{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6dceee33-be4e-5620-ad73-afee0e075f2f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-17T08:22:59Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "group": "hMailServer",
          "name": "build/asset-sbom.py",
          "supplier": {
            "name": "Progressive Robot Ltd",
            "url": [
              "https://www.progressiverobot.com"
            ]
          },
          "externalReferences": [
            {
              "type": "vcs",
              "url": "https://gitlab.com/hmailserver/hmailserver"
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "asset",
      "supplier": {
        "name": "Progressive Robot Ltd",
        "url": [
          "https://www.progressiverobot.com"
        ]
      },
      "name": "hMailServer",
      "version": "6.3.7",
      "description": "hMailServer-6.3.7-aarch64.AppImage, the AppImage: hMailServer, a mail server for SMTP, IMAP and POP3",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "8118a02ce0437285c0bb1b67aac18842e820561d285282e4b530b429e7d7863b"
        },
        {
          "alg": "SHA-512",
          "content": "145927d47c733fa52bf6575bf4528bfff97eb36845ee1266318a01c5e3e1e82f180ed918072527f3fe46ffc41a9cdd74e1bd0e6a82a8f92f2773568a90fd408e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "AGPL-3.0-or-later"
          }
        }
      ],
      "purl": "pkg:generic/hmailserver@6.3.7?file_name=hMailServer-6.3.7-aarch64.AppImage",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://gitlab.com/hmailserver/hmailserver"
        },
        {
          "type": "website",
          "url": "https://gitlab.com/hmailserver/hmailserver"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:asset-file",
          "value": "hMailServer-6.3.7-aarch64.AppImage"
        },
        {
          "name": "hmailserver:asset-kind",
          "value": "appimage"
        },
        {
          "name": "hmailserver:asset-size",
          "value": "20457864"
        },
        {
          "name": "hmailserver:commit",
          "value": "31d656c0ce85650202b2c0f70bdd1cffa7243e34"
        }
      ]
    },
    "supplier": {
      "name": "Progressive Robot Ltd",
      "url": [
        "https://www.progressiverobot.com"
      ]
    },
    "properties": [
      {
        "name": "hmailserver:describes",
        "value": "the compiled release asset named in metadata.component, by its SHA-256; how to check it: SECURITY.md, 'Software bills of materials'"
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "native-quickjs",
      "name": "quickjs",
      "version": "2026-06-04",
      "description": "the JavaScript engine the event scripts run in on the Linux builds (hMailServer.exe does not contain it: its event scripts are VBScript and JScript)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:quickjs_project:quickjs:2026-06-04:*:*:*:*:*:*:*",
      "purl": "pkg:generic/quickjs@2026-06-04",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://bellard.org/quickjs/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "vendored"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/quickjs/VERSION"
        },
        {
          "name": "hmailserver:vendored-at",
          "value": "hmailserver/source/Server/quickjs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-glibc",
      "name": "glibc",
      "description": "the C library: threads, iconv (every conversion from another character set) and dlopen, through which the MySQL client is loaded",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:generic/glibc",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.gnu.org/software/libc/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (Threads, Iconv)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libc6-dev-arm64-cross 2.39-0ubuntu8cross1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-openssl",
      "name": "openssl",
      "description": "libssl and libcrypto, 3.0 or later: TLS and every hash and signature",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:generic/openssl",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.openssl.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (OpenSSL)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libssl-dev:arm64 3.0.13-0ubuntu3.16"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-zlib",
      "name": "zlib",
      "description": "deflate (the vendored zlib is compiled into hMailServer.exe only)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "purl": "pkg:generic/zlib",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://zlib.net/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (ZLIB)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "zlib1g-dev:arm64 1:1.3.dfsg-3.1ubuntu2.2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-boost",
      "name": "boost",
      "description": "the build image's Boost, 1.83 or later, linked statically: thread, chrono and filesystem, and the header-only rest",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSL-1.0"
          }
        }
      ],
      "purl": "pkg:generic/boost@1.83.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.boost.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (Boost)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libboost-thread-dev:arm64 1.83.0.1ubuntu2"
        }
      ],
      "version": "1.83.0"
    },
    {
      "type": "library",
      "bom-ref": "native-linux-libpq",
