{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:f333ef59-b60f-4ad1-bfac-29f7c087174b",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-09T15:00:13Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "ckeditor5-engine",
      "group": "@ckeditor",
      "version": "41.4.2",
      "description": "The editing engine of CKEditor 5 – the best browser-based rich text editor.",
      "purl": "pkg:npm/%40ckeditor/ckeditor5-engine@41.4.2",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-engine@41.4.2",
      "author": "CKSource (http://cksource.com/)",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://ckeditor.com/ckeditor-5"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ckeditor/ckeditor5.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ckeditor"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@ckeditor",
      "name": "ckeditor5-utils",
      "version": "41.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5602ebd9e2d5820ca10ea6bb1fc254c699ce2d367447f62e0d9e8435552e99df6ae15ae936cf7864ad18fd2869ed49ae1d0fec4ed87e3d64ec8beb792b062a79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-utils@41.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-41.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-41.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@ckeditor/ckeditor5-utils/dist/index.js,logWarning,@ckeditor/ckeditor5-utils/dist/index.js/logWarning,EmitterMixin,@ckeditor/ckeditor5-utils/dist/index.js/EmitterMixin,CKEditorError,@ckeditor/ckeditor5-utils/dist/index.js/CKEditorError,compareArrays,@ckeditor/ckeditor5-utils/dist/index.js/compareArrays,toArray,@ckeditor/ckeditor5-utils/dist/index.js/toArray,toMap,@ckeditor/ckeditor5-utils/dist/index.js/toMap,isIterable,@ckeditor/ckeditor5-utils/dist/index.js/isIterable,ObservableMixin,@ckeditor/ckeditor5-utils/dist/index.js/ObservableMixin,count,@ckeditor/ckeditor5-utils/dist/index.js/count,EventInfo,@ckeditor/ckeditor5-utils/dist/index.js/EventInfo,Collection,@ckeditor/ckeditor5-utils/dist/index.js/Collection,keyCodes,@ckeditor/ckeditor5-utils/dist/index.js/keyCodes,isText,@ckeditor/ckeditor5-utils/dist/index.js/isText,@ckeditor/ckeditor5-utils/dist/index.js/env,remove,@ckeditor/ckeditor5-utils/dist/index.js/remove,insertAt,@ckeditor/ckeditor5-utils/dist/index.js/insertAt,diff,@ckeditor/ckeditor5-utils/dist/index.js/diff,isNode,@ckeditor/ckeditor5-utils/dist/index.js/isNode,isComment,@ckeditor/ckeditor5-utils/dist/index.js/isComment,indexOf,@ckeditor/ckeditor5-utils/dist/index.js/indexOf,fastDiff,@ckeditor/ckeditor5-utils/dist/index.js/fastDiff,global,@ckeditor/ckeditor5-utils/dist/index.js/global,isValidAttributeName,@ckeditor/ckeditor5-utils/dist/index.js/isValidAttributeName,first,@ckeditor/ckeditor5-utils/dist/index.js/first,getAncestors,@ckeditor/ckeditor5-utils/dist/index.js/getAncestors,DomEmitterMixin,@ckeditor/ckeditor5-utils/dist/index.js/DomEmitterMixin,getCode,@ckeditor/ckeditor5-utils/dist/index.js/getCode,isArrowKeyCode,@ckeditor/ckeditor5-utils/dist/index.js/isArrowKeyCode,scrollViewportToShowTarget,@ckeditor/ckeditor5-utils/dist/index.js/scrollViewportToShowTarget,spliceArray,@ckeditor/ckeditor5-utils/dist/index.js/spliceArray,@ckeditor/ckeditor5-utils/dist/index.js/uid,priorities,@ckeditor/ckeditor5-utils/dist/index.js/priorities,isInsideSurrogatePair,@ckeditor/ckeditor5-utils/dist/index.js/isInsideSurrogatePair,isInsideCombinedSymbol,@ckeditor/ckeditor5-utils/dist/index.js/isInsideCombinedSymbol,isInsideEmojiSequence,@ckeditor/ckeditor5-utils/dist/index.js/isInsideEmojiSequence,@ckeditor/ckeditor5-utils,@ckeditor/ckeditor5-utils/CKEditorError,@ckeditor/ckeditor5-utils/EmitterMixin,@ckeditor/ckeditor5-utils/ObservableMixin,@ckeditor/ckeditor5-utils/logWarning,@ckeditor/ckeditor5-utils/env,@ckeditor/ckeditor5-utils/toArray,@ckeditor/ckeditor5-utils/priorities,@ckeditor/ckeditor5-utils/global,@ckeditor/ckeditor5-utils/toMap,@ckeditor/ckeditor5-utils/Collection,@ckeditor/ckeditor5-utils/isInsideSurrogatePair,@ckeditor/ckeditor5-utils/isInsideCombinedSymbol,@ckeditor/ckeditor5-utils/isIterable,@ckeditor/ckeditor5-utils/uid,@ckeditor/ckeditor5-utils/compareArrays,@ckeditor/ckeditor5-utils/spliceArray,@ckeditor/ckeditor5-utils/first,@ckeditor/ckeditor5-utils/isInsideEmojiSequence,@ckeditor/ckeditor5-utils/indexOf,@ckeditor/ckeditor5-utils/getAncestors,@ckeditor/ckeditor5-utils/isText,@ckeditor/ckeditor5-utils/isComment,@ckeditor/ckeditor5-utils/isValidAttributeName,@ckeditor/ckeditor5-utils/keyCodes,@ckeditor/ckeditor5-utils/isArrowKeyCode,@ckeditor/ckeditor5-utils/EventInfo,@ckeditor/ckeditor5-utils/getCode,@ckeditor/ckeditor5-utils/DomEmitterMixin,@ckeditor/ckeditor5-utils/diff,@ckeditor/ckeditor5-utils/fastDiff,@ckeditor/ckeditor5-utils/insertAt,@ckeditor/ckeditor5-utils/isNode,@ckeditor/ckeditor5-utils/remove,@ckeditor/ckeditor5-utils/count,@ckeditor/ckeditor5-utils/scrollViewportToShowTarget"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 5
          },
          {
            "location": "dist/index.js",
            "line": 251
          },
          {
            "location": "dist/index.js",
            "line": 273
          },
          {
            "location": "dist/index.js",
            "line": 397
          },
          {
            "location": "dist/index.js",
            "line": 955
          },
          {
            "location": "dist/index.js",
            "line": 1014
          },
          {
            "location": "dist/index.js",
            "line": 1018
          },
          {
            "location": "dist/index.js",
            "line": 2303
          },
          {
            "location": "dist/index.js",
            "line": 2320
          },
          {
            "location": "dist/index.js",
            "line": 2349
          },
          {
