{ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "name": "mapleweb-stage-1", "documentNamespace": "https://darkkyshadow.com/spdx/mapleweb/stage-1/a12aab032ced15096ae1742ce9f3f3b89b23e7405a1bbf50e7bf480384dd9e9a-5a36fdbeaa49dec7d7220dd589dbcc3bc177c6b525de224cd9173b6e98b2448d", "creationInfo": { "created": "2026-04-12T00:53:36Z", "creators": [ "Tool: mapleweb/scripts/generate_sbom.ps1" ] }, "documentDescribes": [ "SPDXRef-Package-maplestory-wasm" ], "packages": [ { "name": "maplestory-wasm", "SPDXID": "SPDXRef-Package-maplestory-wasm", "versionInfo": "bc0234fe7c7f53322453e7bdd79564d9aca4cd8b", "downloadLocation": "git+https://github.com/nmnsnv/maplestory-wasm.git@bc0234fe7c7f53322453e7bdd79564d9aca4cd8b", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "AGPL-3.0-or-later", "licenseDeclared": "AGPL-3.0-or-later", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/nmnsnv/maplestory-wasm@bc0234fe7c7f53322453e7bdd79564d9aca4cd8b" } ] }, { "name": "Cosmic", "SPDXID": "SPDXRef-Package-Cosmic", "versionInfo": "fec53bc7714dc0f1ae3f50b2986cdf2727e0912a", "downloadLocation": "git+https://github.com/P0nk/Cosmic.git@fec53bc7714dc0f1ae3f50b2986cdf2727e0912a", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "AGPL-3.0-only", "licenseDeclared": "AGPL-3.0-only", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/P0nk/Cosmic@fec53bc7714dc0f1ae3f50b2986cdf2727e0912a" } ], "comment": "Reference server input. Clean verification passed 1886 tests using `mvnw.cmd clean verify`." }, { "name": "Emscripten SDK", "SPDXID": "SPDXRef-Package-Emsdk", "versionInfo": "4.0.21", "downloadLocation": "git+https://github.com/emscripten-core/emsdk.git@b2436aafa7351ee1b581f15841f1b45ed716a279", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "MIT OR NCSA", "licenseDeclared": "MIT OR NCSA", "copyrightText": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/emscripten-core/emsdk@b2436aafa7351ee1b581f15841f1b45ed716a279" } ] }, { "name": "Emscripten compiler archive (Windows x86-64)", "SPDXID": "SPDXRef-Package-Emscripten-Windows-x86-64", "versionInfo": "4.0.21", "downloadLocation": "https://storage.googleapis.com/webassembly/emscripten-releases-builds/win/d70a5da89b3e673bf6a482724478fc17e81e575e/wasm-binaries.zip", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "MIT OR NCSA", "licenseDeclared": "MIT OR NCSA", "copyrightText": "NOASSERTION", "packageFileName": "d70a5da89b3e673bf6a482724478fc17e81e575e-wasm-binaries.zip", "checksums": [ { "algorithm": "SHA256", "checksumValue": "79b3a6b77cf8015cc07ad25353f17f1828e731b0d8757a046071fffbdd5aaf70" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/emscripten@4.0.21?arch=x86_64\u0026os=windows" } ], "comment": "emscripten-releases commit d70a5da89b3e673bf6a482724478fc17e81e575e" }, { "name": "Emscripten compiler archive (Linux x86-64)", "SPDXID": "SPDXRef-Package-Emscripten-Linux-x86-64", "versionInfo": "4.0.21", "downloadLocation": "https://storage.googleapis.com/webassembly/emscripten-releases-builds/linux/d70a5da89b3e673bf6a482724478fc17e81e575e/wasm-binaries.tar.xz", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "MIT OR NCSA", "licenseDeclared": "MIT OR NCSA", "copyrightText": "NOASSERTION", "packageFileName": "d70a5da89b3e673bf6a482724478fc17e81e575e-wasm-binaries.tar.xz", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e8516b903cd4dc16bf5aa2aacd826adcff5ff1d97d3d88e5e3871decd94cd8b2" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/emscripten@4.0.21?arch=x86_64\u0026os=linux" } ], "comment": "emscripten-releases commit