search

wgnf / liz

liz (ˈlɪz) is a tool to extract license-information from your project/solution aimed on a fast and correct process. Whether it's via a dotnet-CLI-Tool, Cake-Addin or Nuke-Addon
MIT License
10 stars 0 forks source link

Export the extracted licenses in SPDX? #140

Open wgnf opened 1 year ago

wgnf commented 1 year ago

More information see: https://spdx.dev/resources/use/ Example json-file see: https://github.com/spdx/spdx-spec/blob/development/v2.2.2/examples/SPDXJSONExample-v2.2.spdx.json

Seems rather easy to do.

More information can be found here:

wgnf commented 1 year ago

Maybe some great information on how to create SPDX can be found here: https://github.com/spdx/spdx-examples/tree/master/presentations The talk is on YouTube: https://www.youtube.com/watch?v=IbGc4nIn_ao

This is probably the best sample we can use:

{
  "SPDXID": "SPDXRef-DOCUMENT",
  "spdxVersion": "SPDX-2.3",
  "creationInfo": {
    "created": "2023-05-12T18:30:22Z",
    "creators": [
      "Person: Gary O'Neall (gary@sourceauditor.com)"
    ]
  },
  "name": "SPDX Tools v1.1.5 Java SBOM",
  "dataLicense": "CC0-1.0",
  "documentNamespace": "http://spdx.org/spdxdocs/tools-java/v1.1.5-444504E0-4F89-41D3-9A0C-0305E82C3301",
  "packages": [
    {
      "SPDXID": "SPDXRef-Package",
      "name": "tools-java",
      "versionInfo": "1.5.1",
      "supplier": "Organization: SPDX (Spdx-tech@lists.spdx.org)",
      "packageFileName": "tools-java-1.1.5.zip",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "e01bcba3c55fa7f0c82d08d0cdce9061b21bf32f"
        }
      ],
      "downloadLocation": "https://github.com/spdx/tools-java/releases/download/v1.1.5/tools-java-1.1.5.zip",
      "filesAnalyzed": false,
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:github/spdx/tools-java@2235d5d7f7fe46ce1e0d54b7831c5681633b25cc",
          "referenceType": "purl"
        }
      ]
    },
    {
      "SPDXID": "SPDXRef-xlsx",
      "comment": "This is a demonstration of a dependency - it is NOT really a dependency of tools-java",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "8f2715fa4ea3619b08615aa8f57828a80e6eb703"
        }
      ],
      "downloadLocation": "https://repo1.maven.org/maven2/org/webjars/npm/xlsx/0.16.6/xlsx-0.16.6.jar",
      "filesAnalyzed": false,
      "name": "xlsx",
      "packageFileName": "xlsx-0.16.6.jar",
      "supplier": "Organization: Webjar",
      "versionInfo": "0.16.6",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceLocator": "pkg:maven/org.webjars.npm/xlsx@0.16.6",
          "referenceType": "purl"
        }
      ]
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-Package"
    },
    {
      "spdxElementId": "SPDXRef-Package",
      "relationshipType": "DYNAMIC_LINK",
      "relatedSpdxElement": "SPDXRef-xlsx"
    }
  ]
}

There is also an online-tool to validate the generated SPDX document: https://tools.spdx.org/app/validate/

wgnf commented 1 year ago

The minimum required by the NTIA: image

wgnf commented 1 year ago

SPDX-JSON is probably the most popular, so we should use that.

wgnf commented 1 year ago
wgnf commented 1 year ago

Using the CycloneDX .NET tool (see here) the following information will be extracted for Liz.Tool:

<?xml version="1.0" encoding="utf-8"?>
<bom xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" serialNumber="urn:uuid:9a77b08b-5b25-4242-ad55-d3cf9f113578" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>CycloneDX</vendor>
        <name>CycloneDX module for .NET</name>
        <version>2.8.1.0</version>
      </tool>
    </tools>
    <component type="application" bom-ref="Liz.Tool@0.0.0">
      <name>Liz.Tool</name>
      <version>0.0.0</version>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:nuget/DotNet.Glob@3.1.3">
      <author>Darrell Tunnell &lt;darrell.tunnell@googlemail.com&gt;</author>
      <name>DotNet.Glob</name>
      <version>3.1.3</version>
      <description>A fast globbing library for .NET applications, including .net core. Doesn't use Regex.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">9A3FFB310BF2A3383D869A6347C3578CC7C02318CAEEFCEF73C4343D3B15592054F483840EA0D024E537EDDE6C63630AD5A90C5D8D3A41EF67F8033003DC3A92</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://github.com/dazinator/DotNet.Glob/blob/master/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:nuget/DotNet.Glob@3.1.3</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dazinator/DotNet.Glob</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dazinator/DotNet.Glob.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/Microsoft.Bcl.AsyncInterfaces@1.0.0">
      <author>Microsoft</author>
      <name>Microsoft.Bcl.AsyncInterfaces</name>
      <version>1.0.0</version>
      <description>Provides the IAsyncEnumerable&lt;T&gt; and IAsyncDisposable interfaces and helper types for .NET Standard 2.0. This package is not required starting with .NET Standard 2.1 and .NET Core 3.0.

