{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:3223263c-c211-4538-9e0b-7f926d33ae5d",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-09T09:26:47Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "ckeditor5-ui",
      "group": "@ckeditor",
      "version": "40.2.0",
      "description": "The UI framework and standard UI library of CKEditor 5.",
      "purl": "pkg:npm/%40ckeditor/ckeditor5-ui@40.2.0",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-ui@40.2.0",
      "author": "CKSource (http://cksource.com/)",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://ckeditor.com/ckeditor-5"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ckeditor/ckeditor5.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ckeditor"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@ckeditor",
      "name": "ckeditor5-core",
      "version": "40.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1fa8868df998645d70379a904df9a972701ccf31cf2bb8ef15acfd0e9ef0a3a30a99552d875c2d8069734177173be71188dd2717228afb16c8051f154921861"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-core@40.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-core/-/ckeditor5-core-40.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-core@40.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-core/-/ckeditor5-core-40.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@ckeditor/ckeditor5-core,ContextPlugin,@ckeditor/ckeditor5-core/ContextPlugin,Plugin,@ckeditor/ckeditor5-core/Plugin,icons,@ckeditor/ckeditor5-core/icons"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/notification/notification.js",
            "line": 9
          },
          {
            "location": "src/panel/balloon/contextualballoon.js",
            "line": 11
          },
          {
            "location": "src/search/text/searchtextqueryview.js",
            "line": 12
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 12
          },
          {
            "location": "src/toolbar/block/blocktoolbar.js",
            "line": 9
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 16
          }
        ]
      }
    },
    {
      "group": "@ckeditor",
      "name": "ckeditor5-engine",
      "version": "40.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b206e8517f0fb3e2dc120cb0c93dc178ad67ccb1e3355222654d6abd1c51de2c73230e30db144d5c219f11258b5b9639aeff7eca9502ad7eb5a0b9d953ae0f41"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-engine@40.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-engine/-/ckeditor5-engine-40.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-engine@40.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-engine/-/ckeditor5-engine-40.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@ckeditor",
      "name": "ckeditor5-utils",
      "version": "40.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fe913241c3093b63f2d79bca443f10535d5949c10ac7ecb7afcf27bdcf110307426d8fbf9bac6afcee8ebae9f3e62ff01341ce4cf953e16ef9e4dac3afed62a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-or-later",
            "url": "https://opensource.org/licenses/GPL-2.0-or-later",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ckeditor/ckeditor5-utils@40.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-40.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-40.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@ckeditor/ckeditor5-utils,getOptimalPosition,@ckeditor/ckeditor5-utils/getOptimalPosition,global,@ckeditor/ckeditor5-utils/global,toUnit,@ckeditor/ckeditor5-utils/toUnit,Rect,@ckeditor/ckeditor5-utils/Rect,@ckeditor/ckeditor5-utils/env,getEnvKeystrokeText,@ckeditor/ckeditor5-utils/getEnvKeystrokeText,@ckeditor/ckeditor5-utils/uid,delay,@ckeditor/ckeditor5-utils/delay,FocusTracker,@ckeditor/ckeditor5-utils/FocusTracker,KeystrokeHandler,@ckeditor/ckeditor5-utils/KeystrokeHandler,Collection,@ckeditor/ckeditor5-utils/Collection,ObservableMixin,@ckeditor/ckeditor5-utils/ObservableMixin,CKEditorError,@ckeditor/ckeditor5-utils/CKEditorError,logWarning,@ckeditor/ckeditor5-utils/logWarning,priorities,@ckeditor/ckeditor5-utils/priorities,createElement,@ckeditor/ckeditor5-utils/createElement,isVisible,@ckeditor/ckeditor5-utils/isVisible,DomEmitterMixin,@ckeditor/ckeditor5-utils/DomEmitterMixin,verifyLicense,@ckeditor/ckeditor5-utils/verifyLicense,EmitterMixin,@ckeditor/ckeditor5-utils/EmitterMixin,isRange,@ckeditor/ckeditor5-utils/isRange,isNode,@ckeditor/ckeditor5-utils/isNode,toArray,@ckeditor/ckeditor5-utils/toArray,getBorderWidths,@ckeditor/ckeditor5-utils/getBorderWidths,ResizeObserver,@ckeditor/ckeditor5-utils/ResizeObserver,first,@ckeditor/ckeditor5-utils/first,isIterable,@ckeditor/ckeditor5-utils/isIterable"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/autocomplete/autocompleteview.js",
            "line": 8
          },
          {
            "location": "src/autocomplete/autocompleteview.js",
            "line": 23
          },
          {
            "location": "src/button/buttonview.js",
            "line": 11
          },
          {
            "location": "src/button/buttonview.js",
            "line": 46
          },
          {
            "location": "src/button/buttonview.js",
            "line": 119
          },
          {
            "location": "src/button/buttonview.js",
            "line": 182
          },
          {
            "location": "src/button/buttonview.js",
            "line": 205
          },
          {
            "location": "src/colorgrid/colorgridview.js",
            "line": 11
          },
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 9
          },
          {
            "location": "src/colorselector/colorselectorview.js",
            "line": 11
          },
          {
            "location": "src/colorselector/documentcolorcollection.js",
            "line": 5
          },
          {
            "location": "src/colorselector/documentcolorcollection.js",
            "line": 9
          },
          {
            "location": "src/componentfactory.js",
            "line": 8
          },
          {