d70a5da89b3e673bf6a482724478fc17e81e575e" }, { "name": "CMake (Windows x86-64)", "SPDXID": "SPDXRef-Package-CMake-Windows-x86-64", "versionInfo": "3.31.6", "downloadLocation": "https://github.com/Kitware/CMake/releases/download/v3.31.6/cmake-3.31.6-windows-x86_64.zip", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "BSD-3-Clause", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "packageFileName": "cmake-3.31.6-windows-x86_64.zip", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d163cd3ab4959b0a53fa8988f2ddbd2e6c501658201e6a154386bad9dbe4f836" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/cmake@3.31.6?arch=x86_64\u0026os=windows" } ] }, { "name": "CMake (Linux x86-64)", "SPDXID": "SPDXRef-Package-CMake-Linux-x86-64", "versionInfo": "3.31.6", "downloadLocation": "https://github.com/Kitware/CMake/releases/download/v3.31.6/cmake-3.31.6-linux-x86_64.tar.gz", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "BSD-3-Clause", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "packageFileName": "cmake-3.31.6-linux-x86_64.tar.gz", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5a1133ff103c71eb5120e2cc3de922733e7d8a26a98ae716397e8676adb367bf" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/cmake@3.31.6?arch=x86_64\u0026os=linux" } ] }, { "name": "Ninja (Windows x86-64)", "SPDXID": "SPDXRef-Package-Ninja-Windows-x86-64", "versionInfo": "1.12.1", "downloadLocation": "https://github.com/ninja-build/ninja/releases/download/v1.12.1/ninja-win.zip", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "Apache-2.0", "licenseDeclared": "Apache-2.0", "copyrightText": "NOASSERTION", "packageFileName": "ninja-win-1.12.1.zip", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f550fec705b6d6ff58f2db3c374c2277a37691678d6aba463adcbb129108467a" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/ninja@1.12.1?arch=x86_64\u0026os=windows" } ], "comment": "The publisher did not attach a checksum to this release. This digest was computed from the upstream GitHub release asset and is pinned for subsequent verification." }, { "name": "Ninja (Linux x86-64)", "SPDXID": "SPDXRef-Package-Ninja-Linux-x86-64", "versionInfo": "1.12.1", "downloadLocation": "https://github.com/ninja-build/ninja/releases/download/v1.12.1/ninja-linux.zip", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "Apache-2.0", "licenseDeclared": "Apache-2.0", "copyrightText": "NOASSERTION", "packageFileName": "ninja-linux-1.12.1.zip", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6f98805688d19672bd699fbbfa2c2cf0fc054ac3df1f0e6a47664d963d530255" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/ninja@1.12.1?arch=x86_64\u0026os=linux" } ], "comment": "The publisher did not attach a checksum to this release. This digest was computed from the upstream GitHub release asset and is pinned for subsequent verification." }, { "name": "zlib", "SPDXID": "SPDXRef-Package-zlib-1.3.1", "versionInfo": "1.3.1", "downloadLocation": "https://github.com/madler/zlib/archive/refs/tags/v1.3.1.tar.gz", "filesAnalyzed": false, "primaryPackagePurpose": "LIBRARY", "licenseConcluded": "Zlib", "licenseDeclared": "Zlib", "copyrightText": "NOASSERTION", "checksums": [ { "algorithm": "SHA512", "checksumValue": "8c9642495bafd6fad4ab9fb67f09b268c69ff9af0f4f20cf15dfc18852ff1f312bd8ca41de761b3f8d8e90e77d79f2ccacd3d4c5b19e475ecf09d021fdfe9088" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/madler/zlib@v1.3.1" } ], "comment": "Emscripten port metadata: