{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:f4e8e7e2-3dcc-40bd-96b3-b24fbfd0fd26", "version": 1, "metadata": { "timestamp": "2026-11-07T21:12:51Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "message-format", "group": "@bundled-es-modules", "version": "6.0.4", "description": "mirror of message-format, bundled and exposed as ES module", "purl": "pkg:npm/%40bundled-es-modules/message-format@6.0.4", "bom-ref": "pkg:npm/@bundled-es-modules/message-format@6.0.4", "author": "Thomas Allmer ", "properties": [ { "name": "cdx:npm:scripts", "value": "build" }, { "name": "cdx:npm:buildScripts", "value": "build" } ], "type": "application" }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "bower.json\\npackage-lock.json" } ] }, "components": [ { "group": "", "name": "message-format", "version": "", "description": "mirror of message-format, bundled and exposed as ES module", "scope": "optional", "purl": "pkg:npm/message-format", "type": "library", "bom-ref": "pkg:npm/message-format", "properties": [ { "name": "SrcFile", "value": "bower.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "bower.json" } ], "concludedValue": "bower.json" } ] } }, { "group": "", "name": "message-format", "version": "6.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8714128905c5861b7be53741c76c6ac912f18d52221744b2d3e642b954c8c6c114efb578b441b99c885fb651a1e0ed603ca257b8e3d6b2a68da065c56128c4ef" } ], "purl": "pkg:npm/message-format@6.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/message-format/-/message-format-6.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/message-format@6.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/message-format/-/message-format-6.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "format-message-interpret", "version": "6.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e71892c605ed0aa178dab86bc0bebcd0efc0b3d40558632b70c87a59af564f2bf7af76c098ff3d314e4ce39fc269cbd474e5f081be5b4a44d699297b98a6828e" } ], "purl": "pkg:npm/format-message-interpret@6.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/format-message-interpret/-/format-message-interpret-6.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/format-message-interpret@6.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/format-message-interpret/-/format-message-interpret-6.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "format-message-formats", "version": "6.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1a6b9a50da9432da9e198093cd5049e06c14ef7c63a566d61e9663bf829406b8dd4db5025b11539cadcc4dd826e14f93a80ecbffe416546d3bd2eb612fae858e" } ], "purl": "pkg:npm/format-message-formats@6.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/format-message-formats/-/format-message-formats-6.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/format-message-formats@6.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/format-message-formats/-/format-message-formats-6.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lookup-closest-locale", "version": "6.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6d6a056d219ee9fd46bcc1b38f5ecbaf0317e058435c3c19c87d38c925423dbb4e2400dc49182e64d29ec2827716e97f30ec43ff0447bc53da764fe461951bb9" } ], "purl": "pkg:npm/lookup-closest-locale@6.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lookup-closest-locale/-/lookup-closest-locale-6.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lookup-closest-locale@6.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lookup-closest-locale/-/lookup-closest-locale-6.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "format-message-parse", "version": "6.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c8ab9acc87b142920c423500faca7b59e61d1d727d6abeeb7616fa697e1ef50575677b2a997e816def379bae922b9317ff3424c5bb2729fa5746f0508b4c7379" } ], "purl": "pkg:npm/format-message-parse@6.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/format-message-parse/-/format-message-parse-6.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/format-message-parse@6.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/format-message-parse/-/format-message-parse-6.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup", "version": "0.62.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9994b468819f633b89c92243efcce7bbdfe1089b0d7c1ce0e250ee646323d211557181edd9ebcd447bfc6aa8aef7fc3acfa427f00428565e22c848c39a2b0678" } ], "purl": "pkg:npm/rollup@0.62.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup/-/rollup-0.62.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup@0.62.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup/-/rollup-0.62.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "estree", "version": "0.0.39", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "118370a776d4fbdf1ca54e250166182fb673fb682bc961f5a9b7434e275577a864891eb07a4b1d6cc69dc9729734f12440585733e8553bd6728289875e9f8023" } ], "purl": "pkg:npm/%40types/estree@0.0.39", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@0.0.39", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/estree" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "node", "version": "10.5.2", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "9bdcd79a27e466c3076413b2c595a294cc264e5a42f31e53cb7eb424a4e25ef95765f056629b20f5966f3ff61efa265487e43e3310cb8c8b554d622c7f0cfef1" } ], "purl": "pkg:npm/%40types/node@10.