            "location": "dist/index.js",
            "line": 2443
          },
          {
            "location": "dist/index.js",
            "line": 2473
          },
          {
            "location": "dist/index.js",
            "line": 2540
          },
          {
            "location": "dist/index.js",
            "line": 3093
          },
          {
            "location": "dist/index.js",
            "line": 3609
          },
          {
            "location": "dist/index.js",
            "line": 3695
          },
          {
            "location": "dist/index.js",
            "line": 3772
          },
          {
            "location": "dist/index.js",
            "line": 3773
          },
          {
            "location": "dist/index.js",
            "line": 3920
          },
          {
            "location": "dist/index.js",
            "line": 4117
          },
          {
            "location": "dist/index.js",
            "line": 4421
          },
          {
            "location": "dist/index.js",
            "line": 4425
          },
          {
            "location": "dist/index.js",
            "line": 4430
          },
          {
            "location": "dist/index.js",
            "line": 4512
          },
          {
            "location": "dist/index.js",
            "line": 5048
          },
          {
            "location": "dist/index.js",
            "line": 5229
          },
          {
            "location": "dist/index.js",
            "line": 5733
          },
          {
            "location": "dist/index.js",
            "line": 6897
          },
          {
            "location": "dist/index.js",
            "line": 6955
          },
          {
            "location": "dist/index.js",
            "line": 7149
          },
          {
            "location": "dist/index.js",
            "line": 7216
          },
          {
            "location": "dist/index.js",
            "line": 7357
          },
          {
            "location": "dist/index.js",
            "line": 7395
          },
          {
            "location": "dist/index.js",
            "line": 7408
          },
          {
            "location": "dist/index.js",
            "line": 7448
          },
          {
            "location": "dist/index.js",
            "line": 7486
          },
          {
            "location": "dist/index.js",
            "line": 7494
          },
          {
            "location": "dist/index.js",
            "line": 7736
          },
          {
            "location": "dist/index.js",
            "line": 7744
          },
          {
            "location": "dist/index.js",
            "line": 7753
          },
          {
            "location": "dist/index.js",
            "line": 7758
          },
          {
            "location": "dist/index.js",
            "line": 7773
          },
          {
            "location": "dist/index.js",
            "line": 7794
          },
          {
            "location": "dist/index.js",
            "line": 7795
          },
          {
            "location": "dist/index.js",
            "line": 7860
          },
          {
            "location": "dist/index.js",
            "line": 8086
          },
          {
            "location": "dist/index.js",
            "line": 8092
          },
          {
            "location": "dist/index.js",
            "line": 8097
          },
          {
            "location": "dist/index.js",
            "line": 8145
          },
          {
            "location": "dist/index.js",
            "line": 8154
          },
          {
            "location": "dist/index.js",
            "line": 8229
          },
          {
            "location": "dist/index.js",
            "line": 8235
          },
          {
            "location": "dist/index.js",
            "line": 8330
          },
          {
            "location": "dist/index.js",
            "line": 8382
          },
          {
            "location": "dist/index.js",
            "line": 8389
          },
          {
            "location": "dist/index.js",
            "line": 8391
          },
          {
            "location": "dist/index.js",
            "line": 8412
          },
          {
            "location": "dist/index.js",
            "line": 8413
          },
          {
            "location": "dist/index.js",
            "line": 8415
          },
          {
            "location": "dist/index.js",
            "line": 8644
          },
          {
            "location": "dist/index.js",
            "line": 8727
          },
          {
            "location": "dist/index.js",
            "line": 8760
          },
          {
            "location": "dist/index.js",
            "line": 8763
          },
          {
            "location": "dist/index.js",
            "line": 8811
          },
          {
            "location": "dist/index.js",
            "line": 9037
          },
          {
            "location": "dist/index.js",
            "line": 9227
          },
          {
            "location": "dist/index.js",
            "line": 9230
          },
          {
            "location": "dist/index.js",
            "line": 9294
          },
          {
            "location": "dist/index.js",
            "line": 9442
          },
          {
            "location": "dist/index.js",
            "line": 10253
          },
          {
            "location": "dist/index.js",
            "line": 10289
          },
          {
            "location": "dist/index.js",
            "line": 10474
          },
          {
            "location": "dist/index.js",
            "line": 10555
          },
          {
            "location": "dist/index.js",
