Software Bill of Materials
One CycloneDX 1.5 document per shipped component, regenerated with every release. Third-party
license texts also ship inside the extension download as THIRD-PARTY-NOTICES.txt.
| Component | Version | Third-party components | Generated | SBOM |
|---|---|---|---|---|
| tracegist | 1.1.0 | 125 | 2026-09-03 | tracegist-extension.cdx.json |
| tracegist-mcp-bridge | 1.1.0 | 136 | 2026-09-03 | tracegist-mcp-bridge.cdx.json |
| tracegist-relay | 0.1.1 | 1 | 2026-09-03 | tracegist-relay.cdx.json |
| tracegist-relay-worker | 0.1.0 | 0 | 2026-09-03 | tracegist-relay-worker.cdx.json |
The extension SBOM lists the root package's full production dependency tree (including the
Svelte runtime), a superset of what the bundle actually ships. Read it as "may contain", not
"contains"; THIRD-PARTY-NOTICES.txt in the download is the exact bundled set.