      "name": "libpq",
      "description": "the PostgreSQL client library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "PostgreSQL"
          }
        }
      ],
      "purl": "pkg:generic/libpq",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.postgresql.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (PostgreSQL)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libpq-dev:arm64 16.15-0ubuntu0.24.04.1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-openldap",
      "name": "openldap",
      "description": "libldap and liblber, the directory client that Active Directory and LDAP authentication use",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "OLDAP-2.8"
          }
        }
      ],
      "purl": "pkg:generic/openldap",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.openldap.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (ldap, lber)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libldap-dev:arm64 2.6.10+dfsg-0ubuntu0.24.04.1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-libstdcxx",
      "name": "libstdc++",
      "description": "the C++ standard library, with clang as with GCC",
      "scope": "required",
      "licenses": [
        {
          "expression": "GPL-3.0-or-later WITH GCC-exception-3.1"
        }
      ],
      "purl": "pkg:generic/libstdc%2B%2B",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://gcc.gnu.org/onlinedocs/libstdc++/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "every C++ program links it"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libstdc++-13-dev-arm64-cross 13.3.0-6ubuntu2~24.04.1cross1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libpq.so.5",
      "name": "libpq5",
      "version": "16.15-0ubuntu0.24.04.1",
      "description": "libpq.so.5, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libpq5@16.15-0ubuntu0.24.04.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libpq.so.5"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "d74654fbd31193227eadbc2475b3e84b49308928f2547d7fc3c22dad9e0d617b"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "postgresql-16 16.15-0ubuntu0.24.04.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libpq5/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libldap.so.2",
      "name": "libldap2",
      "version": "2.6.10+dfsg-0ubuntu0.24.04.1",
      "description": "libldap.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libldap2@2.6.10+dfsg-0ubuntu0.24.04.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libldap.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "6d3332e01734a21c0b1b18e993d6117a31f8227d3859556397704f266e18e262"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "openldap 2.6.10+dfsg-0ubuntu0.24.04.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libldap2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-liblber.so.2",
      "name": "libldap2",
      "version": "2.6.10+dfsg-0ubuntu0.24.04.1",
      "description": "liblber.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libldap2@2.6.10+dfsg-0ubuntu0.24.04.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/liblber.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "92e756c779c3fa77c4e8ad1ef0d97ebc2eaeccb2f9829da521691c52df4129d5"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "openldap 2.6.10+dfsg-0ubuntu0.24.04.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libldap2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libgssapi_krb5.so.2",
      "name": "libgssapi-krb5-2",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libgssapi_krb5.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.20.1-6ubuntu2.10?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libgssapi_krb5.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "bc7d5e3ea14504c76dc71d9f7466dd3ac2589910d472412689de1d296722b086"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libgssapi-krb5-2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libsasl2.so.2",
      "name": "libsasl2-2",
      "version": "2.1.28+dfsg1-5ubuntu3.1",
      "description": "libsasl2.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.28+dfsg1-5ubuntu3.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libsasl2.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "f936a889bcc2d8b5ac8b89e2b37e4359bbd87cbbe87bd2b2002358dfffe04cce"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "cyrus-sasl2 2.1.28+dfsg1-5ubuntu3.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libsasl2-2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libgnutls.so.30",
      "name": "libgnutls30t64",
      "version": "3.8.3-1.1ubuntu3.6",
      "description": "libgnutls.so.30, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.3-1.1ubuntu3.6?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libgnutls.so.30"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "17ffd34fd0bc239903ca37e95bb14eab6ee986c8d1260a5a08f16e0bfc669739"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "gnutls28 3.8.3-1.1ubuntu3.6"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libgnutls30t64/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libkrb5.so.3",
      "name": "libkrb5-3",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libkrb5.so.3, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libkrb5-3@1.20.1-6ubuntu2.10?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libkrb5.so.3"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "af6c2e7313dbea842a1912a22f14daab2ea24877dd30e576a525b6becc5c029e"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libkrb5-3/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libk5crypto.so.3",
