{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:bf8f4f57-70d7-4ce7-b2e6-99af8301a870", "version": 1, "metadata": { "timestamp": "2026-09-16T15:44:40Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "tracing-hooks", "group": "@apm-js-collab", "version": "0.5.0", "description": "CJS and ESM hooks for orchestrion", "purl": "pkg:npm/%40apm-js-collab/tracing-hooks@0.5.0", "bom-ref": "pkg:npm/@apm-js-collab/tracing-hooks@0.5.0", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test:update-snapshots" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/apm-js-collab/tracing-hooks.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@actions\\n@apm-js-collab\\n@bcoe\\n@isaacs\\n@istanbuljs\\n@jridgewell\\n@matteo.collina\\n@pkgjs\\n@reporters\\n@sec-ant\\n@sindresorhus\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@actions/core/package.json\\nnode_modules/@actions/exec/package.json\\nnode_modules/@actions/http-client/package.json\\nnode_modules/@actions/io/package.json\\nnode_modules/@apm-js-collab/code-transformer/package.json\\nnode_modules/@bcoe/v8-coverage/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@istanbuljs/schema/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@matteo.collina/snap/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/@reporters/github/package.json\\nnode_modules/@sec-ant/readable-stream/package.json\\nnode_modules/@sindresorhus/merge-streams/package.json\\nnode_modules/@types/istanbul-lib-coverage/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/borp/fixtures/monorepo/package.json\\nnode_modules/borp/fixtures/monorepo/package1/package.json\\nnode_modules/borp/fixtures/monorepo/package2/package.json\\nnode_modules/borp/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/c8/node_modules/find-up/package.json\\nnode_modules/c8/node_modules/locate-path/package.json\\nnode_modules/c8/node_modules/p-limit/package.json\\nnode_modules/c8/node_modules/p-locate/package.json\\nnode_modules/c8/node_modules/path-exists/package.json\\nnode_modules/c8/node_modules/yocto-queue/package.json\\nnode_modules/c8/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/ansi-styles/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/node_modules/wrap-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/execa/package.json\\nnode_modules/figures/package.json\\nnode_modules/find-up/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/glob/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/html-escaper/package.json\\nnode_modules/human-signals/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isexe/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minipass/package.json\\nnode_modules/module-details-from-path/package.json\\nnode_modules/ms/package.json\\nnode_modules/npm-run-path/node_modules/path-key/package.json\\nnode_modules/npm-run-path/node_modules/unicorn-magic/package.json\\nnode_modules/npm-run-path/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/parse-ms/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/pretty-ms/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/semver/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/slash/package.json\\nnode_modules/stack-utils/package.json\\nnode_modules/string-width-cjs/node_modules/ansi-regex/package.json\\nnode_modules/string-width-cjs/node_modules/emoji-regex/package.json\\nnode_modules/string-width-cjs/node_modules/strip-ansi/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-final-newline/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/test-exclude/node_modules/balanced-match/package.json\\nnode_modules/test-exclude/node_modules/brace-expansion/package.json\\nnode_modules/test-exclude/node_modules/minimatch/package.json\\nnode_modules/test-exclude/package.json\\nnode_modules/tunnel/package.json\\nnode_modules/undici/package.json\\nnode_modules/unicorn-magic/package.json\\nnode_modules/v8-to-istanbul/package.json\\nnode_modules/which/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/string-width/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yaml/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/emoji-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json\\nnode_modules/yoctocolors/package.json\\ntest/example-deps/lib/node_modules/esm-pkg-2/package.json\\ntest/example-deps/lib/node_modules/esm-pkg/package.json\\ntest/example-deps/lib/node_modules/pkg-1/package.json\\ntest/example-deps/lib/node_modules/pkg-2/package.json" } ] }, "components": [ { "group": "", "name": "custom-pkg-2-name", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/custom-pkg-2-name@1.0.0", "type": "library", "bom-ref": "pkg:npm/custom-pkg-2-name@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/example-deps/lib/node_modules/pkg-2/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/example-deps/lib/node_modules/pkg-2/package.json" } ], "concludedValue": "test/example-deps/lib/node_modules/pkg-2/package.json" } ] } }, { "group": "", "name": "custom-pkg-1-name", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/custom-pkg-1-name@1.0.0", "type": "library", "bom-ref": "pkg:npm/custom-pkg-1-name@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/example-deps/lib/node_modules/pkg-1/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/example-deps/lib/node_modules/pkg-1/package.json" } ], "concludedValue": "test/example-deps/lib/node_modules/pkg-1/package.json" } ] } }, { "group": "", "name": "esm-dep-2", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/esm-dep-2@1.0.0", "type": "library", "bom-ref": "pkg:npm/esm-dep-2@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/example-deps/lib/node_modules/esm-pkg-2/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/example-deps/lib/node_modules/esm-pkg-2/package.json" } ], "concludedValue": "test/example-deps/lib/node_modules/esm-pkg-2/package.json" } ] } }, { "group": "", "name": "esm-dep", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/esm-dep@1.0.0", "type": "library", "bom-ref": "pkg:npm/esm-dep@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/example-deps/lib/node_modules/esm-pkg/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/example-deps/lib/node_modules/esm-pkg/package.json" } ], "concludedValue": "test/example-deps/lib/node_modules/esm-pkg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yoctocolors", "version": "2.2.0", "description": "The smallest and fastest command-line coloring package on the internet", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yoctocolors@2.2.0", "type": "library", "bom-ref": "pkg:npm/yoctocolors@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yoctocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yoctocolors/package.json" } ], "concludedValue": "node_modules/yoctocolors/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "1.2.2", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yocto-queue@1.2.2", "type": "library", "bom-ref": "pkg:npm/yocto-queue@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "21.