdbc17":"oracle-database","pkg:maven/com.oracle.database.jdbc/ojdbc8":"oracle-database","pkg:maven/com.oracle.database.jdbc/ucp":"oracle-database","pkg:maven/com.oracle.database.jdbc/ucp11":"oracle-database","pkg:maven/com.oracle.database.jdbc/ucp17":"oracle-database","pkg:maven/com.querydsl/querydsl-core":"querydsl","pkg:maven/com.squareup.okhttp3/okhttp":"okhttp","pkg:maven/com.squareup.okhttp3/okhttp-android":"okhttp","pkg:maven/com.squareup.okhttp3/okhttp-jvm":"okhttp","pkg:maven/commons-beanutils/commons-beanutils":"apache-commons","pkg:maven/commons-codec/commons-codec":"apache-commons","pkg:maven/commons-io/commons-io":"apache-commons","pkg:maven/io.micrometer/micrometer-core":"micrometer","pkg:maven/io.micronaut/micronaut-core":"micronaut","pkg:maven/io.projectreactor.netty/reactor-netty-core":"reactor-netty","pkg:maven/io.quarkus.platform/quarkus-bom":"quarkus-framework","pkg:maven/log4j/log4j":"log4j","pkg:maven/org.apache.activemq/activemq-all":"apache-activemq","pkg:maven/org.apache.activemq/activemq-broker":"apache-activemq","pkg:maven/org.apache.activemq/activemq-client":"apache-activemq","pkg:maven/org.apache.ant/ant":"ant","pkg:maven/org.apache.camel/camel":"apache-camel","pkg:maven/org.apache.cassandra/apache-cassandra":"apache-cassandra","pkg:maven/org.apache.commons/commons-collections4":"apache-commons","pkg:maven/org.apache.commons/commons-compress":"apache-commons","pkg:maven/org.apache.commons/commons-lang3":"apache-commons","pkg:maven/org.apache.commons/commons-text":"apache-commons","pkg:maven/org.apache.cxf/cxf-core":"apache-cxf","pkg:maven/org.apache.derby/derby":"derby","pkg:maven/org.apache.grails/grails":"grails","pkg:maven/org.apache.groovy/groovy":"apache-groovy","pkg:maven/org.apache.hadoop/hadoop-core":"apache-hadoop","pkg:maven/org.apache.hbase/hbase":"hbase","pkg:maven/org.apache.hbase/hbase-client":"hbase","pkg:maven/org.apache.hbase/hbase-common":"hbase","pkg:maven/org.apache.hbase/hbase-server":"hbase","pkg:maven/org.apache.logging.log4j/log4j-api":"log4j","pkg:maven/org.apache.logging.log4j/log4j-core":"log4j","pkg:maven/org.apache.lucene/lucene-core":"apache-lucene","pkg:maven/org.apache.maven/maven":"apache-maven","pkg:maven/org.apache.nifi/nifi":"apache-nifi","pkg:maven/org.apache.pulsar/pulsar":"apache-pulsar","pkg:maven/org.apache.pulsar/pulsar-broker":"apache-pulsar","pkg:maven/org.apache.struts/struts2-core":"apache-struts","pkg:maven/org.apache.tapestry/tapestry-core":"apache-tapestry","pkg:maven/org.apache.tomcat.embed/tomcat-embed-core":"tomcat","pkg:maven/org.apache.tomcat/tomcat":"tomcat","pkg:maven/org.apache.zookeeper/zookeeper":"zookeeper","pkg:maven/org.codehaus.groovy/groovy":"apache-groovy","pkg:maven/org.codehaus.groovy/groovy-all":"apache-groovy","pkg:maven/org.cometd.java/cometd-java-api-server":"cometd","pkg:maven/org.dom4j/dom4j":"dom4j","pkg:maven/org.duckdb/duckdb_jdbc":"duckdb","pkg:maven/org.eclipse.jetty/jetty-server":"eclipse-jetty","pkg:maven/org.elasticsearch/elasticsearch":"elasticsearch","pkg:maven/org.hibernate.orm/hibernate-core":"hibernate-orm","pkg:maven/org.hibernate/hibernate-core":"hibernate-orm","pkg:maven/org.hsqldb/hsqldb":"hsqldb","pkg:maven/org.jetbrains.kotlin/kotlin-stdlib":"kotlin","pkg:maven/org.jreleaser/jreleaser":"jreleaser","pkg:maven/org.jruby/jruby":"jruby","pkg:maven/org.json/json":"json-java","pkg:maven/org.keycloak/keycloak-core":"keycloak","pkg:maven/org.liquibase/liquibase-commercial":"liquibase-secure","pkg:maven/org.liquibase/liquibase-core":"liquibase","pkg:maven/org.opensaml/opensaml-core":"opensaml","pkg:maven/org.opensaml/opensaml-core-api":"opensaml","pkg:maven/org.opensaml/opensaml-saml-api":"opensaml","pkg:maven/org.opensaml/opensaml-saml-impl":"opensaml","pkg:maven/org.opensaml/opensaml-soap-impl":"opensaml","pkg:maven/org.scala-lang/scala-library":"scala","pkg:maven/