            "line": 10918
          },
          {
            "location": "dist/index.js",
            "line": 11023
          },
          {
            "location": "dist/index.js",
            "line": 11056
          },
          {
            "location": "dist/index.js",
            "line": 11164
          },
          {
            "location": "dist/index.js",
            "line": 11620
          },
          {
            "location": "dist/index.js",
            "line": 11966
          },
          {
            "location": "dist/index.js",
            "line": 12058
          },
          {
            "location": "dist/index.js",
            "line": 12205
          },
          {
            "location": "dist/index.js",
            "line": 12308
          },
          {
            "location": "dist/index.js",
            "line": 12320
          },
          {
            "location": "dist/index.js",
            "line": 12350
          },
          {
            "location": "dist/index.js",
            "line": 12357
          },
          {
            "location": "dist/index.js",
            "line": 12795
          },
          {
            "location": "dist/index.js",
            "line": 13590
          },
          {
            "location": "dist/index.js",
            "line": 14298
          },
          {
            "location": "dist/index.js",
            "line": 14757
          },
          {
            "location": "dist/index.js",
            "line": 14999
          },
          {
            "location": "dist/index.js",
            "line": 15511
          },
          {
            "location": "dist/index.js",
            "line": 15610
          },
          {
            "location": "dist/index.js",
            "line": 16054
          },
          {
            "location": "dist/index.js",
            "line": 16216
          },
          {
            "location": "dist/index.js",
            "line": 16217
          },
          {
            "location": "dist/index.js",
            "line": 18329
          },
          {
            "location": "dist/index.js",
            "line": 19365
          },
          {
            "location": "dist/index.js",
            "line": 19934
          },
          {
            "location": "dist/index.js",
            "line": 20482
          },
          {
            "location": "dist/index.js",
            "line": 20521
          },
          {
            "location": "dist/index.js",
            "line": 20552
          },
          {
            "location": "dist/index.js",
            "line": 20577
          },
          {
            "location": "dist/index.js",
            "line": 20609
          },
          {
            "location": "dist/index.js",
            "line": 21434
          },
          {
            "location": "dist/index.js",
            "line": 21826
          },
          {
            "location": "dist/index.js",
            "line": 22263
          },
          {
            "location": "dist/index.js",
            "line": 22308
          },
          {
            "location": "dist/index.js",
            "line": 22615
          },
          {
            "location": "dist/index.js",
            "line": 22616
          },
          {
            "location": "dist/index.js",
            "line": 22617
          },
          {
            "location": "dist/index.js",
            "line": 22618
          },
          {
            "location": "dist/index.js",
            "line": 22619
          },
          {
            "location": "dist/index.js",
            "line": 23216
          },
          {
            "location": "dist/index.js",
            "line": 23222
          },
          {
            "location": "dist/index.js",
            "line": 23254
          },
          {
            "location": "dist/index.js",
            "line": 23429
          },
          {
            "location": "dist/index.js",
            "line": 23577
          },
          {
            "location": "dist/index.js",
            "line": 25349
          },
          {
            "location": "dist/index.js",
            "line": 25355
          },
          {
            "location": "dist/index.js",
            "line": 25987
          },
          {
            "location": "dist/index.js",
            "line": 26025
          },
          {
            "location": "dist/index.js",
            "line": 26290
          },
          {
            "location": "dist/index.js",
            "line": 26695
          },
          {
            "location": "dist/index.js",
            "line": 26779
          },
          {
            "location": "dist/index.js",
            "line": 26821
          },
          {
            "location": "dist/index.js",
            "line": 28173
          },
          {
            "location": "dist/index.js",
            "line": 28495
          },
          {
            "location": "dist/index.js",
            "line": 28500
          },
          {
            "location": "dist/index.js",
            "line": 28748
          },
          {
            "location": "dist/index.js",
            "line": 29155
          },
          {
            "location": "dist/index.js",
            "line": 29395
          },
          {
            "location": "dist/index.js",
            "line": 29910
          },
          {
            "location": "dist/index.js",
            "line": 30064
          },
          {
            "location": "dist/index.js",
            "line": 31659
          },
          {
            "location": "dist/index.js",
            "line": 31850
          },
          {
            "location": "dist/index.js",
            "line": 31902
          },
          {
