ACCESSION DAY 001

sbom.day

On this morning the sealed crate opens, and every hidden ingredient is named beneath the glass.

software crate
intake tray
origin tray
reactv18.3.1 · MIT
openssl3.2.0 · Apache-2.0
zlib1.3.1 · Zlib
name the hidden ingredient
ROOM II

Ingredient Cabinet

Offset drawers slide from the archive walls. Each preserved dependency carries a version, origin, and SPDX-like seal.

vite

v5.4.11

SPDX: MITorigin: build bench

esbuild

v0.24.0

SPDX: MITorigin: compiler shelf

rollup

v4.28.1

SPDX: MITorigin: bundle drawer

postcss

v8.4.49

SPDX: MITorigin: stylesheet herbarium
{ }pkg
ROOM III

Transitive Greenhouse

Follow the root below the root. Primary packages descend into delicate secondary ancestry through transparent soil.

transparent dependency soil
@babel/helper · 7.25.9
picocolors · 1.1.1
nanoid · 3.3.8
source-map-js · 1.2.1
ROOM V

Provenance Night Room

Seal the provenance jar. Hashes and attestations rotate as constellations in dark preservative glass.

sha256:8fa3...d19b
slsa:build:l3
git:4b9e...02af
ROOM VI

The Ledger at Midnight

All specimens align into one illuminated inventory wall: legible, named, and no longer hidden.

001 react 18.3.1 MIT sha256:a12c

002 vite 5.4.11 MIT sha256:f51e

003 rollup 4.28.1 MIT sha256:094b

004 openssl 3.2.0 Apache-2.0 sha256:8fa3

005 zlib 1.3.1 Zlib sha256:b77d

006 nanoid 3.3.8 MIT sha256:c19a

007 source-map-js 1.2.1 BSD-3-Clause sha256:42aa

008 picocolors 1.1.1 ISC sha256:fe08

the software ecosystem becomes a named collection