{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ddb91e40-49dc-4b3e-9c90-42af7a6aebfd", "version": 1, "metadata": { "timestamp": "2026-11-07T21:56:58Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "query-planner", "group": "@apollo", "version": "0.6.4", "description": "Apollo Query Planner", "purl": "pkg:npm/%40apollo/query-planner@0.6.4", "bom-ref": "pkg:npm/@apollo/query-planner@0.6.4", "author": "Apollo ", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/apollographql/federation.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/apollo-graphql/package.json\\nnode_modules/array-buffer-byte-length/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/chalk/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/core-js-pure/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-get-iterator/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/for-each/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/functions-have-names/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/gopd/package.json\\nnode_modules/has-bigints/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/hasown/package.json\\nnode_modules/inherits/package.json\\nnode_modules/internal-slot/package.json\\nnode_modules/is-arguments/package.json\\nnode_modules/is-array-buffer/package.json\\nnode_modules/is-bigint/package.json\\nnode_modules/is-boolean-object/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-date-object/package.json\\nnode_modules/is-map/package.json\\nnode_modules/is-number-object/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-set/package.json\\nnode_modules/is-shared-array-buffer/package.json\\nnode_modules/is-string/package.json\\nnode_modules/is-symbol/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/is-weakmap/package.json\\nnode_modules/is-weakset/package.json\\nnode_modules/isarray/package.json\\nnode_modules/lodash.sortby/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-is/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/object.assign/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/pretty-format/node_modules/ansi-styles/package.json\\nnode_modules/pretty-format/package.json\\nnode_modules/react-is/package.json\\nnode_modules/regexp.prototype.flags/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safe-regex-test/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/set-function-name/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/side-channel-list/package.json\\nnode_modules/side-channel-map/package.json\\nnode_modules/side-channel-weakmap/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/stop-iteration-iterator/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/to-buffer/package.json\\nnode_modules/typed-array-buffer/package.json\\nnode_modules/which-boxed-primitive/package.json\\nnode_modules/which-collection/package.json\\nnode_modules/which-typed-array/package.json" } ] }, "components": [ { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "which-typed-array", "version": "1.1.24", "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-typed-array@1.1.24", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/which-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/which-typed-array@1.1.24", "properties": [ { "name": "SrcFile", "value": "node_modules/which-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-typed-array/package.json" } ], "concludedValue": "node_modules/which-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "which-collection", "version": "1.0.2", "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-collection@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/which-collection#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/which-collection.git" } ], "type": "library", "bom-ref": "pkg:npm/which-collection@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which-collection/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-collection/package.json" } ], "concludedValue": "node_modules/which-collection/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "which-boxed-primitive", "version": "1.1.1", "description": "Which kind of boxed JS primitive is this?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-boxed-primitive@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/which-boxed-primitive#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/which-boxed-primitive.git" } ], "type": "library", "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which-boxed-primitive/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-boxed-primitive/package.json" } ], "concludedValue": "node_modules/which-boxed-primitive/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-buffer", "version": "1.0.3", "description": "Get the ArrayBuffer out of a TypedArray, robustly.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-buffer@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-buffer@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-buffer/package.json" } ], "concludedValue": "node_modules/typed-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "to-buffer", "version": "1.2.2", "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-buffer@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/to-buffer" }, { "type": "vcs", "url": "https://github.com/browserify/to-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/to-buffer@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/to-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-buffer/package.json" } ], "concludedValue": "node_modules/to-buffer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "stop-iteration-iterator", "version": "1.1.0", "description": "Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stop-iteration-iterator@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/stop-iteration-iterator#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/stop-iteration-iterator.git" } ], "type": "library", "bom-ref": "pkg:npm/stop-iteration-iterator@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stop-iteration-iterator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stop-iteration-iterator/package.json" } ], "concludedValue": "node_modules/stop-iteration-iterator/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-weakmap", "version": "1.0.2", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-weakmap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-weakmap#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-weakmap.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-weakmap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-weakmap/package.json" } ], "concludedValue": "node_modules/side-channel-weakmap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-map", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a Map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-map@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-map#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-map.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-map@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-map/package.json" } ], "concludedValue": "node_modules/side-channel-map/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-list", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a linked list", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-list@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-list#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-list.