{
  "bomFormat": "CycloneDX-Index",
  "specVersion": "1.5",
  "generatedAt": "2026-05-22T09:13:40.056Z",
  "signed": false,
  "signingStatus": "unsigned-pre-launch — minisign signing bootstraps at first official release (T-SEC-08b)",
  "artifacts": [
    {
      "platform": "mobile",
      "title": "Tacita mobile (Flutter / Dart)",
      "source": "Tacita/pubspec.lock",
      "filename": "tacita-mobile.cdx.json",
      "sha256": "663364daeadf7deadc210f9ffd89dd75abdd9e71712718daaf1937c608d0f9f5",
      "bytes": 124652,
      "components": 272
    },
    {
      "platform": "desktop",
      "title": "Tacita desktop (Rust / Cargo)",
      "source": "tacita-desktop/Cargo.lock",
      "filename": "tacita-desktop.cdx.json",
      "sha256": "4bca243e64821fa557d122e950fe7057ad5421c49a4f6a6fa064c3d688d7cf94",
      "bytes": 288289,
      "components": 592
    },
    {
      "platform": "desktop-ui",
      "title": "Tacita desktop UI (Svelte / npm)",
      "source": "tacita-desktop/frontend/package-lock.json",
      "filename": "tacita-desktop-ui.cdx.json",
      "sha256": "c9954a229396dd4706483fb48a92e5e8edc6616a74bdf0e8a25e8534c6e697fc",
      "bytes": 143661,
      "components": 207
    },
    {
      "platform": "web",
      "title": "Tacita website (Astro / npm)",
      "source": "tacita-web/package-lock.json",
      "filename": "tacita-web.cdx.json",
      "sha256": "2d148ab45c22469b6a6651d0c486194f2b1faa05e2dbae45ac7e82d346e44646",
      "bytes": 293765,
      "components": 422
    }
  ]
}