            "location": "dist/index.js",
            "line": 31958
          },
          {
            "location": "dist/index.js",
            "line": 31980
          },
          {
            "location": "dist/index.js",
            "line": 35274
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 8
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 37
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 70
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 71
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 72
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 73
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 74
          },
          {
            "location": "src/controller/datacontroller.js",
            "line": 131
          },
          {
            "location": "src/controller/editingcontroller.js",
            "line": 8
          },
          {
            "location": "src/controller/editingcontroller.js",
            "line": 22
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 8
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 67
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 69
          },
          {
            "location": "src/conversion/conversion.js",
            "line": 597
          },
          {
            "location": "src/conversion/downcastdispatcher.js",
            "line": 10
          },
          {
            "location": "src/conversion/downcastdispatcher.js",
            "line": 102
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 18
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1798
          },
          {
            "location": "src/conversion/mapper.js",
            "line": 13
          },
          {
            "location": "src/conversion/mapper.js",
            "line": 33
          },
          {
            "location": "src/conversion/modelconsumable.js",
            "line": 9
          },
          {
            "location": "src/conversion/upcastdispatcher.js",
            "line": 13
          },
          {
            "location": "src/conversion/upcastdispatcher.js",
            "line": 110
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 8
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 644
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 8
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 422
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 463
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 494
          },
          {
            "location": "src/conversion/viewconsumable.js",
            "line": 519
          },
          {
            "location": "src/dataprocessor/basichtmlwriter.js",
            "line": 5
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 27
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 306
          },
          {
            "location": "src/model/batch.js",
            "line": 8
          },
          {
            "location": "src/model/batch.js",
            "line": 42
          },
          {
            "location": "src/model/batch.js",
            "line": 70
          },
          {
            "location": "src/model/document.js",
            "line": 12
          },
          {
            "location": "src/model/document.js",
            "line": 32
          },
          {
            "location": "src/model/document.js",
            "line": 357
          },
          {
            "location": "src/model/documentfragment.js",
            "line": 13
          },
          {
            "location": "src/model/documentfragment.js",
            "line": 292
          },
          {
            "location": "src/model/documentselection.js",
            "line": 13
          },
          {
            "location": "src/model/documentselection.js",
            "line": 39
          },
          {
            "location": "src/model/documentselection.js",
            "line": 587
          },
          {
            "location": "src/model/documentselection.js",
            "line": 745
          },
          {
            "location": "src/model/documentselection.js",
            "line": 746
          },
          {
            "location": "src/model/element.js",
            "line": 12
          },
          {
            "location": "src/model/element.js",
            "line": 267
          },
          {
            "location": "src/model/history.js",
            "line": 5
          },
          {
            "location": "src/model/liveposition.js",
            "line": 9
          },
          {
            "location": "src/model/liveposition.js",
            "line": 23
          },
          {
            "location": "src/model/liverange.js",
            "line": 9
          },
          {
            "location": "src/model/liverange.js",
            "line": 18
          },
          {
            "location": "src/model/markercollection.js",
            "line": 10
          },
          {
            "location": "src/model/markercollection.js",
            "line": 25
          },
          {
            "location": "src/model/markercollection.js",
            "line": 285
          },
          {
            "location": "src/model/model.js",
            "line": 26
          },
          {
            "location": "src/model/model.js",
            "line": 33
          },
          {
            "location": "src/model/model.js",
            "line": 181
          },
          {
            "location": "src/model/model.js",
            "line": 204
          },
          {
            "location": "src/model/node.js",
            "line": 10
          },
          {
            "location": "src/model/node.js",
            "line": 55
          },
          {
            "location": "src/model/node.js",
            "line": 231
          },
