{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:90edb4ff-a4cc-598e-a467-caf9d8dc3993",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-02T00:01:35Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "group": "hMailServer",
          "name": "build/asset-sbom.py",
          "supplier": {
            "name": "Progressive Robot Ltd",
            "url": [
              "https://www.progressiverobot.com"
            ]
          },
          "externalReferences": [
            {
              "type": "vcs",
              "url": "https://gitlab.com/hmailserver/hmailserver"
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "asset",
      "supplier": {
        "name": "Progressive Robot Ltd",
        "url": [
          "https://www.progressiverobot.com"
        ]
      },
      "name": "hMailServer",
      "version": "6.3.8",
      "description": "hMailServer-6.3.8-x86_64.AppImage, the AppImage: Progressive Robot's fork of hMailServer, a mail server for SMTP, IMAP and POP3",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b49eb92fe914a312f6a604aac5a10b97dc50008c70840581e8bfb47b24423180"
        },
        {
          "alg": "SHA-512",
          "content": "931621e7256d325471939d8f776220d779b6ef29c4d6da6577e77550d1f5e046957852ea2e83d4c7745c1ce83bee4cb83aad4e309d41317103724e8c06c8e300"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "AGPL-3.0-or-later"
          }
        }
      ],
      "purl": "pkg:generic/hmailserver@6.3.8?file_name=hMailServer-6.3.8-x86_64.AppImage",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://gitlab.com/hmailserver/hmailserver"
        },
        {
          "type": "website",
          "url": "https://gitlab.com/hmailserver/hmailserver"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:asset-file",
          "value": "hMailServer-6.3.8-x86_64.AppImage"
        },
        {
          "name": "hmailserver:asset-kind",
          "value": "appimage"
        },
        {
          "name": "hmailserver:asset-size",
          "value": "21887592"
        },
        {
          "name": "hmailserver:commit",
          "value": "3a2fc29b7fb52a27e7c1a6b8e25c99d94a4756ba"
        }
      ]
    },
    "supplier": {
      "name": "Progressive Robot Ltd",
      "url": [
        "https://www.progressiverobot.com"
      ]
    },
    "properties": [
      {
        "name": "hmailserver:describes",
        "value": "the compiled release asset named in metadata.component, by its SHA-256; how to check it: SECURITY.md, 'Software bills of materials'"
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "native-quickjs",
      "name": "quickjs",
      "version": "2026-06-04",
      "description": "the JavaScript engine the event scripts run in on the Linux builds (hMailServer.exe does not contain it: its event scripts are VBScript and JScript)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:quickjs_project:quickjs:2026-06-04:*:*:*:*:*:*:*",
      "purl": "pkg:generic/quickjs@2026-06-04",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://bellard.org/quickjs/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "vendored"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/quickjs/VERSION"
        },
        {
          "name": "hmailserver:vendored-at",
          "value": "hmailserver/source/Server/quickjs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-glibc",
      "name": "glibc",
      "description": "the C library: threads, iconv (every conversion from another character set) and dlopen, through which the MySQL client is loaded",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:generic/glibc",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.gnu.org/software/libc/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (Threads, Iconv)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libc6-dev:amd64 2.39-0ubuntu8.9"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-openssl",
      "name": "openssl",
      "description": "libssl and libcrypto, 3.0 or later: TLS and every hash and signature",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:generic/openssl",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.openssl.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (OpenSSL)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libssl-dev:amd64 3.0.13-0ubuntu3.16"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-zlib",
      "name": "zlib",
      "description": "deflate (the vendored zlib is compiled into hMailServer.exe only)",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "purl": "pkg:generic/zlib",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://zlib.net/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (ZLIB)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "zlib1g-dev:amd64 1:1.3.dfsg-3.1ubuntu2.3"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-boost",
      "name": "boost",
      "description": "the build image's Boost, 1.83 or later, linked statically: thread, chrono and filesystem, and the header-only rest",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSL-1.0"
          }
        }
      ],
      "purl": "pkg:generic/boost@1.83.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.boost.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (Boost)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libboost-thread-dev:amd64 1.83.0.1ubuntu2"
        }
      ],
      "version": "1.83.0"
    },
    {
      "type": "library",
      "bom-ref": "native-linux-libpq",
      "name": "libpq",
      "description": "the PostgreSQL client library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "PostgreSQL"
          }
        }
      ],