org.scala-lang/scala3-library_3":"scala","pkg:maven/org.slf4j/slf4j-api":"slf4j","pkg:maven/org.springframework.boot/spring-boot":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-autoconfigure":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-actuator":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-amqp":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-aop":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-batch":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-data-mongodb":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-jdbc":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-log4j2":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-logging":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-security":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-test":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-thymeleaf":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-tomcat":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-undertow":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-validation":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-web":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-webflux":"spring-boot","pkg:maven/org.springframework.boot/spring-boot-starter-websocket":"spring-boot","pkg:maven/org.springframework.cloud/spring-cloud-commons":"spring-cloud","pkg:maven/org.springframework.cloud/spring-cloud-config":"spring-cloud","pkg:maven/org.springframework.cloud/spring-cloud-dependencies":"spring-cloud","pkg:maven/org.springframework.cloud/spring-cloud-gateway":"spring-cloud","pkg:maven/org.springframework.cloud/spring-cloud-netflix":"spring-cloud","pkg:maven/org.springframework.security/spring-security-config":"spring-security","pkg:maven/org.springframework.security/spring-security-core":"spring-security","pkg:maven/org.springframework.security/spring-security-oauth2-client":"spring-security","pkg:maven/org.springframework.security/spring-security-oauth2-core":"spring-security","pkg:maven/org.springframework.security/spring-security-web":"spring-security","pkg:maven/org.springframework/spring-aop":"spring-framework","pkg:maven/org.springframework/spring-beans":"spring-framework","pkg:maven/org.springframework/spring-context":"spring-framework","pkg:maven/org.springframework/spring-core":"spring-framework","pkg:maven/org.springframework/spring-expression":"spring-framework","pkg:maven/org.springframework/spring-jdbc":"spring-framework","pkg:maven/org.springframework/spring-jms":"spring-framework","pkg:maven/org.springframework/spring-messaging":"spring-framework","pkg:maven/org.springframework/spring-orm":"spring-framework","pkg:maven/org.springframework/spring-oxm":"spring-framework","pkg:maven/org.springframework/spring-tx":"spring-framework","pkg:maven/org.springframework/spring-web":"spring-framework","pkg:maven/org.springframework/spring-webmvc":"spring-framework","pkg:maven/org.springframework/spring-websocket":"spring-framework","pkg:maven/org.thymeleaf/thymeleaf":"thymeleaf","pkg:maven/org.thymeleaf/thymeleaf-spring5":"thymeleaf","pkg:maven/org.thymeleaf/thymeleaf-spring6":"thymeleaf","pkg:maven/org.webjars/jquery":"jquery","pkg:maven/org.webjars/jquery-ui":"jquery-ui","pkg:maven/org.xerial/sqlite-jdbc":"sqlite-jdbc","pkg:maven/org.yaml/snakeyaml":"snakeyaml","pkg:npm/@adonisjs/core":"adonisjs","pkg:npm/@angular/core":"angular","pkg:npm/@fortawesome/fontawesome-svg-core":"font-awesome","pkg:npm/@ionic/core":"ionic","pkg:npm/@nestjs/core":"nestjs","pkg:npm/@strapi/strapi":"strapi","pkg:npm/angular":"angularjs","pkg:npm/aws-cdk":"amazon-cdk","pkg:npm/axios":"axios","pkg:npm/bootstrap":"bootstrap","pkg:npm/bun":"bun","pkg:npm/ckeditor4":"ckeditor","pkg:npm/ckeditor5":"ckeditor","pkg:npm/deno":"deno","pkg:npm/dojo":"dojo","pkg:npm/duckdb":"duckdb","pkg:npm/electron":"electron","