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-list@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-list/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-list/package.json" } ], "concludedValue": "node_modules/side-channel-list/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel", "version": "1.1.1", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel/package.json" } ], "concludedValue": "node_modules/side-channel/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "sha.js", "version": "2.4.12", "description": "Streamable SHA hashes in pure javascript", "scope": "optional", "licenses": [ { "expression": "MIT AND BSD-3-Clause" } ], "purl": "pkg:npm/sha.js@2.4.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/sha.js" }, { "type": "vcs", "url": "git://github.com/crypto-browserify/sha.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sha.js@2.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/package.json" } ], "concludedValue": "node_modules/sha.js/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-name", "version": "2.0.2", "description": "Set a function's name property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-name@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-name#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-name.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-name@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-name/package.json" } ], "concludedValue": "node_modules/set-function-name/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-length", "version": "1.2.2", "description": "Set a function's length property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-length@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-length#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-length.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-length@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-length/package.json" } ], "concludedValue": "node_modules/set-function-length/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "safe-regex-test", "version": "1.1.0", "description": "Give a regex, get a robust predicate function that tests it against a string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-regex-test@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/safe-regex-test#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/safe-regex-test.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-regex-test@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-regex-test/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-regex-test/package.json" } ], "concludedValue": "node_modules/safe-regex-test/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "regexp.prototype.flags", "version": "1.5.4", "description": "ES6 spec-compliant RegExp.prototype.flags shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexp.prototype.flags@1.5.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/RegExp.prototype.flags.git" } ], "type": "library", "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/regexp.prototype.flags/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexp.prototype.flags/package.json" } ], "concludedValue": "node_modules/regexp.prototype.flags/package.json" } ] } }, { "group": "", "name": "react-is", "version": "17.0.2", "description": "Brand checking of React Elements.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-is@17.0.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-is@17.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-is/package.json" } ], "concludedValue": "node_modules/react-is/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "James Kyle " } ], "group": "", "name": "pretty-format", "version": "27.5.1", "description": "Stringify any JavaScript value.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-format@27.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/facebook/jest.git" } ], "type": "library", "bom-ref": "pkg:npm/pretty-format@27.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-format/package.json" }, { "name": "ImportedModules", "value": "pretty-format,Config,pretty-format/Config,NewPlugin,pretty-format/NewPlugin,Refs,pretty-format/Refs,Plugin,pretty-format/Plugin" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-format/package.json" } ], "concludedValue": "node_modules/pretty-format/package.json" } ], "occurrences": [ { "location": "dist/QueryPlan.js", "line": 8 }, { "location": "dist/prettyFormatQueryPlan.js", "line": 7 }, { "location": "src/QueryPlan.ts", "line": 2 }, { "location": "src/QueryPlan.ts", "line": 64 }, { "location": "src/prettyFormatQueryPlan.ts", "line": 2 }, { "location": "src/prettyFormatQueryPlan.ts", "line": 6 }, { "location": "src/snapshotSerializers/astSerializer.ts", "line": 3 }, { "location": "src/snapshotSerializers/queryPlanSerializer.ts", "line": 1 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "5.2.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@5.2.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-format/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-format/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/pretty-format/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "possible-typed-array-names", "version": "1.1.0", "description": "A simple list of possible Typed Array names.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/possible-typed-array-names@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/possible-typed-array-names#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/possible-typed-array-names.git" } ], "type": "library", "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/possible-typed-array-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/possible-typed-array-names/package.json" } ], "concludedValue": "node_modules/possible-typed-array-names/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object.assign", "version": "4.1.7", "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.assign@4.1.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object.assign.git" } ], "type": "library", "bom-ref": "pkg:npm/object.assign@4.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/object.assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.assign/package.json" } ], "concludedValue": "node_modules/object.assign/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "object-keys", "version": "1.1.1", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object-is", "version": "1.1.6", "description": "ES2015-compliant shim for Object.is - differentiates between -0 and +0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-is@1.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/object-is" }, { "type": "vcs", "url": "git://github.com/es-shims/object-is.git" } ], "type": "library", "bom-ref": "pkg:npm/object-is@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/object-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-is/package.json" } ], "concludedValue": "node_modules/object-is/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.13.4", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/object-inspect" }, { "type": "vcs", "url": "git://github.com/inspect-js/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "math-intrinsics", "version": "1.1.0", "description": "ES Math-related intrinsics and helpers, robustly cached.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/math-intrinsics#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/math-intrinsics.git" } ], "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/math-intrinsics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/math-intrinsics/package.json" } ], "concludedValue": "node_modules/math-intrinsics/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.sortby", "version": "4.7.0", "description": "The lodash method `_.sortBy` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.sortby@4.7.