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@21.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@21.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "17.7.3", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@17.7.3", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@17.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Eemeli Aro " } ], "group": "", "name": "yaml", "version": "2.9.1", "description": "JavaScript parser and stringifier for YAML", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@2.9.1", "externalReferences": [ { "type": "website", "url": "https://eemeli.org/yaml/" } ], "type": "library", "bom-ref": "pkg:npm/yaml@2.9.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yaml/package.json" } ], "concludedValue": "node_modules/yaml/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "7.0.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "8.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@8.1.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@8.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "v8-to-istanbul", "version": "9.3.0", "description": "convert from v8 coverage format to istanbul's format", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/v8-to-istanbul@9.3.0", "type": "library", "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/v8-to-istanbul/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/v8-to-istanbul/package.json" } ], "concludedValue": "node_modules/v8-to-istanbul/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unicorn-magic", "version": "0.1.0", "description": "Some useful utilities I often need", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.1.0", "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unicorn-magic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicorn-magic/package.json" } ], "concludedValue": "node_modules/unicorn-magic/package.json" } ] } }, { "group": "", "name": "undici", "version": "6.28.1", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@6.28.1", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@6.28.1", "properties": [ { "name": "SrcFile", "value": "node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici/package.json" } ], "concludedValue": "node_modules/undici/package.json" } ] } }, { "authors": [ { "name": "Koichi Kobayashi " } ], "group": "", "name": "tunnel", "version": "0.0.6", "description": "Node HTTP/HTTPS Agents for tunneling proxies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel@0.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/koichik/node-tunnel/" }, { "type": "vcs", "url": "https://github.com/koichik/node-tunnel.git" } ], "type": "library", "bom-ref": "pkg:npm/tunnel@0.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel/package.json" } ], "concludedValue": "node_modules/tunnel/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "test-exclude", "version": "7.0.2", "description": "test for inclusion or exclusion of paths using globs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/test-exclude@7.0.2", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/test-exclude.git" } ], "type": "library", "bom-ref": "pkg:npm/test-exclude@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/package.json" } ], "concludedValue": "node_modules/test-exclude/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.6", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.6", "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/test-exclude/node_modules/minimatch/package.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.12", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@5.0.12", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/test-exclude/node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "balanced-match", "version": "4.0.4", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/test-exclude/node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-final-newline", "version": "4.0.0", "description": "Strip the final newline character from a string or Uint8Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-final-newline@4.0.0", "type": "library", "bom-ref": "pkg:npm/strip-final-newline@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-final-newline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-final-newline/package.json" } ], "concludedValue": "node_modules/strip-final-newline/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "5.1.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@5.1.2", "type": "library", "bom-ref": "pkg:npm/string-width@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "stack-utils", "version": "2.0.6", "description": "Captures and cleans stack traces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stack-utils@2.0.6", "type": "library", "bom-ref": "pkg:npm/stack-utils@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/stack-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stack-utils/package.json" } ], "concludedValue": "node_modules/stack-utils/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "slash", "version": "5.1.0", "description": "Convert Windows backslash paths to slash paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@5.1.0", "type": "library", "bom-ref": "pkg:npm/slash@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slash/package.json" } ], "concludedValue": "node_modules/slash/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "4.1.0", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "3.0.0", "description": "Regular expression for matching a shebang line", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "2.0.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "pretty-ms", "version": "9.3.1", "description": "Convert milliseconds to a human readable string: `1337000000` → `15d 11h 23m 20s`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-ms@9.3.1", "type": "library", "bom-ref": "pkg:npm/pretty-ms@9.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-ms/package.json" } ], "concludedValue": "node_modules/pretty-ms/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "1.11.1", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-scurry@1.11.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@1.11.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "3.1.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "5.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@5.