Commonly Used Types:
System.IAsyncDisposable
System.Collections.Generic.IAsyncEnumerable
System.Collections.Generic.IAsyncEnumerator

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">21DB5A0C2B3BF7FEC98BBEC5ED05DD8E92227FD9525BD0D1013D94E8DA4A6A2A0B4B8B8CD82BB51D909E8D61F16690971C95E610A3DA493744731704AEB2300A</hash>
      </hashes>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/Microsoft.Bcl.AsyncInterfaces@1.0.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/Microsoft.Build.Tasks.Git@1.1.1">
      <author>Microsoft</author>
      <name>Microsoft.Build.Tasks.Git</name>
      <version>1.1.1</version>
      <description>MSBuild tasks providing git repository information.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">1961B5BA2CE215F6CD0943948E66462B7388B612708C58A5E03AB1E041AC77F1582F9ED9134136FCE0D5345D1D46A1537FF728F542E6DD4EA2C11EAC9D3F8D46</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/Microsoft.Build.Tasks.Git@1.1.1</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/sourcelink</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dotnet/sourcelink</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0">
      <author>Microsoft</author>
      <name>Microsoft.NETCore.Platforms</name>
      <version>3.1.0</version>
      <description>Provides runtime information required to resolve target framework, platform, and runtime specific implementations of .NETCore packages. 
When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">636A1E3768F782CED193B18EC61616C122B5B756395BBEC3EDE805B172CE62DB2D631407DEEBBA73BF136234479BE4824F0268A57F52FF4F8D7D37D4370CD966</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/Microsoft.NETCore.Platforms@3.1.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0">
      <author>Microsoft</author>
      <name>Microsoft.NETCore.Targets</name>
      <version>1.1.0</version>
      <description>Provides supporting infrastructure for portable projects: support identifiers that define framework and runtime for support targets and packages that reference the minimum supported package versions when targeting these. 
When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">1EF033A68688AAB9997EC1C0378ACB1638B4AFB618E533FCAF749D93389737BA94F4A0A94481BECDF701C7E988AE2FE390136A8EAE225887EE60DB45063490FE</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/Microsoft.NETCore.Targets@1.1.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/Microsoft.SourceLink.Common@1.1.1">
      <author>Microsoft</author>
      <name>Microsoft.SourceLink.Common</name>
      <version>1.1.1</version>
      <description>MSBuild tasks providing source control information.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">BF2241EEEB82876F7612D525064AA90F9BB56610260D44A2FC5B75B63B45A652444C25451F7DAACBE97CB2C5A6E72180805F894054F7176CC290D147A2753EF4</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/Microsoft.SourceLink.Common@1.1.1</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/sourcelink</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dotnet/sourcelink</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/Microsoft.SourceLink.GitHub@1.1.1">
      <author>Microsoft</author>
      <name>Microsoft.SourceLink.GitHub</name>
      <version>1.1.1</version>
      <description>Generates source link for GitHub repositories.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">54C7FF8D0CAFD654A115D5755710EC89534399A605949FFD43778290796022092679A43E1A129250FF9A03E61417C43DC2FC1362A9019DEE88A7E048C1BE953C</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/Microsoft.SourceLink.GitHub@1.1.1</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/sourcelink</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dotnet/sourcelink</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/runtime.native.System@4.3.0">
      <author>Microsoft</author>
      <name>runtime.native.System</name>
      <version>4.3.0</version>
      <description>Internal implementation package not meant for direct consumption.  Please do not reference directly. 
When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">299C5A96FFFDCAF1972E3E3D1C727837D18AC9E88CB79C09914F12FF1DE7280DFF10C9232A49A1C1D3BA7785A5CF76F28C9DCE414F0A2A567688DE7FD5331DC8</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/runtime.native.System@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/ShellProgressBar@5.1.0">
      <author>Martijn Laarman</author>
      <name>ShellProgressBar</name>
      <version>5.1.0</version>
      <description>Package Description</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">97A005324E74F20119ABC114AFADDB688E7FB63173B2D1276C56C5094ACC3793CA70CCDE875E4F84344EC9BDEEB94440EB35319A1B1F8C3FD74B475E61F61F48</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:nuget/ShellProgressBar@5.1.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/Mpdreamz/shellprogressbar</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/SlnParser@3.0.0">
      <author>Martin Wagenführ</author>
      <name>SlnParser</name>
      <version>3.0.0</version>
      <description>Easy (to use) Parser for your .NET Solution (.sln) Files.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">5872E1445802308ACEB344FBD4C36BF6DA5994E8245288408024B4F87D68BA2835F20B52ED5DCC10411B9763E311DF309C856CA9B18E8964AAE0A157DE546519</hash>
      </hashes>
      <licenses>
        <license>
          <id>Unlicense</id>
        </license>
      </licenses>
      <purl>pkg:nuget/SlnParser@3.0.0</purl>
      <externalReferences>
        <reference type="vcs">
          <url>https://github.com/wgnf/SlnParser/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Buffers@4.5.0">
      <author>Microsoft</author>
      <name>System.Buffers</name>
      <version>4.5.0</version>
      <description>Provides resource pooling of any type for performance-critical applications that allocate and deallocate objects frequently.

