Haketilo Software Bill of Materials¶

Software Bill of Materials (SBOM) lists external components used or included in a given software product.

You may also want to look at the SBOM of Hydrilla.

Note: This SBOM corresponds to the upcoming Haketilo version 1.0.

• Table of contents
• Haketilo Software Bill of Materials
  • Incorporated code
    • js-sha256
    • Reset CSS
  • External dependencies
    • POSIX environment
    • Make
    • Selenium webdriver (Python)
    • Python3
    • Web browser
    • geckodriver
    • Inkscape

Incorporated code¶

Software parts that have been copied over to Haketilo source tree with only slight or no modification (code that has been mostly rewritten is not mentioned here).

js-sha256¶

field	value
name	js-sha256
version	0.9.0
copyright	2014-2017 Chen, Yi-Cyuan <emn178@gmail.com>
license	MIT (Expat)
upstream url	https://github.com/emn178/js-sha256

This javascript implementation of sha256 is included in the browser extension itself. It is used to compute the sha256 sums of files. Integrity verification of custom javascript downloaded from Hydrilla repository is based on sha256.

Reset CSS¶

field	value
name	Reset CSS
version	2.0
copyright	2008,2011 Eric A. Meyer
license	public domain
upstream url	https://meyerweb.com/eric/tools/css/reset/

The CSS Reset style sheet is used on Haketilo's pages.

External dependencies¶

POSIX environment¶

Standard UNIX tools (sh, awk, etc.) are needed to build Haketilo. There's no known dependency on specific implementations of those (e.g. gawk should work just as well as nawk).

Make¶

Make build system is an optional requirement for building Haketilo and a strict requirement for running the test suite. There's no known dependency on specific Make implementation.

Selenium webdriver (Python)¶

field	value
name	selenium
version	no known constraints (3.141.0 used)
copyright	2011-2021 Software Freedom Conservancy; 2004-2011 Selenium committers
license	Apache-2.0
upstream url	https://www.selenium.dev/

Selenium Python library is used in automated tests of the extension.

Python3¶

Python in at least version 3.7 is needed to run the automated test suite.

Web browser¶

A Firefox-derived web browser with at least version 60 or a Chromium-derived browser with at least version 90 (although older Chromium versions are likely to work as well) is needed to use the extensions.

In addition, a Firefox-derived web browser with at least version 60 is needed to run the automated test suite.

geckodriver¶

field	value
name	geckodriver
version	no known constraints (0.30.0 used successfully)
copyright	???
license	MPL-2.0
upstream url	https://firefox-source-docs.mozilla.org/testing/geckodriver/index.html

Geckodriver compatible with the Firefox-derived browser used is needed to run the automated test suite.

Inkscape¶

field	value
name	Inkscape
version	no known constraints (0.92.4 used successfully)
copyright	Inkscape Authors
license	GPL-3.0-only
upstream url	https://inkscape.org/

Inkscape is an optional build dependency used to generate png icons from an svg file.