[]
        
(Showing Draft Content)

Software Bill of Materials

DsExcel .NET provides a Software Bill of Materials (SBOM) to help customers review the software components included in the product. An SBOM improves software supply chain transparency by listing the libraries and dependencies used in a specific product release.

You can use the SBOM to support internal security reviews, license compliance checks, and other software governance requirements.

SBOM Format

The SBOM for DsExcel .NET is provided in CycloneDX format.

The current SBOM information includes the following product metadata:

  • Product: DsExcel .NET

  • Package ID: DS.Documents.Excel

  • Version: Aligned with the latest official release

  • SBOM format: CycloneDX 1.7

  • Supplier: MESCIUS inc.

What the SBOM Includes

The SBOM for DsExcel .NET includes information about the components used in the product release, such as:

  • Product package name and version

  • Third-party dependencies

  • Transitive dependencies

  • Open-source components

  • License information, when available

  • Package identifiers and versions

  • Supplier metadata

  • Known vulnerability references, when available

This information can help you identify the components included in a release and review their licensing and security status.

Component Categories

The SBOM for DsExcel .NET can include components from the following categories:

  • DsExcel .NET product packages

  • MESCIUS supporting libraries used by DsExcel .NET

  • Third-party open-source libraries

  • Platform-related .NET packages required by product dependencies

For example, the SBOM may list the main DsExcel .NET package together with supporting MESCIUS components and third-party libraries used for features such as PDF export, imaging, cryptography, and JSON processing.

Obtain an SBOM

The SBOM for DsExcel .NET is available upon request.

To obtain the SBOM for a specific DsExcel .NET release, please contact MESCIUS Support.

Notes:

  • The SBOM is generated for a specific product release.

  • The complete dependency list is provided in the SBOM file.

  • Vulnerability information may change over time and should be validated against current security databases when needed.