Commonly Used Types:
System.Buffers.ArrayPool&lt;T&gt;

30ab651fcb4354552bd4891619a0bdd81e0ebdbf 
When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">D3DC8BFD088F103648F492E0D11D0E7067BFD327059BAF50375E830AF5E4AA4228AC20B563610AC24E4ABD295F3261AC7BE2DC2A40F71FE0AB6BB7C59311D712</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Buffers@4.5.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Collections@4.0.11">
      <author>Microsoft</author>
      <name>System.Collections</name>
      <version>4.0.11</version>
      <description>Provides classes that define generic collections, which allow developers to create strongly typed collections that provide better type safety and performance than non-generic strongly typed collections.

Commonly Used Types:
System.Collections.Generic.List&lt;T&gt;
System.Collections.Generic.Dictionary&lt;TKey, TValue&gt;
System.Collections.Generic.Queue&lt;T&gt;
System.Collections.Generic.Stack&lt;T&gt;
System.Collections.Generic.HashSet&lt;T&gt;
System.Collections.Generic.LinkedList&lt;T&gt;
System.Collections.Generic.EqualityComparer&lt;T&gt;
System.Collections.Generic.Comparer&lt;T&gt;
System.Collections.Generic.SortedDictionary&lt;TKey, TValue&gt;

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">F61B75329BA5D7C0E688AA9D110B2200C8934C3A1888F6B1B5F198BAA7AB93F23835E8380853E8C046F257172B5060578ED86DF26E5FE0EF34D8C4408A02C33F</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Collections@4.0.11</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.CommandLine@2.0.0-beta4.22272.1">
      <author>Microsoft</author>
      <name>System.CommandLine</name>
      <version>2.0.0-beta4.22272.1</version>
      <description>This package includes a powerful command line parser and other tools for building command line applications, including:

    * Shell-agnostic support for command line completions
    * Method invocation and an extensible middleware pipeline
    * Constructor- and property-based model binding for complex types
    * Test and debug support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">979A7E66BA29E17BC5BEC42E926ED15362E23AE403E498C955E09DFFC4D3BAA14777A06F95E25D591FC9757A0EAA18DEB9E4662A1CA1663FA300F509A4A0383C</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.CommandLine@2.0.0-beta4.22272.1</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/command-line-api</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dotnet/command-line-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Globalization@4.3.0">
      <author>Microsoft</author>
      <name>System.Globalization</name>
      <version>4.3.0</version>
      <description>Provides classes that define culture-related information, including language, country/region, calendars in use, format patterns for dates, currency, and numbers, and sort order for strings.

Commonly Used Types:
System.Globalization.DateTimeFormatInfo
System.Globalization.CultureInfo
System.Globalization.NumberFormatInfo
System.Globalization.CalendarWeekRule
System.Globalization.TextInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
System.Globalization.CompareOptions
System.Globalization.UnicodeCategory

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">823D2BA308CB073B40A3146ECCCD0D9FD7B1615AC3FBEFB16F73D873E411FD81C3BDC87DF206D3DC7E2F14C9CD53AAFCA684A3570C25471280AADA8DE805ECE2</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Globalization@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.IO@4.3.0">
      <author>Microsoft</author>
      <name>System.IO</name>
      <version>4.3.0</version>
      <description>Provides base input and output (I/O) types, including System.IO.Stream, System.IO.StreamReader and System.IO.StreamWriter, that allow reading and writing to data streams

Commonly Used Types:
System.IO.Stream
System.IO.EndOfStreamException
System.IO.MemoryStream
System.IO.StreamReader
System.IO.StreamWriter
System.IO.StringWriter
System.IO.TextWriter
System.IO.TextReader

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">BFCA5A21E3E1986B9765B13DC6FBCD6F8B89E4C1383855D1D7EF256BF1BF2F51889769DB5365859DD7606FBF6454ADD4DAEB3BAB56994FFB98FD1D03FE8BC1E6</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.IO@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.IO.Abstractions@12.2.1">
      <author>Tatham Oddie &amp; friends</author>
      <name>System.IO.Abstractions</name>
      <version>12.2.1</version>
      <description>A set of abstractions to help make file system interactions testable.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">A28DDAA10400E799F24B70FF307EAC8956A7EB80FA7CBC53DF47F75E1D19C4135353CD9BCDF94EBD9F3A8C726A346B7257AB8270A5441D41AE8C4ADF8EE90ECF</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>Copyright © Tatham Oddie 2010</copyright>
      <purl>pkg:nuget/System.IO.Abstractions@12.2.1</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/System-IO-Abstractions/System.IO.Abstractions</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.IO.FileSystem.AccessControl@4.7.0">
      <author>Microsoft</author>
      <name>System.IO.FileSystem.AccessControl</name>
      <version>4.7.0</version>
      <description>Provides types for managing access and audit control lists for files and directories.

