{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:91bff4d7-4fe1-4421-9eb0-6c7d3f645f4d", "version": 1, "metadata": { "timestamp": "2026-11-03T12:08:35Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "opencv", "group": "@appium", "version": "5.0.2", "description": "OpenCV-related helper library", "purl": "pkg:npm/%40appium/opencv@5.0.2", "bom-ref": "pkg:npm/@appium/opencv@5.0.2", "author": "https://github.com/appium", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test:e2e, test:smoke, test:unit" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://appium.io" }, { "type": "vcs", "url": "https://github.com/appium/appium.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@emnapi\\n@img" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "opencv-bindings", "version": "4.5.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "15d604f6eaa7a0f29b02464510ea4887a453b49233d65cfe5b6ef13c2a353afebe77438e820f879bd393d8c206206f15d43a777d694bbe2ed22230cea6a3b65c" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/opencv-bindings@4.5.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/opencv-bindings/-/opencv-bindings-4.5.5.tgz" } ], "type": "framework", "bom-ref": "pkg:npm/opencv-bindings@4.5.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/opencv-bindings/-/opencv-bindings-4.5.5.tgz" }, { "name": "ImportedModules", "value": "opencv-bindings" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "build/lib/index.js", "line": 49 }, { "location": "lib/index.ts", "line": 73 } ] }, "tags": [ "framework" ] }, { "group": "", "name": "sharp", "version": "0.35.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6309f83a7cc6ba4a7b08332ba74f11439d182a6bb01b8edbad980854f4ef05a6807d095197282b46a4abc5d0a22fd33e2e5ccb06227af0847542abf31f28c2ee" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sharp@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sharp/-/sharp-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sharp@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sharp/-/sharp-0.35.5.tgz" }, { "name": "ImportedModules", "value": "sharp" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "build/lib/index.js", "line": 2 }, { "location": "build/lib/index.js", "line": 458 }, { "location": "build/lib/index.js", "line": 472 }, { "location": "lib/index.ts", "line": 3 }, { "location": "lib/index.ts", "line": 546 }, { "location": "lib/index.ts", "line": 561 } ] } }, { "group": "@img", "name": "colour", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4ddefaabb8f9ee8fed2d57604bbe3a7180117d2cb193c8847d1c5ec0bf61e0e3336216d6e1301ca69974993e1ecaa5dd761e8bfe3c2833be66a3b8b16bfa4279" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/colour@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/colour@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "detect-libc", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "06d8f604e38ef37a375b21f9f5ef0c817b3111055c6ab9143a9118aee6c1d2eaf09cdd74c90dfae2bb22072535d67665a966199b4e62fe87fb8a8e26ce2841b5" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-libc@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/detect-libc@2.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "semver", "version": "7.8.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f65a52494e0c972de6aedaeec0bb3578b2bafa0cdbcea78117044d8c88c4fbd2ee0e959d61cb6b4254377a3d489608bb8249e9b134673e82cff03a421ea1c827" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/semver/-/semver-7.8.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/semver/-/semver-7.8.6.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/opencv/node_modules/.bin/semver" }, { "name": "cdx:npm:bin", "value": "semver" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-darwin-arm64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "411525150d16c6f756caaa86fd6b48de2ba97c3e6b0739821d749d3ec63dd6c02d56d4e8ed0e1c6facce71c67782a12a92bd1fd40b357a12ea984a43b117fe96" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-darwin-arm64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-darwin-arm64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-darwin-arm64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e51f3d9c162245d5254962713e13be195b5a5f35d2c4a9d1bbfc6a327dca4c0dcbf4407d3b2fcff8d9f67f6be584fb94772fd9bac6f60daadbc93a4609f103bb" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-darwin-arm64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-darwin-arm64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-darwin-x64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f81476e794610e5a72814a4e73f25db759d3e834375c6fc4468e706dc74e7f9437db474ab4f08a3cb4752c9b3d5465d168c6bc975b946b4b6408d397880c5953" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-darwin-x64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-darwin-x64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-darwin-x64