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-10.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@10.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-10.5.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/node" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-commonjs", "version": "9.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83dd5964a6704d6ec5eef2fa8cc79edfc23c7288ff43d1817539975de14bee57600b52b2e5626f1e06ca9408975d387beb6aafa21844c7052079018587db2e1a" } ], "purl": "pkg:npm/rollup-plugin-commonjs@9.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-commonjs/-/rollup-plugin-commonjs-9.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-commonjs@9.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-commonjs/-/rollup-plugin-commonjs-9.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "estree-walker", "version": "0.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5e90a75bf004d74c2cfe40c0b37edc9e04a4be0211f1a3771b4312f399bb754a6e2b6111128f55274d2ebf0e8383f8571297ec1352354ef24e26bf99f932fe8a" } ], "purl": "pkg:npm/estree-walker@0.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@0.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.5.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "magic-string", "version": "0.22.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a2b7a2a7dac9664cef03c43393d1c5b3c7d9185feeec7fe0b6b13c10de918ca27d921d87942fb243641ece27ea4d97c6ca2b80574751bf96becbff2005bd66f7" } ], "purl": "pkg:npm/magic-string@0.22.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/magic-string/-/magic-string-0.22.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.22.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/magic-string/-/magic-string-0.22.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "vlq", "version": "0.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0d189b64be83b0d84881843ec0d7560cbd922f76ca3e556b46206a579cae326fbea29f16e24185b5a41f0ace0a1099f4c0165c1d51c9ddea32c17f3df37935a3" } ], "purl": "pkg:npm/vlq@0.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/vlq/-/vlq-0.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/vlq@0.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/vlq/-/vlq-0.2.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "02270fac00bb42ed49c4f099f59802665637e508059cda9cfb42ed6d13719d5c384d7be343bdb09ee2fd2507040605e423d24cf0cb13f64690a0772909124e60" } ], "purl": "pkg:npm/resolve@1.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.8.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-parse", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1" } ], "purl": "pkg:npm/path-parse@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-pluginutils", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c41ea1b11b23749748616132614272ff7922e60ebdc2b7f496e1cf18d2b7652a1c57a1cb35f8a8e7d977759dd32f8c54c042a044e8458bd8ce0ade9ce607d45b" } ], "purl": "pkg:npm/rollup-pluginutils@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-pluginutils@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "micromatch", "version": "2.3.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "86677c97d1720b363431d04d0d15293bd38c1565" } ], "purl": "pkg:npm/micromatch@2.3.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@2.3.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "arr-diff", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf" } ], "purl": "pkg:npm/arr-diff@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/arr-diff@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "arr-flatten", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6" } ], "purl": "pkg:npm/arr-flatten@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/arr-flatten@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "array-unique", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53" } ], "purl": "pkg:npm/array-unique@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/array-unique@0.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "braces", "version": "1.8.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ba77962e12dff969d6b76711e914b737857bf6a7" } ], "purl": "pkg:npm/braces@1.8.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/braces@1.8.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "expand-range", "version": "1.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a299effd335fe2721ebae8e257ec79644fc85337" } ], "purl": "pkg:npm/expand-range@1.8.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/expand-range@1.8.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fill-range", "version": "2.2.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "727adc09b8f4d7e8f68131bddb55593e71db8e67407fca1057f886795da4671192c9f6238d3c98efd12bb0ad56256329c3a0da029117ef66e29ea244fbf77ee5" } ], "purl": "pkg:npm/fill-range@2.2.