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "parse-ms", "version": "4.0.0", "description": "Parse milliseconds into an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-ms@4.0.0", "type": "library", "bom-ref": "pkg:npm/parse-ms@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-ms/package.json" } ], "concludedValue": "node_modules/parse-ms/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "package-json-from-dist", "version": "1.0.1", "description": "Load the local package.json from either src or dist folder", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package-json-from-dist@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/package-json-from-dist.git" } ], "type": "library", "bom-ref": "pkg:npm/package-json-from-dist@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package-json-from-dist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-json-from-dist/package.json" } ], "concludedValue": "node_modules/package-json-from-dist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "6.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@6.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "4.0.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@4.0.0", "type": "library", "bom-ref": "pkg:npm/p-limit@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "npm-run-path", "version": "6.0.0", "description": "Get your PATH prepended with locally installed binaries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/npm-run-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/package.json" } ], "concludedValue": "node_modules/npm-run-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unicorn-magic", "version": "0.3.0", "description": "Some useful utilities I often need", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.3.0", "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/node_modules/unicorn-magic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/node_modules/unicorn-magic/package.json" } ], "concludedValue": "node_modules/npm-run-path/node_modules/unicorn-magic/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "4.0.0", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-key@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/node_modules/path-key/package.json" } ], "concludedValue": "node_modules/npm-run-path/node_modules/path-key/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Thomas Watson (https://wa.tson.dk/)" } ], "group": "", "name": "module-details-from-path", "version": "1.0.4", "description": "Resolve npm package details, like name and base path, given an absolute path to a file inside a package", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/module-details-from-path@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/watson/module-details-from-path#readme" }, { "type": "vcs", "url": "git+https://github.com/watson/module-details-from-path.git" } ], "type": "library", "bom-ref": "pkg:npm/module-details-from-path@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/module-details-from-path/package.json" }, { "name": "ImportedModules", "value": "module-details-from-path" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-details-from-path/package.json" } ], "concludedValue": "node_modules/module-details-from-path/package.json" } ], "occurrences": [ { "location": "index.js", "line": 4 }, { "location": "hook.mjs", "line": 5 }, { "location": "hook.mjs", "line": 22 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "9.0.9", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@9.0.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@9.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "4.0.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@4.0.0", "type": "library", "bom-ref": "pkg:npm/make-dir@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "10.4.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@10.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@10.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "7.2.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@7.2.0", "type": "library", "bom-ref": "pkg:npm/locate-path@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "jackspeak", "version": "3.4.3", "description": "A very strict and proper argument parser.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jackspeak@3.4.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/jackspeak.git" } ], "type": "library", "bom-ref": "pkg:npm/jackspeak@3.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jackspeak/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jackspeak/package.json" } ], "concludedValue": "node_modules/jackspeak/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-reports", "version": "3.2.0", "description": "istanbul reports", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-reports@3.2.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-reports@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-reports/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-reports/package.json" } ], "concludedValue": "node_modules/istanbul-reports/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-report", "version": "3.0.1", "description": "Base reporting library for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-report@3.0.1", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-coverage", "version": "3.2.2", "description": "Data library for istanbul coverage objects", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-coverage@3.2.2", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "2.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-unicode-supported@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "4.0.1", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@4.0.1", "type": "library", "bom-ref": "pkg:npm/is-stream@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "4.1.0", "description": "Check if a value is a plain object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-obj@4.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "ehmicky (https://github.com/ehmicky)" } ], "group": "", "name": "human-signals", "version": "8.0.1", "description": "Human-friendly process signals", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/human-signals@8.0.1", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/ehmicky/human-signals" }, { "type": "vcs", "url": "git+https://github.com/ehmicky/human-signals.git" } ], "type": "library", "bom-ref": "pkg:npm/human-signals@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/human-signals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/human-signals/package.json" } ], "concludedValue": "node_modules/human-signals/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "html-escaper", "version": "2.0.2", "description": "fast and safe way to escape and unescape &<>'\" chars", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/html-escaper@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper" }, { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper.git" } ], "type": "library", "bom-ref": "pkg:npm/html-escaper@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/html-escaper/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-escaper/package.json" } ], "concludedValue": "node_modules/html-escaper/package.json" } ] }, "tags": [ "escape", "unescape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "10.5.0", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@10.