      "name": "libk5crypto3",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libk5crypto.so.3, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libk5crypto3@1.20.1-6ubuntu2.10?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libk5crypto.so.3"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "c6a2380d979bb168328b6dc35ec0d96f50338a7be23fb14f8444497dd8148e05"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libk5crypto3/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libcom_err.so.2",
      "name": "libcom-err2",
      "version": "1.47.0-2.4~exp1ubuntu4.1",
      "description": "libcom_err.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libcom-err2@1.47.0-2.4~exp1ubuntu4.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libcom_err.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "6a9d07af8817ed06466027a77fc7f2e8972a4a0e68895738d9acdc35470f416e"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "e2fsprogs 1.47.0-2.4~exp1ubuntu4.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libcom-err2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libkrb5support.so.0",
      "name": "libkrb5support0",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libkrb5support.so.0, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libkrb5support0@1.20.1-6ubuntu2.10?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libkrb5support.so.0"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "6f4ce70567c2c953510bfa5c839f0ce7136330b127cb1746f7ce0ff6f4d4d4f5"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libkrb5support0/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libp11-kit.so.0",
      "name": "libp11-kit0",
      "version": "0.25.3-4ubuntu2.2",
      "description": "libp11-kit.so.0, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libp11-kit0@0.25.3-4ubuntu2.2?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libp11-kit.so.0"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "d59c4e2e0135960aee4264dcfe21a677c15b8dc3561ace2f0b2297f79a890aec"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "p11-kit 0.25.3-4ubuntu2.2"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libp11-kit0/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libidn2.so.0",
      "name": "libidn2-0",
      "version": "2.3.7-2build1.1",
      "description": "libidn2.so.0, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libidn2-0@2.3.7-2build1.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libidn2.so.0"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "34a2427db57d47458b460ab15a24e7de73b56fbc7b458af837556445f60ffb4e"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libidn2 2.3.7-2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libidn2-0/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libunistring.so.5",
      "name": "libunistring5",
      "version": "1.1-2build1.1",
      "description": "libunistring.so.5, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libunistring5@1.1-2build1.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libunistring.so.5"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "639c4c15f94e960450b69475d7282e4760fd5895a6a4f4e85f44bb15b74e512c"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libunistring 1.1-2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libunistring5/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libtasn1.so.6",
      "name": "libtasn1-6",
      "version": "4.19.0-3ubuntu0.24.04.2",
      "description": "libtasn1.so.6, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libtasn1-6@4.19.0-3ubuntu0.24.04.2?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libtasn1.so.6"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "039d653f8fdfa01240882b0033aca6887e1e9e6dc39acbea51d658fa75437955"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libtasn1-6 4.19.0-3ubuntu0.24.04.2"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libtasn1-6/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libnettle.so.8",
      "name": "libnettle8t64",
      "version": "3.9.1-2.2build1.1",
      "description": "libnettle.so.8, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libnettle8t64@3.9.1-2.2build1.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libnettle.so.8"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "8fd8ed433f1b993fe8b8aa8d3fa5342955ab581dc5ce418381872cd3df3dbb11"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "nettle 3.9.1-2.2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libnettle8t64/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libhogweed.so.6",
      "name": "libhogweed6t64",
      "version": "3.9.1-2.2build1.1",
      "description": "libhogweed.so.6, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libhogweed6t64@3.9.1-2.2build1.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libhogweed.so.6"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "0495ad11a2266d7300436d57859fc8ebceac79e5235a393c42ae91d6fc23ce84"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "nettle 3.9.1-2.2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libhogweed6t64/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libgmp.so.10",
      "name": "libgmp10",
      "version": "2:6.3.0+dfsg-2ubuntu6.1",