            "location": "src/dropdown/button/splitbuttonview.js",
            "line": 10
          },
          {
            "location": "src/dropdown/dropdownpanelview.js",
            "line": 9
          },
          {
            "location": "src/dropdown/dropdownpanelview.js",
            "line": 77
          },
          {
            "location": "src/dropdown/dropdownview.js",
            "line": 9
          },
          {
            "location": "src/dropdown/utils.js",
            "line": 20
          },
          {
            "location": "src/dropdown/utils.js",
            "line": 309
          },
          {
            "location": "src/editorui/bodycollection.js",
            "line": 11
          },
          {
            "location": "src/editorui/bodycollection.js",
            "line": 65
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 13
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 17
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 331
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 365
          },
          {
            "location": "src/editorui/editorui.js",
            "line": 404
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 5
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 24
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 60
          },
          {
            "location": "src/focuscycler.js",
            "line": 8
          },
          {
            "location": "src/focuscycler.js",
            "line": 61
          },
          {
            "location": "src/focuscycler.js",
            "line": 244
          },
          {
            "location": "src/input/inputbase.js",
            "line": 9
          },
          {
            "location": "src/label/labelview.js",
            "line": 9
          },
          {
            "location": "src/label/labelview.js",
            "line": 22
          },
          {
            "location": "src/labeledfield/labeledfieldview.js",
            "line": 10
          },
          {
            "location": "src/labeledfield/labeledfieldview.js",
            "line": 65
          },
          {
            "location": "src/labeledfield/labeledfieldview.js",
            "line": 66
          },
          {
            "location": "src/labeledinput/labeledinputview.js",
            "line": 10
          },
          {
            "location": "src/labeledinput/labeledinputview.js",
            "line": 24
          },
          {
            "location": "src/labeledinput/labeledinputview.js",
            "line": 25
          },
          {
            "location": "src/list/listview.js",
            "line": 13
          },
          {
            "location": "src/model.js",
            "line": 8
          },
          {
            "location": "src/model.js",
            "line": 13
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 9
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 12
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 740
          },
          {
            "location": "src/panel/balloon/contextualballoon.js",
            "line": 12
          },
          {
            "location": "src/panel/balloon/contextualballoon.js",
            "line": 17
          },
          {
            "location": "src/panel/sticky/stickypanelview.js",
            "line": 10
          },
          {
            "location": "src/panel/sticky/stickypanelview.js",
            "line": 16
          },
          {
            "location": "src/search/searchresultsview.js",
            "line": 9
          },
          {
            "location": "src/search/text/searchtextview.js",
            "line": 8
          },
          {
            "location": "src/template.js",
            "line": 11
          },
          {
            "location": "src/template.js",
            "line": 52
          },
          {
            "location": "src/template.js",
            "line": 609
          },
          {
            "location": "src/template.js",
            "line": 1016
          },
          {
            "location": "src/template.js",
            "line": 1057
          },
          {
            "location": "src/template.js",
            "line": 1131
          },
          {
            "location": "src/template.js",
            "line": 1153
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 8
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 32
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 64
          },
          {
            "location": "src/textarea/textareaview.js",
            "line": 90
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 13
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 15
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 211
          },
          {
            "location": "src/toolbar/block/blockbuttonview.js",
            "line": 9
          },
          {
            "location": "src/toolbar/block/blockbuttonview.js",
            "line": 11
          },
          {
            "location": "src/toolbar/block/blocktoolbar.js",
            "line": 10
          },
          {
            "location": "src/toolbar/block/blocktoolbar.js",
            "line": 16
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 15
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 220
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 246
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 327
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 557
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 10
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 68
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 262
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 274
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 313
          },
          {
            "location": "src/view.js",
            "line": 11
          },
          {
            "location": "src/view.js",
            "line": 78
          },
          {
            "location": "src/view.js",
            "line": 250
          },
          {
            "location": "src/view.js",
