Bill of materials

‹

1.3

›CRAN

SOMbrero 1.3 and the release of each package it installed on 8 Jun 2020, the day it was released.

Files

Method, the files

CycloneDX 1.6 JSONSOMbrero-1.3.cdx.json207 KB
CycloneDX 1.6 XMLSOMbrero-1.3.cdx.xml134 KB
SPDX 2.3 JSONSOMbrero-1.3.spdx.json201 KB
SPDX 2.3 YAMLSOMbrero-1.3.spdx.yaml142 KB
SPDX 2.3 XMLSOMbrero-1.3.spdx.xml206 KB
SPDX 2.3 tag-valueSOMbrero-1.3.spdx119 KB
SPDX 3.0.1 JSON-LDSOMbrero-1.3.spdx3.jsonld585 KB
SWID tag, ISO/IEC 19770-2:2015SOMbrero-1.3.swidtag17 KB

Built by R Observatory from CRAN's own records, not by its maintainer.

Summary

Components: 94with R and 8 of R's own packages
With a checksum: 57 of 85SHA-256 and MD5
Advisories: 2RSEC-2023-3 and RSEC-2026-1

Licences

Permissive33
PermissiveorWeak copyleft1
PermissiveorTerms in a file1
Weak copyleftorTerms in a file1
Copyleft38
CopyleftorTerms in a file10
Terms in a file1

R and its own packages are under R's licence, GPL-2 | GPL-3.

Advisories

RSEC-2023-3 Memory leak vulnerability. jsonlite 1.6.1, fixed in 1.8.8.
RSEC-2026-1 Risk of Buffer Overflow Vulnerability when installed from source on Windows R < 4.2. png 0.1-7, fixed in 0.1-9.

28 of the 85 CRAN files have no checksum on record. CRAN lists one only while a file is current.

