{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:04224457-2351-5b07-bb82-31f5099b0644",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-17T08:22:59Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "group": "hMailServer",
          "name": "build/asset-sbom.py",
          "supplier": {
            "name": "Progressive Robot Ltd",
            "url": [
              "https://www.progressiverobot.com"
            ]
          },
          "externalReferences": [
            {
              "type": "vcs",
              "url": "https://gitlab.com/hmailserver/hmailserver"
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "asset",
      "supplier": {
        "name": "Progressive Robot Ltd",
        "url": [
          "https://www.progressiverobot.com"
        ]
      },
      "name": "hMailServer",
      "version": "6.3.7",
      "description": "hmailserver-6.3.7-1.el9.aarch64.rpm, the RPM package: hMailServer, a mail server for SMTP, IMAP and POP3",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1e947fd3a685466c37fa76d849fdd93b05ddbe58f534e4c884fd6878922eba39"
        },
        {
          "alg": "SHA-512",
          "content": "3ad95527158d7b354b920ae0b2bbe28e69893079385907c136b4021be1e81792b83b9ebbe4157eedd2e1207335504d6487ba76a342be97b8ddf6ae518057430f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "AGPL-3.0-or-later"
          }
        }
      ],
      "purl": "pkg:rpm/hmailserver@6.3.7-1.el9?arch=aarch64",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://gitlab.com/hmailserver/hmailserver"
        },
        {
          "type": "website",
          "url": "https://gitlab.com/hmailserver/hmailserver"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:asset-file",
          "value": "hmailserver-6.3.7-1.el9.aarch64.rpm"
        },
        {
          "name": "hmailserver:asset-kind",
          "value": "rpm"
        },
        {
          "name": "hmailserver:asset-size",
          "value": "12776878"
        },
        {
          "name": "hmailserver:commit",
          "value": "31d656c0ce85650202b2c0f70bdd1cffa7243e34"
        },
        {
          "name": "hmailserver:package-version",
          "value": "6.3.7-1.el9"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "((glibc-gconv-extra(aarch-64) or glibc-gconv-modules-extra(aarch-64)) if (dnf and system-release))"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "/bin/sh"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "/usr/bin/env"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "ca-certificates"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "config(hmailserver) = 6.3.7-1.el9"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "ld-linux-aarch64.so.1()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6(GLIBC_2.17)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6(GLIBC_2.25)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6(GLIBC_2.28)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6(GLIBC_2.32)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6(GLIBC_2.33)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libc.so.6(GLIBC_2.34)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libcrypto.so.3()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libcrypto.so.3(OPENSSL_3.0.0)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libgcc_s.so.1()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libgcc_s.so.1(GCC_3.0)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "liblber.so.2()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "liblber.so.2(OPENLDAP_2.200)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libldap.so.2()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libldap.so.2(OPENLDAP_2.200)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libm.so.6()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libm.so.6(GLIBC_2.17)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libm.so.6(GLIBC_2.27)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libm.so.6(GLIBC_2.29)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libpq.so.5()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libpq.so.5(RHPG_9.6)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libssl.so.3()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libssl.so.3(OPENSSL_3.0.0)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.11)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.13)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.2)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.3)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.5)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.7)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(CXXABI_1.3.9)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.11)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.14)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.15)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.18)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.19)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.20)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.21)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.22)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.26)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.29)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libstdc++.so.6(GLIBCXX_3.4.9)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libz.so.1()(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "libz.so.1(ZLIB_1.2.0)(64bit)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "rpmlib(CompressedFileNames) <= 3.0.4-1"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "rpmlib(FileDigests) <= 4.6.0-1"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "rpmlib(PayloadFilesHavePrefix) <= 4.0-1"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "rpmlib(PayloadIsZstd) <= 5.4.18-1"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "rpmlib(RichDependencies) <= 4.12.0-1"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "rtld(GNU_HASH)"
        },
        {