Commonly Used Types:
System.Security.AccessControl.DirectoryObjectSecurity
System.Security.AccessControl.DirectorySecurity
System.Security.AccessControl.FileSecurity
System.Security.AccessControl.FileSystemAccessRule
System.Security.AccessControl.FileSystemAuditRule
System.Security.AccessControl.FileSystemRights
System.Security.AccessControl.FileSystemSecurity

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">7FBB40E2C6762F099D63EADF8695513F3C8DB5ABAA027A14F93BE90A3B55DB9516187450F5AA5578586661EA53835107F60972A23868FEAB2BC5FBE7265BD307</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.IO.FileSystem.AccessControl@4.7.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Memory@4.5.3">
      <author>Microsoft</author>
      <name>System.Memory</name>
      <version>4.5.3</version>
      <description>Provides types for efficient representation and pooling of managed, stack, and native memory segments and sequences of such segments, along with primitives to parse and format UTF-8 encoded text stored in those memory segments.

Commonly Used Types:
System.Span
System.ReadOnlySpan
System.Memory
System.ReadOnlyMemory
System.Buffers.MemoryPool
System.Buffers.ReadOnlySequence
System.Buffers.Text.Utf8Parser
System.Buffers.Text.Utf8Formatter

c6cf790234e063b855fcdb50f3fb1b3cfac73275 
When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">70FCE15A52CC76AACBAE05C8E89E2E398D1D32903F63F640A7DD4A3E5747F2C7A887D4BFD22F2A2E40274906CF91648DFD169734FB7C74EB9B4F72614084E1DB</hash>
      </hashes>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Memory@4.5.3</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Numerics.Vectors@4.5.0">
      <author>Microsoft</author>
      <name>System.Numerics.Vectors</name>
      <version>4.5.0</version>
      <description>Provides hardware-accelerated numeric types, suitable for high-performance processing and graphics applications.

Commonly Used Types:
System.Numerics.Matrix3x2
System.Numerics.Matrix4x4
System.Numerics.Plane
System.Numerics.Quaternion
System.Numerics.Vector2
System.Numerics.Vector3
System.Numerics.Vector4
System.Numerics.Vector
System.Numerics.Vector&lt;T&gt;

30ab651fcb4354552bd4891619a0bdd81e0ebdbf</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">9C04EC0530F608AAF801837A791B33857E2CA6D2265A6049C01FD4E972825967E709CAD3070F174829B7400F608E9A641D3AFC3A45D4636D4C47DD43DD0657B3</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Numerics.Vectors@4.5.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Reflection@4.3.0">
      <author>Microsoft</author>
      <name>System.Reflection</name>
      <version>4.3.0</version>
      <description>Provides types that retrieve information about assemblies, modules, members, parameters, and other entities in managed code by examining their metadata. These types also can be used to manipulate instances of loaded types, for example to hook up events or to invoke methods.

Commonly Used Types:
System.Reflection.MethodInfo
System.Reflection.PropertyInfo
System.Reflection.ParameterInfo
System.Reflection.FieldInfo
System.Reflection.ConstructorInfo
System.Reflection.Assembly
System.Reflection.MemberInfo
System.Reflection.EventInfo
System.Reflection.Module

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">2325B67ED60DCE0302807064F25422CBE1B7FB275B539B44FBA3C4A8CE4926F21D78529A5C34B31C03D80D110F7BACE9AF9589D457266BEAC014220057AF8333</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Reflection@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Reflection.Extensions@4.3.0">
      <author>Microsoft</author>
      <name>System.Reflection.Extensions</name>
      <version>4.3.0</version>
      <description>Provides custom attribute extension methods for System.Reflection types.

Commonly Used Types:
System.Reflection.InterfaceMapping
System.Reflection.CustomAttributeExtensions
System.Reflection.RuntimeReflectionExtensions

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">06CFD992C8D7FD9AB6432AB02BE981A01B6558285A6E26A7825A064D4EFCCE08D9E7344F03FA19B033A2459D42B0B80E8C1400CE39B47A1752869AB8825B0475</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Reflection.Extensions@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Reflection.Primitives@4.3.0">
      <author>Microsoft</author>
      <name>System.Reflection.Primitives</name>
      <version>4.3.0</version>
      <description>Provides common enumerations for reflection-based libraries.