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.sortby@4.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.sortby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.sortby/package.json" } ], "concludedValue": "node_modules/lodash.sortby/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "2.0.5", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-weakset", "version": "2.0.4", "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-weakset@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-weakset#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-weakset.git" } ], "type": "library", "bom-ref": "pkg:npm/is-weakset@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-weakset/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-weakset/package.json" } ], "concludedValue": "node_modules/is-weakset/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-weakmap", "version": "2.0.2", "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-weakmap@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-weakmap#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-weakmap.git" } ], "type": "library", "bom-ref": "pkg:npm/is-weakmap@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-weakmap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-weakmap/package.json" } ], "concludedValue": "node_modules/is-weakmap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-typed-array", "version": "1.1.15", "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typed-array@1.1.15", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typed-array@1.1.15", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typed-array/package.json" } ], "concludedValue": "node_modules/is-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-symbol", "version": "1.1.1", "description": "Determine if a value is an ES6 Symbol or not.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-symbol@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-symbol.git" } ], "type": "library", "bom-ref": "pkg:npm/is-symbol@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-symbol/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-symbol/package.json" } ], "concludedValue": "node_modules/is-symbol/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-string", "version": "1.1.1", "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-string@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-string.git" } ], "type": "library", "bom-ref": "pkg:npm/is-string@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-string/package.json" } ], "concludedValue": "node_modules/is-string/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-shared-array-buffer", "version": "1.0.4", "description": "Is this value a JS SharedArrayBuffer?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-shared-array-buffer@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-shared-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-shared-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-shared-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-shared-array-buffer/package.json" } ], "concludedValue": "node_modules/is-shared-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-set", "version": "2.0.3", "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-set@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-set#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-set.git" } ], "type": "library", "bom-ref": "pkg:npm/is-set@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-set/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-set/package.json" } ], "concludedValue": "node_modules/is-set/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-regex", "version": "1.2.1", "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regex@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-regex" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regex/package.json" } ], "concludedValue": "node_modules/is-regex/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-number-object", "version": "1.1.1", "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number-object@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-number-object#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-number-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-number-object@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number-object/package.json" } ], "concludedValue": "node_modules/is-number-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-map", "version": "2.0.3", "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-map@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-map#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-map.git" } ], "type": "library", "bom-ref": "pkg:npm/is-map@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-map/package.json" } ], "concludedValue": "node_modules/is-map/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "is-date-object", "version": "1.1.0", "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-date-object@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-date-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-date-object@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-date-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-date-object/package.json" } ], "concludedValue": "node_modules/is-date-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-callable", "version": "1.2.7", "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-callable@1.2.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-callable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/is-callable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-callable/package.json" } ], "concludedValue": "node_modules/is-callable/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-boolean-object", "version": "1.2.2", "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-boolean-object@1.2.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-boolean-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-boolean-object@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-boolean-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-boolean-object/package.json" } ], "concludedValue": "node_modules/is-boolean-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-bigint", "version": "1.1.0", "description": "Is this value an ES BigInt?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-bigint@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-bigint#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-bigint.git" } ], "type": "library", "bom-ref": "pkg:npm/is-bigint@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-bigint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-bigint/package.json" } ], "concludedValue": "node_modules/is-bigint/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-array-buffer", "version": "3.0.5", "description": "Is this value a JS ArrayBuffer?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-array-buffer@3.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-array-buffer@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/is-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-array-buffer/package.json" } ], "concludedValue": "node_modules/is-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-arguments", "version": "1.2.0", "description": "Is this an arguments object? It's a harder question than you think.