https://github.com/emscripten-core/emscripten/blob/4.0.21/tools/ports/zlib.py" }, { "name": "FreeType", "SPDXID": "SPDXRef-Package-FreeType-2.13.3", "versionInfo": "2.13.3", "downloadLocation": "https://github.com/freetype/freetype/archive/VER-2-13-3.zip", "filesAnalyzed": false, "primaryPackagePurpose": "LIBRARY", "licenseConcluded": "FTL OR GPL-2.0-or-later", "licenseDeclared": "FTL OR GPL-2.0-or-later", "copyrightText": "NOASSERTION", "checksums": [ { "algorithm": "SHA512", "checksumValue": "ce413487c24e689631d705f53b64725256f89fffe9aade7cf07bbd785a9cd49eb6b8d2297a55554f3fee0a50b17e8af78f505cdab565768afab833794f968c2f" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/freetype/freetype@VER-2-13-3" } ], "comment": "Emscripten port metadata: https://github.com/emscripten-core/emscripten/blob/4.0.21/tools/ports/freetype.py" }, { "name": "Liberation Fonts", "SPDXID": "SPDXRef-Package-Liberation-Fonts-2.1.5", "versionInfo": "2.1.5", "downloadLocation": "https://github.com/liberationfonts/liberation-fonts/files/7261482/liberation-fonts-ttf-2.1.5.tar.gz", "filesAnalyzed": false, "primaryPackagePurpose": "LIBRARY", "licenseConcluded": "OFL-1.1", "licenseDeclared": "OFL-1.1", "copyrightText": "NOASSERTION", "packageFileName": "liberation-fonts-ttf-2.1.5.tar.gz", "supplier": "Organization: Liberation Fonts", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7191c669bf38899f73a2094ed00f7b800553364f90e2637010a69c0e268f25d0" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/liberationfonts/liberation-fonts@2.1.5" } ], "comment": "Official release binaries. Liberation Sans is embedded as an open-licensed, Arial-compatible layout font. Individual font hashes are locked as evidence files. Locked archive size: 2385008 bytes." }, { "name": "stb_vorbis (vendored snapshot)", "SPDXID": "SPDXRef-Package-stb-vorbis-1.22-vendored", "versionInfo": "1.22-vendored", "downloadLocation": "git+https://github.com/nmnsnv/maplestory-wasm.git@bc0234fe7c7f53322453e7bdd79564d9aca4cd8b", "filesAnalyzed": false, "primaryPackagePurpose": "LIBRARY", "licenseConcluded": "MIT", "licenseDeclared": "MIT", "copyrightText": "NOASSERTION", "supplier": "Person: Sean Barrett", "comment": "The compiled stb_vorbis.c v1.22 snapshot is reproduced by the locked maplestory-wasm baseline. Its vendored license matches the official stb license; this distribution selects the MIT alternative." }, { "name": "Eclipse Temurin JDK", "SPDXID": "SPDXRef-Package-Temurin-JDK-21.0.12.8", "versionInfo": "21.0.12+8", "downloadLocation": "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12%2B8/OpenJDK21U-jdk_x64_windows_hotspot_21.0.12_8.zip", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "GPL-2.0-only WITH Classpath-exception-2.0", "licenseDeclared": "GPL-2.0-only WITH Classpath-exception-2.0", "copyrightText": "NOASSERTION", "packageFileName": "OpenJDK21U-jdk_x64_windows_hotspot_21.0.12_8.zip", "supplier": "Organization: Eclipse Adoptium", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9ba963ee2371874a74185d18bc7bb2ab9407df7683300855ed7606e0662321d0" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/eclipse-temurin@21.0.12%2B8?arch=x86_64\u0026os=windows\u0026type=jdk" } ], "comment": "Locked archive size: 205069442 bytes." }, { "name": "Eclipse Temurin JDK (Linux x86-64)", "SPDXID": "SPDXRef-Package-Temurin-JDK-21.0.12.8-Linux-x86-64", "versionInfo": "21.0.12+8", "downloadLocation": "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12%2B8/OpenJDK21U-jdk_x64_linux_hotspot_21.0.12_8.tar.gz", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "GPL-2.0-only WITH Classpath-exception-2.0", "licenseDeclared": "GPL-2.0-only WITH