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@2.2.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-number", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "01fcbbb393463a548f2f466cce16dece49db908f" } ], "purl": "pkg:npm/is-number@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-number@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "kind-of", "version": "3.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64" } ], "purl": "pkg:npm/kind-of@3.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@3.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-buffer", "version": "1.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7" } ], "purl": "pkg:npm/is-buffer@1.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isobject", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f065561096a3f1da2ef46272f815c840d87e0c89" } ], "purl": "pkg:npm/isobject@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isobject@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bb935d48582cba168c06834957a54a3e07124f11" } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "randomatic", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "55dc45388118de634ee4fb524649257bf84f2431ef4212b6d686bbdcae3201cf6a9a9e8de36f6003217581930e4cc792d3f018cda57fd93adc79ff8d688a2748" } ], "purl": "pkg:npm/randomatic@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/randomatic/-/randomatic-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/randomatic@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/randomatic/-/randomatic-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-number", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ad29257002257f53a615dc80a9b9d64cb55e96c439f2ebd9eba4bf6726b08d6a88be24d60a38363f3546c3c59403e9cdb8f4ea6f8c2003e36cceb27ed3c2e581" } ], "purl": "pkg:npm/is-number@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-number/-/is-number-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-number@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-number/-/is-number-4.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "kind-of", "version": "6.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b3990b39c9c7d17a833be16fb9a2d7f030e3675f0218593b572807e3442828f510856e1edabbccd2bc14ab4b7c2100cec1849e2cad3553dd0e8f305399ed90a8" } ], "purl": "pkg:npm/kind-of@6.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@6.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "math-random", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8b3aac588b8a66e4975e3cdea67f7bb329601fac" } ], "purl": "pkg:npm/math-random@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/math-random/-/math-random-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/math-random@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/math-random/-/math-random-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "repeat-element", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a" } ], "purl": "pkg:npm/repeat-element@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/repeat-element@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "repeat-string", "version": "1.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8dcae470e1c88abc2d600fff4a776286da75e637" } ], "purl": "pkg:npm/repeat-string@1.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/repeat-string@1.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "preserve", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b" } ], "purl": "pkg:npm/preserve@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/preserve@0.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "expand-brackets", "version": "0.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "df07284e342a807cd733ac5af72411e581d1177b" } ], "purl": "pkg:npm/expand-brackets@0.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/expand-brackets@0.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-posix-bracket", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4" } ], "purl": "pkg:npm/is-posix-bracket@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-posix-bracket@0.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "extglob", "version": "0.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1" } ], "purl": "pkg:npm/extglob@0.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/extglob@0.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-extglob", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ac468177c4943405a092fc8f29760c6ffc6206c0" } ], "purl": "pkg:npm/is-extglob@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "filename-regex", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c1c4b9bee3e09725ddb106b75c1e301fe2f18b26" } ], "purl": "pkg:npm/filename-regex@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/filename-regex@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-glob", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863" } ], "purl": "pkg:npm/is-glob@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "normalize-path", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9" } ], "purl": "pkg:npm/normalize-path@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/normalize-path@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "remove-trailing-separator", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef" } ], "purl": "pkg:npm/remove-trailing-separator@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object.omit", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1a9c744829f39dbb858c76ca3579ae2a54ebd1fa" } ], "purl": "pkg:npm/object.omit@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object.omit@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "for-own", "version": "0.