{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "FilmBuddy-0.7.0-1",
  "documentNamespace": "https://filmbuddyapp.com/sbom/FilmBuddy-0.7.0-1/b9d3575f01585d51fbd85fbad75acfefeccde0ce1dd569fa7ea71c4581a69bc4",
  "creationInfo": {
    "created": "2026-07-11T00:33:20Z",
    "creators": [
      "Organization: Film Buddy LLC",
      "Tool: tools/create_release_sbom.sh"
    ]
  },
  "documentComment": "Final artifact-level inventory for FilmBuddy-0.7.0-1.dmg.",
  "packages": [
    {
      "name": "Film Buddy",
      "SPDXID": "SPDXRef-Package-FilmBuddy",
      "versionInfo": "0.7.0+1",
      "supplier": "Organization: Film Buddy LLC",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "LicenseRef-FilmBuddy-Proprietary",
      "licenseDeclared": "LicenseRef-FilmBuddy-Proprietary",
      "copyrightText": "Copyright Film Buddy LLC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0e5cb38b0ee1f7613e652ba9975838dedde842fce4dd6cb0caed3ccd8a593257"
        }
      ],
      "sourceInfo": "Film Buddy source commit 72beeadd91077cc4315deecb3cefdb08344a7cea",
      "primaryPackagePurpose": "APPLICATION"
    },
    {
      "name": "Film Buddy native core",
      "SPDXID": "SPDXRef-Package-NativeCore",
      "versionInfo": "0.7.0+1",
      "supplier": "Organization: Film Buddy LLC",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "LicenseRef-FilmBuddy-Proprietary",
      "licenseDeclared": "LicenseRef-FilmBuddy-Proprietary",
      "copyrightText": "Copyright Film Buddy LLC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0c54d30de5d9b6e3330897efe81f8f554bdaf2cb8575d1a4e235edbac2635514"
        }
      ],
      "packageComment": "Shipped at Contents/MacOS/filmbuddy-native-core."
    },
    {
      "name": "Film Buddy CIRAWFilter decoder",
      "SPDXID": "SPDXRef-Package-CIRAW",
      "versionInfo": "0.7.0+1",
      "supplier": "Organization: Film Buddy LLC",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "LicenseRef-FilmBuddy-Proprietary",
      "licenseDeclared": "LicenseRef-FilmBuddy-Proprietary",
      "copyrightText": "Copyright Film Buddy LLC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6f02465e248928160fb1a6af5496258f3e3dd0774ce0a944b56b84fc076f63d1"
        }
      ],
      "packageComment": "Shipped at Contents/MacOS/filmbuddy-raw-decode; uses Apple system frameworks."
    },
    {
      "name": "Film Buddy LibRaw decoder helper",
      "SPDXID": "SPDXRef-Package-GPLHelper",
      "versionInfo": "0.7.0+1",
      "supplier": "Organization: Film Buddy LLC",
      "downloadLocation": "https://vphhcuwgcyyznphtplov.supabase.co/storage/v1/object/public/open-source-releases/FilmBuddy/0.7.0/FilmBuddy-0.7.0-1-corresponding-source.tar.xz",
      "filesAnalyzed": false,
      "licenseConcluded": "GPL-3.0-or-later",
      "licenseDeclared": "GPL-3.0-or-later",
      "copyrightText": "Copyright Film Buddy LLC and contributors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fd4dee648d7d65d9e1fff3dfa72fa1b71fd2fae77aead1a3d0a0dd2f7a099b54"
        }
      ],
      "packageComment": "Standalone GPL helper at Contents/MacOS/filmbuddy-raw-decode-libraw."
    },
    {
      "name": "LibRaw",
      "SPDXID": "SPDXRef-Package-LibRaw",
      "versionInfo": "0.22.0-Release",
      "supplier": "Organization: LibRaw LLC and contributors",
      "downloadLocation": "https://github.com/LibRaw/LibRaw/commit/823f25dae9b86bf4504511ee42252ebc8d5513b1",
      "filesAnalyzed": false,
      "licenseConcluded": "LGPL-2.1-only",
      "licenseDeclared": "LGPL-2.1-only OR CDDL-1.0",
      "copyrightText": "Copyright LibRaw LLC and contributors",
      "sourceInfo": "Exact source commit 823f25dae9b86bf4504511ee42252ebc8d5513b1; no Film Buddy source modifications."
