{
  "schemaVersion": 2,
  "preparationStatus": "COMPLETE_ARCHIVES_OFFICIAL_LOCATIONS_VERIFIED_MIRROR_DEPLOYMENT_SEPARATE",
  "legalOpinion": false,
  "publicBaseUrl": "https://skilly.uk/demos/charts-runtime/sources/",
  "sourceAcquisitionBasis": "Graphviz EPL-2.0 sections 3.1(a), 3.2 and 3.3: complete source, original agreement and reasonable source-acquisition instructions. The pinned official downloads are verified; the same-site mirror is an additional delivery location.",
  "assets": [
    {
      "id": "expat-source",
      "fileName": "expat-2.8.5.tar.gz",
      "path": "920dde485e15eda0cce8d2310b41d492c534e5e3d89ad407a0b4176dd2ff88fe/expat-2.8.5.tar.gz",
      "url": "https://skilly.uk/demos/charts-runtime/sources/920dde485e15eda0cce8d2310b41d492c534e5e3d89ad407a0b4176dd2ff88fe/expat-2.8.5.tar.gz",
      "sizeBytes": 838183,
      "sha256": "920dde485e15eda0cce8d2310b41d492c534e5e3d89ad407a0b4176dd2ff88fe",
      "license": "MIT plus original embedded notices",
      "upstreamUrl": "https://github.com/libexpat/libexpat/releases/download/R_2_8_5/expat-2.8.5.tar.gz",
      "upstreamOriginal": {
        "fileName": "expat-2.8.5.tar.gz",
        "sizeBytes": 838183,
        "sha256": "920dde485e15eda0cce8d2310b41d492c534e5e3d89ad407a0b4176dd2ff88fe"
      },
      "completeSourcePreserved": true,
      "sourceFilesModified": false,
      "publicAvailabilityVerified": false,
      "officialSourceAccess": {
        "checkedAt": "2026-10-07T14:51:36.415Z",
        "url": "https://github.com/libexpat/libexpat/releases/download/R_2_8_5/expat-2.8.5.tar.gz",
        "status": 200,
        "sizeBytes": 838183,
        "sha256": "920dde485e15eda0cce8d2310b41d492c534e5e3d89ad407a0b4176dd2ff88fe",
        "anonymous": true,
        "completeBodyVerified": true
      }
    },
    {
      "id": "graphviz-source",
      "fileName": "graphviz-16.1.0.tar.xz",
      "path": "cd31994930c198f77ac2297453e8fadd46556d4d99c198f2d60e4793cb1c2690/graphviz-16.1.0.tar.xz",
      "url": "https://skilly.uk/demos/charts-runtime/sources/cd31994930c198f77ac2297453e8fadd46556d4d99c198f2d60e4793cb1c2690/graphviz-16.1.0.tar.xz",
      "sizeBytes": 20696504,
      "sha256": "cd31994930c198f77ac2297453e8fadd46556d4d99c198f2d60e4793cb1c2690",
      "license": "EPL-2.0 plus original embedded notices",
      "upstreamUrl": "https://gitlab.com/api/v4/projects/4207231/packages/generic/graphviz-releases/16.1.0/graphviz-16.1.0.tar.gz",
      "upstreamOriginal": {
        "fileName": "graphviz-16.1.0.tar.gz",
        "sizeBytes": 26846071,
        "sha256": "beea483ab130f456c1c3905f4f2e40778a9c493c3d73ae8012367d552d71ca84"
      },
      "completeSourcePreserved": true,
      "sourceFilesModified": false,
      "transportRecompression": {
        "from": "gzip",
        "to": "xz",
        "xzVersion": "5.8.4",
        "parameters": [
          "-9e",
          "--threads=1",
          "--check=crc64"
        ],
        "tar": {
          "sizeBytes": 65751040,
          "originalSha256": "b3e0f2a911b6f50f4b7e474b79a24104129bb7ef3f563eb8ac1407e2738fae1c",
          "repackedSha256": "b3e0f2a911b6f50f4b7e474b79a24104129bb7ef3f563eb8ac1407e2738fae1c",
          "identical": true
        }
      },
      "publicAvailabilityVerified": false,
      "officialSourceAccess": {
        "checkedAt": "2026-10-07T14:51:36.415Z",
        "url": "https://gitlab.com/api/v4/projects/4207231/packages/generic/graphviz-releases/16.1.0/graphviz-16.1.0.tar.gz",
        "status": 200,
        "sizeBytes": 26846071,
        "sha256": "beea483ab130f456c1c3905f4f2e40778a9c493c3d73ae8012367d552d71ca84",
        "anonymous": true,
        "completeBodyVerified": true
      }
    },
    {
      "id": "viz-source",
      "fileName": "viz-source-c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f.tar.gz",
      "path": "141777800f04e526fdd74c722f58f51538997e9435e87b7e810e01aa019244a4/viz-source-c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f.tar.gz",
      "url": "https://skilly.uk/demos/charts-runtime/sources/141777800f04e526fdd74c722f58f51538997e9435e87b7e810e01aa019244a4/viz-source-c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f.tar.gz",
      "sizeBytes": 110602,
      "sha256": "141777800f04e526fdd74c722f58f51538997e9435e87b7e810e01aa019244a4",
      "license": "MIT plus original embedded notices",
      "upstreamUrl": "https://codeload.github.com/mdaines/viz-js/tar.gz/c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f",
      "upstreamOriginal": {
        "fileName": "viz-source-c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f.tar.gz",
        "sizeBytes": 110602,
        "sha256": "141777800f04e526fdd74c722f58f51538997e9435e87b7e810e01aa019244a4"
      },
      "completeSourcePreserved": true,
      "sourceFilesModified": false,
      "publicAvailabilityVerified": false,
      "officialSourceAccess": {
        "checkedAt": "2026-10-07T14:51:36.415Z",
        "url": "https://codeload.github.com/mdaines/viz-js/tar.gz/c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f",
        "status": 200,
        "sizeBytes": 110602,
        "sha256": "141777800f04e526fdd74c722f58f51538997e9435e87b7e810e01aa019244a4",
        "anonymous": true,
        "completeBodyVerified": true
      }
    }
  ],
  "buildRecipe": {
    "vizCommit": "c8ce050d28eb0dc1ed1629ea32ab7f3dc117db0f",
    "graphvizVersion": "16.1.0",
    "expatVersion": "2.8.5",
    "emscriptenVersion": "6.0.10",
    "documentation": "../licenses/REBUILDING_UPSTREAM.md",
    "sourceFileChecksums": "../licenses/build-recipe/files.json",
    "executedDuringReview": false
  },
  "preservation": "No source member selection or tar re-creation. Graphviz xz decompresses to exactly the same complete tar bytes as the original gzip. Original archive hashes are retained.",
  "applicationSource": "Independent per-engine source and locks are supplied in product packages. This upstream source delivery arrangement does not require a public original application or prompt snapshot.",
  "releaseApproval": "Package approval is recorded separately in each package verification.json. Mirror deployment and production retrieval are separate from preparation of these complete source archives."
}