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "891d8e287f34ca2d14f9d529972877ff176916fa6ce98902c2c5de9c8271ab1475bfda3ec6d29319b4bd1fb729b3ed95c6373c0758fdea9ef93664c68c886da5" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-darwin-x64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-darwin-x64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-freebsd-wasm32", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "63fcfdd67119e2e2015f95f79df4e8be353d94734a1586cbda5a4708b54d99740ad3754866f5c106dd0ac5b3c6a7649d19217eda6414e1efa141a58eb7cea203" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-freebsd-wasm32@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-freebsd-wasm32@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-wasm32", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3edb206b5b2ee2d431f8b2c5d44092f54ea7cf9926ad72a8e9755bb51e3c29edd9471c6069606eec80ed11ed6aba8f218aea709ba585ab15655da49fec820d19" } ], "licenses": [ { "expression": "Apache-2.0 AND LGPL-3.0-or-later AND MIT" } ], "purl": "pkg:npm/%40img/sharp-wasm32@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-wasm32@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@emnapi", "name": "runtime", "version": "1.11.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5f3e13a72922ed7caba5b50ad6347502174075a5f2861638959de778ba1d9a1a6e59fcb63c040de41e3ab00894e2588e5c62e41f2a67fea53e8ef7d64826182c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40emnapi/runtime@1.11.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@emnapi/runtime@1.11.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tslib", "version": "2.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6b8531f552ae20c1ec392ec435b12aea12b66466084f6ed1b65d04e1e0fd2aac3184a89078c644ffdc5bdc8758c166923b220140b1318508170d3628882c6758" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@2.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tslib/-/tslib-2.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tslib/-/tslib-2.9.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linux-arm", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2e646d4ec387baf336fb094ed836f7eddc7932266107416f4ae9dc8b0e3c62374e919cfd2808916e6f2e8de30e03520daa67a2e4d6a91716042b50f565289d9b" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linux-arm@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linux-arm@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linux-arm64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6377605ffea513642141bf86c72d166717e0f4c126fc90636a66694b622494fef1210a0a378873026eca70c546b5a543b779de13d38a042eef01fa2703f2ebd4" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linux-arm64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linux-arm64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linux-ppc64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2dee9ba01f136a2d0d8acfa02312292b1ebc50355522a751f138a7e587f5cf62c92502c326f08346a46efa30b6a82a03f9e2289a89e63b0078b26051c5f56961" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linux-ppc64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linux-ppc64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linux-riscv64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6879242041cf45d4047a024ddb430b986b71603f51db042bdc2c2975d9eee7e60a32de94cdac7b4bd879829653a3cc32ac6b994a57d0eb739ebcbe664f2382ed" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linux-riscv64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linux-riscv64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linux-s390x", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "adafe607a32290448350eed883e322f796c505bf46b0e6d446e8673afdceaa49e319ef6c66b1bcb427bdab4c52206aed2e0be0c3480a9c559c2b86e54a040eb9" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linux-s390x@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linux-s390x@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linux-x64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "189fff4925db9f04837acd36ba60779c324b15c433c3c6b5f15f1fca1aabead579d79b4e10c7489a38f18f502869f311cf9e85dcf1e07ed9e3d5010a494d7393" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linux-x64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linux-x64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linuxmusl-arm64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "86fba5170b6351c6a0b22b3a041c47c061705a83598e062650b195ad97327cd6e303c84a20b6d1c46835e7fef0e470f25c75d4a2cfe3e9b6805aa9c2c90d8358" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linuxmusl-arm64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linuxmusl-arm64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-libvips-linuxmusl-x64", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb35ca784fe9dfd2350260377091b7e5ec8118da8d75d2e75178e1c019ec1a314f5aa7f954a903044a9a1243c3a1312d931c22dafbfc4dcaf6983c8fe12a3b16" } ], "licenses": [ { "license": { "id": "LGPL-3.0-or-later", "url": "https://opensource.org/licenses/LGPL-3.0-or-later", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-libvips-linuxmusl-x64@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-libvips-linuxmusl-x64@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.4.tgz" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linux-arm", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2c46972b659d5d52b9ca4730d1bb96c8f32c98b2cbdafa472c3eb2acd496f891842f70593c0e2da4a37a89a31ce00c534c0a1a5ffb14d6b38be7595c233e3c65" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linux-arm@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linux-arm@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linux-arm64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2d8571e494ec38cd820739b1ade87e9e5eb8ff71fa5dbd3d8922e49ea1f8ef3d93d83145c437852cfe72e1d2707ba1fbb864251cfc8412d22aca8dc362c47075" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linux-arm64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linux-arm64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linux-ppc64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "415c4002af1ebd5448f626b6bea830ae65ae727e437eff89756ce3ef9a43f289872cf48fedff29db43bc8f1ce309cb8211010eb583995265f5864899d2475ebc" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linux-ppc64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linux-ppc64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linux-riscv64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2ed76b79782e69abca3833c87f327891f7f1ed436dd689b0b4ad2b721e0405b6d24d73e7c5699849ac9774b270d1f27343dee41edd602ffca1e2dbd4fa70b245" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linux-riscv64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linux-riscv64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linux-s390x", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5196ac4ce162633a2d4ec18e0aee3605f5333fa4eee83a3ff78ee2466d51b0b2af965971c06727e11376ecb89b19671e8b1e18f8f9b0de3b274dc0902205a3a8" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linux-s390x@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linux-s390x@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linux-x64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4b116d2d378922784003d43cdfa92ec76bd935e381404c7ae7caaf6dba1949caf4c08011ca6dc8706996ecaa550f9b1b560d0e8f2fae74541d6b2608672a0da2" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linux-x64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linux-x64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linuxmusl-arm64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f476cc725988d7394d90546cdf3f7f781b438df0f4b0696b5f5cfa6f5ab09a2158e449432e1e010b42cf05d569ef3d435c588a9487339dff9996cb99ccbc50aa" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linuxmusl-arm64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linuxmusl-arm64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-linuxmusl-x64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e0a3a986a074df91eb55da8b65f0a0333cc446b4249333b04619783809113b560295d6da163c925cc68ae77e0ca3457e2e776794993eb1b5322de53450bc83d4" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-linuxmusl-x64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-linuxmusl-x64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-webcontainers-wasm32", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "85f845fc59a84324d4900d1b20a14eb70e77e8141278131ee8117a4325a5acfc53ef9e3e4c52da67bb0a2937efbccd322602a06984f09c508867f1ae0f0e5250" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40img/sharp-webcontainers-wasm32@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-webcontainers-wasm32@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-win32-arm64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5f8b7b83eed90390ca6e50811171a352aa9e9a3e2f73320d1bfe6f885c002fc878377a987b28f0742bd12c78b811d39423ed99ed4165a7554cfa9fc0b84b66e9" } ], "licenses": [ { "expression": "Apache-2.0 AND LGPL-3.0-or-later" } ], "purl": "pkg:npm/%40img/sharp-win32-arm64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-win32-arm64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-win32-ia32", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e599bcd8ba01738de78703726d9946ed8d4a3bffd986c9f7d3a7d0976f593ae4ad1cb193a370562fcdeaddcce75f4a68c5200cb982f53a7fc11c1c6405e2abe8" } ], "licenses": [ { "expression": "Apache-2.0 AND LGPL-3.0-or-later" } ], "purl": "pkg:npm/%40img/sharp-win32-ia32@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-win32-ia32@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@img", "name": "sharp-win32-x64", "version": "0.35.