      "purl": "pkg:generic/libpq",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.postgresql.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (PostgreSQL)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libpq-dev:amd64 16.15-0ubuntu0.24.04.1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-openldap",
      "name": "openldap",
      "description": "libldap and liblber, the directory client that Active Directory and LDAP authentication use",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "OLDAP-2.8"
          }
        }
      ],
      "purl": "pkg:generic/openldap",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.openldap.org/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "hmailserver/source/Server/CMakeLists.txt finds it (ldap, lber)"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libldap-dev:amd64 2.6.10+dfsg-0ubuntu0.24.04.1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "native-linux-libstdcxx",
      "name": "libstdc++",
      "description": "the C++ standard library, with clang as with GCC",
      "scope": "required",
      "licenses": [
        {
          "expression": "GPL-3.0-or-later WITH GCC-exception-3.1"
        }
      ],
      "purl": "pkg:generic/libstdc%2B%2B",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://gcc.gnu.org/onlinedocs/libstdc++/"
        }
      ],
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "system"
        },
        {
          "name": "hmailserver:source",
          "value": "every C++ program links it"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic"
        },
        {
          "name": "hmailserver:built-against",
          "value": "libstdc++-13-dev:amd64 13.3.0-6ubuntu2~24.04.1"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libpq.so.5",
      "name": "libpq5",
      "version": "16.15-0ubuntu0.24.04.1",
      "description": "libpq.so.5, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libpq5@16.15-0ubuntu0.24.04.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libpq.so.5"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "b4ba0da9e51354cf40a599e787f0942c98fc268cf29b51806c62770d8f2a2a71"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "postgresql-16 16.15-0ubuntu0.24.04.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libpq5/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libldap.so.2",
      "name": "libldap2",
      "version": "2.6.10+dfsg-0ubuntu0.24.04.1",
      "description": "libldap.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libldap2@2.6.10+dfsg-0ubuntu0.24.04.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libldap.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "a9829b999c95452eb0a34cc7b5349427b76dbf3e5d5c8672a5ca69e454c1b151"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "openldap 2.6.10+dfsg-0ubuntu0.24.04.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libldap2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-liblber.so.2",
      "name": "libldap2",
      "version": "2.6.10+dfsg-0ubuntu0.24.04.1",
      "description": "liblber.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libldap2@2.6.10+dfsg-0ubuntu0.24.04.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/liblber.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "ddf14275b1fb70ba06510094071adcc1462e675f15ae6cdcadbf40c1dabe5a03"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "openldap 2.6.10+dfsg-0ubuntu0.24.04.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libldap2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libgssapi_krb5.so.2",
      "name": "libgssapi-krb5-2",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libgssapi_krb5.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libgssapi-krb5-2@1.20.1-6ubuntu2.10?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libgssapi_krb5.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "c7aa00cf51646f7c32f196d329a562bc873ff32906c9caf6554ca489dd657507"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libgssapi-krb5-2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libsasl2.so.2",
      "name": "libsasl2-2",
      "version": "2.1.28+dfsg1-5ubuntu3.1",
      "description": "libsasl2.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.28+dfsg1-5ubuntu3.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libsasl2.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "a0f410ad093236856eee59c4ff2838dc04d932ea0993400f23ed77d67d85af34"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "cyrus-sasl2 2.1.28+dfsg1-5ubuntu3.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libsasl2-2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libgnutls.so.30",
      "name": "libgnutls30t64",
      "version": "3.8.3-1.1ubuntu3.6",
      "description": "libgnutls.so.30, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.3-1.1ubuntu3.6?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libgnutls.so.30"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "ddbae2995750875c07bc218d12a062d73f8250678f54dedda7e9be5068781c98"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "gnutls28 3.8.3-1.1ubuntu3.6"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libgnutls30t64/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libkrb5.so.3",
      "name": "libkrb5-3",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libkrb5.so.3, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libkrb5-3@1.20.1-6ubuntu2.10?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libkrb5.so.3"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "fad617a72b5839d30143e7db03281279089def6f18788cbb0b7f86385301bf04"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libkrb5-3/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libk5crypto.so.3",
