====== ORIGIN 2025 SBOM ====== === see SUP-3619 === SBOM.txt is a Software Bill of Materials (SBOM) === It contains the version info for each third party component in Origin. === === SBOM.txt is so we and customers can check if Origin contains any software that may have a security issue. === === When we release Origin we will rename SBOM.txt to say SBOM.txt and put it on our website, and/or install it. === === Whenever a third party component in Origin is changed we should update this file. === You can email the change to me at david@originlab.com, or update the file yourself. === === (SBOM.txt is separate from ThirdPartyCopmponents.txt in the Support2 git, which is more readable and contains copyright information. === If there is a change to SBOM.txt, then there probably is a change needed to ThirdPartyComponents.txt also.) ==================== SPDXVersion: SPDX-2.3 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: Origin 2024 Sr1 SBOM DocumentNamespace: https://www.originlab.com/sbom Creator: Organization: OriginLab (david@originlab.com) Created: 2024-01-30T18:00:00Z PackageName: Origin Software 2025 SPDXID: SPDXRef-Package-OriginSoftware2025 PackageVersion: 101.1.5.xyz PackageSupplier: Organization: Originlab Corporation PackageDownloadLocation: https://www.originlab.com FilesAnalyzed: false Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-OriginSoftware2025 PackageName: Orglab Lmgrd License Server SPDXID: SPDXRef-Package-Orglab-Lmgrd-License-Server PackageVersion: 11.19.4.1 PackageSupplier: Organization: Revenera Software FilesAnalyzed: false PackageDownloadLocation: https://www.originlab.com/doc/License/Concurrent-Windows Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXID: SPDXRef-Package-Orglab-Lmgrd-License-Server PackageName: Revenera Software Licensing SPDXID: SPDXRef-Package-Revenera-Software-Licensing PackageVersion: 11.13.1.3 PackageSupplier: Organization: Revenera Software FilesAnalyzed: false PackageDownloadLocation: https://www.revenera.com/software-monetization/products/software-licensing Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Revenera-Software-Licensing PackageName: NAG Library SPDXID: SPDXRef-Package-NAG_Library PackageVersion: 26.0.0.0 PackageSupplier: Organization: Numerical Algorithms Group FilesAnalyzed: false PackageDownloadLocation: https://nag.com/nag-library/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-NAG_Library PackageName: LEADTOOLS SPDXID: SPDXRef-Package-LEADTOOLS PackageVersion: 17.0.0.0 PackageSupplier: Organization: LeadTools FilesAnalyzed: false PackageDownloadLocation: https://www.leadtools.com/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-LEADTOOLS PackageName: NationalInstruments TDMS SPDXID: SPDXRef-Package-NI-TDMS PackageVersion: 17.0.1.6860 PackageSupplier: Organization: National Instruments (Emerson) FilesAnalyzed: false PackageDownloadLocation: https://www.ni.com/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-NI-TDMS PackageName: Thermo Scientific GRAMS Suite SPDXID: SPDXRef-Package-Thermo-Scientific-GRAMS-Suite PackageVersion: GRAMS Suite 9.0.0.0 (but file version is GSpcIOLib.dll 9.0.6.0) PackageSupplier: Organization: Thermo Scientific GRAMS Suite FilesAnalyzed: false PackageDownloadLocation: https://www.gramssuite.com/downloads/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Thermo-Scientific-GRAMS-Suite PackageName: OpenGL SPDXID: SPDXRef-Package-OpenGL PackageVersion: 4.6.0.0 PackageSupplier: Organization: Khronos Group FilesAnalyzed: false PackageDownloadLocation: https://www.opengl.org/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-OpenGL PackageName: GLEW (OpenGL Extension