{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:13c68ab5-c0a4-4062-8676-ff593779a91d",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-09T07:14:00Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "ckeditor5-engine",
      "group": "@ckeditor",
      "version": "40.2.0",
      "description": "The editing engine of CKEditor 5 – the best browser-based rich text editor.",
      "purl": "pkg:npm/%40ckeditor/ckeditor5-engine@40.2.0",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-engine@40.2.0",
      "author": "CKSource (http://cksource.com/)",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://ckeditor.com/ckeditor-5"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ckeditor/ckeditor5.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ckeditor"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@ckeditor",
      "name": "ckeditor5-utils",
      "version": "40.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fe913241c3093b63f2d79bca443f10535d5949c10ac7ecb7afcf27bdcf110307426d8fbf9bac6afcee8ebae9f3e62ff01341ce4cf953e16ef9e4dac3afed62a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-utils@40.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-40.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-40.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@ckeditor/ckeditor5-utils,CKEditorError,@ckeditor/ckeditor5-utils/CKEditorError,EmitterMixin,@ckeditor/ckeditor5-utils/EmitterMixin,ObservableMixin,@ckeditor/ckeditor5-utils/ObservableMixin,logWarning,@ckeditor/ckeditor5-utils/logWarning,@ckeditor/ckeditor5-utils/env,toArray,@ckeditor/ckeditor5-utils/toArray,priorities,@ckeditor/ckeditor5-utils/priorities,global,@ckeditor/ckeditor5-utils/global,toMap,@ckeditor/ckeditor5-utils/toMap,Collection,@ckeditor/ckeditor5-utils/Collection,isInsideSurrogatePair,@ckeditor/ckeditor5-utils/isInsideSurrogatePair,isInsideCombinedSymbol,@ckeditor/ckeditor5-utils/isInsideCombinedSymbol,isIterable,@ckeditor/ckeditor5-utils/isIterable,@ckeditor/ckeditor5-utils/uid,compareArrays,@ckeditor/ckeditor5-utils/compareArrays,spliceArray,@ckeditor/ckeditor5-utils/spliceArray,first,@ckeditor/ckeditor5-utils/first,isInsideEmojiSequence,@ckeditor/ckeditor5-utils/isInsideEmojiSequence,indexOf,@ckeditor/ckeditor5-utils/indexOf,getAncestors,@ckeditor/ckeditor5-utils/getAncestors,isText,@ckeditor/ckeditor5-utils/isText,isComment,@ckeditor/ckeditor5-utils/isComment,isValidAttributeName,@ckeditor/ckeditor5-utils/isValidAttributeName,keyCodes,@ckeditor/ckeditor5-utils/keyCodes,isArrowKeyCode,@ckeditor/ckeditor5-utils/isArrowKeyCode,EventInfo,@ckeditor/ckeditor5-utils/EventInfo,getCode,@ckeditor/ckeditor5-utils/getCode,DomEmitterMixin,@ckeditor/ckeditor5-utils/DomEmitterMixin,diff,@ckeditor/ckeditor5-utils/diff,fastDiff,@ckeditor/ckeditor5-utils/fastDiff,insertAt,@ckeditor/ckeditor5-utils/insertAt,isNode,@ckeditor/ckeditor5-utils/isNode,remove,@ckeditor/ckeditor5-utils/remove,count,@ckeditor/ckeditor5-utils/count,scrollViewportToShowTarget,@ckeditor/ckeditor5-utils/scrollViewportToShowTarget,@ckeditor/ckeditor5-utils/src/version"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/controller/datacontroller.js",
            "line": 8
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 37
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 70
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 71
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 72
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 73
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 74
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 131
          },
          {
            "location": "src/controller/editingcontroller.js",
            "line": 8
          },
          {
            "location": "src/controller/editingcontroller.js",
            "line": 22
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 8
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 67
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 69
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 597
          },
          {
            "location": "src/conversion/downcastdispatcher.js",
            "line": 10
          },
          {
            "location": "src/conversion/downcastdispatcher.js",
            "line": 102
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 17
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1392
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1410
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1815
          },
          {
            "location": "src/conversion/mapper.js",
            "line": 13
          },
          {
            "location": "src/conversion/mapper.js",
            "line": 33
          },
          {
            "location": "src/conversion/modelconsumable.js",
            "line": 9
          },
          {
            "location": "src/conversion/upcastdispatcher.js",
            "line": 13
          },
          {
            "location": "src/conversion/upcastdispatcher.js",
            "line": 110
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 8
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 644
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 8
          },
          {
            "location": "src/dataprocessor/basichtmlwriter.js",
            "line": 5
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 27
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 306
          },
          {
            "location": "src/model/batch.js",
            "line": 8
          },
          {
            "location": "src/model/batch.js",
            "line": 42
          },
          {
            "location": "src/model/batch.js",
