{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:1d522b32-6537-5fd4-9652-14e269da8326",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-03T18:36:17+00:00",
    "lifecycles": [
      {
        "phase": "build"
      }
    ],
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "javac",
          "version": "17.0.18"
        },
        {
          "type": "application",
          "name": "d8 (Android build-tools 34.0.0)",
          "version": "8.2.2-dev"
        },
        {
          "type": "application",
          "name": "apksigner",
          "version": "0.9"
        },
        {
          "type": "application",
          "name": "android.jar (platforms/android-34)",
          "version": "API 34"
        },
        {
          "type": "application",
          "name": "zip (Info-ZIP)",
          "version": "3.0"
        },
        {
          "type": "application",
          "name": "python3",
          "version": "3.11.2"
        },
        {
          "type": "application",
          "name": "tools/make-sbom.py",
          "version": "9a73c9ec"
        }
      ]
    },
    "supplier": {
      "name": "Atendu, Inh. Rico Kirsten",
      "url": [
        "https://atendu.eu"
      ],
      "contact": [
        {
          "email": "security@atendu.eu"
        }
      ]
    },
    "manufacture": {
      "name": "Atendu, Inh. Rico Kirsten",
      "url": [
        "https://atendu.eu"
      ],
      "contact": [
        {
          "email": "security@atendu.eu"
        }
      ]
    },
    "component": {
      "bom-ref": "app:com.atendu.launcher@6.38+106",
      "type": "application",
      "name": "Atendu Launcher (com.atendu.launcher)",
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Kiosk- und Aufruf-Software des Atendu Mini: Android-App mit eingebettetem HTTP-Server (Port 3000), WebView-Kiosk und gebuendelten Web-Frontends.",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "51f12f69b6b1c3fe2c4466758cd69eb11f0f841eacfdae1365de6045f9c45758"
        }
      ],
      "properties": [
        {
          "name": "atendu:versionCode",
          "value": "106"
        },
        {
          "name": "atendu:git-commit",
          "value": "9a73c9ec"
        },
        {
          "name": "atendu:git-worktree-dirty",
          "value": "true"
        },
        {
          "name": "atendu:apk-file",
          "value": "build/atendu-launcher.apk"
        },
        {
          "name": "atendu:signing-cert-sha256",
          "value": "55f9f80bd80ac39d86458e43e8e892a0ae4de37445e27701a294bfd88aaf08ec"
        }
      ]
    }
  },
  "components": [
    {
      "bom-ref": "file:AndroidManifest.xml",
      "type": "file",
      "name": "AndroidManifest.xml",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e31cce78ec8decf6a00e881936c94e97bbc13772b81cbc12b72b9ceaf86ae46d"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "4824"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Binaeres Manifest/Ressourcen (launcher/base, Version per build.sh gestempelt)."
    },
    {
      "bom-ref": "file:assets/LICENSES.txt",
      "type": "file",
      "name": "assets/LICENSES.txt",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "7f144b18bd2deb13d43820adc133bbdbfa5c90e4c0e0a8cd9e1e16ffdfaff02e"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "3698"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/apple-touch-icon.png",
      "type": "file",
      "name": "assets/apple-touch-icon.png",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "075839a3d43fbbad8a39cfe62442e0b22af88620067f22c0b5d5a8d25974fbfa"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "6476"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/control.html",
      "type": "file",
      "name": "assets/control.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f84433193177057513ca5b7c3c887913f347d2146736c03ba6b8073a40c38fcf"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "39347"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/display.html",
      "type": "file",
      "name": "assets/display.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "c9dbf0b0ddf860c595b2951225c5d0d0b6be248e57c974b70ad7263eada3db37"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "57097"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/favicon.png",
      "type": "file",
      "name": "assets/favicon.png",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "a749aabebdabe24d266e28daa3e198ade3a6eb0eb352701811ff91924d356829"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "13196"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/logo-dark.png",
      "type": "file",
      "name": "assets/logo-dark.png",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "f53d803f6b63aa5de5cdcaa455b680ecd20c94c0cdbd67ab2a9005d98f5da979"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "74544"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/logo-light.png",
      "type": "file",
      "name": "assets/logo-light.png",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "b837a0de14371d50b299d14883bfadbac6ca72ddbc86f76d7f00441272695dfa"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "64190"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:assets/mirror.html",
      "type": "file",
      "name": "assets/mirror.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e7eae5da749f7f59c1acd9a6c3ac5d88beb2c84d17decc9e67fbff49a2fe3a70"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "36651"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/offline.html",
      "type": "file",
      "name": "assets/offline.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "2a068e663231d095300efcb12854405d7d11aaba5ef7623ac394454ff828bf8a"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "10957"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/pair.html",
      "type": "file",
      "name": "assets/pair.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "fe6ffcf0f2728ee4f72fed7227debe1cd4a55f74b8e28553bd69ad471c7d51d8"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "49848"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/roboto-latin.woff2",
      "type": "file",
      "name": "assets/roboto-latin.woff2",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "43136"
        },
        {
          "name": "atendu:origin",
          "value": "third-party"
        }
      ],
      "version": "unversioned subset",
      "supplier": {
        "name": "Google (Christian Robertson)"
      },
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://github.com/googlefonts/roboto"
        }
      ],
      "description": "Roboto (latin subset, woff2)"
    },
    {
      "bom-ref": "file:assets/settings.html",
      "type": "file",
      "name": "assets/settings.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "234c045f68937bb7f6b2d2ed601596e59de7a87b5259d6c54ed5735d918135af"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "181254"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:assets/setup.html",
      "type": "file",
      "name": "assets/setup.html",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "44574a8f0943d7e5f4e8a1b3a6d65a530cb4f25fb28e3ad47dbb572c01376b60"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "106727"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Web-Frontend, in der APK gebuendelt, vom eingebetteten Server ausgeliefert."