      "description": "libgmp.so.10, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libgmp10@2:6.3.0+dfsg-2ubuntu6.1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libgmp.so.10"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "39b6701812ed7135f28df49352b3f6664c7a9f56880a3fe50c1b87cd7681db9b"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "gmp 2:6.3.0+dfsg-2ubuntu6.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libgmp10/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libkeyutils.so.1",
      "name": "libkeyutils1",
      "version": "1.6.3-3build1",
      "description": "libkeyutils.so.1, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libkeyutils1@1.6.3-3build1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libkeyutils.so.1"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "a58e06275e8e2010be20f367b7f2263e56130c04cb83523f29ae94555705ea59"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "keyutils 1.6.3-3build1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libkeyutils1/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libffi.so.8",
      "name": "libffi8",
      "version": "3.4.6-1build1",
      "description": "libffi.so.8, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libffi8@3.4.6-1build1?arch=arm64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libffi.so.8"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "9dd873a938c4d7df76912d01f6a28aa4aa73d583bd20485a0dbfe5aa9673a191"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libffi 3.4.6-1build1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libffi8/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-fuse3-static",
      "name": "fuse3-static",
      "version": "3.18.3-r0",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libfuse3.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-only AND LGPL-2.1-only"
          }
        }
      ],
      "purl": "pkg:apk/alpine/fuse3-static@3.18.3-r0?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "fuse3"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "0adb5f52202c5e2d5029f50a27a972479b3d98b5"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libfuse3.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-libgcc-static",
      "name": "libgcc-static",
      "version": "15.2.0-r5",
      "description": "linked statically into the AppImage's runtime: /usr/lib/gcc/aarch64-alpine-linux-musl/15.2.0/crtbeginS.o, /usr/lib/gcc/aarch64-alpine-linux-musl/15.2.0/crtendS.o, /usr/lib/gcc/aarch64-alpine-linux-musl/15.2.0/libgcc.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-or-later AND LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/libgcc-static@15.2.0-r5?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "gcc"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "423a8ad043d07f2c7546c8ec3e2b0384cda360ae"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/gcc/aarch64-alpine-linux-musl/15.2.0/crtbeginS.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/gcc/aarch64-alpine-linux-musl/15.2.0/crtendS.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/gcc/aarch64-alpine-linux-musl/15.2.0/libgcc.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-lz4-static",
      "name": "lz4-static",
      "version": "1.10.0-r1",
      "description": "linked statically into the AppImage's runtime: /usr/lib/liblz4.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD-2-Clause AND GPL-2.0-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/lz4-static@1.10.0-r1?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "lz4"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "1f16962f34234a77fab0f4651459c4381b4a0cd6"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/liblz4.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-lzo-dev",
      "name": "lzo-dev",
      "version": "2.10-r5",
      "description": "linked statically into the AppImage's runtime: /usr/lib/liblzo2.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/lzo-dev@2.10-r5?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "lzo"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "03fe9a0a61940d07592e897e7a5983e2c7d91fff"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/liblzo2.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-musl-dev",
      "name": "musl-dev",
      "version": "1.2.6-r2",
      "description": "linked statically into the AppImage's runtime: /usr/lib/crti.o, /usr/lib/crtn.o, /usr/lib/libc.a, /usr/lib/rcrt1.o",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "MIT"
          }
        }
      ],
      "purl": "pkg:apk/alpine/musl-dev@1.2.6-r2?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "musl"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "f5640d3a10f664c9119720c60515265d3d6f6d01"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/crti.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/crtn.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libc.a"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/rcrt1.o"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-squashfuse-dev",
      "name": "squashfuse-dev",
      "version": "0.6.1-r1",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libsquashfuse_ll.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:apk/alpine/squashfuse-dev@0.6.1-r1?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "squashfuse"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "21d0c4c5f6252e58685fd9665238ded4ec4d5a9b"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libsquashfuse_ll.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-xz-static",