Commonly Used Types:
System.Reflection.FieldAttributes
System.Reflection.Emit.OpCode
System.Reflection.TypeAttributes
System.Reflection.MethodAttributes
System.Reflection.CallingConventions
System.Reflection.PropertyAttributes
System.Reflection.EventAttributes
System.Reflection.ParameterAttributes
System.Reflection.GenericParameterAttributes
System.Reflection.MethodImplAttributes

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">D4B9CC905F5A5CAB900206338E889068BF66C18EE863A29D68EFF3CDE2CCCA734112A2A851F2E2E5388A21EC28005FA19317C64D9B23923B05D6344BE2E49EAA</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Reflection.Primitives@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Resources.ResourceManager@4.3.0">
      <author>Microsoft</author>
      <name>System.Resources.ResourceManager</name>
      <version>4.3.0</version>
      <description>Provides classes and attributes that allow developers to create, store, and manage various culture-specific resources used in an application.

Commonly Used Types:
System.Resources.ResourceManager
System.Resources.NeutralResourcesLanguageAttribute
System.Resources.SatelliteContractVersionAttribute
System.Resources.MissingManifestResourceException

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">9067DB28F1C48D08FC52AD40A608F88C14AD9112646741DDAF426FDFE68BED61AB01954B179461E61D187371600C1E6E5C36C788993F5A105A64F5702A6B81D4</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Resources.ResourceManager@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Runtime@4.3.0">
      <author>Microsoft</author>
      <name>System.Runtime</name>
      <version>4.3.0</version>
      <description>Provides the fundamental primitives, classes and base classes that define commonly-used value and reference data types, events and event handlers, interfaces, attributes, and exceptions. This packages represents the core package, and provides the minimal set of types required to build a managed application.

Commonly Used Types:
System.Object
System.Exception
System.Int16
System.Int32
System.Int64
System.Enum
System.String
System.Char
System.Boolean
System.SByte
System.Byte
System.DateTime
System.DateTimeOffset
System.Single
System.Double
System.UInt16
System.UInt32
System.UInt64
System.IDisposable
System.Uri

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">92AB2249F08073CFAFDC4CFBD7DB36D651AD871B8D8BA961006982187DE374BF4A30AF93F15F73B05AF343F7A70CBD484B04D646570587636AE72171EB0714FB</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Runtime@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Runtime.CompilerServices.Unsafe@4.6.0">
      <author>Microsoft</author>
      <name>System.Runtime.CompilerServices.Unsafe</name>
      <version>4.6.0</version>
      <description>Provides the System.Runtime.CompilerServices.Unsafe class, which provides generic, low-level functionality for manipulating pointers.

Commonly Used Types:
System.Runtime.CompilerServices.Unsafe

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">FB9CD0D29DD0A1215894B53D1BD7FA5E7F16922EBC204128293E71C4AF1E80AAAFF31515D8A919736BE969EEEBA8070860587E11D9A76C45FC1E13E1E67581CD</hash>
      </hashes>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Runtime.CompilerServices.Unsafe@4.6.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Runtime.Extensions@4.1.0">
      <author>Microsoft</author>
      <name>System.Runtime.Extensions</name>
      <version>4.1.0</version>
      <description>Provides commonly-used classes for performing mathematical functions, conversions, string comparisons and querying environment information.

Commonly Used Types:
System.Math
System.Environment
System.Random
System.Progress&lt;T&gt;
System.Convert
System.Diagnostics.Stopwatch
System.Runtime.Versioning.FrameworkName
System.StringComparer
System.IO.Path

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">42D009BE57D6497AA0724924891289F3DECD916D0432C1C865CC0494092F5E59287F632A70C5060B3C78E361AB04510D75DFB3C2D2853F54201F735EB6E2DEA6</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Runtime.Extensions@4.1.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Runtime.Handles@4.3.0">
      <author>Microsoft</author>
      <name>System.Runtime.Handles</name>
      <version>4.3.0</version>
      <description>Provides base classes, including System.Runtime.InteropServices.CriticalHandle and System.Runtime.InteropServices.SafeHandle, for types that represent operating system handles.

Commonly Used Types:
System.Runtime.InteropServices.SafeHandle
Microsoft.Win32.SafeHandles.SafeWaitHandle
System.Runtime.InteropServices.CriticalHandle
System.Threading.WaitHandleExtensions
System.IO.HandleInheritability

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">0A5BAF1DD554BF9E01BCB4CE082CB26EE82B783364FEB47CBA730FAEECD70EDC528EFAD0394DCCE11F37D7F9507F8608F15629EBAF051906BFD3513E46AF0F11</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Runtime.Handles@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Runtime.InteropServices@4.3.0">
      <author>Microsoft</author>
      <name>System.Runtime.InteropServices</name>
      <version>4.3.0</version>
      <description>Provides types that support COM interop and platform invoke services.