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5265c681a4f294dabbf17c9509b6763aa84510ce" } ], "purl": "pkg:npm/for-own@0.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/for-own@0.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "for-in", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80" } ], "purl": "pkg:npm/for-in@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/for-in@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-extendable", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "62b110e289a471418e3ec36a617d472e301dfc89" } ], "purl": "pkg:npm/is-extendable@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-extendable@0.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "parse-glob", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c" } ], "purl": "pkg:npm/parse-glob@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/parse-glob@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob-base", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4" } ], "purl": "pkg:npm/glob-base@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob-base@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob-parent", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "81383d72db054fcccf5336daa902f182f6edbb28" } ], "purl": "pkg:npm/glob-parent@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob-parent@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-dotfile", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a6a2f32ffd2dfb04f5ca25ecd0f6b83cf798a1e1" } ], "purl": "pkg:npm/is-dotfile@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-dotfile@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "regex-cache", "version": "0.4.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9d5219c2d0a3902f5882f5a4a4ce79079ac184161166101a25b81c1585d7b079db67d51923d9e7556619a41942aaff61a36799af23e75ab646b0e74fc1559759" } ], "purl": "pkg:npm/regex-cache@0.4.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/regex-cache@0.4.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-equal-shallow", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534" } ], "purl": "pkg:npm/is-equal-shallow@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-equal-shallow@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-primitive", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "207bab91638499c07b2adf240a41a87210034575" } ], "purl": "pkg:npm/is-primitive@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-primitive@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-node-resolve", "version": "3.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f731c6af7a1426ae86f97d2844c625ce277d7d789c05d8b2761c060a177278d4463dc37f99a8ed7a002944a1cb47976b6e852f11653e41e526193c84650b3758" } ], "purl": "pkg:npm/rollup-plugin-node-resolve@3.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-node-resolve/-/rollup-plugin-node-resolve-3.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-node-resolve@3.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-node-resolve/-/rollup-plugin-node-resolve-3.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "builtin-modules", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dd4e64500e553ec4540379e87e6fc15d7ec654729fc73d2138100fc57ac8bc7ce50d191056a127eb28bc4097a0c65e0bcce1cb76f6fb5c5e5d55ac1afd555806" } ], "purl": "pkg:npm/builtin-modules@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/builtin-modules@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-module", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3258fb69f78c14d5b815d664336b4cffb6441591" } ], "purl": "pkg:npm/is-module@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-module@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/format-message-formats@6.