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@10.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "9.0.1", "description": "Get a stream as a string, Buffer, ArrayBuffer or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@9.0.1", "type": "library", "bom-ref": "pkg:npm/get-stream@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "3.3.1", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@3.3.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "7.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@7.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "figures", "version": "6.1.0", "description": "Unicode symbols with fallbacks for older terminals", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/figures@6.1.0", "type": "library", "bom-ref": "pkg:npm/figures@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/figures/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/figures/package.json" } ], "concludedValue": "node_modules/figures/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "9.6.1", "description": "Process execution for humans", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@9.6.1", "type": "library", "bom-ref": "pkg:npm/execa@9.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "2.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@2.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "9.2.2", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@9.2.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@9.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Masaki Komagata" } ], "group": "", "name": "eastasianwidth", "version": "0.2.0", "description": "Get East Asian Width from a character.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eastasianwidth@0.2.0", "type": "library", "bom-ref": "pkg:npm/eastasianwidth@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eastasianwidth/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eastasianwidth/package.json" } ], "concludedValue": "node_modules/eastasianwidth/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "index.js", "line": 6 }, { "location": "hook.mjs", "line": 2 }, { "location": "hook.mjs", "line": 8 } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "2.0.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "8.0.1", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@8.0.1", "type": "library", "bom-ref": "pkg:npm/cliui@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "c8", "version": "10.1.3", "description": "output coverage reports using Node.js' built in coverage", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/c8@10.1.3", "type": "library", "bom-ref": "pkg:npm/c8@10.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/package.json" } ], "concludedValue": "node_modules/c8/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/yocto-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/c8/node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/c8/node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/c8/node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/c8/node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/c8/node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "5.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@5.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/find-up/package.json" } ], "concludedValue": "node_modules/c8/node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "2.1.7", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@2.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Matteo Collina " } ], "group": "", "name": "borp", "version": "0.20.2", "description": "node:test wrapper with TypeScript support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/borp@0.20.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcollina/borp" } ], "type": "library", "bom-ref": "pkg:npm/borp@0.20.2", "properties": [ { "name": "SrcFile", "value": "node_modules/borp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/borp/package.json" } ], "concludedValue": "node_modules/borp/package.json" } ] } }, { "group": "", "name": "project-build", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/project-build@1.0.0", "type": "library", "bom-ref": "pkg:npm/project-build@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/borp/fixtures/monorepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/borp/fixtures/monorepo/package.json" } ], "concludedValue": "node_modules/borp/fixtures/monorepo/package.json" } ] } }, { "group": "", "name": "package2", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package2@1.0.0", "type": "library", "bom-ref": "pkg:npm/package2@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/borp/fixtures/monorepo/package2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/borp/fixtures/monorepo/package2/package.json" } ], "concludedValue": "node_modules/borp/fixtures/monorepo/package2/package.json" } ] } }, { "group": "", "name": "package1", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package1@1.0.0", "type": "library", "bom-ref": "pkg:npm/package1@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/borp/fixtures/monorepo/package1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/borp/fixtures/monorepo/package1/package.json" } ], "concludedValue": "node_modules/borp/fixtures/monorepo/package1/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.3.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@6.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "group": "@types", "name": "istanbul-lib-coverage", "version": "2.0.6", "description": "TypeScript definitions for istanbul-lib-coverage", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/istanbul-lib-coverage" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/@types/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "merge-streams", "version": "4.0.0", "description": "Merge multiple streams into a unified stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/merge-streams@4.0.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/merge-streams/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/merge-streams/package.json" } ], "concludedValue": "node_modules/@sindresorhus/merge-streams/package.json" } ] } }, { "authors": [ { "name": "Ze-Zheng Wu" } ], "group": "@sec-ant", "name": "readable-stream", "version": "0.4.1", "description": "A tiny, zero-dependency yet spec-compliant asynchronous iterator polyfill/ponyfill for ReadableStreams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sec-ant/readable-stream@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Sec-ant/readable-stream" }, { "type": "vcs", "url": "git+https://github.com/Sec-ant/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/@sec-ant/readable-stream@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sec-ant/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sec-ant/readable-stream/package.json" } ], "concludedValue": "node_modules/@sec-ant/readable-stream/package.json" } ] } }, { "authors": [ { "name": "Moshe Atlow" } ], "group": "@reporters", "name": "github", "version": "1.13.1", "description": "A github actions reporter for `node:test`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40reporters/github@1.13.