      "name": "libk5crypto3",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libk5crypto.so.3, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libk5crypto3@1.20.1-6ubuntu2.10?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libk5crypto.so.3"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "b37407fb2930939bf78b47267019cd201a8af1f4b6a3852249c849cf3a985798"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libk5crypto3/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libcom_err.so.2",
      "name": "libcom-err2",
      "version": "1.47.0-2.4~exp1ubuntu4.1",
      "description": "libcom_err.so.2, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libcom-err2@1.47.0-2.4~exp1ubuntu4.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libcom_err.so.2"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "022943b3b11c860b049bce41342f1c2594941b7b401d95dfdf235521099fee08"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "e2fsprogs 1.47.0-2.4~exp1ubuntu4.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libcom-err2/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libkrb5support.so.0",
      "name": "libkrb5support0",
      "version": "1.20.1-6ubuntu2.10",
      "description": "libkrb5support.so.0, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libkrb5support0@1.20.1-6ubuntu2.10?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libkrb5support.so.0"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "936bae947a838bd47676a419dfcfb036d0163249215b58ec706ec7d46b7497aa"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "krb5 1.20.1-6ubuntu2.10"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libkrb5support0/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libp11-kit.so.0",
      "name": "libp11-kit0",
      "version": "0.25.3-4ubuntu2.2",
      "description": "libp11-kit.so.0, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libp11-kit0@0.25.3-4ubuntu2.2?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libp11-kit.so.0"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "a59efd4792d3343dedea1d26a28f5597abfe3369082deb504c4802a31b014897"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "p11-kit 0.25.3-4ubuntu2.2"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libp11-kit0/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libidn2.so.0",
      "name": "libidn2-0",
      "version": "2.3.7-2build1.1",
      "description": "libidn2.so.0, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libidn2-0@2.3.7-2build1.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libidn2.so.0"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "6e632fd9a3125db60bbc623719bbc17b0470330321c5b1c57f1ff7190e5551ad"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libidn2 2.3.7-2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libidn2-0/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libunistring.so.5",
      "name": "libunistring5",
      "version": "1.1-2build1.1",
      "description": "libunistring.so.5, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libunistring5@1.1-2build1.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libunistring.so.5"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "7bcf825cd449892db5105ad2aed91dcf94a27b796426600c765720c584c54dd1"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libunistring 1.1-2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libunistring5/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libtasn1.so.6",
      "name": "libtasn1-6",
      "version": "4.19.0-3ubuntu0.24.04.2",
      "description": "libtasn1.so.6, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libtasn1-6@4.19.0-3ubuntu0.24.04.2?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libtasn1.so.6"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "59994414d0cdec4f678ef91eaaafc44b26b00bca507e4cc7978caaf79f584173"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libtasn1-6 4.19.0-3ubuntu0.24.04.2"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libtasn1-6/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libnettle.so.8",
      "name": "libnettle8t64",
      "version": "3.9.1-2.2build1.1",
      "description": "libnettle.so.8, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libnettle8t64@3.9.1-2.2build1.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libnettle.so.8"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "a245ed916229583d6fe0b07657b3ed945bc148c28cc08b5266295f620d2b91cc"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "nettle 3.9.1-2.2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libnettle8t64/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libhogweed.so.6",
      "name": "libhogweed6t64",
      "version": "3.9.1-2.2build1.1",
      "description": "libhogweed.so.6, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libhogweed6t64@3.9.1-2.2build1.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libhogweed.so.6"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "c3c606139d4f7776efa4dbd4a6b62e30c916b07a0cafd8c3ef173d6f093607e3"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "nettle 3.9.1-2.2build1.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libhogweed6t64/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libgmp.so.10",
      "name": "libgmp10",
      "version": "2:6.3.0+dfsg-2ubuntu6.1",
      "description": "libgmp.so.10, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libgmp10@2:6.3.0+dfsg-2ubuntu6.1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libgmp.so.10"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "0ccdfb6d6f5c039465f6d002cf7e4c072d48ac6a2cffc8dd6c748dec31592804"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "gmp 2:6.3.0+dfsg-2ubuntu6.1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libgmp10/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libkeyutils.so.1",
