{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:944a4ab9-0cde-4e10-8846-57a6ebc6974c", "version": 1, "metadata": { "timestamp": "2026-09-14T07:40:28Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "core-js-builder", "group": "", "version": "3.21.1", "description": "core-js builder", "purl": "pkg:npm/core-js-builder@3.21.1", "bom-ref": "pkg:npm/core-js-builder@3.21.1", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/zloirock/core-js.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@webassemblyjs" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@webassemblyjs/ast/package.json\\nnode_modules/@webassemblyjs/helper-api-error/package.json\\nnode_modules/@webassemblyjs/helper-buffer/package.json\\nnode_modules/@webassemblyjs/helper-wasm-bytecode/package.json\\nnode_modules/@webassemblyjs/helper-wasm-section/package.json\\nnode_modules/@webassemblyjs/ieee754/package.json\\nnode_modules/@webassemblyjs/leb128/package.json\\nnode_modules/@webassemblyjs/utf8/package.json\\nnode_modules/@webassemblyjs/wasm-edit/package.json\\nnode_modules/@webassemblyjs/wasm-gen/package.json\\nnode_modules/@webassemblyjs/wasm-opt/package.json\\nnode_modules/@webassemblyjs/wasm-parser/package.json\\nnode_modules/@webassemblyjs/wast-printer/package.json\\nnode_modules/acorn/package.json\\nnode_modules/braces/node_modules/extend-shallow/package.json\\nnode_modules/braces/package.json\\nnode_modules/cacache/package.json\\nnode_modules/chownr/package.json\\nnode_modules/commander/package.json\\nnode_modules/core-js-compat/package.json\\nnode_modules/core-js/package.json\\nnode_modules/enhanced-resolve/node_modules/memory-fs/package.json\\nnode_modules/enhanced-resolve/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/fill-range/node_modules/extend-shallow/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/find-cache-dir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/is-extendable/package.json\\nnode_modules/is-number/node_modules/kind-of/package.json\\nnode_modules/is-number/package.json\\nnode_modules/loader-runner/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/micromatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-try/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/pkg-dir/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/schema-utils/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/source-map/package.json\\nnode_modules/ssri/package.json\\nnode_modules/tapable/package.json\\nnode_modules/terser-webpack-plugin/package.json\\nnode_modules/terser/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/watchpack/package.json\\nnode_modules/webpack-sources/package.json\\nnode_modules/webpack/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json" } ] }, "components": [ { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "3.1.1", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@3.1.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "4.0.3", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "webpack-sources", "version": "1.4.3", "description": "Source code handling classes for webpack", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/webpack-sources@1.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/webpack-sources#readme" }, { "type": "vcs", "url": "git+https://github.com/webpack/webpack-sources.git" } ], "type": "library", "bom-ref": "pkg:npm/webpack-sources@1.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/webpack-sources/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/webpack-sources/package.json" } ], "concludedValue": "node_modules/webpack-sources/package.json" } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "webpack", "version": "4.46.0", "description": "Packs CommonJs/AMD modules for the browser. Allows to split your codebase into multiple bundles, which can be loaded on demand. Support loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/webpack@4.46.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/webpack" }, { "type": "vcs", "url": "https://github.com/webpack/webpack.git" } ], "type": "library", "bom-ref": "pkg:npm/webpack@4.46.0", "properties": [ { "name": "SrcFile", "value": "node_modules/webpack/package.json" }, { "name": "ImportedModules", "value": "webpack" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/webpack/package.json" } ], "concludedValue": "node_modules/webpack/package.json" } ], "occurrences": [ { "location": "index.js", "line": 12 } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "watchpack", "version": "1.7.5", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/watchpack@1.7.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/watchpack" }, { "type": "vcs", "url": "https://github.com/webpack/watchpack.git" } ], "type": "library", "bom-ref": "pkg:npm/watchpack@1.7.5", "properties": [ { "name": "SrcFile", "value": "node_modules/watchpack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/watchpack/package.json" } ], "concludedValue": "node_modules/watchpack/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "to-regex-range", "version": "2.1.1", "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/to-regex-range" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-regex-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-regex-range/package.json" } ], "concludedValue": "node_modules/to-regex-range/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "webpack Contrib Team" } ], "group": "", "name": "terser-webpack-plugin", "version": "1.4.5", "description": "Terser plugin for webpack", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/terser-webpack-plugin@1.4.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack-contrib/terser-webpack-plugin" } ], "type": "library", "bom-ref": "pkg:npm/terser-webpack-plugin@1.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/terser-webpack-plugin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser-webpack-plugin/package.json" } ], "concludedValue": "node_modules/terser-webpack-plugin/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "terser", "version": "4.8.0", "description": "JavaScript parser, mangler/compressor and beautifier toolkit for ES6+", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/terser@4.8.0", "externalReferences": [ { "type": "website", "url": "https://terser.org" } ], "type": "library", "bom-ref": "pkg:npm/terser@4.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/terser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser/package.json" } ], "concludedValue": "node_modules/terser/package.json" } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "tapable", "version": "1.1.3", "description": "Just a little module for plugins.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tapable@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/tapable" }, { "type": "vcs", "url": "http://github.com/webpack/tapable.git" } ], "type": "library", "bom-ref": "pkg:npm/tapable@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/tapable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tapable/package.json" } ], "concludedValue": "node_modules/tapable/package.json" } ] }, "tags": [ "plugins" ] }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "ssri", "version": "6.0.2", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ssri@6.0.2", "type": "library", "bom-ref": "pkg:npm/ssri@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ssri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ssri/package.json" } ], "concludedValue": "node_modules/ssri/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "4.0.0", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serialize-javascript@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "webpack Contrib (https://github.com/webpack-contrib)" } ], "group": "", "name": "schema-utils", "version": "1.0.0", "description": "webpack Validation Utils", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/schema-utils@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack-contrib/schema-utils" } ], "type": "library", "bom-ref": "pkg:npm/schema-utils@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/schema-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/schema-utils/package.json" } ], "concludedValue": "node_modules/schema-utils/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.7.