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arguments@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-arguments" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-arguments.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arguments@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arguments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arguments/package.json" } ], "concludedValue": "node_modules/is-arguments/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "internal-slot", "version": "1.1.0", "description": "ES spec-like internal slots", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/internal-slot@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/internal-slot#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/internal-slot.git" } ], "type": "library", "bom-ref": "pkg:npm/internal-slot@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/internal-slot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/internal-slot/package.json" } ], "concludedValue": "node_modules/internal-slot/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-tostringtag", "version": "1.0.2", "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-tostringtag@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-tostringtag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-tostringtag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-tostringtag@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-tostringtag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-tostringtag/package.json" } ], "concludedValue": "node_modules/has-tostringtag/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-symbols", "version": "1.1.0", "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-symbols@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/has-symbols#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/has-symbols.git" } ], "type": "library", "bom-ref": "pkg:npm/has-symbols@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-symbols/package.json" } ], "concludedValue": "node_modules/has-symbols/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "has-property-descriptors", "version": "1.0.2", "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-property-descriptors@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-property-descriptors#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-property-descriptors.git" } ], "type": "library", "bom-ref": "pkg:npm/has-property-descriptors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-property-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-property-descriptors/package.json" } ], "concludedValue": "node_modules/has-property-descriptors/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "has-bigints", "version": "1.1.0", "description": "Determine if the JS environment has BigInt support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-bigints@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/has-bigints#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/has-bigints.git" } ], "type": "library", "bom-ref": "pkg:npm/has-bigints@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-bigints/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-bigints/package.json" } ], "concludedValue": "node_modules/has-bigints/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "gopd", "version": "1.2.0", "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gopd@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/gopd#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/gopd.git" } ], "type": "library", "bom-ref": "pkg:npm/gopd@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gopd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gopd/package.json" } ], "concludedValue": "node_modules/gopd/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-proto", "version": "1.0.1", "description": "Robustly get the [[Prototype]] of an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/get-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-proto/package.json" } ], "concludedValue": "node_modules/get-proto/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-intrinsic", "version": "1.3.0", "description": "Get and robustly cache all JS language-level intrinsics at first require time", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-intrinsic@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-intrinsic#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-intrinsic.git" } ], "type": "library", "bom-ref": "pkg:npm/get-intrinsic@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-intrinsic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-intrinsic/package.json" } ], "concludedValue": "node_modules/get-intrinsic/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "functions-have-names", "version": "1.2.3", "description": "Does this JS environment support the `name` property on functions?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/functions-have-names@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/functions-have-names#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/functions-have-names.git" } ], "type": "library", "bom-ref": "pkg:npm/functions-have-names@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/functions-have-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/functions-have-names/package.json" } ], "concludedValue": "node_modules/functions-have-names/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "for-each", "version": "0.3.5", "description": "A better forEach", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/for-each@0.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/for-each" }, { "type": "vcs", "url": "https://github.com/Raynos/for-each.git" } ], "type": "library", "bom-ref": "pkg:npm/for-each@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/for-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/for-each/package.json" } ], "concludedValue": "node_modules/for-each/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-object-atoms", "version": "1.1.2", "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-object-atoms@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-object-atoms#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-object-atoms.git" } ], "type": "library", "bom-ref": "pkg:npm/es-object-atoms@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/es-object-atoms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-object-atoms/package.json" } ], "concludedValue": "node_modules/es-object-atoms/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-get-iterator", "version": "1.1.3", "description": "Get an iterator for any JS language value. Works robustly across all environments, all versions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-get-iterator@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-get-iterator#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-get-iterator.git" } ], "type": "library", "bom-ref": "pkg:npm/es-get-iterator@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/es-get-iterator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-get-iterator/package.json" } ], "concludedValue": "node_modules/es-get-iterator/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-define-property", "version": "1.0.1", "description": "`Object.defineProperty`, but not IE 8's broken one.