pkg:npm/elliptic":"elliptic","pkg:npm/ember-source":"emberjs","pkg:npm/eslint":"eslint","pkg:npm/express":"express","pkg:npm/fastify":"fastify","pkg:npm/generator-jhipster":"jhipster","pkg:npm/grunt":"grunt","pkg:npm/jquery":"jquery","pkg:npm/jquery-ui":"jquery-ui","pkg:npm/knockout":"knockout","pkg:npm/lodash":"lodash","pkg:npm/loopback":"loopback","pkg:npm/modernizr":"modernizr","pkg:npm/moment":"moment","pkg:npm/next":"nextjs","pkg:npm/nuxt":"nuxt","pkg:npm/passport":"passport","pkg:npm/pnpm":"pnpm","pkg:npm/postcss":"postcss","pkg:npm/protractor":"protractor","pkg:npm/quasar":"quasar","pkg:npm/react":"react","pkg:npm/react-native":"react-native","pkg:npm/renovate":"renovate","pkg:npm/requirejs":"requirejs","pkg:npm/svelte":"svelte","pkg:npm/tailwindcss":"tailwind-css","pkg:npm/tarteaucitronjs":"tarteaucitron","pkg:npm/tinymce":"tinymce","pkg:npm/vue":"vue","pkg:npm/vuetify":"vuetify","pkg:npm/webpack":"webpack","pkg:npm/yarn":"yarn","pkg:npm/yui":"yui","pkg:nuget/bootstrap":"bootstrap","pkg:nuget/jquery":"jquery","pkg:nuget/jquery.ui.combined":"jquery-ui","pkg:nuget/microsoft.netcore.app":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-arm":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-arm64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-bionic-arm64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-bionic-x64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-musl-arm":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-musl-arm64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-musl-x64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.linux-x64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.osx-arm64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.osx-x64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.win-arm":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.win-arm64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.win-x64":"dotnet","pkg:nuget/microsoft.netcore.app.runtime.win-x86":"dotnet","pkg:nuget/umbraco.cms":"umbraco","pkg:oci/airflow":"apache-airflow","pkg:oci/argocd":"argo-cd","pkg:oci/bazel":"bazel","pkg:oci/caddy":"caddy","pkg:oci/coder":"coder","pkg:oci/contour":"contour","pkg:oci/csi-node-driver-registrar":"kubernetes-csi-node-driver-registrar","pkg:oci/deno":"deno","pkg:oci/docker-salt-master":"salt","pkg:oci/envoy":"envoy","pkg:oci/envoy-fips":"envoy","pkg:oci/etcd":"etcd","pkg:oci/gatekeeper":"gatekeeper","pkg:oci/gleam":"gleam","pkg:oci/harbor-core":"harbor","pkg:oci/harbor-core-fips":"harbor","pkg:oci/harbor-jobservice":"harbor","pkg:oci/harbor-jobservice-fips":"harbor","pkg:oci/harbor-portal":"harbor","pkg:oci/harbor-portal-fips":"harbor","pkg:oci/harbor-registry":"harbor","pkg:oci/harbor-registry-fips":"harbor","pkg:oci/harbor-registryctl":"harbor","pkg:oci/harbor-registryctl-fips":"harbor","pkg:oci/karpenter":"karpenter","pkg:oci/keda":"keda","pkg:oci/keda-admission-webhooks":"keda","pkg:oci/keda-metrics-apiserver":"keda","pkg:oci/kyverno":"kyverno","pkg:oci/liberica-openjdk-alpine":"bellsoft-liberica","pkg:oci/liberica-openjdk-alpine-musl":"bellsoft-liberica","pkg:oci/liberica-openjdk-centos":"bellsoft-liberica","pkg:oci/liberica-openjdk-debian":"bellsoft-liberica","pkg:oci/liberica-openjre-alpine":"bellsoft-liberica","pkg:oci/liberica-openjre-alpine-musl":"bellsoft-liberica","pkg:oci/liberica-openjre-centos":"bellsoft-liberica","pkg:oci/liberica-openjre-debian":"bellsoft-liberica","pkg:oci/loki":"grafana-loki","pkg:oci/openbao":"openbao","pkg:oci/openbao-ubi":"openbao","pkg:oci/opentofu":"opentofu","pkg:oci/oraclelinux":"oracle-linux","pkg:oci/pnpm":"pnpm","pkg:oci/prometheus":"prometheus","pkg:oci/renovate":"renovate","pkg:pypi/ansible":"ansible","pkg:pypi/ansible-core":"ansible-core","pkg:pypi/apache-airflow":"apache-airflow","pkg:pypi/dbt-core":"dbt-core","pkg:pypi/django":"django","