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lookup-closest-locale@6.0.4", "dependsOn": [] }, { "ref": "pkg:npm/format-message-interpret@6.0.4", "dependsOn": [ "pkg:npm/format-message-formats@6.0.4", "pkg:npm/lookup-closest-locale@6.0.4" ] }, { "ref": "pkg:npm/format-message-parse@6.0.4", "dependsOn": [] }, { "ref": "pkg:npm/message-format@6.0.4", "dependsOn": [ "pkg:npm/format-message-interpret@6.0.4", "pkg:npm/format-message-parse@6.0.4" ] }, { "ref": "pkg:npm/@types/estree@0.0.39", "dependsOn": [] }, { "ref": "pkg:npm/@types/node@10.5.2", "dependsOn": [] }, { "ref": "pkg:npm/rollup@0.62.0", "dependsOn": [ "pkg:npm/@types/estree@0.0.39", "pkg:npm/@types/node@10.5.2" ] }, { "ref": "pkg:npm/estree-walker@0.5.2", "dependsOn": [] }, { "ref": "pkg:npm/vlq@0.2.3", "dependsOn": [] }, { "ref": "pkg:npm/magic-string@0.22.5", "dependsOn": [ "pkg:npm/vlq@0.2.3" ] }, { "ref": "pkg:npm/path-parse@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/resolve@1.8.1", "dependsOn": [ "pkg:npm/path-parse@1.0.5" ] }, { "ref": "pkg:npm/arr-flatten@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/arr-diff@2.0.0", "dependsOn": [ "pkg:npm/arr-flatten@1.1.0" ] }, { "ref": "pkg:npm/array-unique@0.2.1", "dependsOn": [] }, { "ref": "pkg:npm/is-buffer@1.1.6", "dependsOn": [] }, { "ref": "pkg:npm/kind-of@3.2.2", "dependsOn": [ "pkg:npm/is-buffer@1.1.6" ] }, { "ref": "pkg:npm/is-number@2.1.0", "dependsOn": [ "pkg:npm/kind-of@3.2.2" ] }, { "ref": "pkg:npm/isarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isobject@2.1.0", "dependsOn": [ "pkg:npm/isarray@1.0.0" ] }, { "ref": "pkg:npm/is-number@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/kind-of@6.0.2", "dependsOn": [] }, { "ref": "pkg:npm/math-random@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/randomatic@3.0.0", "dependsOn": [ "pkg:npm/is-number@4.0.0", "pkg:npm/kind-of@6.0.2", "pkg:npm/math-random@1.0.1" ] }, { "ref": "pkg:npm/repeat-element@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/repeat-string@1.6.1", "dependsOn": [] }, { "ref": "pkg:npm/fill-range@2.2.4", "dependsOn": [ "pkg:npm/is-number@2.1.0", "pkg:npm/isobject@2.1.0", "pkg:npm/randomatic@3.0.0", "pkg:npm/repeat-element@1.1.2", "pkg:npm/repeat-string@1.6.1" ] }, { "ref": "pkg:npm/expand-range@1.8.2", "dependsOn": [ "pkg:npm/fill-range@2.2.4" ] }, { "ref": "pkg:npm/preserve@0.2.0", "dependsOn": [] }, { "ref": "pkg:npm/braces@1.8.5", "dependsOn": [ "pkg:npm/expand-range@1.8.2", "pkg:npm/preserve@0.2.0", "pkg:npm/repeat-element@1.1.2" ] }, { "ref": "pkg:npm/is-posix-bracket@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/expand-brackets@0.1.5", "dependsOn": [ "pkg:npm/is-posix-bracket@0.1.1" ] }, { "ref": "pkg:npm/is-extglob@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/extglob@0.3.2", "dependsOn": [ "pkg:npm/is-extglob@1.0.0" ] }, { "ref": "pkg:npm/filename-regex@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/is-glob@2.0.1", "dependsOn": [ "pkg:npm/is-extglob@1.0.0" ] }, { "ref": "pkg:npm/remove-trailing-separator@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/normalize-path@2.1.1", "dependsOn": [ "pkg:npm/remove-trailing-separator@1.1.0" ] }, { "ref": "pkg:npm/for-in@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/for-own@0.1.5", "dependsOn": [ "pkg:npm/for-in@1.0.2" ] }, { "ref": "pkg:npm/is-extendable@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/object.omit@2.0.1", "dependsOn": [ "pkg:npm/for-own@0.1.5", "pkg:npm/is-extendable@0.1.1" ] }, { "ref": "pkg:npm/glob-parent@2.0.0", "dependsOn": [ "pkg:npm/is-glob@2.0.1" ] }, { "ref": "pkg:npm/glob-base@0.3.0", "dependsOn": [ "pkg:npm/glob-parent@2.0.0", "pkg:npm/is-glob@2.0.1" ] }, { "ref": "pkg:npm/is-dotfile@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/parse-glob@3.0.4", "dependsOn": [ "pkg:npm/glob-base@0.3.0", "pkg:npm/is-dotfile@1.0.3", "pkg:npm/is-extglob@1.0.0", "pkg:npm/is-glob@2.0.1" ] }, { "ref": "pkg:npm/is-primitive@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-equal-shallow@0.1.3", "dependsOn": [ "pkg:npm/is-primitive@2.0.0" ] }, { "ref": "pkg:npm/regex-cache@0.4.4", "dependsOn": [ "pkg:npm/is-equal-shallow@0.1.3" ] }, { "ref": "pkg:npm/micromatch@2.3.11", "dependsOn": [ "pkg:npm/arr-diff@2.0.0", "pkg:npm/array-unique@0.2.1", "pkg:npm/braces@1.8.5", "pkg:npm/expand-brackets@0.1.5", "pkg:npm/extglob@0.3.2", "pkg:npm/filename-regex@2.0.1", "pkg:npm/is-extglob@1.0.0", "pkg:npm/is-glob@2.0.1", "pkg:npm/kind-of@3.2.2", "pkg:npm/normalize-path@2.1.1", "pkg:npm/object.omit@2.0.1", "pkg:npm/parse-glob@3.0.4", "pkg:npm/regex-cache@0.4.4" ] }, { "ref": "pkg:npm/rollup-pluginutils@2.3.0", "dependsOn": [ "pkg:npm/estree-walker@0.5.2", "pkg:npm/micromatch@2.3.11" ] }, { "ref": "pkg:npm/rollup-plugin-commonjs@9.1.3", "dependsOn": [ "pkg:npm/estree-walker@0.5.2", "pkg:npm/magic-string@0.22.5", "pkg:npm/resolve@1.8.1", "pkg:npm/rollup-pluginutils@2.3.0" ] }, { "ref": "pkg:npm/builtin-modules@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-module@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/rollup-plugin-node-resolve@3.3.0", "dependsOn": [ "pkg:npm/builtin-modules@2.0.0", "pkg:npm/is-module@1.0.0", "pkg:npm/resolve@1.8.1" ] }, { "ref": "pkg:npm/@bundled-es-modules/message-format@6.0.4", "dependsOn": [ "pkg:npm/message-format@6.0.4", "pkg:npm/rollup-plugin-commonjs@9.1.3", "pkg:npm/rollup-plugin-node-resolve@3.3.0", "pkg:npm/rollup@0.62.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@bundled-es-modules/message-format@6.0.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-07T21:12:51Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, November 7, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'message-format' with version '6.0.4'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from the source files: bower.json, package-lock.json." } ] }