    },
    {
      "name": "librtprocess",
      "SPDXID": "SPDXRef-Package-librtprocess",
      "versionInfo": "git-9a858270acb2096e2e403d932760ee688fcac425",
      "supplier": "Organization: librtprocess contributors",
      "downloadLocation": "https://github.com/CarVac/librtprocess/commit/9a858270acb2096e2e403d932760ee688fcac425",
      "filesAnalyzed": false,
      "licenseConcluded": "GPL-3.0-or-later",
      "licenseDeclared": "GPL-3.0-or-later",
      "copyrightText": "Copyright librtprocess contributors",
      "sourceInfo": "Upstream commit plus Film Buddy one-line CMake minimum-version change."
    },
    {
      "name": "SLEEF embedded headers",
      "SPDXID": "SPDXRef-Package-SLEEF",
      "versionInfo": "librtprocess-9a858270acb2096e2e403d932760ee688fcac425",
      "supplier": "Organization: SLEEF Project",
      "downloadLocation": "https://github.com/CarVac/librtprocess/commit/9a858270acb2096e2e403d932760ee688fcac425",
      "filesAnalyzed": false,
      "licenseConcluded": "BSL-1.0",
      "licenseDeclared": "BSL-1.0",
      "copyrightText": "Copyright SLEEF Project, Naoki Shibata and contributors",
      "sourceInfo": "Embedded sleef.h and sleefsseavx.h from the pinned librtprocess commit."
    },
    {
      "name": "LLVM OpenMP runtime",
      "SPDXID": "SPDXRef-Package-libomp",
      "versionInfo": "22.1.8",
      "supplier": "Organization: LLVM Project",
      "downloadLocation": "https://github.com/llvm/llvm-project/releases/tag/llvmorg-22.1.8",
      "filesAnalyzed": false,
      "licenseConcluded": "Apache-2.0 WITH LLVM-exception",
      "licenseDeclared": "Apache-2.0 WITH LLVM-exception",
      "copyrightText": "Copyright LLVM Project contributors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "45a4afb1c565904c268966b7ee7251c7f5364879589fb32b25ad58a1be2c7550"
        }
      ],
      "sourceInfo": "Upstream source archive SHA-256 922f1817a0df7b1489272d18134ee0087a8b068828f87ac63b9861b1a9965888; no source modifications; install-name and signing packaging changes."
    },
    {
      "name": "Sony Camera Remote SDK",
      "SPDXID": "SPDXRef-Package-SonySDK",
      "versionInfo": "2.02.00",
      "supplier": "Organization: Sony Corporation",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "LicenseRef-Sony-Camera-Remote-SDK",
      "licenseDeclared": "LicenseRef-Sony-Camera-Remote-SDK",
      "copyrightText": "Copyright Sony Corporation",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "df33edc0f7a0d23dc2cc6ef449f0970003f33396b47714205436f6cf22055a57"
        }
      ],
      "packageComment": "Proprietary SDK binary libraries inseparably bundled in SonyCameraAgent.app under the Sony Camera Remote SDK License Agreement."
    },
    {
      "name": "libusb",
      "SPDXID": "SPDXRef-Package-libusb",
      "versionInfo": "1.0.26",
      "supplier": "Organization: libusb project",
      "downloadLocation": "https://vphhcuwgcyyznphtplov.supabase.co/storage/v1/object/public/open-source/sony-sdk-2.02.00/libusb.zip",
      "filesAnalyzed": false,
      "licenseConcluded": "LGPL-2.1-or-later",
      "licenseDeclared": "LGPL-2.1-or-later",
      "copyrightText": "Copyright libusb contributors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "26e61f2ebd0437be793a94a8073b80913cba5dc44abd053457f5d09bb7535530"
        }
      ]
    },
    {
      "name": "libssh2",
      "SPDXID": "SPDXRef-Package-libssh2",
      "versionInfo": "1.10.0",
      "supplier": "Organization: libssh2 project",
      "downloadLocation": "https://vphhcuwgcyyznphtplov.supabase.co/storage/v1/object/public/open-source/sony-sdk-2.02.00/libssh2.zip",
      "filesAnalyzed": false,
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "copyrightText": "Copyright libssh2 contributors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "871109117f9614c40537edc64f13a084bd6dce2ef7f2324039d0f3c47067c24d"
        }
      ]
    },
    {
      "name": "JetBrains Mono",
      "SPDXID": "SPDXRef-Package-JetBrainsMono",
      "versionInfo": "content-sha256-e6fd0d7e91550b3ed2b735d4312474362c4716edc4fc0577a0f61ed782d5aed1",