          {
            "location": "src/model/node.js",
            "line": 346
          },
          {
            "location": "src/model/nodelist.js",
            "line": 9
          },
          {
            "location": "src/model/nodelist.js",
            "line": 141
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 11
          },
          {
            "location": "src/model/operation/detachoperation.js",
            "line": 11
          },
          {
            "location": "src/model/operation/insertoperation.js",
            "line": 15
          },
          {
            "location": "src/model/operation/mergeoperation.js",
            "line": 13
          },
          {
            "location": "src/model/operation/moveoperation.js",
            "line": 12
          },
          {
            "location": "src/model/operation/moveoperation.js",
            "line": 118
          },
          {
            "location": "src/model/operation/renameoperation.js",
            "line": 11
          },
          {
            "location": "src/model/operation/rootattributeoperation.js",
            "line": 9
          },
          {
            "location": "src/model/operation/splitoperation.js",
            "line": 13
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 20
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 1395
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 1432
          },
          {
            "location": "src/model/operation/transform.js",
            "line": 1682
          },
          {
            "location": "src/model/operation/utils.js",
            "line": 12
          },
          {
            "location": "src/model/operation/utils.js",
            "line": 136
          },
          {
            "location": "src/model/position.js",
            "line": 10
          },
          {
            "location": "src/model/position.js",
            "line": 180
          },
          {
            "location": "src/model/position.js",
            "line": 272
          },
          {
            "location": "src/model/position.js",
            "line": 436
          },
          {
            "location": "src/model/position.js",
            "line": 550
          },
          {
            "location": "src/model/position.js",
            "line": 564
          },
          {
            "location": "src/model/position.js",
            "line": 596
          },
          {
            "location": "src/model/position.js",
            "line": 604
          },
          {
            "location": "src/model/range.js",
            "line": 11
          },
          {
            "location": "src/model/range.js",
            "line": 66
          },
          {
            "location": "src/model/schema.js",
            "line": 13
          },
          {
            "location": "src/model/schema.js",
            "line": 27
          },
          {
            "location": "src/model/schema.js",
            "line": 912
          },
          {
            "location": "src/model/selection.js",
            "line": 12
          },
          {
            "location": "src/model/selection.js",
            "line": 20
          },
          {
            "location": "src/model/selection.js",
            "line": 345
          },
          {
            "location": "src/model/textproxy.js",
            "line": 9
          },
          {
            "location": "src/model/treewalker.js",
            "line": 12
          },
          {
            "location": "src/model/utils/insertcontent.js",
            "line": 14
          },
          {
            "location": "src/model/utils/insertobject.js",
            "line": 5
          },
          {
            "location": "src/model/utils/insertobject.js",
            "line": 57
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 12
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 126
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 127
          },
          {
            "location": "src/model/utils/modifyselection.js",
            "line": 128
          },
          {
            "location": "src/model/writer.js",
            "line": 25
          },
          {
            "location": "src/model/writer.js",
            "line": 302
          },
          {
            "location": "src/model/writer.js",
            "line": 853
          },
          {
            "location": "src/model/writer.js",
            "line": 1016
          },
          {
            "location": "src/view/attributeelement.js",
            "line": 9
          },
          {
            "location": "src/view/document.js",
            "line": 10
          },
          {
            "location": "src/view/document.js",
            "line": 16
          },
          {
            "location": "src/view/documentfragment.js",
            "line": 11
          },
          {
            "location": "src/view/documentfragment.js",
            "line": 19
          },
          {
            "location": "src/view/documentfragment.js",
            "line": 220
          },
          {
            "location": "src/view/documentselection.js",
            "line": 10
          },
          {
            "location": "src/view/documentselection.js",
            "line": 21
          },
          {
            "location": "src/view/domconverter.js",
            "line": 19
          },
          {
            "location": "src/view/domconverter.js",
            "line": 323
          },
          {
            "location": "src/view/domconverter.js",
            "line": 325
          },
          {
            "location": "src/view/domconverter.js",
            "line": 331
          },
          {
            "location": "src/view/domconverter.js",