            "line": 70
          },
          {
            "location": "src/model/document.js",
            "line": 12
          },
          {
            "location": "src/model/document.js",
            "line": 32
          },
          {
            "location": "src/model/document.js",
            "line": 357
          },
          {
            "location": "src/model/documentfragment.js",
            "line": 13
          },
          {
            "location": "src/model/documentfragment.js",
            "line": 292
          },
          {
            "location": "src/model/documentselection.js",
            "line": 13
          },
          {
            "location": "src/model/documentselection.js",
            "line": 39
          },
          {
            "location": "src/model/documentselection.js",
            "line": 587
          },
          {
            "location": "src/model/documentselection.js",
            "line": 745
          },
          {
            "location": "src/model/documentselection.js",
            "line": 746
          },
          {
            "location": "src/model/element.js",
            "line": 12
          },
          {
            "location": "src/model/element.js",
            "line": 267
          },
          {
            "location": "src/model/history.js",
            "line": 5
          },
          {
            "location": "src/model/liveposition.js",
            "line": 9
          },
          {
            "location": "src/model/liveposition.js",
            "line": 23
          },
          {
            "location": "src/model/liverange.js",
            "line": 9
          },
          {
            "location": "src/model/liverange.js",
            "line": 18
          },
          {
            "location": "src/model/markercollection.js",
            "line": 10
          },
          {
            "location": "src/model/markercollection.js",
            "line": 25
          },
          {
            "location": "src/model/markercollection.js",
            "line": 285
          },
          {
            "location": "src/model/model.js",
            "line": 26
          },
          {
            "location": "src/model/model.js",
            "line": 33
          },
          {
            "location": "src/model/model.js",
            "line": 181
          },
          {
            "location": "src/model/model.js",
            "line": 204
          },
          {
            "location": "src/model/node.js",
            "line": 10
          },
          {
            "location": "src/model/node.js",
            "line": 57
          },
          {
            "location": "src/model/node.js",
            "line": 233
          },
          {
            "location": "src/model/node.js",
            "line": 348
          },
          {
            "location": "src/model/nodelist.js",
            "line": 9
          },
          {
            "location": "src/model/nodelist.js",
            "line": 141
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 11
          },
          {
            "location": "src/model/operation/detachoperation.js",
            "line": 11
          },
          {
            "location": "src/model/operation/insertoperation.js",
            "line": 15
          },
          {
            "location": "src/model/operation/mergeoperation.js",
            "line": 13
          },
          {
            "location": "src/model/operation/moveoperation.js",
            "line": 12
          },
          {
            "location": "src/model/operation/moveoperation.js",
            "line": 118
          },
          {
            "location": "src/model/operation/renameoperation.js",
            "line": 11
          },
          {
            "location": "src/model/operation/rootattributeoperation.js",
            "line": 9
          },
          {
            "location": "src/model/operation/splitoperation.js",
            "line": 13
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 20
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 1335
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 1372
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 1622
          },
          {
            "location": "src/model/operation/utils.js",
            "line": 12
          },
          {
            "location": "src/model/operation/utils.js",
            "line": 136
          },
          {
            "location": "src/model/position.js",
            "line": 10
          },
          {
            "location": "src/model/position.js",
            "line": 182
          },
          {
            "location": "src/model/position.js",
            "line": 274
          },
          {
            "location": "src/model/position.js",
            "line": 438
          },
          {
            "location": "src/model/position.js",
            "line": 552
          },
          {
            "location": "src/model/position.js",
            "line": 566
          },
          {
            "location": "src/model/position.js",
            "line": 598
          },
          {
            "location": "src/model/position.js",
            "line": 606
          },
          {
            "location": "src/model/range.js",
            "line": 11
          },
          {
            "location": "src/model/range.js",
            "line": 66
          },
          {
            "location": "src/model/schema.js",
            "line": 13
          },
          {
            "location": "src/model/schema.js",
            "line": 27
          },
          {
            "location": "src/model/selection.js",