      "supplier": "Organization: JetBrains",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "OFL-1.1",
      "licenseDeclared": "OFL-1.1",
      "copyrightText": "Copyright The JetBrains Mono Project Authors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e6fd0d7e91550b3ed2b735d4312474362c4716edc4fc0577a0f61ed782d5aed1"
        }
      ]
    },
    {
      "name": "Space Grotesk",
      "SPDXID": "SPDXRef-Package-SpaceGrotesk",
      "versionInfo": "content-sha256-3183b7eb0b4241476360e2cd8e527868616cc16d3ce332c4376505989b772b44",
      "supplier": "Person: Florian Karsten and contributors",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "OFL-1.1",
      "licenseDeclared": "OFL-1.1",
      "copyrightText": "Copyright The Space Grotesk Project Authors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3183b7eb0b4241476360e2cd8e527868616cc16d3ce332c4376505989b772b44"
        }
      ]
    },
    {
      "name": "SQLite macOS system library",
      "SPDXID": "SPDXRef-Package-SQLite",
      "versionInfo": "Apple-libsqlite3-current-382.0.0",
      "supplier": "Organization: Apple Inc. and SQLite authors",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "blessing",
      "licenseDeclared": "blessing",
      "copyrightText": "Public domain",
      "packageComment": "Not bundled. FilmBuddy dynamically links /usr/lib/libsqlite3.dylib (compatibility 9.0.0, current 382.0.0 in the inspected SDK); the runtime implementation is supplied by macOS."
    }
  ],
  "files": [
    {
      "fileName": "FilmBuddy-0.7.0-1.dmg",
      "SPDXID": "SPDXRef-File-DMG",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b9d3575f01585d51fbd85fbad75acfefeccde0ce1dd569fa7ea71c4581a69bc4"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "copyrightText": "NOASSERTION"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-Package-FilmBuddy"
    },
    {
      "spdxElementId": "SPDXRef-File-DMG",
      "relationshipType": "GENERATED_FROM",
      "relatedSpdxElement": "SPDXRef-Package-FilmBuddy"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-NativeCore"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-CIRAW"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-GPLHelper"
    },
    {
      "spdxElementId": "SPDXRef-Package-GPLHelper",
      "relationshipType": "STATIC_LINK",
      "relatedSpdxElement": "SPDXRef-Package-LibRaw"
    },
    {
      "spdxElementId": "SPDXRef-Package-GPLHelper",
      "relationshipType": "STATIC_LINK",
      "relatedSpdxElement": "SPDXRef-Package-librtprocess"
    },
    {
      "spdxElementId": "SPDXRef-Package-librtprocess",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-SLEEF"
    },
    {
      "spdxElementId": "SPDXRef-Package-GPLHelper",
      "relationshipType": "DYNAMIC_LINK",
      "relatedSpdxElement": "SPDXRef-Package-libomp"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-SonySDK"
    },
    {
      "spdxElementId": "SPDXRef-Package-SonySDK",
      "relationshipType": "DYNAMIC_LINK",
      "relatedSpdxElement": "SPDXRef-Package-libusb"
    },
    {
      "spdxElementId": "SPDXRef-Package-SonySDK",
      "relationshipType": "DYNAMIC_LINK",
      "relatedSpdxElement": "SPDXRef-Package-libssh2"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-JetBrainsMono"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "CONTAINS",
      "relatedSpdxElement": "SPDXRef-Package-SpaceGrotesk"
    },
    {
      "spdxElementId": "SPDXRef-Package-FilmBuddy",
      "relationshipType": "DYNAMIC_LINK",
      "relatedSpdxElement": "SPDXRef-Package-SQLite"
    }
  ],
  "hasExtractedLicensingInfos": [
    {
      "licenseId": "LicenseRef-FilmBuddy-Proprietary",
      "extractedText": "Proprietary Film Buddy software. Third-party components remain governed by their respective licenses.",
      "name": "Film Buddy proprietary license"
    },
    {
      "licenseId": "LicenseRef-Sony-Camera-Remote-SDK",
      "extractedText": "Proprietary binary redistribution governed by the Sony Camera Remote SDK License Agreement at https://support.d-imaging.sony.co.jp/app/sdk/licenseagreement_d/en-US.html",
      "name": "Sony Camera Remote SDK License Agreement"
    }
  ]
}