            "line": 381
          },
          {
            "location": "src/view/domconverter.js",
            "line": 392
          },
          {
            "location": "src/view/domconverter.js",
            "line": 468
          },
          {
            "location": "src/view/domconverter.js",
            "line": 471
          },
          {
            "location": "src/view/domconverter.js",
            "line": 563
          },
          {
            "location": "src/view/domconverter.js",
            "line": 615
          },
          {
            "location": "src/view/domconverter.js",
            "line": 622
          },
          {
            "location": "src/view/domconverter.js",
            "line": 624
          },
          {
            "location": "src/view/domconverter.js",
            "line": 648
          },
          {
            "location": "src/view/domconverter.js",
            "line": 649
          },
          {
            "location": "src/view/domconverter.js",
            "line": 651
          },
          {
            "location": "src/view/domconverter.js",
            "line": 896
          },
          {
            "location": "src/view/domconverter.js",
            "line": 986
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1020
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1023
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1074
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1320
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1416
          },
          {
            "location": "src/view/domconverter.js",
            "line": 1419
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 16
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 567
          },
          {
            "location": "src/view/editableelement.js",
            "line": 9
          },
          {
            "location": "src/view/editableelement.js",
            "line": 19
          },
          {
            "location": "src/view/element.js",
            "line": 11
          },
          {
            "location": "src/view/element.js",
            "line": 584
          },
          {
            "location": "src/view/element.js",
            "line": 602
          },
          {
            "location": "src/view/element.js",
            "line": 633
          },
          {
            "location": "src/view/element.js",
            "line": 679
          },
          {
            "location": "src/view/element.js",
            "line": 710
          },
          {
            "location": "src/view/emptyelement.js",
            "line": 10
          },
          {
            "location": "src/view/filler.js",
            "line": 5
          },
          {
            "location": "src/view/filler.js",
            "line": 92
          },
          {
            "location": "src/view/matcher.js",
            "line": 6
          },
          {
            "location": "src/view/matcher.js",
            "line": 350
          },
          {
            "location": "src/view/matcher.js",
            "line": 404
          },
          {
            "location": "src/view/matcher.js",
            "line": 408
          },
          {
            "location": "src/view/node.js",
            "line": 9
          },
          {
            "location": "src/view/node.js",
            "line": 18
          },
          {
            "location": "src/view/node.js",
            "line": 162
          },
          {
            "location": "src/view/observer/arrowkeysobserver.js",
            "line": 10
          },
          {
            "location": "src/view/observer/arrowkeysobserver.js",
            "line": 23
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 8
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 81
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 85
          },
          {
            "location": "src/view/observer/bubblingemittermixin.js",
            "line": 90
          },
          {
            "location": "src/view/observer/bubblingeventinfo.js",
            "line": 8
          },
          {
            "location": "src/view/observer/fakeselectionobserver.js",
            "line": 10
          },
          {
            "location": "src/view/observer/inputobserver.js",
            "line": 10
          },
          {
            "location": "src/view/observer/keyobserver.js",
            "line": 9
          },
          {
            "location": "src/view/observer/keyobserver.js",
            "line": 34
          },
          {
            "location": "src/view/observer/observer.js",
            "line": 8
          },
          {
            "location": "src/view/observer/observer.js",
            "line": 15
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 11
          },
          {
            "location": "src/view/observer/tabobserver.js",
            "line": 7
          },
          {
            "location": "src/view/placeholder.js",
            "line": 9
          },
          {
            "location": "src/view/placeholder.js",
            "line": 264
          },
          {
            "location": "src/view/position.js",
            "line": 9
          },
          {
            "location": "src/view/position.js",
            "line": 204
          },
          {
            "location": "src/view/rawelement.js",
            "line": 11
          },
          {
            "location": "src/view/renderer.js",
            "line": 11
          },
          {
            "location": "src/view/renderer.js",
            "line": 26
          },
          {
            "location": "src/view/renderer.js",
            "line": 279
          },
          {
            "location": "src/view/renderer.js",