Components

Name	Version	Licence	Checksum	Part of R
SOMbrero	1.3	GPL (>= 2)	SHA-256 `d0d9b73f`	No
ggplot2	3.3.1	GPL-2 \| file LICENSE	SHA-256 `a03a3e37`	No
ggwordcloud	0.5.0	GPL-3	Not on record	No
igraph	1.2.5	GPL (>= 2)	SHA-256 `0cdd675b`	No
interp	1.0-33	GPL (>= 2)	SHA-256 `661f9271`	No
metR	0.7.0	GPL-3	SHA-256 `ab155c64`	No
scatterplot3d	0.3-41	GPL-2	Not on record	No
shiny	1.4.0.2	GPL-3 \| file LICENSE	SHA-256 `dca6ac83`	No
checkmate	2.0.0	BSD_3_clause + file LICENSE	SHA-256 `0dc25b0e`	No
colorspace	1.4-1	BSD_3_clause + file LICENSE	Not on record	No
crayon	1.3.4	MIT + file LICENSE	Not on record	No
data.table	1.12.8	MPL-2.0 \| file LICENSE	SHA-256 `d3a75f3a`	No
deldir	0.1-25	GPL (>= 2)	SHA-256 `f0a2f2eb`	No
digest	0.6.25	GPL (>= 2)	SHA-256 `15ccadb7`	No
fastmap	1.0.1	MIT + file LICENSE	Not on record	No
fields	10.3	GPL (>= 2)	SHA-256 `490bff36`	No
Formula	1.2-3	GPL-2 \| GPL-3	Not on record	No
formula.tools	1.7.1	GPL-2 \| file LICENSE	SHA-256 `4fe0e72d`	No
glue	1.4.1	MIT + file LICENSE	SHA-256 `f8b687d3`	No
gtable	0.3.0	GPL-2	Not on record	No
htmltools	0.4.0	GPL (>= 2)	Not on record	No
httpuv	1.5.4	GPL (>= 2) \| file LICENSE	SHA-256 `d5c64386`	No
isoband	0.2.1	MIT + file LICENSE	SHA-256 `18883606`	No
jsonlite	1.6.1	MIT + file LICENSE	SHA-256 `74921dd2`	No
later	1.1.0.1	GPL (>= 2)	SHA-256 `71baa7be`	No
lubridate	1.7.9	GPL (>= 2)	SHA-256 `cbf95ee0`	No
magrittr	1.5	MIT + file LICENSE	Not on record	No
MASS	7.3-51.6	GPL-2 \| GPL-3	SHA-256 `e2035c47`	No
Matrix	1.2-18	GPL (>= 2) \| file LICENCE	SHA-256 `f7ff018c`	No
memoise	1.1.0	MIT + file LICENSE	Not on record	No
mgcv	1.8-31	GPL (>= 2)	SHA-256 `736de462`	No
mime	0.9	GPL	SHA-256 `2ccf97d2`	No
pkgconfig	2.0.3	MIT + file LICENSE	SHA-256 `330fef44`	No
plyr	1.8.6	MIT + file LICENSE	SHA-256 `ea55d26f`	No
png	0.1-7	GPL-2 \| GPL-3	Not on record	No
promises	1.1.0	MIT + file LICENSE	Not on record	No
purrr	0.3.4	GPL-3 \| file LICENSE	SHA-256 `23ebc93b`	No
R6	2.4.1	MIT + file LICENSE	SHA-256 `26b0fd64`	No
Rcpp	1.0.4.6	GPL (>= 2)	SHA-256 `45af675d`	No
RcppEigen	0.3.3.7.0	GPL (>= 2) \| file LICENSE	SHA-256 `62ea6272`	No
RCurl	1.98-1.2	BSD_3_clause + file LICENSE	SHA-256 `5d74a0cd`	No
rlang	0.4.6	GPL-3	SHA-256 `3a81b107`	No
scales	1.1.1	MIT + file LICENSE	SHA-256 `40b2b665`	No
sourcetools	0.1.7	MIT + file LICENSE	Not on record	No
sp	1.4-2	GPL (>= 2)	SHA-256 `73e3959e`	No
stringr	1.4.0	GPL-2 \| file LICENSE	Not on record	No
tibble	3.0.1	MIT + file LICENSE	SHA-256 `154552cf`	No
withr	2.2.0	GPL (>= 2)	SHA-256 `4c21e51c`	No
xtable	1.8-4	GPL (>= 2)	Not on record	No
backports	1.1.7	GPL-2 \| GPL-3	SHA-256 `b277e287`	No
BH	1.72.0-3	BSL-1.0	SHA-256 `888ec1a3`	No
bitops	1.0-6	GPL (>= 2)	Not on record	No
cli	2.0.2	MIT + file LICENSE	SHA-256 `490834e5`	No
ellipsis	0.3.1	GPL-3	SHA-256 `4f8a1515`	No
fansi	0.4.1	GPL (>= 2)	SHA-256 `3c69eec8`	No
farver	2.0.3	MIT + file LICENSE	SHA-256 `0e1590df`	No
generics	0.0.2	GPL-2	Not on record	No
labeling	0.3	MIT + file LICENSE \| Unlimited	Not on record	No
lattice	0.20-41	GPL (>= 2)	SHA-256 `54ca557f`	No
lifecycle	0.2.0	GPL-3	SHA-256 `29746e8d`	No
maps	3.3.0	GPL-2	Not on record	No
munsell	0.5.0	MIT + file LICENSE	Not on record	No
nlme	3.1-148	GPL (>= 2) \| file LICENCE	SHA-256 `77c23b64`	No
operator.tools	1.6.3	GPL-2 \| file LICENSE	Not on record	No
pillar	1.4.4	GPL-3	SHA-256 `e1eaba75`	No
RColorBrewer	1.1-2	Apache License 2.0	Not on record	No
spam	2.5-1	LGPL-2 \| BSD_3_clause + file LICENSE	SHA-256 `d145881a`	No
stringi	1.4.6	file LICENSE	SHA-256 `633f67da`	No
testthat	2.3.2	MIT + file LICENSE	SHA-256 `1a268d8d`	No
vctrs	0.3.1	GPL-3	SHA-256 `17e63587`	No
viridisLite	0.3.0	MIT + file LICENSE	Not on record	No
assertthat	0.2.1	GPL-3	SHA-256 `85cf7fcc`	No
dotCall64	1.0-0	GPL (>= 2)	Not on record	No
evaluate	0.14	MIT + file LICENSE	Not on record	No
pkgload	1.1.0	GPL-3	SHA-256 `189d460d`	No
praise	1.0.0	MIT + file LICENSE	SHA-256 `5c035e74`	No
utf8	1.1.4	Apache License (== 2.0) \| file LICENSE	Not on record	No
desc	1.2.0	MIT + file LICENSE	Not on record	No
pkgbuild	1.0.8	GPL-3	SHA-256 `b149fcf3`	No
rprojroot	1.3-2	GPL-3	Not on record	No
rstudioapi	0.11	MIT + file LICENSE	SHA-256 `13e07fb7`	No
callr	3.4.3	MIT + file LICENSE	SHA-256 `01b7277f`	No
prettyunits	1.1.1	MIT + file LICENSE	SHA-256 `9a199aa8`	No
processx	3.4.2	MIT + file LICENSE	SHA-256 `94a0ffc6`	No
ps	1.3.3	BSD_3_clause + file LICENSE	SHA-256 `03a45651`	No
R	3.1.0 or later	GPL-2 \| GPL-3	–	Yes
graphics	With R	–	–	Yes
grDevices	With R	–	–	Yes
stats	With R	–	–	Yes
grid	With R	–	–	Yes
methods	With R	–	–	Yes
tools	With R	–	–	Yes
utils	With R	–	–	Yes
splines	With R	–	–	Yes