Another Mood SBOM

The software bill of materials of another-mood — every package it installs at runtime, with licenses and the dependency graph between them. The data is a CycloneDX SBOM from a generator, lightly reshaped with jq; every page here is derived from it by views. How the data was made walks through the steps.

Components

Direct dependencies

Required by another-mood itself.

Component Version License
MarkupSafe 3.0.3 BSD-3-Clause
PyYAML 6.0.3 MIT
filelock 4.0.3 MIT
hugo 0.166.0 Apache-2.0
markdown-it-py 4.2.0 MIT
mcp 2.2.0 MIT
minijinja 2.24.0 License :: OSI Approved :: Apache Software License
packaging 26.3 Apache-2.0 OR BSD-2-Clause
pydantic-settings 2.15.0 MIT
regex 2026.9.10 Apache-2.0 AND CNRI-Python
ruamel.yaml 0.19.1 MIT
typer 0.27.2 MIT
watchdog 6.0.0 Apache-2.0, License :: OSI Approved :: Apache Software License

Transitive dependencies

Pulled in by other components.

Component Version License
PyJWT 2.15.0 MIT
Pygments 2.21.0 BSD-2-Clause
annotated-doc 0.0.5 MIT
annotated-types 0.8.0 MIT
anyio 4.15.1 MIT
attrs 26.1.0 MIT
cffi 2.1.1 MIT-0
click 8.5.0 BSD-3-Clause
cryptography 50.0.1 Apache-2.0 OR BSD-3-Clause
h11 0.16.0 MIT
httpcore2 2.13.1 BSD-3-Clause
httpx2 2.13.1 BSD-3-Clause
idna 3.20 BSD-3-Clause
jsonschema 4.26.0 MIT
jsonschema-specifications 2025.9.1 MIT
mcp-types 2.2.0 MIT
mdurl 0.1.2 MIT
opentelemetry-api 1.45.0 Apache-2.0
pycparser 3.0 BSD-3-Clause
pydantic 2.13.5 MIT
pydantic_core 2.46.5 MIT
python-dotenv 1.2.3 BSD-3-Clause
python-multipart 0.0.32 Apache-2.0
referencing 0.37.0 MIT
rich 15.0.0 MIT
rpds-py 2026.6.3 MIT
shellingham 1.5.4 ISC
sse-starlette 3.4.11 BSD-3-Clause
starlette 1.7.0 BSD-3-Clause
truststore 0.10.4 MIT
typing-inspection 0.4.4 MIT
typing_extensions 4.16.0 PSF-2.0
uvicorn 0.54.0 BSD-3-Clause

Licenses

By SPDX identifier

pie showData
  "BSD-3-Clause" : 10
  "MIT" : 24
  "BSD-2-Clause" : 1
  "MIT-0" : 1
  "Apache-2.0" : 4
  "ISC" : 1
  "PSF-2.0" : 1
License Components
BSD-3-Clause MarkupSafe, click, httpcore2, httpx2, idna, pycparser, python-dotenv, sse-starlette, starlette, uvicorn
MIT PyJWT, PyYAML, annotated-doc, annotated-types, anyio, attrs, filelock, h11, jsonschema, jsonschema-specifications, markdown-it-py, mcp, mcp-types, mdurl, pydantic, pydantic-settings, pydantic_core, referencing, rich, rpds-py, ruamel.yaml, truststore, typer, typing-inspection
BSD-2-Clause Pygments
MIT-0 cffi
Apache-2.0 hugo, opentelemetry-api, python-multipart, watchdog
ISC shellingham
PSF-2.0 typing_extensions

Other declarations

Licenses declared without an SPDX identifier: a free-form name, or an SPDX expression combining several licenses.

Component Declared as License
cryptography expression Apache-2.0 OR BSD-3-Clause
minijinja name License :: OSI Approved :: Apache Software License
packaging expression Apache-2.0 OR BSD-2-Clause
regex expression Apache-2.0 AND CNRI-Python
watchdog name License :: OSI Approved :: Apache Software License