            "line": 351
          },
          {
            "location": "src/view/renderer.js",
            "line": 499
          },
          {
            "location": "src/view/renderer.js",
            "line": 535
          },
          {
            "location": "src/view/renderer.js",
            "line": 549
          },
          {
            "location": "src/view/renderer.js",
            "line": 593
          },
          {
            "location": "src/view/renderer.js",
            "line": 630
          },
          {
            "location": "src/view/renderer.js",
            "line": 639
          },
          {
            "location": "src/view/renderer.js",
            "line": 855
          },
          {
            "location": "src/view/renderer.js",
            "line": 865
          },
          {
            "location": "src/view/renderer.js",
            "line": 875
          },
          {
            "location": "src/view/renderer.js",
            "line": 876
          },
          {
            "location": "src/view/renderer.js",
            "line": 877
          },
          {
            "location": "src/view/renderer.js",
            "line": 884
          },
          {
            "location": "src/view/renderer.js",
            "line": 885
          },
          {
            "location": "src/view/renderer.js",
            "line": 903
          },
          {
            "location": "src/view/renderer.js",
            "line": 928
          },
          {
            "location": "src/view/renderer.js",
            "line": 929
          },
          {
            "location": "src/view/renderer.js",
            "line": 996
          },
          {
            "location": "src/view/selection.js",
            "line": 13
          },
          {
            "location": "src/view/selection.js",
            "line": 26
          },
          {
            "location": "src/view/selection.js",
            "line": 280
          },
          {
            "location": "src/view/selection.js",
            "line": 281
          },
          {
            "location": "src/view/selection.js",
            "line": 430
          },
          {
            "location": "src/view/textproxy.js",
            "line": 9
          },
          {
            "location": "src/view/treewalker.js",
            "line": 12
          },
          {
            "location": "src/view/uielement.js",
            "line": 10
          },
          {
            "location": "src/view/view.js",
            "line": 24
          },
          {
            "location": "src/view/view.js",
            "line": 60
          },
          {
            "location": "src/view/view.js",
            "line": 337
          },
          {
            "location": "src/view/view.js",
            "line": 430
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-es",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98a9c2f9027da56573bfe0b8fd4deb46c1daa457c7bd0168141f767b9db17b218c717ebf3a5225efc8ded6ef2f78fcd8652924a2030f276ca3c71b1bf3d731cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash-es@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-es@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash-es,clone,lodash-es/clone,isPlainObject,lodash-es/isPlainObject,isObject,lodash-es/isObject,unset,lodash-es/unset,lodash-es/get,merge,lodash-es/merge,lodash-es/set,extend,lodash-es/extend,debounce,lodash-es/debounce,isEqualWith,lodash-es/isEqualWith,cloneDeep,lodash-es/cloneDeep,isEqual,lodash-es/isEqual"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 6
          },
          {
            "location": "dist/index.js",
            "line": 447
          },
          {
            "location": "dist/index.js",
            "line": 952
          },
          {
            "location": "dist/index.js",
            "line": 969
          },
          {
            "location": "dist/index.js",
            "line": 1011
          },
          {
            "location": "dist/index.js",
            "line": 1181
          },
          {
            "location": "dist/index.js",
            "line": 1218
          },
          {
            "location": "dist/index.js",
            "line": 1338
          },
          {
            "location": "dist/index.js",
            "line": 1399
          },
          {
            "location": "dist/index.js",
            "line": 1435
          },
          {
            "location": "dist/index.js",
            "line": 1469
          },
          {
            "location": "dist/index.js",
            "line": 1478
          },
          {
            "location": "dist/index.js",
            "line": 1485
          },
          {
            "location": "dist/index.js",
            "line": 1834
          },
          {
            "location": "dist/index.js",
            "line": 1835
          },
          {
            "location": "dist/index.js",
            "line": 1837
          },
          {
            "location": "dist/index.js",
            "line": 5317
          },
          {
            "location": "dist/index.js",
            "line": 5490
          },
          {
            "location": "dist/index.js",
            "line": 9383
          },
          {
            "location": "dist/index.js",
            "line": 9528
          },
          {
            "location": "dist/index.js",
            "line": 9640
          },
          {
            "location": "dist/index.js",
            "line": 9948
          },
          {
            "location": "dist/index.js",
            "line": 9952
          },
          {
            "location": "dist/index.js",
            "line": 10452
          },
          {
            "location": "dist/index.js",
            "line": 18179
