{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-07T00:00:00Z",
    "component": {
      "type": "application",
      "name": "lyntway",
      "version": "0.1.0"
    },
    "supplier": {
      "name": "Lynt-X Global"
    },
    "properties": [
      {
        "name": "lyntway:note",
        "value": "The governing library and every command-line tool are standard library only. Third-party code appears solely in the hosted service: its PostgreSQL driver, and the Azure SDK with which it fetches the per-tenant signing seed from Key Vault at start."
      },
      {
        "name": "lyntway:verifier-dependencies",
        "value": "0"
      },
      {
        "name": "lyntway:vendored-content",
        "value": "One piece of third-party content is compiled into the binary as data rather than linked as code: the framework control catalogues from Probo (github.com/getprobo/probo), MIT licensed, at frameworkcatalog/data. Thirteen files carrying 1008 control identifiers and short titles. No executable code, and no text from any standards body — ISO, the AICPA and the PCI SSC publish the controls themselves and none of their wording is here. The MIT licence and a note saying where the data came from and when travel inside the binary beside it."
      },
      {
        "name": "lyntway:service-dependencies",
        "value": "18"
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
      "version": "v1.23.1",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.23.1",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
      "version": "v1.14.1",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.1",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
      "version": "v1.12.0",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets",
      "version": "v1.5.0",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets@v1.5.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal",
      "version": "v1.2.0",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
      "version": "v1.8.0",
      "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.8.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/golang-jwt/jwt/v5",
      "version": "v5.3.1",
      "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/google/uuid",
      "version": "v1.6.0",
      "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/jackc/pgpassfile",
      "version": "v1.0.0",
      "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/jackc/pgservicefile",
      "version": "v0.0.0-20240606120523-5a60cdf6a761",
      "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/jackc/pgx/v5",
      "version": "v5.11.0",
      "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.11.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/jackc/puddle/v2",
      "version": "v2.2.2",
      "purl": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/kylelemons/godebug",
      "version": "v1.1.0",
      "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "github.com/pkg/browser",
      "version": "v0.0.0-20240102092130-5ac0b6a4141c",
      "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.55.0",
      "purl": "pkg:golang/golang.org/x/crypto@v0.55.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.58.0",
      "purl": "pkg:golang/golang.org/x/net@v0.58.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.22.0",
      "purl": "pkg:golang/golang.org/x/sync@v0.22.0",
      "scope": "required"
    },
    {
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.41.0",
      "purl": "pkg:golang/golang.org/x/text@v0.41.0",
      "scope": "required"
    }
  ]
}