            "line": 266
          },
          {
            "location": "src/viewcollection.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-es",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98a9c2f9027da56573bfe0b8fd4deb46c1daa457c7bd0168141f767b9db17b218c717ebf3a5225efc8ded6ef2f78fcd8652924a2030f276ca3c71b1bf3d731cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash-es@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-es@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash-es,debounce,lodash-es/debounce,throttle,lodash-es/throttle,escape,lodash-es/escape,extend,lodash-es/extend,isElement,lodash-es/isElement,escapeRegExp,lodash-es/escapeRegExp,isObject,lodash-es/isObject,cloneDeepWith,lodash-es/cloneDeepWith"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 10
          },
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 47
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 9
          },
          {
            "location": "src/editorui/poweredby.js",
            "line": 36
          },
          {
            "location": "src/highlightedtext/highlightedtextview.js",
            "line": 9
          },
          {
            "location": "src/highlightedtext/highlightedtextview.js",
            "line": 62
          },
          {
            "location": "src/highlightedtext/highlightedtextview.js",
            "line": 95
          },
          {
            "location": "src/model.js",
            "line": 9
          },
          {
            "location": "src/model.js",
            "line": 24
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 10
          },
          {
            "location": "src/panel/balloon/balloonpanelview.js",
            "line": 737
          },
          {
            "location": "src/search/text/searchtextview.js",
            "line": 14
          },
          {
            "location": "src/search/text/searchtextview.js",
            "line": 138
          },
          {
            "location": "src/template.js",
            "line": 12
          },
          {
            "location": "src/template.js",
            "line": 963
          },
          {
            "location": "src/template.js",
            "line": 1273
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 14
          },
          {
            "location": "src/toolbar/balloon/balloontoolbar.js",
            "line": 64
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 17
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 165
          },
          {
            "location": "src/toolbar/toolbarview.js",
            "line": 226
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 11
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 116
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 205
          },
          {
            "location": "src/tooltipmanager.js",
            "line": 342
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "color-convert"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/colorpicker/utils.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-parse",
      "version": "1.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "448eece3dffccaa0e3ddf1021598d4235622d33fc6ab5a72e37a0d262bc02080d2c8988e64b7d8091404827f07115023fbe3dc45ef009cbd971747d12770539c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-parse@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-parse/-/color-parse-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-parse@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-parse/-/color-parse-1.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "color-parse,default,color-parse/default"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/colorpicker/utils.js",
            "line": 11
          },
          {
            "location": "src/colorpicker/utils.js",
            "line": 83
          },
          {
            "location": "src/colorpicker/utils.js",
            "line": 91
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vanilla-colorful",
      "version": "0.7.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf6619bac4c50ba2a72c4471d5c8282115f60a33d13f45bbe4dfb7082ea06ef757e42878eeb66410c18ed979dff881268b746214bc52d7c81ac8c036ee253b2a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vanilla-colorful@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vanilla-colorful/-/vanilla-colorful-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vanilla-colorful@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vanilla-colorful/-/vanilla-colorful-0.7.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "vanilla-colorful/hex-color-picker.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/colorpicker/colorpickerview.js",
            "line": 14
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/lodash-es@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
      "dependsOn": [
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-engine@40.2.0",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-core@40.2.0",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-engine@40.2.0",
        "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
        "pkg:npm/lodash-es@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/color-parse@1.4.2",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/vanilla-colorful@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ckeditor/ckeditor5-ui@40.2.0",
      "dependsOn": [
        "pkg:npm/@ckeditor/ckeditor5-core@40.2.0",
        "pkg:npm/@ckeditor/ckeditor5-utils@40.2.0",
        "pkg:npm/color-convert@2.0.1",
        "pkg:npm/color-parse@1.4.2",
        "pkg:npm/lodash-es@4.17.21",
        "pkg:npm/vanilla-colorful@0.7.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@ckeditor/ckeditor5-ui@40.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-09T09:26:47Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, November 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ckeditor5-ui' with version '40.2.0'. The package type in this SBOM is npm with a single purl namespace '@ckeditor' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}