            "line": 12
          },
          {
            "location": "src/model/selection.js",
            "line": 20
          },
          {
            "location": "src/model/selection.js",
            "line": 345
          },
          {
            "location": "src/model/textproxy.js",
            "line": 9
          },
          {
            "location": "src/model/treewalker.js",
            "line": 12
          },
          {
            "location": "src/model/utils/findoptimalinsertionrange.js",
            "line": 8
          },
          {
            "location": "src/model/utils/findoptimalinsertionrange.js",
            "line": 40
          },
          {
            "location": "src/model/utils/insertcontent.js",
            "line": 14
          },
          {
            "location": "src/model/utils/insertobject.js",
            "line": 9
          },
          {
            "location": "src/model/utils/insertobject.js",
            "line": 61
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 12
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 126
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 127
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 128
          },
          {
            "location": "src/model/writer.js",
            "line": 25
          },
          {
            "location": "src/model/writer.js",
            "line": 302
          },
          {
            "location": "src/model/writer.js",
            "line": 853
          },
          {
            "location": "src/model/writer.js",
            "line": 1016
          },
          {
            "location": "src/view/attributeelement.js",
            "line": 9
          },
          {
            "location": "src/view/document.js",
            "line": 10
          },
          {
            "location": "src/view/document.js",
            "line": 16
          },
          {
            "location": "src/view/documentfragment.js",
            "line": 11
          },
          {
            "location": "src/view/documentfragment.js",
            "line": 19
          },
          {
            "location": "src/view/documentfragment.js",
            "line": 220
          },
          {
            "location": "src/view/documentselection.js",
            "line": 10
          },
          {
            "location": "src/view/documentselection.js",
            "line": 21
          },
          {
            "location": "src/view/domconverter.js",
            "line": 19
          },
          {
            "location": "src/view/domconverter.js",
            "line": 318
          },
          {
            "location": "src/view/domconverter.js",
            "line": 320
          },
          {
            "location": "src/view/domconverter.js",
            "line": 326
          },
          {
            "location": "src/view/domconverter.js",
            "line": 376
          },
          {
            "location": "src/view/domconverter.js",
            "line": 387
          },
          {
            "location": "src/view/domconverter.js",
            "line": 463
          },
          {
            "location": "src/view/domconverter.js",
            "line": 466
          },
          {
            "location": "src/view/domconverter.js",
            "line": 550
          },
          {
            "location": "src/view/domconverter.js",
            "line": 602
          },
          {
            "location": "src/view/domconverter.js",
            "line": 609
          },
          {
            "location": "src/view/domconverter.js",
            "line": 611
          },
          {
            "location": "src/view/domconverter.js",
            "line": 635
          },
          {
            "location": "src/view/domconverter.js",
            "line": 636
          },
          {
            "location": "src/view/domconverter.js",
            "line": 638
          },
          {
            "location": "src/view/domconverter.js",
            "line": 883
          },
          {
            "location": "src/view/domconverter.js",
            "line": 973
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1007
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1010
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1061
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1307
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1403
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1406
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 16
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 567
          },
          {
            "location": "src/view/editableelement.js",
            "line": 9
          },
          {
            "location": "src/view/editableelement.js",
            "line": 19
          },
          {
            "location": "src/view/element.js",
            "line": 11
          },
          {
            "location": "src/view/element.js",
            "line": 584
          },
          {
            "location": "src/view/element.js",
            "line": 602
          },
          {
            "location": "src/view/element.js",
            "line": 633
          },
          {
            "location": "src/view/element.js",
            "line": 679
          },
          {
            "location": "src/view/element.js",
            "line": 710
          },
          {
            "location": "src/view/emptyelement.js",
            "line": 10
          },
          {
            "location": "src/view/filler.js",
            "line": 5
          },
          {
            "location": "src/view/filler.js",
            "line": 92