Commonly Used Types:
System.Runtime.InteropServices.GCHandle
System.Runtime.InteropServices.GuidAttribute
System.Runtime.InteropServices.COMException
System.DllNotFoundException
System.Runtime.InteropServices.DllImportAttribute

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">650799C3E654EFBB9AD67157C9C60CE46F288A81597BE37CE2A0BF5D4835044065EF3F65B997328CBBBBFB81F4C89B8D7E7D61380880019DEEE6EB3F963F70D9</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Runtime.InteropServices@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Runtime.InteropServices.RuntimeInformation@4.3.0">
      <author>Microsoft</author>
      <name>System.Runtime.InteropServices.RuntimeInformation</name>
      <version>4.3.0</version>
      <description>Provides APIs to query about runtime and OS information.

Commonly Used Types:
System.Runtime.InteropServices.RuntimeInformation
System.Runtime.InteropServices.OSPlatform

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">6F4905329A3CC9E62D274C885F275EE31C5AF57A6C9FD1A5080D039CB748E0277BEF3DC8CE42863CAC78365084E00A032279BF3D2B7254A49F3FB1566A29AD1B</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Runtime.InteropServices.RuntimeInformation@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Security.AccessControl@4.7.0">
      <author>Microsoft</author>
      <name>System.Security.AccessControl</name>
      <version>4.7.0</version>
      <description>Provides base classes that enable managing access and audit control lists on securable objects.

Commonly Used Types:
System.Security.AccessControl.AccessRule
System.Security.AccessControl.AuditRule
System.Security.AccessControl.ObjectAccessRule
System.Security.AccessControl.ObjectAuditRule
System.Security.AccessControl.ObjectSecurity

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">464255881CC1AD9A0DF09EAA1EA926C75DF4196537A1C5ADB180665EC21F8DA627D00C778601EE05894EE745664374A38F0369778C98B29CBE236AA70DEAB5AE</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Security.AccessControl@4.7.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Security.Principal.Windows@4.7.0">
      <author>Microsoft</author>
      <name>System.Security.Principal.Windows</name>
      <version>4.7.0</version>
      <description>Provides classes for retrieving the current Windows user and for interacting with Windows users and groups.

Commonly Used Types:
System.Security.Principal.WindowsIdentity
System.Security.Principal.SecurityIdentifier
System.Security.Principal.NTAccount
System.Security.Principal.WindowsPrincipal
System.Security.Principal.IdentityReference
System.Security.Principal.IdentityNotMappedException
System.Security.Principal.WindowsBuiltInRole
System.Security.Principal.WellKnownSidType

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">F30A16D34C8792DB60B2240363A8B200CAB28BC2C7441405CF19ABF71DBF5FB0BF3BD1CBEC4D9B5EB4CF73EC482E4505D08D80AFDEF00B2B4B3BB56D6D4CAE96</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Security.Principal.Windows@4.7.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Text.Encoding@4.3.0">
      <author>Microsoft</author>
      <name>System.Text.Encoding</name>
      <version>4.3.0</version>
      <description>Provides base abstract encoding classes for converting blocks of characters to and from blocks of bytes.

Commonly Used Types:
System.Text.Encoding
System.Text.DecoderFallbackException
System.Text.Decoder
System.Text.EncoderFallbackException
System.Text.Encoder
System.Text.EncoderFallback
System.Text.EncoderFallbackBuffer
System.Text.DecoderFallback
System.Text.DecoderFallbackBuffer
System.Text.DecoderExceptionFallback

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">6FF7FEEC7313A7121F795EC7D376E4B8728C17294219FAFDFD4EA078F9DF1455B4685F0B3962C3810098E95D68594A8392C0B799D36EC8284CD6FCBD4CFE2C67</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Text.Encoding@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Text.Encoding.CodePages@4.0.1">
      <author>Microsoft</author>
      <name>System.Text.Encoding.CodePages</name>
      <version>4.0.1</version>
      <description>Provides support for code-page based encodings, including Windows-1252, Shift-JIS, and GB2312.

Commonly Used Types:
System.Text.CodePagesEncodingProvider

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">DA68445FFFCFFA0A8B8F2BDAB880EC4CBE51DD66209AB455CF6F16166EFDF31B47498E852F616B3B7BA0DD11209E05A2625CCA6FB07FAFA20A945CC501282026</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Text.Encoding.CodePages@4.0.1</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Text.Encodings.Web@4.6.0">
      <author>Microsoft</author>
      <name>System.Text.Encodings.Web</name>
      <version>4.6.0</version>
      <description>Provides types for encoding and escaping strings for use in JavaScript, HyperText Markup Language (HTML), and uniform resource locators (URL).

Commonly Used Types:
System.Text.Encodings.Web.HtmlEncoder
System.Text.Encodings.Web.UrlEncoder
System.Text.Encodings.Web.JavaScriptEncoder

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">384C31F15AF6801C4A766D6E1FED027D4FC051A016AC1346DE3870115A7626881641563C3EA1CD21C46291FC3E4A63CF27E64C674EA60ECB00C3B54D87EB9C0D</hash>
      </hashes>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Text.Encodings.Web@4.6.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Text.Json@4.6.0">
      <author>Microsoft</author>
      <name>System.Text.Json</name>
      <version>4.6.0</version>
      <description>Provides high-performance and low-allocating types that serialize objects to JavaScript Object Notation (JSON) text and deserialize JSON text to objects, with UTF-8 support built-in. Also provides types to read and write JSON text encoded as UTF-8, and to create an in-memory document object model (DOM), that is read-only, for random access of the JSON elements within a structured view of the data.