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-define-property@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-define-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-define-property.git" } ], "type": "library", "bom-ref": "pkg:npm/es-define-property@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es-define-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-define-property/package.json" } ], "concludedValue": "node_modules/es-define-property/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "dunder-proto", "version": "1.0.1", "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dunder-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/dunder-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/dunder-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/dunder-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dunder-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dunder-proto/package.json" } ], "concludedValue": "node_modules/dunder-proto/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "define-properties", "version": "1.2.1", "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/define-properties@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/define-properties.git" } ], "type": "library", "bom-ref": "pkg:npm/define-properties@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/define-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/define-properties/package.json" } ], "concludedValue": "node_modules/define-properties/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "define-data-property", "version": "1.1.4", "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/define-data-property@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/define-data-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/define-data-property.git" } ], "type": "library", "bom-ref": "pkg:npm/define-data-property@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/define-data-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/define-data-property/package.json" } ], "concludedValue": "node_modules/define-data-property/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "2.2.3", "description": "node's assert.deepEqual algorithm", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@2.2.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/inspect-js/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@2.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-equal/package.json" }, { "name": "ImportedModules", "value": "deep-equal" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/deep-equal/package.json" } ], "occurrences": [ { "location": "dist/buildQueryPlan.js", "line": 17 }, { "location": "src/buildQueryPlan.ts", "line": 60 }, { "location": "src/buildQueryPlan.ts", "line": 1089 } ] } }, { "authors": [ { "name": "Denis Pushkarev (http://zloirock.ru)" } ], "group": "", "name": "core-js-pure", "version": "3.51.0", "description": "Standard library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-js-pure@3.51.0", "externalReferences": [ { "type": "website", "url": "https://core-js.io" }, { "type": "vcs", "url": "git+https://github.com/zloirock/core-js.git" } ], "type": "library", "bom-ref": "pkg:npm/core-js-pure@3.51.0", "properties": [ { "name": "SrcFile", "value": "node_modules/core-js-pure/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-js-pure/package.json" } ], "concludedValue": "node_modules/core-js-pure/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "dist/utilities/debug.js", "line": 7 }, { "location": "src/utilities/debug.ts", "line": 3 }, { "location": "src/utilities/debug.ts", "line": 8 }, { "location": "src/utilities/debug.ts", "line": 38 }, { "location": "src/utilities/debug.ts", "line": 97 }, { "location": "src/utilities/debug.ts", "line": 119 } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bound", "version": "1.0.4", "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bound@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bound#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bound.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bound@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bound/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bound/package.json" } ], "concludedValue": "node_modules/call-bound/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind-apply-helpers", "version": "1.0.2", "description": "Helper functions around Function call/apply/bind, for use in `call-bind`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind-apply-helpers#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind-apply-helpers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind-apply-helpers/package.json" } ], "concludedValue": "node_modules/call-bind-apply-helpers/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind", "version": "1.0.9", "description": "Robustly `.call.bind()` a function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind@1.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind@1.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind/package.json" } ], "concludedValue": "node_modules/call-bind/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "available-typed-arrays", "version": "1.0.7", "description": "Returns an array of Typed Array names that are available in the current environment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/available-typed-arrays@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/available-typed-arrays#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/available-typed-arrays.git" } ], "type": "library", "bom-ref": "pkg:npm/available-typed-arrays@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/available-typed-arrays/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/available-typed-arrays/package.json" } ], "concludedValue": "node_modules/available-typed-arrays/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "array-buffer-byte-length", "version": "1.0.2", "description": "Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-buffer-byte-length@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/array-buffer-byte-length#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/array-buffer-byte-length.git" } ], "type": "library", "bom-ref": "pkg:npm/array-buffer-byte-length@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/array-buffer-byte-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-buffer-byte-length/package.json" } ], "concludedValue": "node_modules/array-buffer-byte-length/package.json" } ] } }, { "authors": [ { "name": "Apollo " } ], "group": "", "name": "apollo-graphql", "version": "0.9.7", "description": "Apollo GraphQL utility library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/apollo-graphql@0.9.7", "type": "library", "bom-ref": "pkg:npm/apollo-graphql@0.9.7", "properties": [ { "name": "SrcFile", "value": "node_modules/apollo-graphql/package.json" }, { "name": "ImportedModules", "value": "apollo-graphql,transformSchema,apollo-graphql/transformSchema" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/apollo-graphql/package.json" } ], "concludedValue": "node_modules/apollo-graphql/package.json" } ], "occurrences": [ { "location": "dist/composedSchema/removeInaccessibleElements.js", "line": 5 }, { "location": "src/composedSchema/removeInaccessibleElements.ts", "line": 18 }, { "location": "src/composedSchema/removeInaccessibleElements.ts", "line": 43 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@apollo/query-planner@0.6.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-07T21:56:58Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, November 7, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'query-planner' with version '0.6.4'." } ] }