{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:7f40c9ff-91bb-5118-bc20-238dcae54c0f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-31T22:33:18+00:00",
    "lifecycles": [
      {
        "phase": "build"
      }
    ],
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "javac",
          "version": "17.0.18"
        },
        {
          "type": "application",
          "name": "d8 (Android build-tools 34.0.0)",
          "version": "8.2.2-dev"
        },
        {
          "type": "application",
          "name": "apksigner",
          "version": "0.9"
        },
        {
          "type": "application",
          "name": "android.jar (platforms/android-34)",
          "version": "API 34"
        },
        {
          "type": "application",
          "name": "zip (Info-ZIP)",
          "version": "3.0"
        },
        {
          "type": "application",
          "name": "python3",
          "version": "3.11.2"
        },
        {
          "type": "application",
          "name": "tools/make-sbom.py",
          "version": "8a01b331"
        }
      ]
    },
    "supplier": {
      "name": "Atendu, Inh. Rico Kirsten",
      "url": [
        "https://atendu.eu"
      ],
      "contact": [
        {
          "email": "security@atendu.eu"
        }
      ]
    },
    "manufacture": {
      "name": "Atendu, Inh. Rico Kirsten",
      "url": [
        "https://atendu.eu"
      ],
      "contact": [
        {
          "email": "security@atendu.eu"
        }
      ]
    },
    "component": {
      "bom-ref": "app:com.atendu.launcher@6.33+101",
      "type": "application",
      "name": "Atendu Launcher (com.atendu.launcher)",
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Kiosk- und Aufruf-Software des Atendu Mini: Android-App mit eingebettetem HTTP-Server (Port 3000), WebView-Kiosk und gebuendelten Web-Frontends.",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b97431c234ee44597fefeeee1a1cc50f11145de050038a536b8d0a0bc4504b8d"
        }
      ],
      "properties": [
        {
          "name": "atendu:versionCode",
          "value": "101"
        },
        {
          "name": "atendu:git-commit",
          "value": "8a01b331"
        },
        {
          "name": "atendu:git-worktree-dirty",
          "value": "false"
        },
        {
          "name": "atendu:apk-file",
          "value": "build/atendu-launcher.apk"
        },
        {
          "name": "atendu:signing-cert-sha256",
          "value": "55f9f80bd80ac39d86458e43e8e892a0ae4de37445e27701a294bfd88aaf08ec"
        }
      ]
    }
  },
  "components": [
    {
      "bom-ref": "file:AndroidManifest.xml",
      "type": "file",
      "name": "AndroidManifest.xml",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c3836d6600989069db997b33a76b3424758dbc185823727b147a5f53e725add4"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "4824"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Binaeres Manifest/Ressourcen (launcher/base, Version per build.sh gestempelt)."
    },
    {
      "bom-ref": "file:assets/LICENSES.txt",
      "type": "file",
      "name": "assets/LICENSES.txt",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7f144b18bd2deb13d43820adc133bbdbfa5c90e4c0e0a8cd9e1e16ffdfaff02e"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "3698"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/control.html",
      "type": "file",
      "name": "assets/control.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "d53e8b1dec118ea3908e56c982e54f477425d5d6952472ec54003d25beb4ce29"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "38984"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/display.html",
      "type": "file",
      "name": "assets/display.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ac5d68a8c3a53a06c43ebc6668c99971e0a126673504a5e23de905c0006e8f62"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "56955"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/logo-dark.png",
      "type": "file",
      "name": "assets/logo-dark.png",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f53d803f6b63aa5de5cdcaa455b680ecd20c94c0cdbd67ab2a9005d98f5da979"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "74544"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/logo-light.png",
      "type": "file",
      "name": "assets/logo-light.png",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b837a0de14371d50b299d14883bfadbac6ca72ddbc86f76d7f00441272695dfa"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "64190"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/mirror.html",
      "type": "file",
      "name": "assets/mirror.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "ae3595e4c4e44ddba7d1c787be9a184d8ac266e932f3d361c18b27f96043d272"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "36509"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/offline.html",
      "type": "file",
      "name": "assets/offline.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e589541bf704e8f52beb67693af201676d431c849c32d573d5badb030756fc09"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "10815"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/pair.html",