Wrangler Library) SPDXID: SPDXRef-Package-GLEW PackageVersion: 2.2.0.0 PackageSupplier: Individual: Milan Ikits, Marcelo Magallon, Nigel Stewart FilesAnalyzed: false PackageDownloadLocation: https://github.com/nigels-com/glew/releases/tag/glew-2.2.0 Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-GLEW PackageName: Scintilla Editor SPDXID: SPDXRef-Package-Scintilla-Editor PackageVersion: 5.4.0.0 PackageSupplier: Organization: Scintilla FilesAnalyzed: false PackageDownloadLocation: https://www.scintilla.org/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Scintilla-Editor PackageName: Python Software 3.11 SPDXID: SPDXRef-Package-Python-Software PackageVersion: 3.11 PackageSupplier: Organization: Python Software Foundation FilesAnalyzed: false PackageDownloadLocation: https://www.python.org/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Python-Software PackageName: OpenCV (Open Source Computer Vision Library) SPDXID: SPDXRef-Package-OpenCV PackageVersion: 4.8.0.0 PackageSupplier: Organization: Open Source Computer Vision Library (OpenCV) FilesAnalyzed: false PackageDownloadLocation: https://opencv.org/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-OpenCV PackageName: CrashRPT SPDXID: SPDXRef-Package-CrashRpt PackageVersion: 1.4.2 PackageSupplier: Organization: CrashRPT FilesAnalyzed: false PackageDownloadLocation: https://crashrpt.sourceforge.net/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-CrashRpt PackageName: MATLAB MAT file I/O library (MATIO-2019) SPDXID: SPDXRef-Package-MATLAB-MATIO PackageVersion: 1.5.26.0 PackageSupplier: Individual: https://github.com/tbeu FilesAnalyzed: false PackageDownloadLocation: https://github.com/tbeu/matio Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-MATLAB-MATIO PackageName: MathJax SPDXID: SPDXRef-Package-MathJax PackageVersion: Revision 95612702 PackageSupplier: Organization: The MathJax Consortium FilesAnalyzed: false PackageDownloadLocation: https://www.mathjax.org/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-MathJax PackageName: Markedjs SPDXID: SPDXRef-Package-Markedjs PackageVersion: 5.0.2 PackageSupplier: Individual: Christopher Jeffrey FilesAnalyzed: false PackageDownloadLocation: https://github.com/markedjs/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Markedjs PackageName: Bootstrap SPDXID: SPDXRef-Package-Bootstrap PackageVersion: 5.3.1 PackageSupplier: Organization: The Bootstrap Authors FilesAnalyzed: false PackageDownloadLocation: https://getbootstrap.com/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Bootstrap PackageName: Somat SIE SPDXID: SPDXRef-Package-HBK-Somat-SIE PackageVersion: 1.1.6 (1.0.0 2024) PackageSupplier: Organization: Hottinger Brüel & Kjaer (HBK) FilesAnalyzed: false PackageDownloadLocation: https://www.hbkworld.com/en/services-support/support/support-hbm/downloads/downloads-software/support-software-firmware-somat-edaq-edaqlite-edaqxr/somat-download-archive Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-HBK-Somat-SIE PackageName: FAMOS SPDXID: SPDXRef-Package-FAMOS PackageVersion: 7.4.0.0 PackageSupplier: Organization: https://www.imc-tm.com/ FilesAnalyzed: false PackageDownloadLocation: https://www.imc-tm.com/products/measurement-software/imc-famos Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-FAMOS PackageName: wxWidgets Library SPDXID: SPDXRef-Package-wxWidgets-Library PackageVersion: 2.8.10.0 PackageSupplier: Organization: wxWidgets.org FilesAnalyzed: false PackageDownloadLocation: https://wxwidgets.org/downloads/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-wxWidgets-Library PackageName: IBM Software Development Kits and I/O Modules for SPSS