          },
          {
            "location": "dist/index.js",
            "line": 18221
          },
          {
            "location": "dist/index.js",
            "line": 18274
          },
          {
            "location": "dist/index.js",
            "line": 19242
          },
          {
            "location": "dist/index.js",
            "line": 19265
          },
          {
            "location": "dist/index.js",
            "line": 19293
          },
          {
            "location": "dist/index.js",
            "line": 19331
          },
          {
            "location": "dist/index.js",
            "line": 24173
          },
          {
            "location": "dist/index.js",
            "line": 24206
          },
          {
            "location": "dist/index.js",
            "line": 28298
          },
          {
            "location": "dist/index.js",
            "line": 32934
          },
          {
            "location": "dist/index.js",
            "line": 35354
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 19
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1665
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1705
          },
          {
            "location": "src/conversion/downcasthelpers.js",
            "line": 1753
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 9
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 530
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 552
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 579
          },
          {
            "location": "src/conversion/upcasthelpers.js",
            "line": 614
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 28
          },
          {
            "location": "src/dev-utils/model.js",
            "line": 385
          },
          {
            "location": "src/model/document.js",
            "line": 13
          },
          {
            "location": "src/model/document.js",
            "line": 243
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 12
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 99
          },
          {
            "location": "src/model/operation/attributeoperation.js",
            "line": 128
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 20
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 126
          },
          {
            "location": "src/view/downcastwriter.js",
            "line": 308
          },
          {
            "location": "src/view/matcher.js",
            "line": 5
          },
          {
            "location": "src/view/matcher.js",
            "line": 347
          },
          {
            "location": "src/view/matcher.js",
            "line": 358
          },
          {
            "location": "src/view/matcher.js",
            "line": 401
          },
          {
            "location": "src/view/node.js",
            "line": 10
          },
          {
            "location": "src/view/node.js",
            "line": 216
          },
          {
            "location": "src/view/observer/domeventdata.js",
            "line": 8
          },
          {
            "location": "src/view/observer/domeventdata.js",
            "line": 27
          },
          {
            "location": "src/view/observer/fakeselectionobserver.js",
            "line": 11
          },
          {
            "location": "src/view/observer/fakeselectionobserver.js",
            "line": 25
          },
          {
            "location": "src/view/observer/mutationobserver.js",
            "line": 11
          },
          {
            "location": "src/view/observer/mutationobserver.js",
            "line": 153
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 12
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 32
          },
          {
            "location": "src/view/observer/selectionobserver.js",
            "line": 36
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 8
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 91
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 130
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 256
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 321
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 364
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 400
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 409
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 416
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 759
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 760
          },
          {
            "location": "src/view/stylesmap.js",
            "line": 762
          },
          {
            "location": "src/view/upcastwriter.js",
            "line": 11
          },
          {
            "location": "src/view/upcastwriter.js",
            "line": 247
          },
          {
            "location": "src/view/view.js",
            "line": 27
          },
          {
            "location": "src/view/view.js",
            "line": 320
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/lodash-es@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
      "dependsOn": [
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-engine@41.4.2",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-utils@41.4.2",
        "pkg:npm/lodash-es@4.17.21"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@ckeditor/ckeditor5-engine@41.4.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-09T15:00:13Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, November 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ckeditor5-engine' with version '41.4.2'. The package type in this SBOM is npm with a single purl namespace '@ckeditor' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}