{
  "components": [
    {
      "attribution_required": true,
      "copyright": "Cisco Systems, Inc. and ClamAV contributors",
      "dependency_type": "direct",
      "id": "clamav",
      "license_expression": "GPL-2.0",
      "license_name": "GPL-2.0",
      "license_url": "https://github.com/Cisco-Talos/clamav/blob/main/COPYING.txt",
      "name": "ClamAV",
      "notice_text": "ClamAV is used as an external antivirus scanner for uploaded files before clean objects are promoted to private object storage.",
      "package_url": "",
      "publisher": "",
      "review_category": "copyleft-tool",
      "review_status": "reviewed",
      "scopes": [
        "project_files"
      ],
      "source_kind": "os-package",
      "source_url": "https://github.com/Cisco-Talos/clamav",
      "version": "runtime package from Oracle Linux image; upstream latest reviewed clamav-1.5.3"
    },
    {
      "attribution_required": true,
      "copyright": "VirusTotal and YARA contributors",
      "dependency_type": "direct",
      "id": "yara",
      "license_expression": "BSD-3-Clause",
      "license_name": "BSD-3-Clause",
      "license_url": "https://github.com/VirusTotal/yara/blob/master/COPYING",
      "name": "YARA",
      "notice_text": "YARA is used as a required rule scanner for uploaded files before clean objects are promoted to private object storage.",
      "package_url": "",
      "publisher": "",
      "review_category": "permissive",
      "review_status": "reviewed",
      "scopes": [
        "project_files"
      ],
      "source_kind": "os-package",
      "source_url": "https://github.com/VirusTotal/yara",
      "version": "runtime package from Oracle Linux image"
    },
    {
      "attribution_required": true,
      "copyright": "Oracle and upstream package contributors",
      "dependency_type": "direct",
      "id": "oracle-linux",
      "license_expression": "Oracle Linux open-source package licenses",
      "license_name": "Oracle Linux open-source package licenses",
      "license_url": "https://oss.oracle.com/licenses/",
      "name": "Oracle Linux",
      "notice_text": "Runtime image base for LBCAssist services.",
      "package_url": "",
      "publisher": "",
      "review_category": "mixed-open-source-os",
      "review_status": "reviewed",
      "scopes": [
        "all"
      ],
      "source_kind": "container-base-image",
      "source_url": "https://container-registry.oracle.com/",
      "version": "8.10 slim base image"
    },
    {
      "attribution_required": true,
      "copyright": "Grafana Labs and Grafana contributors",
      "dependency_type": "direct",
      "id": "grafana-oss",
      "license_expression": "AGPL-3.0",
      "license_name": "AGPL-3.0",
      "license_url": "https://github.com/grafana/grafana/blob/main/LICENSE",
      "name": "Grafana OSS",
      "notice_text": "Grafana OSS provides authenticated internal observability dashboards.",
      "package_url": "",
      "publisher": "",
      "review_category": "network-copyleft-tool",
      "review_status": "reviewed",
      "scopes": [
        "observability"
      ],
      "source_kind": "container-image",
      "source_url": "https://github.com/grafana/grafana",
      "version": "13.0.1-security-01"
    }
  ],
  "generated_at": "2026-07-04T16:45:04Z",
  "links": {
    "human": "/legal/open-source",
    "notices_json": "/legal/open-source.json",
    "sbom_cyclonedx_json": "/legal/sbom.cdx.json"
  },
  "manifest_version": 1,
  "release_commit": "64e99c5e4cd5d39e0ea4d7d7c3303d687be6c0e5",
  "source_kind": "server-generated"
}