pkg:pypi/duckdb":"duckdb","pkg:pypi/mlflow":"mlflow","pkg:pypi/numpy":"numpy","pkg:pypi/pgadmin4":"pgadmin","pkg:pypi/ray":"ray","pkg:pypi/thumbor":"thumbor","pkg:pypi/wagtail":"wagtail","pkg:rpm/aliyun/java-1.8.0-alibaba-dragonwell":"alibaba-dragonwell","pkg:rpm/amzn/elasticsearch":"elasticsearch","pkg:rpm/amzn/haproxy":"haproxy","pkg:rpm/amzn/mariadb-server":"mariadb","pkg:rpm/amzn/memcached":"memcached","pkg:rpm/amzn/mongodb-enterprise-server":"mongodb","pkg:rpm/amzn/mongodb-org-server":"mongodb","pkg:rpm/amzn/nginx":"nginx","pkg:rpm/amzn/python":"python","pkg:rpm/amzn/python2":"python","pkg:rpm/amzn/python3":"python","pkg:rpm/amzn/redis":"redis","pkg:rpm/amzn/squid":"squid","pkg:rpm/bellsoft-java11":"bellsoft-liberica","pkg:rpm/bellsoft-java11-full":"bellsoft-liberica","pkg:rpm/bellsoft-java11-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java11-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java11-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java12":"bellsoft-liberica","pkg:rpm/bellsoft-java12-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java13":"bellsoft-liberica","pkg:rpm/bellsoft-java13-full":"bellsoft-liberica","pkg:rpm/bellsoft-java13-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java13-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java13-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java14":"bellsoft-liberica","pkg:rpm/bellsoft-java14-full":"bellsoft-liberica","pkg:rpm/bellsoft-java14-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java14-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java14-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java15":"bellsoft-liberica","pkg:rpm/bellsoft-java15-full":"bellsoft-liberica","pkg:rpm/bellsoft-java15-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java15-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java15-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java16":"bellsoft-liberica","pkg:rpm/bellsoft-java16-full":"bellsoft-liberica","pkg:rpm/bellsoft-java16-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java16-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java16-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java17":"bellsoft-liberica","pkg:rpm/bellsoft-java17-full":"bellsoft-liberica","pkg:rpm/bellsoft-java17-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java17-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java17-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java18":"bellsoft-liberica","pkg:rpm/bellsoft-java18-full":"bellsoft-liberica","pkg:rpm/bellsoft-java18-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java18-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java18-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java19":"bellsoft-liberica","pkg:rpm/bellsoft-java19-full":"bellsoft-liberica","pkg:rpm/bellsoft-java19-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java19-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java19-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java20":"bellsoft-liberica","pkg:rpm/bellsoft-java20-full":"bellsoft-liberica","pkg:rpm/bellsoft-java20-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java20-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java20-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java21":"bellsoft-liberica","pkg:rpm/bellsoft-java21-full":"bellsoft-liberica","pkg:rpm/bellsoft-java21-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java21-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java21-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java22":"bellsoft-liberica","pkg:rpm/bellsoft-java22-full":"bellsoft-liberica","pkg:rpm/bellsoft-java22-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java22-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java22-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