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c7be9e1f4bc488795c310bbc63c21e9e7b5a002b5d7694fa5b4c265ed5ab9ca727288ecc1390dd82a8400fa48458e125d6fdb30ef9190e1140f4a9d4470a5faa" } ], "licenses": [ { "expression": "Apache-2.0 AND LGPL-3.0-or-later" } ], "purl": "pkg:npm/%40img/sharp-win32-x64@0.35.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@img/sharp-win32-x64@0.35.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/opencv-bindings@4.5.5", "dependsOn": [] }, { "ref": "pkg:npm/@img/colour@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/detect-libc@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/semver@7.8.6", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-darwin-arm64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-darwin-arm64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-darwin-arm64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-libvips-darwin-x64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-darwin-x64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-darwin-x64@1.3.4" ] }, { "ref": "pkg:npm/tslib@2.9.1", "dependsOn": [] }, { "ref": "pkg:npm/@emnapi/runtime@1.11.3", "dependsOn": [ "pkg:npm/tslib@2.9.1" ] }, { "ref": "pkg:npm/@img/sharp-wasm32@0.35.5", "dependsOn": [ "pkg:npm/@emnapi/runtime@1.11.3" ] }, { "ref": "pkg:npm/@img/sharp-freebsd-wasm32@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-wasm32@0.35.5" ] }, { "ref": "pkg:npm/@img/sharp-libvips-linux-arm@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linux-arm64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linux-ppc64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linux-riscv64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linux-s390x@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linux-x64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linuxmusl-arm64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-libvips-linuxmusl-x64@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-linux-arm@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linux-arm@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linux-arm64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linux-arm64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linux-ppc64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linux-ppc64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linux-riscv64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linux-riscv64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linux-s390x@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linux-s390x@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linux-x64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linux-x64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linuxmusl-arm64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linuxmusl-arm64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-linuxmusl-x64@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-libvips-linuxmusl-x64@1.3.4" ] }, { "ref": "pkg:npm/@img/sharp-webcontainers-wasm32@0.35.5", "dependsOn": [ "pkg:npm/@img/sharp-wasm32@0.35.5" ] }, { "ref": "pkg:npm/@img/sharp-win32-arm64@0.35.5", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-win32-ia32@0.35.5", "dependsOn": [] }, { "ref": "pkg:npm/@img/sharp-win32-x64@0.35.5", "dependsOn": [] }, { "ref": "pkg:npm/sharp@0.35.5", "dependsOn": [ "pkg:npm/@img/colour@1.1.0", "pkg:npm/@img/sharp-darwin-arm64@0.35.5", "pkg:npm/@img/sharp-darwin-x64@0.35.5", "pkg:npm/@img/sharp-freebsd-wasm32@0.35.5", "pkg:npm/@img/sharp-libvips-darwin-arm64@1.3.4", "pkg:npm/@img/sharp-libvips-darwin-x64@1.3.4", "pkg:npm/@img/sharp-libvips-linux-arm64@1.3.4", "pkg:npm/@img/sharp-libvips-linux-arm@1.3.4", "pkg:npm/@img/sharp-libvips-linux-ppc64@1.3.4", "pkg:npm/@img/sharp-libvips-linux-riscv64@1.3.4", "pkg:npm/@img/sharp-libvips-linux-s390x@1.3.4", "pkg:npm/@img/sharp-libvips-linux-x64@1.3.4", "pkg:npm/@img/sharp-libvips-linuxmusl-arm64@1.3.4", "pkg:npm/@img/sharp-libvips-linuxmusl-x64@1.3.4", "pkg:npm/@img/sharp-linux-arm64@0.35.5", "pkg:npm/@img/sharp-linux-arm@0.35.5", "pkg:npm/@img/sharp-linux-ppc64@0.35.5", "pkg:npm/@img/sharp-linux-riscv64@0.35.5", "pkg:npm/@img/sharp-linux-s390x@0.35.5", "pkg:npm/@img/sharp-linux-x64@0.35.5", "pkg:npm/@img/sharp-linuxmusl-arm64@0.35.5", "pkg:npm/@img/sharp-linuxmusl-x64@0.35.5", "pkg:npm/@img/sharp-webcontainers-wasm32@0.35.5", "pkg:npm/@img/sharp-win32-arm64@0.35.5", "pkg:npm/@img/sharp-win32-ia32@0.35.5", "pkg:npm/@img/sharp-win32-x64@0.35.5", "pkg:npm/detect-libc@2.1.2", "pkg:npm/semver@7.8.6" ] }, { "ref": "pkg:npm/@appium/opencv@5.0.2", "dependsOn": [ "pkg:npm/opencv-bindings@4.5.5", "pkg:npm/sharp@0.35.5" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@appium/opencv@5.0.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-03T12:08:35Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, November 3, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'opencv' with version '5.0.2'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }