{"evidence":{"claim_boundary":["This is a component/license inventory tied to the exact lock, not legal advice or license approval.","Review obligations, notices and customer policy before production distribution.","This does not establish vulnerability absence, artifact provenance or production approval."],"evidence_id":"RUNTIME_LICENSE_INVENTORY_20260829","generated_at_utc":"2026-08-29T07:42:31.387438+00:00","inventory_packages":43,"licenses":[{"License":"MIT License","Name":"blinker","URL":"https://github.com/pallets-eco/blinker/","Version":"1.9.0"},{"License":"Apache-2.0","Name":"boto3","URL":"https://github.com/boto/boto3","Version":"1.43.83"},{"License":"Apache-2.0","Name":"botocore","URL":"https://github.com/boto/botocore","Version":"1.43.83"},{"License":"Mozilla Public License 2.0 (MPL 2.0)","Name":"certifi","URL":"https://github.com/certifi/python-certifi","Version":"2026.7.22"},{"License":"MIT-0","Name":"cffi","URL":"https://cffi.readthedocs.io/en/latest/whatsnew.html","Version":"2.1.1"},{"License":"MIT","Name":"charset-normalizer","URL":"https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md","Version":"3.5.1"},{"License":"BSD-3-Clause","Name":"click","URL":"https://github.com/pallets/click/","Version":"8.5.0"},{"License":"BSD License","Name":"colorama","URL":"https://github.com/tartley/colorama","Version":"0.4.6"},{"License":"Apache-2.0 OR BSD-3-Clause","Name":"cryptography","URL":"https://github.com/pyca/cryptography","Version":"50.0.1"},{"License":"MIT License","Name":"Deprecated","URL":"https://github.com/laurent-laporte-pro/deprecated","Version":"1.3.1"},{"License":"BSD-3-Clause","Name":"Flask","URL":"https://github.com/pallets/flask/","Version":"3.1.3"},{"License":"MIT","Name":"Flask-Limiter","URL":"https://flask-limiter.readthedocs.org","Version":"4.1.1"},{"License":"BSD License","Name":"Flask-WTF","URL":"https://flask-wtf.readthedocs.io/","Version":"1.3.0"},{"License":"MIT","Name":"gunicorn","URL":"https://gunicorn.org","Version":"26.2.0"},{"License":"BSD-3-Clause","Name":"idna","URL":"https://github.com/kjd/idna","Version":"3.19"},{"License":"MIT","Name":"iniconfig","URL":"https://github.com/pytest-dev/iniconfig","Version":"2.3.0"},{"License":"BSD License","Name":"itsdangerous","URL":"https://github.com/pallets/itsdangerous/","Version":"2.2.0"},{"License":"BSD License","Name":"Jinja2","URL":"https://github.com/pallets/jinja/","Version":"3.1.6"},{"License":"MIT License","Name":"jmespath","URL":"https://github.com/jmespath/jmespath.py","Version":"1.1.0"},{"License":"MIT","Name":"limits","URL":"https://limits.readthedocs.org","Version":"5.8.0"},{"License":"BSD-3-Clause","Name":"Markdown","URL":"https://Python-Markdown.github.io/","Version":"3.10.3"},{"License":"BSD-3-Clause","Name":"MarkupSafe","URL":"https://github.com/pallets/markupsafe/","Version":"3.0.3"},{"License":"MIT License","Name":"ordered-set","URL":"UNKNOWN","Version":"4.1.0"},{"License":"Apache-2.0 OR BSD-2-Clause","Name":"packaging","URL":"https://github.com/pypa/packaging","Version":"26.3"},{"License":"MIT-CMU","Name":"pillow","URL":"https://python-pillow.github.io","Version":"12.3.0"},{"License":"MIT License","Name":"pluggy","URL":"UNKNOWN","Version":"1.6.0"},{"License":"GNU Library or Lesser General Public License (LGPL)","Name":"psycopg2-binary","URL":"https://psycopg.org/","Version":"2.9.12"},{"License":"BSD-3-Clause","Name":"pycparser","URL":"https://github.com/eliben/pycparser","Version":"3.0"},{"License":"BSD-2-Clause","Name":"Pygments","URL":"https://pygments.org","Version":"2.21.0"},{"License":"MIT","Name":"pytest","URL":"https://docs.pytest.org/en/latest/","Version":"9.1.1"},{"License":"Apache Software License; BSD License","Name":"python-dateutil","URL":"https://github.com/dateutil/dateutil","Version":"2.9.0.post0"},{"License":"BSD-3-Clause","Name":"python-dotenv","URL":"https://github.com/theskumar/python-dotenv","Version":"1.2.3"},{"License":"MIT License","Name":"PyYAML","URL":"https://pyyaml.org/","Version":"6.0.3"},{"License":"Apache Software License","Name":"requests","URL":"https://github.com/psf/requests","Version":"2.34.2"},{"License":"Apache Software License","Name":"s3transfer","URL":"https://github.com/boto/s3transfer","Version":"0.19.2"},{"License":"MIT","Name":"sentry-sdk","URL":"https://github.com/getsentry/sentry-python","Version":"2.68.1"},{"License":"MIT License","Name":"six","URL":"https://github.com/benjaminp/six","Version":"1.17.0"},{"License":"MIT License","Name":"stripe","URL":"https://stripe.com/","Version":"15.6.0"},{"License":"PSF-2.0","Name":"typing_extensions","URL":"https://github.com/python/typing_extensions","Version":"4.16.0"},{"License":"MIT","Name":"urllib3","URL":"https://github.com/urllib3/urllib3/blob/main/CHANGES.rst","Version":"2.7.0"},{"License":"BSD-3-Clause","Name":"Werkzeug","URL":"https://github.com/pallets/werkzeug/","Version":"3.1.8"},{"License":"BSD-2-Clause","Name":"wrapt","URL":"https://github.com/GrahamDumpleton/wrapt","Version":"2.3.0"},{"License":"BSD License","Name":"WTForms","URL":"https://wtforms.readthedocs.io","Version":"3.2.2"}],"lock_sha256":"74352a806768af7a9a07c43aad6e77cf21e588bec79bc51a3373154f0bf898fa","locked_packages":43,"missing_packages":[],"review_status":"PENDING_LEGAL_AND_PROCUREMENT_APPROVAL","scanner":"pip-licenses 5.5.5","status":"PASS_LICENSE_INVENTORY_COMPLETE","unknown_license_packages":[],"verification_state":"LOCK_BOUND_LICENSE_INVENTORY"},"limitations":["This is a component/license inventory tied to the exact lock, not legal advice or license approval.","Review obligations, notices and customer policy before production distribution.","This does not establish vulnerability absence, artifact provenance or production approval."],"pack_type":"EcoKure runtime license inventory EvidencePack","verification_state":"LOCK_BOUND_LICENSE_INVENTORY"}