          },
          {
            "location": "src/view/matcher.js",
            "line": 6
          },
          {
            "location": "src/view/matcher.js",
            "line": 350
          },
          {
            "location": "src/view/matcher.js",
            "line": 404
          },
          {
            "location": "src/view/matcher.js",
            "line": 408
          },
          {
            "location": "src/view/node.js",
            "line": 9
          },
          {
            "location": "src/view/node.js",
            "line": 20
          },
          {
            "location": "src/view/node.js",
            "line": 164
          },
          {
            "location": "src/view/observer/arrowkeysobserver.js",
            "line": 10
          },
          {
            "location": "src/view/observer/arrowkeysobserver.js",
            "line": 23
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 8
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 81
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 85
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 90
          },
          {
            "location": "src/view/observer/bubblingeventinfo.js",
            "line": 8
          },
          {
            "location": "src/view/observer/fakeselectionobserver.js",
            "line": 10
          },
          {
            "location": "src/view/observer/inputobserver.js",
            "line": 10
          },
          {
            "location": "src/view/observer/keyobserver.js",
            "line": 9
          },
          {
            "location": "src/view/observer/keyobserver.js",
            "line": 34
          },
          {
            "location": "src/view/observer/observer.js",
            "line": 8
          },
          {
            "location": "src/view/observer/observer.js",
            "line": 15
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 11
          },
          {
            "location": "src/view/observer/tabobserver.js",
            "line": 7
          },
          {
            "location": "src/view/placeholder.js",
            "line": 9
          },
          {
            "location": "src/view/placeholder.js",
            "line": 264
          },
          {
            "location": "src/view/position.js",
            "line": 9
          },
          {
            "location": "src/view/position.js",
            "line": 206
          },
          {
            "location": "src/view/rawelement.js",
            "line": 11
          },
          {
            "location": "src/view/renderer.js",
            "line": 11
          },
          {
            "location": "src/view/renderer.js",
            "line": 26
          },
          {
            "location": "src/view/renderer.js",
            "line": 279
          },
          {
            "location": "src/view/renderer.js",
            "line": 351
          },
          {
            "location": "src/view/renderer.js",
            "line": 499
          },
          {
            "location": "src/view/renderer.js",
            "line": 535
          },
          {
            "location": "src/view/renderer.js",
            "line": 549
          },
          {
            "location": "src/view/renderer.js",
            "line": 593
          },
          {
            "location": "src/view/renderer.js",
            "line": 630
          },
          {
            "location": "src/view/renderer.js",
            "line": 639
          },
          {
            "location": "src/view/renderer.js",
            "line": 855
          },
          {
            "location": "src/view/renderer.js",
            "line": 865
          },
          {
            "location": "src/view/renderer.js",
            "line": 875
          },
          {
            "location": "src/view/renderer.js",
            "line": 876
          },
          {
            "location": "src/view/renderer.js",
            "line": 877
          },
          {
            "location": "src/view/renderer.js",
            "line": 884
          },
          {
            "location": "src/view/renderer.js",
            "line": 885
          },
          {
            "location": "src/view/renderer.js",
            "line": 903
          },
          {
            "location": "src/view/renderer.js",
            "line": 991
          },
          {
            "location": "src/view/selection.js",
            "line": 13
          },
          {
            "location": "src/view/selection.js",
            "line": 26
          },
          {
            "location": "src/view/selection.js",
            "line": 280
          },
          {
            "location": "src/view/selection.js",
            "line": 281
          },
          {
            "location": "src/view/selection.js",
            "line": 430
          },
          {
            "location": "src/view/textproxy.js",
            "line": 9
          },
          {
            "location": "src/view/treewalker.js",
            "line": 12
          },
          {
            "location": "src/view/uielement.js",
            "line": 10
          },
          {
            "location": "src/view/view.js",
            "line": 24
          },
          {
            "location": "src/view/view.js",
            "line": 60
          },
          {
            "location": "src/view/view.js",
            "line": 337
          },
          {
            "location": "src/view/view.js",
            "line": 430
          },
          {
            "location": "src/model/node.js",
            "line": 12
          },
          {