java23":"bellsoft-liberica","pkg:rpm/bellsoft-java23-full":"bellsoft-liberica","pkg:rpm/bellsoft-java23-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java23-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java23-runtime-full":"bellsoft-liberica","pkg:rpm/bellsoft-java8":"bellsoft-liberica","pkg:rpm/bellsoft-java8-full":"bellsoft-liberica","pkg:rpm/bellsoft-java8-lite":"bellsoft-liberica","pkg:rpm/bellsoft-java8-runtime":"bellsoft-liberica","pkg:rpm/bellsoft-java8-runtime-full":"bellsoft-liberica","pkg:rpm/centos/elasticsearch":"elasticsearch","pkg:rpm/centos/haproxy":"haproxy","pkg:rpm/centos/mariadb-server":"mariadb","pkg:rpm/centos/memcached":"memcached","pkg:rpm/centos/mongodb-enterprise-server":"mongodb","pkg:rpm/centos/mongodb-org-server":"mongodb","pkg:rpm/centos/nginx":"nginx","pkg:rpm/centos/phpmyadmin":"phpmyadmin","pkg:rpm/centos/python":"python","pkg:rpm/centos/python2":"python","pkg:rpm/centos/python3":"python","pkg:rpm/centos/redis":"redis","pkg:rpm/centos/ruby":"ruby","pkg:rpm/centos/squid":"squid","pkg:rpm/fedora/ant":"ant","pkg:rpm/fedora/caddy":"caddy","pkg:rpm/fedora/ffmpeg":"ffmpeg","pkg:rpm/fedora/httpd":"apache-http-server","pkg:rpm/fedora/jreleaser":"jreleaser","pkg:rpm/fedora/oniguruma":"oniguruma","pkg:rpm/fedora/python3.10":"python","pkg:rpm/fedora/python3.11":"python","pkg:rpm/fedora/python3.12":"python","pkg:rpm/fedora/python3.13":"python","pkg:rpm/fedora/python3.14":"python","pkg:rpm/fedora/python3.15":"python","pkg:rpm/fedora/python3.5":"python","pkg:rpm/fedora/python3.6":"python","pkg:rpm/fedora/python3.8":"python","pkg:rpm/fedora/python3.9":"python","pkg:rpm/fedora/ruby":"ruby","pkg:rpm/opensuse/mariadb":"mariadb","pkg:rpm/opensuse/maven":"apache-maven","pkg:rpm/opensuse/nginx":"nginx","pkg:rpm/redhat/dotnet-sdk-2.1":"dotnet","pkg:rpm/redhat/dotnet-sdk-3.0":"dotnet","pkg:rpm/redhat/dotnet-sdk-3.1":"dotnet","pkg:rpm/redhat/dotnet-sdk-5.0":"dotnet","pkg:rpm/redhat/dotnet-sdk-6.0":"dotnet","pkg:rpm/redhat/dotnet-sdk-7.0":"dotnet","pkg:rpm/redhat/dotnet-sdk-8.0":"dotnet","pkg:rpm/redhat/elasticsearch":"elasticsearch","pkg:rpm/redhat/haproxy":"haproxy","pkg:rpm/redhat/httpd":"apache-http-server","pkg:rpm/redhat/java-1.6.0-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.6.0-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.7.0-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.7.0-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.7.0-openjdk-headless":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk-debug":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk-devel-debug":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk-headless":"redhat-build-of-openjdk","pkg:rpm/redhat/java-1.8.0-openjdk-headless-debug":"redhat-build-of-openjdk","pkg:rpm/redhat/java-11-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-11-openjdk-debug":"redhat-build-of-openjdk","pkg:rpm/redhat/java-11-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-11-openjdk-devel-debug":"redhat-build-of-openjdk","pkg:rpm/redhat/java-11-openjdk-headless-debug":"redhat-build-of-openjdk","pkg:rpm/redhat/java-17-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-17-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-17-openjdk-headless":"redhat-build-of-openjdk","pkg:rpm/redhat/java-17-openjdk-headless-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-21-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-21-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-21-openjdk-headless":"redhat-build-of-openjdk","pkg:rpm/redhat/java-21-openjdk-headless-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-25-openjdk":"redhat-build-of-openjdk","pkg:rpm/redhat/java-25-openjdk-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/java-25-openjdk-headless":"redhat-build-of-openjdk","pkg:rpm/redhat/java-25-openjdk-headless-devel":"redhat-build-of-openjdk","pkg:rpm/redhat/mariadb-server":"mariadb","pkg:rpm/redhat/memcached":"memcached","pkg:rpm/redhat/mongodb-enterprise-server":"mongodb","pkg:rpm/redhat/mongodb-org-server":"mongodb","pkg:rpm/redhat/nginx":"nginx","pkg:rpm/redhat/nodejs":"nodejs","pkg:rpm/redhat/nodejs24":"nodejs","pkg:rpm/redhat/phpmyadmin":"phpmyadmin","pkg:rpm/redhat/python":"python","pkg:rpm/redhat/python2":"python","pkg:rpm/redhat/python27":"python","pkg:rpm/redhat/python3":"python","pkg:rpm/redhat/python3.11":"python","pkg:rpm/redhat/python3.12":"python","pkg:rpm/redhat/python38":"python","pkg:rpm/redhat/python39":"python","pkg:rpm/redhat/redis":"redis","pkg:rpm/redhat/ruby":"ruby","pkg:rpm/redhat/squid":"squid","pkg:scoop/bun":"bun","pkg:scoop/caddy":"caddy","pkg:scoop/jreleaser":"jreleaser","pkg:scoop/liberica-full-jdk":"bellsoft-liberica","pkg:scoop/liberica-full-jre":"bellsoft-liberica","pkg:scoop/liberica-full-lts-jdk":"bellsoft-liberica","pkg:scoop/liberica-full-lts-jre":"bellsoft-liberica","pkg:scoop/liberica-jdk":"bellsoft-liberica","pkg:scoop/liberica-jre":"bellsoft-liberica","pkg:scoop/liberica-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica-lite-lts-jdk":"bellsoft-liberica","pkg:scoop/liberica-lts-jdk":"bellsoft-liberica","pkg:scoop/liberica-lts-jre":"bellsoft-liberica","pkg:scoop/liberica11-full-jdk":"bellsoft-liberica","pkg:scoop/liberica11-full-jre":"bellsoft-liberica","pkg:scoop/liberica11-jdk":"bellsoft-liberica","pkg:scoop/liberica11-jre":"bellsoft-liberica","pkg:scoop/liberica11-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica12-jdk":"bellsoft-liberica","pkg:scoop/liberica12-jre":"bellsoft-liberica","pkg:scoop/liberica12-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica13-full-jdk":"bellsoft-liberica","pkg:scoop/liberica13-full-jre":"bellsoft-liberica","pkg:scoop/liberica13-jdk":"bellsoft-liberica","pkg:scoop/liberica13-jre":"bellsoft-liberica","pkg:scoop/liberica13-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica14-full-jdk":"bellsoft-liberica","pkg:scoop/liberica14-full-jre":"bellsoft-liberica","pkg:scoop/liberica14-jdk":"bellsoft-liberica","pkg:scoop/liberica14-jre":"bellsoft-liberica","pkg:scoop/liberica14-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica15-full-jdk":"bellsoft-liberica","pkg:scoop/liberica15-full-jre":"bellsoft-liberica","pkg:scoop/liberica15-jdk":"bellsoft-liberica","pkg:scoop/liberica15-jre":"bellsoft-liberica","pkg:scoop/liberica15-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica16-full-jdk":"bellsoft-liberica","pkg:scoop/liberica16-full-jre":"bellsoft-liberica","pkg:scoop/liberica16-jdk":"bellsoft-liberica","pkg:scoop/liberica16-jre":"bellsoft-liberica","pkg:scoop/liberica16-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica17-full-jdk":"bellsoft-liberica","pkg:scoop/liberica17-full-jre":"bellsoft-liberica","pkg:scoop/liberica17-jdk":"bellsoft-liberica","pkg:scoop/liberica17-jre":"bellsoft-liberica","pkg:scoop/liberica17-lite-jdk":"bellsoft-liberica","pkg:scoop/liberica8-full-jdk":"bellsoft-liberica","pkg:scoop/liberica8-full-jre":"bellsoft-liberica","pkg:scoop/liberica8-jdk":"bellsoft-liberica","pkg:scoop/liberica8-jre":"bellsoft-liberica","pkg:swid/alpine":"alpine-linux","pkg:winget/bellsoft.libericajdk.11":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.14":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.15":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.16":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.17":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.18":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.19":"bellsoft-liberica","pkg:winget/bellsoft.libericajdk.8":"bellsoft-liberica","pkg:winget/coder.coder":"coder","pkg:winget/jreleaser.jreleaser":"jreleaser","pkg:winget/oracle.mysql":"mysql","pkg:winget/wiresharkfoundation.wireshark":"wireshark"}}