      "name": "libkeyutils1",
      "version": "1.6.3-3build1",
      "description": "libkeyutils.so.1, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libkeyutils1@1.6.3-3build1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libkeyutils.so.1"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "f48214417757f18793ed6e180cc14ee1d6f04252a518fc7270e8ca1d0b4260fe"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "keyutils 1.6.3-3build1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libkeyutils1/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "bundled-libffi.so.8",
      "name": "libffi8",
      "version": "3.4.6-1build1",
      "description": "libffi.so.8, bundled in the AppImage's usr/lib",
      "scope": "required",
      "purl": "pkg:deb/ubuntu/libffi8@3.4.6-1build1?arch=amd64&distro=ubuntu-24.04",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "bundled"
        },
        {
          "name": "hmailserver:bundled-as",
          "value": "usr/lib/libffi.so.8"
        },
        {
          "name": "hmailserver:package-file-sha256",
          "value": "00f593fe192f2851b8ce23b25cec2488d769beb5a8f63e8c9e563071e1075153"
        },
        {
          "name": "hmailserver:linkage",
          "value": "dynamic, from the image"
        },
        {
          "name": "hmailserver:source-package",
          "value": "libffi 3.4.6-1build1"
        },
        {
          "name": "hmailserver:copyright-file",
          "value": "usr/share/hmailserver/licenses/bundled/libffi8/copyright"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-fuse3-static",
      "name": "fuse3-static",
      "version": "3.18.3-r0",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libfuse3.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-only AND LGPL-2.1-only"
          }
        }
      ],
      "purl": "pkg:apk/alpine/fuse3-static@3.18.3-r0?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "fuse3"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "0adb5f52202c5e2d5029f50a27a972479b3d98b5"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libfuse3.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-libgcc-static",
      "name": "libgcc-static",
      "version": "15.2.0-r5",
      "description": "linked statically into the AppImage's runtime: /usr/lib/gcc/x86_64-alpine-linux-musl/15.2.0/crtbeginS.o, /usr/lib/gcc/x86_64-alpine-linux-musl/15.2.0/crtendS.o",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-or-later AND LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/libgcc-static@15.2.0-r5?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "gcc"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "423a8ad043d07f2c7546c8ec3e2b0384cda360ae"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/gcc/x86_64-alpine-linux-musl/15.2.0/crtbeginS.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/gcc/x86_64-alpine-linux-musl/15.2.0/crtendS.o"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-lz4-static",
      "name": "lz4-static",
      "version": "1.10.0-r1",
      "description": "linked statically into the AppImage's runtime: /usr/lib/liblz4.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD-2-Clause AND GPL-2.0-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/lz4-static@1.10.0-r1?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "lz4"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "1f16962f34234a77fab0f4651459c4381b4a0cd6"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/liblz4.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-lzo-dev",
      "name": "lzo-dev",
      "version": "2.10-r5",
      "description": "linked statically into the AppImage's runtime: /usr/lib/liblzo2.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/lzo-dev@2.10-r5?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "lzo"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "03fe9a0a61940d07592e897e7a5983e2c7d91fff"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/liblzo2.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-musl-dev",
      "name": "musl-dev",
      "version": "1.2.6-r3",
      "description": "linked statically into the AppImage's runtime: /usr/lib/crti.o, /usr/lib/crtn.o, /usr/lib/libc.a, /usr/lib/rcrt1.o",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "MIT"
          }
        }
      ],
      "purl": "pkg:apk/alpine/musl-dev@1.2.6-r3?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "musl"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "8f79d39391b46d6dbf1800fb68b8212a21d5ee2e"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/crti.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/crtn.o"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libc.a"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/rcrt1.o"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-squashfuse-dev",
      "name": "squashfuse-dev",
      "version": "0.6.1-r1",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libsquashfuse_ll.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:apk/alpine/squashfuse-dev@0.6.1-r1?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "squashfuse"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "21d0c4c5f6252e58685fd9665238ded4ec4d5a9b"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libsquashfuse_ll.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-xz-static",
      "name": "xz-static",
      "version": "5.8.4-r0",