Commonly Used Types:
System.Text.Json.JsonSerializer
System.Text.Json.JsonDocument
System.Text.Json.JsonElement
System.Text.Json.Utf8JsonWriter
System.Text.Json.Utf8JsonReader

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">14882E14C01813FCB211A49C27516268F38DC356203895F0A415DFA1AECC02098DB9FD777C19D42B444BCA36AC0F096A4322DF1225F818ABEAB8D121D49C7750</hash>
      </hashes>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Text.Json@4.6.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/dotnet/corefx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Threading@4.3.0">
      <author>Microsoft</author>
      <name>System.Threading</name>
      <version>4.3.0</version>
      <description>Provides the fundamental synchronization primitives, including System.Threading.Monitor and System.Threading.Mutex, that are required when writing asynchronous code.

Commonly Used Types:
System.Threading.Monitor
System.Threading.SynchronizationContext
System.Threading.ManualResetEvent
System.Threading.AutoResetEvent
System.Threading.ThreadLocal&lt;T&gt;
System.Threading.EventWaitHandle
System.Threading.SemaphoreSlim
System.Threading.Mutex

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">97A2751BDCE69FAAF9C54F834A9FD5C60C7A786FAA52F420769828DBC9B5804C1F3721BA1EA945EA1D844835D909810F9E782C9A44D0FAAECCCB230C4CD95A88</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Threading@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Threading.Tasks@4.3.0">
      <author>Microsoft</author>
      <name>System.Threading.Tasks</name>
      <version>4.3.0</version>
      <description>Provides types that simplify the work of writing concurrent and asynchronous code.

Commonly Used Types:
System.Threading.Tasks.Task&lt;TResult&gt;
System.Runtime.CompilerServices.TaskAwaiter&lt;TResult&gt;
System.Threading.Tasks.TaskCompletionSource&lt;TResult&gt;
System.Threading.Tasks.Task
System.OperationCanceledException
System.AggregateException

When using NuGet 3.x this package requires at least version 3.4.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">7D488FF82CB20A3B3CEF6380F2DAE5EA9F7BAA66BF75AD711AADE1E3301B25993CCF2694E33C847EA5B9BDB90FF34C46FCD8A6BA7D6F95605BA0C124ED7C5D13</hash>
      </hashes>
      <copyright>© Microsoft Corporation.  All rights reserved.</copyright>
      <purl>pkg:nuget/System.Threading.Tasks@4.3.0</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:nuget/System.Threading.Tasks.Extensions@4.5.2">
      <author>Microsoft</author>
      <name>System.Threading.Tasks.Extensions</name>
      <version>4.5.2</version>
      <description>Provides additional types that simplify the work of writing concurrent and asynchronous code.

Commonly Used Types:
System.Threading.Tasks.ValueTask&lt;TResult&gt;