Classpath-exception-2.0", "copyrightText": "NOASSERTION", "packageFileName": "OpenJDK21U-jdk_x64_linux_hotspot_21.0.12_8.tar.gz", "supplier": "Organization: Eclipse Adoptium", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e4446ff06a276155697597cc0f1b15da004ff083f4964a35271ecee567177370" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/eclipse-temurin@21.0.12%2B8?arch=x86_64\u0026os=linux\u0026type=jdk" } ], "comment": "Locked archive size: 207486543 bytes." }, { "name": "Apache Maven Wrapper", "SPDXID": "SPDXRef-Package-Maven-Wrapper-3.3.2", "versionInfo": "3.3.2", "downloadLocation": "https://raw.githubusercontent.com/P0nk/Cosmic/fec53bc7714dc0f1ae3f50b2986cdf2727e0912a/mvnw.cmd", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "Apache-2.0", "licenseDeclared": "Apache-2.0", "copyrightText": "NOASSERTION", "packageFileName": "mvnw.cmd", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.maven.wrapper/maven-wrapper@3.3.2" } ] }, { "name": "Apache Maven", "SPDXID": "SPDXRef-Package-Apache-Maven-3.9.9", "versionInfo": "3.9.9", "downloadLocation": "https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip", "filesAnalyzed": false, "primaryPackagePurpose": "APPLICATION", "licenseConcluded": "Apache-2.0", "licenseDeclared": "Apache-2.0", "copyrightText": "NOASSERTION", "packageFileName": "apache-maven-3.9.9-bin.zip", "checksums": [ { "algorithm": "SHA512", "checksumValue": "8beac8d11ef208f1e2a8df0682b9448a9a363d2ad13ca74af43705549e72e74c9378823bf689287801cbbfc2f6ea9596201d19ccacfdfb682ee8a2ff4c4418ba" } ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.maven/apache-maven@3.9.9?classifier=bin\u0026type=zip" } ], "comment": "Locked archive size: 9202456 bytes." } ], "relationships": [ { "spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-maplestory-wasm", "relationshipType": "STATIC_LINK", "relatedSpdxElement": "SPDXRef-Package-zlib-1.3.1" }, { "spdxElementId": "SPDXRef-Package-maplestory-wasm", "relationshipType": "STATIC_LINK", "relatedSpdxElement": "SPDXRef-Package-FreeType-2.13.3" }, { "spdxElementId": "SPDXRef-Package-maplestory-wasm", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Package-Liberation-Fonts-2.1.5" }, { "spdxElementId": "SPDXRef-Package-maplestory-wasm", "relationshipType": "STATIC_LINK", "relatedSpdxElement": "SPDXRef-Package-stb-vorbis-1.22-vendored" }, { "spdxElementId": "SPDXRef-Package-Temurin-JDK-21.0.12.8", "relationshipType": "RUNTIME_DEPENDENCY_OF", "relatedSpdxElement": "SPDXRef-Package-Cosmic" }, { "spdxElementId": "SPDXRef-Package-Temurin-JDK-21.0.12.8-Linux-x86-64", "relationshipType": "RUNTIME_DEPENDENCY_OF", "relatedSpdxElement": "SPDXRef-Package-Cosmic" }, { "spdxElementId": "SPDXRef-Package-Maven-Wrapper-3.3.2", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-Cosmic" }, { "spdxElementId": "SPDXRef-Package-Apache-Maven-3.9.9", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-Cosmic" }, { "spdxElementId": "SPDXRef-Package-Cosmic", "relationshipType": "RUNTIME_DEPENDENCY_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-Emsdk", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-Emscripten-Windows-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-Emscripten-Linux-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-CMake-Windows-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-CMake-Linux-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-Ninja-Windows-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" }, { "spdxElementId": "SPDXRef-Package-Ninja-Linux-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-Package-maplestory-wasm" } ] }