      "description": "linked statically into the AppImage's runtime: /usr/lib/liblzma.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "GPL-2.0-or-later AND 0BSD AND Public-Domain AND LGPL-2.1-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/xz-static@5.8.4-r0?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "xz"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "0c088d609f9fe69eedd6b4c7f4b99cdad847c20a"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/liblzma.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-zlib-static",
      "name": "zlib-static",
      "version": "1.3.2-r1",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libz.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Zlib"
          }
        }
      ],
      "purl": "pkg:apk/alpine/zlib-static@1.3.2-r1?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "zlib"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "0afa2da0e8c8051c6f8f64a7a388e5a259904245"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libz.a"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "runtime-zstd-static",
      "name": "zstd-static",
      "version": "1.5.7-r2",
      "description": "linked statically into the AppImage's runtime: /usr/lib/libzstd.a",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause OR GPL-2.0-or-later"
          }
        }
      ],
      "purl": "pkg:apk/alpine/zstd-static@1.5.7-r2?arch=x86_64&distro=alpine-3.24.2",
      "properties": [
        {
          "name": "hmailserver:kind",
          "value": "runtime-static"
        },
        {
          "name": "hmailserver:linkage",
          "value": "static, into the AppImage's runtime"
        },
        {
          "name": "hmailserver:aports-origin",
          "value": "zstd"
        },
        {
          "name": "hmailserver:aports-commit",
          "value": "3c6e2ee2b16f403d53eab39c4426eb61f003c322"
        },
        {
          "name": "hmailserver:linked-file",
          "value": "/usr/lib/libzstd.a"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "asset",
      "dependsOn": [
        "native-quickjs",
        "native-linux-glibc",
        "native-linux-openssl",
        "native-linux-zlib",
        "native-linux-boost",
        "native-linux-libpq",
        "native-linux-openldap",
        "native-linux-libstdcxx",
        "bundled-libpq.so.5",
        "bundled-libldap.so.2",
        "bundled-liblber.so.2",
        "bundled-libgssapi_krb5.so.2",
        "bundled-libsasl2.so.2",
        "bundled-libgnutls.so.30",
        "bundled-libkrb5.so.3",
        "bundled-libk5crypto.so.3",
        "bundled-libcom_err.so.2",
        "bundled-libkrb5support.so.0",
        "bundled-libp11-kit.so.0",
        "bundled-libidn2.so.0",
        "bundled-libunistring.so.5",
        "bundled-libtasn1.so.6",
        "bundled-libnettle.so.8",
        "bundled-libhogweed.so.6",
        "bundled-libgmp.so.10",
        "bundled-libkeyutils.so.1",
        "bundled-libffi.so.8",
        "runtime-fuse3-static",
        "runtime-libgcc-static",
        "runtime-lz4-static",
        "runtime-lzo-dev",
        "runtime-musl-dev",
        "runtime-squashfuse-dev",
        "runtime-xz-static",
        "runtime-zlib-static",
        "runtime-zstd-static"
      ]
    },
    {
      "ref": "native-quickjs",
      "dependsOn": []
    },
    {
      "ref": "native-linux-glibc",
      "dependsOn": []
    },
    {
      "ref": "native-linux-openssl",
      "dependsOn": []
    },
    {
      "ref": "native-linux-zlib",
      "dependsOn": []
    },
    {
      "ref": "native-linux-boost",
      "dependsOn": []
    },
    {
      "ref": "native-linux-libpq",
      "dependsOn": []
    },
    {
      "ref": "native-linux-openldap",
      "dependsOn": []
    },
    {
      "ref": "native-linux-libstdcxx",
      "dependsOn": []
    },
    {
      "ref": "bundled-libpq.so.5",
      "dependsOn": []
    },
    {
      "ref": "bundled-libldap.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-liblber.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libgssapi_krb5.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libsasl2.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libgnutls.so.30",
      "dependsOn": []
    },
    {
      "ref": "bundled-libkrb5.so.3",
      "dependsOn": []
    },
    {
      "ref": "bundled-libk5crypto.so.3",
      "dependsOn": []
    },
    {
      "ref": "bundled-libcom_err.so.2",
      "dependsOn": []
    },
    {
      "ref": "bundled-libkrb5support.so.0",
      "dependsOn": []
    },
    {
      "ref": "bundled-libp11-kit.so.0",
      "dependsOn": []
    },
    {
      "ref": "bundled-libidn2.so.0",
      "dependsOn": []
    },
    {
      "ref": "bundled-libunistring.so.5",
      "dependsOn": []
    },
    {
      "ref": "bundled-libtasn1.so.6",
      "dependsOn": []
    },
    {
      "ref": "bundled-libnettle.so.8",
      "dependsOn": []
    },
    {
      "ref": "bundled-libhogweed.so.6",
      "dependsOn": []
    },
    {
      "ref": "bundled-libgmp.so.10",
      "dependsOn": []
    },
    {
      "ref": "bundled-libkeyutils.so.1",
      "dependsOn": []
    },
    {
      "ref": "bundled-libffi.so.8",
      "dependsOn": []
    },
    {
      "ref": "runtime-fuse3-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-libgcc-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-lz4-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-lzo-dev",
      "dependsOn": []
    },
    {
      "ref": "runtime-musl-dev",
      "dependsOn": []
    },
    {
      "ref": "runtime-squashfuse-dev",
      "dependsOn": []
    },
    {
      "ref": "runtime-xz-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-zlib-static",
      "dependsOn": []
    },
    {
      "ref": "runtime-zstd-static",
      "dependsOn": []
    }
  ]
}