          "name": "hmailserver:declared-dependency",
          "value": "shadow-utils"
        }
      ]
    },
    "supplier": {
      "name": "Progressive Robot Ltd",
      "url": [
        "https://www.progressiverobot.com"
      ]
    },
    "properties": [
      {
        "name": "hmailserver:describes",
        "value": "the compiled release asset named in metadata.component, by its SHA-256; how to check it: SECURITY.md, 'Software bills of materials'"
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "native-quickjs",
      "name": "quickjs",
      "version": "2026-06-04",
      "description": "the JavaScript engine the event scripts run in on the Linux builds (hMailServer.exe does not contain it: its event scripts are VBScript and JScript)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:quickjs_project:quickjs:2026-06-04:*:*:*:*:*:*:*",
      "purl": "pkg:generic/quickjs@2026-06-04",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://bellard.org/quickjs/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "vendored"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/quickjs/VERSION"
        },
        {
          "name": "hmailserver:vendored-at",
          "value": "hmailserver/source/Server/quickjs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-glibc",
      "name": "glibc",
      "description": "the C library: threads, iconv (every conversion from another character set) and dlopen, through which the MySQL client is loaded",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:generic/glibc",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.gnu.org/software/libc/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (Threads, Iconv)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "glibc-devel 2.34-283.el9_8"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-openssl",
      "name": "openssl",
      "description": "libssl and libcrypto, 3.0 or later: TLS and every hash and signature",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:generic/openssl",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.openssl.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (OpenSSL)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "openssl-devel 3.5.8-2.el9_8"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-zlib",
      "name": "zlib",
      "description": "deflate (the vendored zlib is compiled into hMailServer.exe only)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "purl": "pkg:generic/zlib",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://zlib.net/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (ZLIB)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "zlib-devel 1.2.11-40.el9"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-boost",
      "name": "boost",
      "description": "the build image's Boost, 1.83 or later, linked statically: thread, chrono and filesystem, and the header-only rest",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSL-1.0"
          }
        }
      ],
      "purl": "pkg:generic/boost@1.92.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.boost.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (Boost)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static"
        },
        {
          "name": "hmailserver:built-against",
          "value": "Boost built from boost.org's release tarball in the package job (no Boost development package where the build ran)"
        }
      ],
      "version": "1.92.0"
    },
    {
      "type": "library",
      "bom-ref": "native-linux-libpq",
      "name": "libpq",
      "description": "the PostgreSQL client library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "PostgreSQL"
          }
        }
      ],
      "purl": "pkg:generic/libpq",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.postgresql.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (PostgreSQL)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libpq-devel 13.23-3.el9_8"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-openldap",
      "name": "openldap",
      "description": "libldap and liblber, the directory client that Active Directory and LDAP authentication use",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "OLDAP-2.8"
          }
        }
      ],
      "purl": "pkg:generic/openldap",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.openldap.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (ldap, lber)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "openldap-devel 2.6.8-4.el9"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-libstdcxx",
      "name": "libstdc++",
      "description": "the C++ standard library, with clang as with GCC",
      "scope": "required",
      "licenses": [
        {
          "expression": "GPL-3.0-or-later WITH GCC-exception-3.1"
        }
      ],
      "purl": "pkg:generic/libstdc%2B%2B",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://gcc.gnu.org/onlinedocs/libstdc++/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "every C++ program links it"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libstdc++-devel 11.5.0-14.el9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "asset",
      "dependsOn": [
        "native-quickjs",
        "native-linux-glibc",
        "native-linux-openssl",
        "native-linux-zlib",
        "native-linux-boost",
        "native-linux-libpq",
        "native-linux-openldap",
        "native-linux-libstdcxx"
      ]
    },
    {
      "ref": "native-quickjs",
      "dependsOn": []
    },
    {
      "ref": "native-linux-glibc",
      "dependsOn": []
    },
    {
      "ref": "native-linux-openssl",
      "dependsOn": []
    },
    {
      "ref": "native-linux-zlib",
      "dependsOn": []
    },
    {
      "ref": "native-linux-boost",
      "dependsOn": []
    },
    {
      "ref": "native-linux-libpq",
      "dependsOn": []
    },
    {
      "ref": "native-linux-openldap",
      "dependsOn": []
    },
    {
      "ref": "native-linux-libstdcxx",
      "dependsOn": []
    }
  ]
}