      "name": "xz-static",
      "version": "5.8.4-r0",
      "description": "linked statically into the AppImage's runtime: /usr/lib/liblzma.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-or-later AND 0BSD AND Public-Domain AND LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/xz-static@5.8.4-r0?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "xz"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "0c088d609f9fe69eedd6b4c7f4b99cdad847c20a"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/liblzma.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-zlib-static",
      "name": "zlib-static",
      "version": "1.3.2-r1",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libz.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Zlib"
          }
        }
      ],
      "purl": "pkg:apk/alpine/zlib-static@1.3.2-r1?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "zlib"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "0afa2da0e8c8051c6f8f64a7a388e5a259904245"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libz.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-zstd-static",
      "name": "zstd-static",
      "version": "1.5.7-r2",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libzstd.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause OR GPL-2.0-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/zstd-static@1.5.7-r2?arch=aarch64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "zstd"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "3c6e2ee2b16f403d53eab39c4426eb61f003c322"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libzstd.a"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "asset",
      "dependsOn": [
        "native-quickjs",
        "native-linux-glibc",
        "native-linux-openssl",
        "native-linux-zlib",
        "native-linux-boost",
        "native-linux-libpq",
        "native-linux-openldap",
        "native-linux-libstdcxx",
        "bundled-libpq.so.5",
        "bundled-libldap.so.2",
        "bundled-liblber.so.2",
        "bundled-libgssapi_krb5.so.2",
        "bundled-libsasl2.so.2",
        "bundled-libgnutls.so.30",
        "bundled-libkrb5.so.3",
        "bundled-libk5crypto.so.3",
        "bundled-libcom_err.so.2",
        "bundled-libkrb5support.so.0",
        "bundled-libp11-kit.so.0",
        "bundled-libidn2.so.0",
        "bundled-libunistring.so.5",
        "bundled-libtasn1.so.6",
        "bundled-libnettle.so.8",
        "bundled-libhogweed.so.6",
        "bundled-libgmp.so.10",
        "bundled-libkeyutils.so.1",
        "bundled-libffi.so.8",
        "runtime-fuse3-static",
        "runtime-libgcc-static",
        "runtime-lz4-static",
        "runtime-lzo-dev",
        "runtime-musl-dev",
        "runtime-squashfuse-dev",
        "runtime-xz-static",
        "runtime-zlib-static",
        "runtime-zstd-static"
      ]
    },
    {
      "ref": "native-quickjs",
      "dependsOn": []
    },
    {
      "ref": "native-linux-glibc",
      "dependsOn": []
    },
    {
      "ref": "native-linux-openssl",
      "dependsOn": []
    },
    {
      "ref": "native-linux-zlib",
      "dependsOn": []
    },
    {
      "ref": "native-linux-boost",
      "dependsOn": []
    },
    {
      "ref": "native-linux-libpq",
      "dependsOn": []
    },
    {
      "ref": "native-linux-openldap",
      "dependsOn": []
    },
    {
      "ref": "native-linux-libstdcxx",
      "dependsOn": []
    },
    {
      "ref": "bundled-libpq.so.5",
      "dependsOn": []
    },
    {
      "ref": "bundled-libldap.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-liblber.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libgssapi_krb5.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libsasl2.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libgnutls.so.30",
      "dependsOn": []
    },
    {
      "ref": "bundled-libkrb5.so.3",
      "dependsOn": []
    },
    {
      "ref": "bundled-libk5crypto.so.3",
      "dependsOn": []
    },
    {
      "ref": "bundled-libcom_err.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libkrb5support.so.0",
      "dependsOn": []
    },
    {
      "ref": "bundled-libp11-kit.so.0",
      "dependsOn": []
    },
    {
      "ref": "bundled-libidn2.so.0",
      "dependsOn": []
    },
    {
      "ref": "bundled-libunistring.so.5",
      "dependsOn": []
    },
    {
      "ref": "bundled-libtasn1.so.6",
      "dependsOn": []
    },
    {
      "ref": "bundled-libnettle.so.8",
      "dependsOn": []
    },
    {
      "ref": "bundled-libhogweed.so.6",
      "dependsOn": []
    },
    {
      "ref": "bundled-libgmp.so.10",
      "dependsOn": []
    },
    {
      "ref": "bundled-libkeyutils.so.1",
      "dependsOn": []
    },
    {
      "ref": "bundled-libffi.so.8",
      "dependsOn": []
    },
    {
      "ref": "runtime-fuse3-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-libgcc-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-lz4-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-lzo-dev",
      "dependsOn": []
    },
    {
      "ref": "runtime-musl-dev",
      "dependsOn": []
    },
    {
      "ref": "runtime-squashfuse-dev",
      "dependsOn": []
    },
    {
      "ref": "runtime-xz-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-zlib-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-zstd-static",
      "dependsOn": []
    }
  ]
}
