# Fixture manifest for SBOM parsing (no CVE lookup, declared deps only).
flask==2.3.0
requests>=2.28
pyjwt
boto3==1.28.0  # inline comment should be stripped