            "location": "src/model/position.js",
            "line": 12
          },
          {
            "location": "src/view/node.js",
            "line": 12
          },
          {
            "location": "src/view/position.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-es",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98a9c2f9027da56573bfe0b8fd4deb46c1daa457c7bd0168141f767b9db17b218c717ebf3a5225efc8ded6ef2f78fcd8652924a2030f276ca3c71b1bf3d731cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash-es@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-es@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash-es,cloneDeep,lodash-es/cloneDeep,isArray,lodash-es/isArray,isPlainObject,lodash-es/isPlainObject,clone,lodash-es/clone,isEqual,lodash-es/isEqual,extend,lodash-es/extend,debounce,lodash-es/debounce,isEqualWith,lodash-es/isEqualWith,lodash-es/get,isObject,lodash-es/isObject,merge,lodash-es/merge,lodash-es/set,unset,lodash-es/unset"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 18
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1682
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1722
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1770
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 9
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 530
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 552
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 579
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 614
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 9
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 423
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 464
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 495
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 520
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 28
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 385
          },
          {
            "location": "src/model/document.js",
            "line": 13
          },
          {
            "location": "src/model/document.js",
            "line": 243
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 12
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 99
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 128
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 20
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 126
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 308
          },
          {
            "location": "src/view/matcher.js",
            "line": 5
          },
          {
            "location": "src/view/matcher.js",
            "line": 347
          },
          {
            "location": "src/view/matcher.js",
            "line": 358
          },
          {
            "location": "src/view/matcher.js",
            "line": 401
          },
          {
            "location": "src/view/node.js",
            "line": 10
          },
          {
            "location": "src/view/node.js",
            "line": 218
          },
          {
            "location": "src/view/observer/domeventdata.js",
            "line": 8
          },
          {
            "location": "src/view/observer/domeventdata.js",
            "line": 27
          },
          {
            "location": "src/view/observer/fakeselectionobserver.js",
            "line": 11
          },
          {
            "location": "src/view/observer/fakeselectionobserver.js",
            "line": 25
          },
          {
            "location": "src/view/observer/mutationobserver.js",
            "line": 11
          },
          {
            "location": "src/view/observer/mutationobserver.js",
            "line": 153
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 12
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 32
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 36
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 8
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 93
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 132
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 258
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 323
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 366
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 402
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 411
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 418
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 761
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 762
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 764
          },
          {
            "location": "src/view/upcastwriter.js",
            "line": 11
          },
          {
            "location": "src/view/upcastwriter.js",
            "line": 247
          },
          {
            "location": "src/view/view.js",
            "line": 27
          },
          {
            "location": "src/view/view.js",
            "line": 320
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/lodash-es@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
      "dependsOn": [
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-engine@40.2.0",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
        "pkg:npm/lodash-es@4.17.21"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@ckeditor/ckeditor5-engine@40.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-09T07:14:00Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, November 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ckeditor5-engine' with version '40.2.0'. The package type in this SBOM is npm with a single purl namespace '@ckeditor' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}