# Software Bill of Materials (SBOM)

**Product:** MBXHub
**Version:** 0.5.1.2
**Generated:** 2026-03-05
**Supplier:** Halrad LLC

---

## Summary

| Category | Count |
|----------|-------|
| Project Assemblies | 6 |
| NuGet Packages (Build-only) | 1 |
| NuGet Packages (Runtime) | 2 |
| First-party Libraries | 4 |
| .NET Framework Assemblies | 3 |

---

## Project Structure

MBXHub consists of multiple assemblies merged into a single DLL via ILRepack:

| Assembly | Type | Description |
|----------|------|-------------|
| **mb_MBXHub.dll** | Plugin | Final merged MusicBee plugin |
| MBXHub.Plugin | Library | Plugin entry point, Settings UI |
| MBXHub.Core | Library | Shared interfaces, engines, state |
| MBXHub.REST | Library | HTTP REST API endpoints |
| MBXHub.WebSocket | Library | Real-time WebSocket events |
| MBXR | Library | RemoteApp configuration |

### Project References

```
mb_MBXHub.dll (merged output)
├── MBXHub.Plugin
│   ├── MBXHub.Core
│   │   ├── MBXC (first-party)
│   │   ├── MBXR (first-party)
│   │   └── SsdpCore (first-party)
│   ├── MBXHub.REST
│   │   └── MBXHub.Core
│   ├── MBXHub.WebSocket
│   │   └── MBXHub.Core
│   ├── SsdpCore (first-party)
│   └── Firebug (first-party)
└── (all merged via ILRepack)
```

---

## First-party Libraries

### MBXC

| Attribute | Value |
|-----------|-------|
| **Component** | MBXC |
| **Author** | Halrad LLC |
| **Version** | 0.1.0 |
| **License** | Proprietary |
| **Source URL** | https://dev.azure.com/halrad/MBX/_git/MBX |
| **Usage** | Path normalization and comparison utilities |
| **Description** | Shared library for case/separator-insensitive file path handling |

### MBXR

| Attribute | Value |
|-----------|-------|
| **Component** | MBXR |
| **Author** | Halrad LLC |
| **Version** | 0.1.0 |
| **License** | Proprietary |
| **Source URL** | https://dev.azure.com/halrad/MBX/_git/MBX |
| **Usage** | RemoteApp registry configuration, RDP file generation |
| **Description** | Windows RemoteApp setup for publishing MusicBee via RDP |

### SsdpCore

| Attribute | Value |
|-----------|-------|
| **Component** | SsdpCore |
| **Author** | Halrad LLC |
| **Version** | 0.5.0.1 |
| **License** | MIT |
| **Source URL** | https://dev.azure.com/halrad/firebug/_git/firebug |
| **Usage** | SSDP/UPnP and WS-Discovery network advertising |
| **Description** | Clean-room implementation of SSDP and WS-Discovery for network service discovery |

### Firebug

| Attribute | Value |
|-----------|-------|
| **Component** | Firebug |
| **Author** | Halrad LLC |
| **Version** | 0.5.0.1 |
| **License** | MIT |
| **Source URL** | https://dev.azure.com/halrad/firebug/_git/firebug |
| **Usage** | Windows Firewall configuration in Settings UI |
| **Description** | Library for programmatic Windows Firewall rule management |

---

## NuGet Package Dependencies

### Build-only Dependencies

| Package | Version | License | Description |
|---------|---------|---------|-------------|
| [ILRepack.Lib.MSBuild.Task](https://github.com/ravibpatel/ILRepack.Lib.MSBuild.Task) | 2.0.34.2 | MIT | MSBuild task to merge assemblies into single DLL |

**Note:** ILRepack is a build tool only. It is not distributed with the plugin.

### Runtime Dependencies

| Package | Version | License | Description |
|---------|---------|---------|-------------|
| [System.Text.Json](https://github.com/dotnet/runtime) | 8.0.5 | MIT | JSON serialization for settings, API requests, charm manifests |
| [QRCoder](https://github.com/codebude/QRCoder) | 1.6.0 | MIT | QR code generation for Party Mode join URLs |

**Note:** Both packages are merged into the plugin DLL via ILRepack.

---

## .NET Framework Assemblies

Target framework: **.NET Framework 4.8**

| Assembly | Purpose |
|----------|---------|
| System.Web | HTTP utilities |
| System.Net.Http | HTTP client for SSDP |
| System.Windows.Forms | Settings UI |

---

## Proprietary Components

The following components are proprietary Halrad LLC code:

| Component | Files | Description |
|-----------|-------|-------------|
| MBXHub.Plugin | `MBXHub.Plugin/*` | Plugin entry point, MusicBee integration, Settings UI |
| MBXHub.Core | `Core/*` | Shared interfaces, AutoQ engine, mood estimation, session tracking |
| MBXHub.REST | `REST/*` | HTTP listener, routing, API handlers (160+ endpoints) |
| MBXHub.WebSocket | `WebSocket/*` | WebSocket server, real-time events |
| MBXC | `MBXC/*` | Path normalization and comparison |
| MBXR | `MBXR/*` | RemoteApp configuration |

---

## License Summary

| License | Components |
|---------|------------|
| **MIT** | SsdpCore, Firebug, ILRepack.Lib.MSBuild.Task, System.Text.Json, QRCoder |
| **Proprietary** | MBXHub.Plugin, MBXHub.Core, MBXHub.REST, MBXHub.WebSocket, MBXC, MBXR |
| **Microsoft EULA** | .NET Framework 4.8 |

---

## Dependency Graph

```
mb_MBXHub.dll
├── MusicBee Plugin API (MusicBee SDK, host interface)
├── MBXHub.Plugin (Proprietary)
│   └── Firebug (MIT, first-party)
├── MBXHub.Core (Proprietary)
│   ├── MBXC (Proprietary, first-party)
│   ├── MBXR (Proprietary, first-party)
│   ├── System.Text.Json (MIT)
│   └── SsdpCore (MIT, first-party)
├── MBXHub.REST (Proprietary)
│   └── QRCoder (MIT)
├── MBXHub.WebSocket (Proprietary)
└── .NET Framework 4.8 (Microsoft)
    ├── System.Web
    ├── System.Net.Http
    └── System.Windows.Forms
```

---

## Related Components

### MBXHub.exe (Shell)

Standalone companion EXE providing SMTC bridge, RemoteApp CLI, and firewall CLI. See SBOM-MBXHub.exe.md for full dependency listing.

---

## Vulnerability Tracking

For security vulnerability information:

- **.NET Framework:** Check https://msrc.microsoft.com/update-guide
- **NuGet Packages:** Check https://github.com/advisories

---

## Contact

For licensing questions or SBOM inquiries:

**Email:** mbxhub@halrad.com
**Web:** https://mbxhub.com/

---

*Last updated: 2026-03-05*
