{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "sanbao-api-new-api-v1.0.0-rc.22",
  "documentNamespace": "https://sanbaobeauty.com/spdx/sanbao-api/new-api/v1.0.0-rc.22/2026-07-27",
  "creationInfo": {
    "created": "2026-07-27T09:30:00Z",
    "creators": [
      "Tool: Codex deployment audit"
    ],
    "licenseListVersion": "3.26"
  },
  "packages": [
    {
      "name": "new-api",
      "SPDXID": "SPDXRef-Package-NewAPI",
      "versionInfo": "v1.0.0-rc.22",
      "downloadLocation": "https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.22",
      "filesAnalyzed": false,
      "licenseConcluded": "AGPL-3.0-only",
      "licenseDeclared": "AGPL-3.0-only",
      "copyrightText": "Copyright (c) QuantumNous and contributors.",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8f13b54aeff027d8c5260d8309b681ae699538d00a414af43855d85574f297a8"
        }
      ],
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:github/QuantumNous/new-api@bc14c18f6024e79cba1c08d02cd007796e12d668"
        }
      ],
      "comment": "Component-level SBOM. Exact Go and frontend dependency inventories and license notices are preserved in go.mod, go.sum, web/package.json, web/bun.lock, and THIRD-PARTY-LICENSES.md."
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-Package-NewAPI"
    }
  ]
}