Statistics SPDXID: SPDXRef-Package-IBM-IO-SPSS-STATISTICS PackageVersion: 28.0.1 PackageSupplier: Organization: IBM FilesAnalyzed: false PackageDownloadLocation: https://community.ibm.com/community/user/ai-datascience/viewdocument/extensions-tools-and-utilities-for/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-IBM-IO-SPSS-STATISTICS PackageName: CxImage SPDXID: SPDXRef-Package-CxImage PackageVersion: 7.0.2.0 PackageSupplier: Individual: Davide Pizzolato FilesAnalyzed: false PackageDownloadLocation: https://github.com/minnyres/cximage/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-CxImage PackageName: Qhull SPDXID: SPDXRef-Package-Qhull PackageVersion: 8.0.5 PackageSupplier: Organization: Qhull.org FilesAnalyzed: false PackageDownloadLocation: http://www.qhull.org/download/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Qhull PackageName: ShowdownJS SPDXID: SPDXRef-Package-ShowdownJS PackageVersion: 1.9.0 PackageSupplier: Organization: ShowdownJS FilesAnalyzed: false PackageDownloadLocation: https://showdownjs.com/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-ShowdownJS PackageName: jQuery SPDXID: SPDXRef-Package-jQuery PackageVersion: 1.9.0 PackageSupplier: Organization: OpenJS FilesAnalyzed: false PackageDownloadLocation: https://openjsf.org/projects Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-jQuery PackageName: HDF5 SPDXID: SPDXRef-Package-HDF5 PackageVersion: 1.14.3.0 PackageSupplier: Organization: The HDF Group FilesAnalyzed: false PackageDownloadLocation: https://www.hdfgroup.org/solutions/hdf5/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-HDF5 PackageName: Chinook Database SPDXID: SPDXRef-Package-Chinook-Database PackageVersion: 1.4.0.0 PackageSupplier: Individual: Luis Rocha FilesAnalyzed: false PackageDownloadLocation: https://github.com/lerocha/chinook-database/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Chinook-Database PackageName: Chromium Embedded Framework (CEF) SPDXID: SPDXRef-Package-Chromium-Embedded-Framework PackageVersion: 109.1.18.0 PackageSupplier: Individual: Marshall A. Greenblatt FilesAnalyzed: false PackageDownloadLocation: https://github.com/chromiumembedded/cef Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-Chromium-Embedded-Framework PackageName: PROJ SPDXID: SPDXRef-Package-OSGeo-PROJ PackageVersion: 9.0.0 PackageSupplier: Organization: Open Source Geospatial Foundation FilesAnalyzed: false PackageDownloadLocation: https://proj.org/en/9.0/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINS SPDXRef-Package-OSGeo-PROJ PackageName: CDF (NASA Space Physics Data Facility CDF Software) SPDXID: SPDXRef-Package-NASA-SPDF-CDF PackageVersion: 3.9.0.0 PackageSupplier: Organization: NASA Space Physics Data Facility FilesAnalyzed: false PackageDownloadLocation: https://cdf.gsfc.nasa.gov/html/sw_and_docs.html Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINSSPDXID: SPDXRef-Package-NASA-SPDF-CDF PackageName: NetCDF (NSF Unidata Network Common Data Form NetCDF Software) SPDXID: SPDXRef-Package-NSF-Unidata-NetCDF PackageVersion: 4.9.2.0 PackageSupplier: Organization: NSF Unidata FilesAnalyzed: false PackageDownloadLocation: https://www.unidata.ucar.edu/software/netcdf/ Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINSSPDXID: SPDXRef-Package-NSF-Unidata-NetCDF PackageName: Axon pClamp ABF SPDXID: SPDXRef-Package-pClamp-ABF PackageVersion: 2.1.0.9 PackageSupplier: Organization: MolecularDevices (Axon) FilesAnalyzed: false PackageDownloadLocation: https://www.moleculardevices.com/products/axon-patch-clamp-system Relationship: SPDXRef-Package-OriginSoftware2025 CONTAINSSPDXID: SPDXRef-Package-pClamp-ABF