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/MoLow/reporters/tree/main/packages/github" } ], "type": "library", "bom-ref": "pkg:npm/@reporters/github@1.13.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@reporters/github/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@reporters/github/package.json" } ], "concludedValue": "node_modules/@reporters/github/package.json" } ] } }, { "group": "@pkgjs", "name": "parseargs", "version": "0.11.0", "description": "Polyfill of future proposal for `util.parseArgs()`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pkgjs/parseargs#readme" } ], "type": "library", "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@pkgjs/parseargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pkgjs/parseargs/package.json" } ], "concludedValue": "node_modules/@pkgjs/parseargs/package.json" } ] } }, { "authors": [ { "name": "Matteo Collina " } ], "group": "@matteo.collina", "name": "snap", "version": "0.3.0", "description": "snapshot testing companion for node:test", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40matteo.collina/snap@0.3.0", "type": "library", "bom-ref": "pkg:npm/@matteo.collina/snap@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@matteo.collina/snap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@matteo.collina/snap/package.json" } ], "concludedValue": "node_modules/@matteo.collina/snap/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "description": "Trace the original position through a source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.6.0", "description": "Encode/decode sourcemap mappings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/resolve-uri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/resolve-uri/package.json" } ], "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json" } ] } }, { "authors": [ { "name": "Corey Farrell" } ], "group": "@istanbuljs", "name": "schema", "version": "0.1.6", "description": "Schemas describing various structures used by nyc and istanbuljs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40istanbuljs/schema@0.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/istanbuljs/schema#readme" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/schema.git" } ], "type": "library", "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@istanbuljs/schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@istanbuljs/schema/package.json" } ], "concludedValue": "node_modules/@istanbuljs/schema/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "@isaacs", "name": "cliui", "version": "8.0.2", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "type": "library", "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/cliui/package.json" } ], "concludedValue": "node_modules/@isaacs/cliui/package.json" } ] } }, { "authors": [ { "name": "Charles Samborski (https://demurgos.net)" } ], "group": "@bcoe", "name": "v8-coverage", "version": "1.0.2", "description": "Helper functions for V8 coverage files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bcoe/v8-coverage@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bcoe/v8-coverage.git" } ], "type": "library", "bom-ref": "pkg:npm/@bcoe/v8-coverage@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@bcoe/v8-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@bcoe/v8-coverage/package.json" } ], "concludedValue": "node_modules/@bcoe/v8-coverage/package.json" } ] } }, { "group": "@apm-js-collab", "name": "code-transformer", "version": "0.10.0", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40apm-js-collab/code-transformer@0.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/orchestrion-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@apm-js-collab/code-transformer@0.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@apm-js-collab/code-transformer/package.json" }, { "name": "ImportedModules", "value": "@apm-js-collab/code-transformer,create,@apm-js-collab/code-transformer/create" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@apm-js-collab/code-transformer/package.json" } ], "concludedValue": "node_modules/@apm-js-collab/code-transformer/package.json" } ], "occurrences": [ { "location": "index.js", "line": 2 }, { "location": "hook.mjs", "line": 4 }, { "location": "hook.mjs", "line": 15 } ] }, "tags": [ "transform" ] }, { "group": "@actions", "name": "io", "version": "2.0.0", "description": "Actions io lib", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/io@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/io" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/io@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/io/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/io/package.json" } ], "concludedValue": "node_modules/@actions/io/package.json" } ] } }, { "group": "@actions", "name": "http-client", "version": "3.0.2", "description": "Actions Http Client", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/http-client@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/http-client" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/http-client@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/http-client/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/http-client/package.json" } ], "concludedValue": "node_modules/@actions/http-client/package.json" } ] } }, { "group": "@actions", "name": "exec", "version": "2.0.0", "description": "Actions exec lib", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/exec@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/exec" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/exec@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/exec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/exec/package.json" } ], "concludedValue": "node_modules/@actions/exec/package.json" } ] } }, { "group": "@actions", "name": "core", "version": "2.0.3", "description": "Actions core lib", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/core@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/core" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/core@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/core/package.json" } ], "concludedValue": "node_modules/@actions/core/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@apm-js-collab/tracing-hooks@0.5.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-16T15:44:40Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 16, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'tracing-hooks' with version '0.5.0'. The package type in this SBOM is npm with 12 purl namespaces described under components. The components were identified from 132 source files." } ] }