{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:db124323-6ce9-40d0-b5b1-f02968c2e6ea",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-29T18:10:50Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "bt",
      "group": "@braintrust",
      "version": "0.28.1",
      "description": "The Braintrust command line interface",
      "purl": "pkg:npm/%40braintrust/bt@0.28.1",
      "bom-ref": "pkg:npm/@braintrust/bt@0.28.1",
      "author": "Braintrust engineering <eng@braintrust.dev>",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "bt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:lifecycleNetworkIndicators",
          "value": "ast:network-module-import, ast:network-request"
        },
        {
          "name": "cdx:npm:lifecycleIndicatorMap",
          "value": "postinstall:ast:network-module-import+ast:network-request"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/braintrustdata/bt"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/braintrustdata/bt.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@braintrust"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "group": "@braintrust",
      "name": "bt-darwin-arm64",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "daa08dc4c603d2f92f9be2ce8adb9f29d311428e787bc6c31e137093fdad3764842abf857493f3c5e11810901df1ec24ce98dbd4adac561b515abf7e0d3954f4"
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-darwin-arm64@0.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-darwin-arm64@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@braintrust",
      "name": "bt-darwin-x64",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b4a9142206a12e1c9d599c961837fbcc97dd7c6ad90daac883ba664487a1fc915a1820f2a18169234a252cf0e9d8d4153e6bbd9084e58526e4579e28b1f352cc"
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-darwin-x64@0.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-darwin-x64@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@braintrust",
      "name": "bt-linux-arm64",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08b4cd12b9f76fed8096f7f708e95827add198fd832583eb1ab1f7ad401e8a0a51e3f8414aec3e8483d886856d5782fdfc3fa67c2502f2cffaa166161d57e3ae"
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-linux-arm64@0.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-linux-arm64@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "glibc"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@braintrust",
      "name": "bt-linux-x64-musl",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ddc5f153baaefcb75f9834c3e228660c7336e1bf3463feab1dcf10f09d62441fac42e63af85e7f5c621f38157044944c59c4dab05ab4832583969d852126c71"
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-linux-x64-musl@0.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-linux-x64-musl@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "musl"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Braintrust engineering <eng@braintrust.dev>"
        }
      ],
      "group": "@braintrust",
      "name": "bt-linux-x64",
      "version": "0.28.1",
      "description": "Prebuilt bt binary for linux-x64-glibc",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40d067ec1ed71161b6f3748b6d5a3e93d8d1d968d2ffe64b3255c218cf6f348600ceae2313f1fc69244720ff4e6bc7f09ea0dbf5ff33a622b328eeb6cf66e9cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-linux-x64@0.28.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/braintrustdata/bt"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/braintrustdata/bt.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-linux-x64@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "glibc"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "group": "@braintrust",
      "name": "bt-win32-arm64",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7afec51ccd8e3f4bd762f097c7274c5f6d1dc12796ed20fec18b0800156de673e826964f1a8ff4f3215ee455300743469f22a2436efc665c9f96b4899dd4748b"
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-win32-arm64@0.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-win32-arm64@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@braintrust",
      "name": "bt-win32-x64",
      "version": "0.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28bee708a23e5d806783b54b170cfc37497439be0e0d87cde750d3fa434b18247734a4fad585e39bd362c3f3d338a9da80b483c7ca14644ede6ae56ccd68abd2"
        }
      ],
      "purl": "pkg:npm/%40braintrust/bt-win32-x64@0.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@braintrust/bt-win32-x64@0.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@braintrust/bt@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-darwin-arm64@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-darwin-x64@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-linux-arm64@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-linux-x64-musl@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-linux-x64@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-win32-arm64@0.28.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@braintrust/bt-win32-x64@0.28.1",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@braintrust/bt@0.28.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-29T18:10:50Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bt' with version '0.28.1'. The package type in this SBOM is npm with a single purl namespace '@braintrust' described under components. The components were identified from the source files: pnpm-lock.yaml."
    }
  ]
}