99ce22c306b07f99ddae60f443d23a983ae78f7b</description>
      <scope>required</scope>
      <hashes>
        <hash alg="SHA-512">E470AEF15DD007E828B8C6661AB03AEBAC1E67451046DF8E4C3D7AAD21371F286EE10865BF191FE274CF23418BCB9DACD2BC608BB0BCB766B2140CF0ED42B5A2</hash>
      </hashes>
      <copyright>© Microsoft Corporation. All rights reserved.</copyright>
      <purl>pkg:nuget/System.Threading.Tasks.Extensions@4.5.2</purl>
      <externalReferences>
        <reference type="website">
          <url>https://dot.net/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="Liz.Tool@0.0.0">
      <dependency ref="pkg:nuget/Microsoft.SourceLink.GitHub@1.1.1" />
      <dependency ref="pkg:nuget/ShellProgressBar@5.1.0" />
      <dependency ref="pkg:nuget/System.CommandLine@2.0.0-beta4.22272.1" />
    </dependency>
    <dependency ref="pkg:nuget/DotNet.Glob@3.1.3" />
    <dependency ref="pkg:nuget/Microsoft.Bcl.AsyncInterfaces@1.0.0">
      <dependency ref="pkg:nuget/System.Threading.Tasks.Extensions@4.5.2" />
    </dependency>
    <dependency ref="pkg:nuget/Microsoft.Build.Tasks.Git@1.1.1" />
    <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
    <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
    <dependency ref="pkg:nuget/Microsoft.SourceLink.Common@1.1.1" />
    <dependency ref="pkg:nuget/Microsoft.SourceLink.GitHub@1.1.1">
      <dependency ref="pkg:nuget/Microsoft.Build.Tasks.Git@1.1.1" />
      <dependency ref="pkg:nuget/Microsoft.SourceLink.Common@1.1.1" />
    </dependency>
    <dependency ref="pkg:nuget/runtime.native.System@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
    </dependency>
    <dependency ref="pkg:nuget/ShellProgressBar@5.1.0">
      <dependency ref="pkg:nuget/System.Runtime.InteropServices.RuntimeInformation@4.3.0" />
      <dependency ref="pkg:nuget/System.Text.Encoding.CodePages@4.0.1" />
    </dependency>
    <dependency ref="pkg:nuget/SlnParser@3.0.0" />
    <dependency ref="pkg:nuget/System.Buffers@4.5.0" />
    <dependency ref="pkg:nuget/System.Collections@4.0.11">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.CommandLine@2.0.0-beta4.22272.1" />
    <dependency ref="pkg:nuget/System.Globalization@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.IO.Abstractions@12.2.1">
      <dependency ref="pkg:nuget/System.IO.FileSystem.AccessControl@4.7.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.IO.FileSystem.AccessControl@4.7.0">
      <dependency ref="pkg:nuget/System.Security.AccessControl@4.7.0" />
      <dependency ref="pkg:nuget/System.Security.Principal.Windows@4.7.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.IO@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
      <dependency ref="pkg:nuget/System.Text.Encoding@4.3.0" />
      <dependency ref="pkg:nuget/System.Threading.Tasks@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Memory@4.5.3">
      <dependency ref="pkg:nuget/System.Buffers@4.5.0" />
      <dependency ref="pkg:nuget/System.Numerics.Vectors@4.5.0" />
      <dependency ref="pkg:nuget/System.Runtime.CompilerServices.Unsafe@4.6.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Numerics.Vectors@4.5.0" />
    <dependency ref="pkg:nuget/System.Reflection.Extensions@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Reflection@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Reflection.Primitives@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Reflection@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.IO@4.3.0" />
      <dependency ref="pkg:nuget/System.Reflection.Primitives@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Resources.ResourceManager@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Globalization@4.3.0" />
      <dependency ref="pkg:nuget/System.Reflection@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Runtime.CompilerServices.Unsafe@4.6.0" />
    <dependency ref="pkg:nuget/System.Runtime.Extensions@4.1.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Runtime.Handles@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Runtime.InteropServices.RuntimeInformation@4.3.0">
      <dependency ref="pkg:nuget/System.Reflection@4.3.0" />
      <dependency ref="pkg:nuget/System.Reflection.Extensions@4.3.0" />
      <dependency ref="pkg:nuget/System.Resources.ResourceManager@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime.InteropServices@4.3.0" />
      <dependency ref="pkg:nuget/System.Threading@4.3.0" />
      <dependency ref="pkg:nuget/runtime.native.System@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Runtime.InteropServices@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Reflection@4.3.0" />
      <dependency ref="pkg:nuget/System.Reflection.Primitives@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime.Handles@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Runtime@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Security.AccessControl@4.7.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/System.Security.Principal.Windows@4.7.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Security.Principal.Windows@4.7.0" />
    <dependency ref="pkg:nuget/System.Text.Encoding.CodePages@4.0.1">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/System.Collections@4.0.11" />
      <dependency ref="pkg:nuget/System.Globalization@4.3.0" />
      <dependency ref="pkg:nuget/System.IO@4.3.0" />
      <dependency ref="pkg:nuget/System.Reflection@4.3.0" />
      <dependency ref="pkg:nuget/System.Resources.ResourceManager@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime.Extensions@4.1.0" />
      <dependency ref="pkg:nuget/System.Runtime.Handles@4.3.0" />
      <dependency ref="pkg:nuget/System.Runtime.InteropServices@4.3.0" />
      <dependency ref="pkg:nuget/System.Text.Encoding@4.3.0" />
      <dependency ref="pkg:nuget/System.Threading@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Text.Encoding@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Text.Encodings.Web@4.6.0">
      <dependency ref="pkg:nuget/System.Memory@4.5.3" />
    </dependency>
    <dependency ref="pkg:nuget/System.Text.Json@4.6.0" />
    <dependency ref="pkg:nuget/System.Threading.Tasks.Extensions@4.5.2">
      <dependency ref="pkg:nuget/System.Runtime.CompilerServices.Unsafe@4.6.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Threading.Tasks@4.3.0">
      <dependency ref="pkg:nuget/Microsoft.NETCore.Platforms@3.1.0" />
      <dependency ref="pkg:nuget/Microsoft.NETCore.Targets@1.1.0" />
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
    </dependency>
    <dependency ref="pkg:nuget/System.Threading@4.3.0">
      <dependency ref="pkg:nuget/System.Runtime@4.3.0" />
      <dependency ref="pkg:nuget/System.Threading.Tasks@4.3.0" />
    </dependency>
  </dependencies>
</bom>

this looks manageable too and also shows some other nice examples how things can be done

wgnf commented 1 year ago

Moving to next version as I'm not sure when I'll get to work on it again