    },
    {
      "bom-ref": "file:classes.dex",
      "type": "file",
      "name": "classes.dex",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "08eeed88017e882e5766878353406ab3a0e2c1265f3ccf80b6edb4dcde17b6c3"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "220132"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Kompilierter Atendu-Java-Code (launcher/src/com/atendu/launcher/*.java: AtenduServer, BootReceiver, ClockSync, DiscoveryService, EventLog, FileLogger, MainActivity, MirrorState, WifiSetupManager); keine Fremdbibliotheken, nur Android-SDK-APIs (android.jar, API 34)."
    },
    {
      "bom-ref": "file:res/xml/network_security_config.xml",
      "type": "file",
      "name": "res/xml/network_security_config.xml",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e130d8da1c72fb8813ba2db3ee86d7d0d241959f322a84c9961bc22d54f33472"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "472"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      }
    },
    {
      "bom-ref": "file:resources.arsc",
      "type": "file",
      "name": "resources.arsc",
      "hashes": [
        {
          "alg": "SHA-256",
          "content": "e6ed7d981ea6a62927c1155412d5d8d6d53894f76a6cf7b9f9c430a8a3a52474"
        }
      ],
      "properties": [
        {
          "name": "atendu:size-bytes",
          "value": "788"
        },
        {
          "name": "atendu:origin",
          "value": "first-party"
        }
      ],
      "version": "6.38",
      "supplier": {
        "name": "Atendu, Inh. Rico Kirsten",
        "url": [
          "https://atendu.eu"
        ],
        "contact": [
          {
            "email": "security@atendu.eu"
          }
        ]
      },
      "description": "Binaeres Manifest/Ressourcen (launcher/base, Version per build.sh gestempelt)."
    },
    {
      "bom-ref": "lib:qrcodejs",
      "type": "library",
      "name": "qrcodejs (QRCode.js)",
      "version": "unversioned inline copy",
      "supplier": {
        "name": "davidshimjs"
      },
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://github.com/davidshimjs/qrcodejs"
        }
      ],
      "description": "Minifiziert in mehreren HTML-Assets eingebettet; keine separate Datei. Enthalten in: assets/display.html, assets/mirror.html, assets/pair.html, assets/settings.html, assets/setup.html",
      "properties": [
        {
          "name": "atendu:origin",
          "value": "third-party"
        }
      ]
    },
    {
      "bom-ref": "os:android-bsp-rk3528",
      "type": "operating-system",
      "name": "Android 14 (API 34) BSP fuer Rockchip RK3528 (BOXPUT S13 Air)",
      "version": "Boxput-Firmware F1010 (Charge 0) / E1010.667 (Charge 1, Basis 260909)",
      "supplier": {
        "name": "Boxput / Shenzhen Hugsun Technology (OEM), Rockchip (SoC)"
      },
      "description": "Betriebssystem, Kernel, WLAN-/BT-Stack und WebView des Sticks. Nicht unter Atendu-Kontrolle; Patch-Lage und Kompensation in docs/compliance/CRA-EXPOSURE-ANALYSE.md. Kiosk-Haertung (Paket-Deaktivierung, ADB/BT-Defaults) via image-build/atendu-master/atendu-firstboot.sh."
    }
  ],
  "dependencies": [
    {
      "ref": "app:com.atendu.launcher@6.38+106",
      "dependsOn": [
        "file:AndroidManifest.xml",
        "file:assets/LICENSES.txt",
        "file:assets/apple-touch-icon.png",
        "file:assets/control.html",
        "file:assets/display.html",
        "file:assets/favicon.png",
        "file:assets/logo-dark.png",
        "file:assets/logo-light.png",
        "file:assets/mirror.html",
        "file:assets/offline.html",
        "file:assets/pair.html",
        "file:assets/roboto-latin.woff2",
        "file:assets/settings.html",
        "file:assets/setup.html",
        "file:classes.dex",
        "file:res/xml/network_security_config.xml",
        "file:resources.arsc",
        "os:android-bsp-rk3528"
      ]
    },
    {
      "ref": "file:assets/display.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/mirror.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/pair.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/settings.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    },
    {
      "ref": "file:assets/setup.html",
      "dependsOn": [
        "lib:qrcodejs"
      ]
    }
  ]
}