      "type": "file",
      "name": "assets/pair.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "cc06ad75a49598d1d46cb7570f814e1fce3fab7817e245ca731aeb1e185c120b"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "49706"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/roboto-latin.woff2",
      "type": "file",
      "name": "assets/roboto-latin.woff2",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "43136"
        },
        {
          "name": "atendu:origin",
          "value": "third-party"
        }
      ],
      "version": "unversioned subset",
      "supplier": {
        "name": "Google (Christian Robertson)"
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://github.com/googlefonts/roboto"
        }
      ],
      "description": "Roboto (latin subset, woff2)"
    },
    {
      "bom-ref": "file:assets/settings.html",
      "type": "file",
      "name": "assets/settings.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "3c5aff93d0748c99f45c4e4faa636cb75e53997ce1239aef5e202f5364ee092e"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "178007"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/setup.html",
      "type": "file",
      "name": "assets/setup.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "25e337f73d6f05852c3c4bd8858fd78dbbc12fad4504c0f5a5262d400fcd1824"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "106585"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:classes.dex",
      "type": "file",
      "name": "classes.dex",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "631a37d569ca8e73d39a7c044e21952265a4f9604fbdcfac641967ff314cc86b"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "210260"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Kompilierter Atendu-Java-Code (launcher/src/com/atendu/launcher/*.java: AtenduServer, BootReceiver, ClockSync, DiscoveryService, EventLog, FileLogger, MainActivity, MirrorState, WifiSetupManager); keine Fremdbibliotheken, nur Android-SDK-APIs (android.jar, API 34)."
    },
    {
      "bom-ref": "file:res/xml/network_security_config.xml",
      "type": "file",
      "name": "res/xml/network_security_config.xml",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e130d8da1c72fb8813ba2db3ee86d7d0d241959f322a84c9961bc22d54f33472"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "472"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:resources.arsc",
      "type": "file",
      "name": "resources.arsc",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e6ed7d981ea6a62927c1155412d5d8d6d53894f76a6cf7b9f9c430a8a3a52474"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "788"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.33",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Binaeres Manifest/Ressourcen (launcher/base, Version per build.sh gestempelt)."
    },
    {
      "bom-ref": "lib:qrcodejs",
      "type": "library",
      "name": "qrcodejs (QRCode.js)",
      "version": "unversioned inline copy",
      "supplier": {
        "name": "davidshimjs"
      },
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://github.com/davidshimjs/qrcodejs"
        }
      ],
      "description": "Minifiziert in mehreren HTML-Assets eingebettet; keine separate Datei. Enthalten in: assets/display.html, assets/mirror.html, assets/pair.html, assets/settings.html, assets/setup.html",
      "properties": [
        {
          "name": "atendu:origin",
          "value": "third-party"
        }
      ]
    },
    {
      "bom-ref": "os:android-bsp-rk3528",
      "type": "operating-system",
      "name": "Android 14 (API 34) BSP fuer Rockchip RK3528 (BOXPUT S13 Air)",
      "version": "Boxput-Firmware F1010 (Charge 0) / E1010.667 (Charge 1, Basis 260909)",
      "supplier": {
        "name": "Boxput / Shenzhen Hugsun Technology (OEM), Rockchip (SoC)"
      },
      "description": "Betriebssystem, Kernel, WLAN-/BT-Stack und WebView des Sticks. Nicht unter Atendu-Kontrolle; Patch-Lage und Kompensation in docs/compliance/CRA-EXPOSURE-ANALYSE.md. Kiosk-Haertung (Paket-Deaktivierung, ADB/BT-Defaults) via image-build/atendu-master/atendu-firstboot.sh."
    }
  ],
  "dependencies": [
    {
      "ref": "app:com.atendu.launcher@6.33+101",
      "dependsOn": [
        "file:AndroidManifest.xml",
        "file:assets/LICENSES.txt",
        "file:assets/control.html",
        "file:assets/display.html",
        "file:assets/logo-dark.png",
        "file:assets/logo-light.png",
        "file:assets/mirror.html",
        "file:assets/offline.html",
        "file:assets/pair.html",
        "file:assets/roboto-latin.woff2",
        "file:assets/settings.html",
        "file:assets/setup.html",
        "file:classes.dex",
        "file:res/xml/network_security_config.xml",
        "file:resources.arsc",
        "os:android-bsp-rk3528"
      ]
    },
    {
      "ref": "file:assets/display.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/mirror.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/pair.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/settings.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/setup.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    }
  ]
}