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.7.1", "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pkg-dir", "version": "3.0.0", "description": "Find the root directory of a Node.js project or npm package", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-dir@3.0.0", "type": "library", "bom-ref": "pkg:npm/pkg-dir@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-dir/package.json" } ], "concludedValue": "node_modules/pkg-dir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "3.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@3.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "2.2.0", "description": "`Start a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@2.2.0", "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "3.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@3.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "2.3.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@2.3.0", "type": "library", "bom-ref": "pkg:npm/p-limit@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.6", "description": "Recursively mkdir, like `mkdir -p`", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "ImportedModules", "value": "mkdirp" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ], "occurrences": [ { "location": "index.js", "line": 11 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "micromatch", "version": "3.1.10", "description": "Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/micromatch@3.1.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/micromatch" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@3.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/micromatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/micromatch/package.json" } ], "concludedValue": "node_modules/micromatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "5.1.1", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@5.1.1", "type": "library", "bom-ref": "pkg:npm/lru-cache@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "3.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@3.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "loader-runner", "version": "2.4.0", "description": "Runs (webpack) loaders", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/loader-runner@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/loader-runner#readme" }, { "type": "vcs", "url": "git+https://github.com/webpack/loader-runner.git" } ], "type": "library", "bom-ref": "pkg:npm/loader-runner@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/loader-runner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loader-runner/package.json" } ], "concludedValue": "node_modules/loader-runner/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-number", "version": "3.0.0", "description": "Returns true if the value is a number. comprehensive tests.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-number" } ], "type": "library", "bom-ref": "pkg:npm/is-number@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number/package.json" } ], "concludedValue": "node_modules/is-number/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "kind-of", "version": "3.2.2", "description": "Get the native type of a value.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kind-of@3.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/kind-of" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number/node_modules/kind-of/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number/node_modules/kind-of/package.json" } ], "concludedValue": "node_modules/is-number/node_modules/kind-of/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-extendable", "version": "0.1.1", "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extendable@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-extendable" } ], "type": "library", "bom-ref": "pkg:npm/is-extendable@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-extendable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-extendable/package.json" } ], "concludedValue": "node_modules/is-extendable/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "3.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@3.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "group": "", "name": "find-cache-dir", "version": "2.1.0", "description": "Finds the common standard cache directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-cache-dir@2.1.0", "type": "library", "bom-ref": "pkg:npm/find-cache-dir@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-cache-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-cache-dir/package.json" } ], "concludedValue": "node_modules/find-cache-dir/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "fill-range", "version": "4.0.0", "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/fill-range" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fill-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fill-range/package.json" } ], "concludedValue": "node_modules/fill-range/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "extend-shallow", "version": "2.0.1", "description": "Extend an object with the properties of additional objects. node.js/javascript util.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend-shallow@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/extend-shallow" } ], "type": "library", "bom-ref": "pkg:npm/extend-shallow@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fill-range/node_modules/extend-shallow/package.json" }, { "name": "SrcFile", "value": "node_modules/braces/node_modules/extend-shallow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/braces/node_modules/extend-shallow/package.json" } ], "concludedValue": "node_modules/braces/node_modules/extend-shallow/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "4.3.0", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ] } }, { "group": "", "name": "eslint-scope", "version": "4.0.3", "description": "ECMAScript scope analyzer for ESLint", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-scope@4.0.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/eslint/eslint-scope" } ], "type": "library", "bom-ref": "pkg:npm/eslint-scope@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-scope/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-scope/package.json" } ], "concludedValue": "node_modules/eslint-scope/package.json" } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "enhanced-resolve", "version": "4.5.0", "description": "Offers a async require.resolve function. It's highly configurable.", "scope": "optional", "purl": "pkg:npm/enhanced-resolve@4.5.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/webpack/enhanced-resolve" }, { "type": "vcs", "url": "git://github.com/webpack/enhanced-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/enhanced-resolve@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/enhanced-resolve/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/enhanced-resolve/package.json" } ], "concludedValue": "node_modules/enhanced-resolve/package.json" } ] } }, { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "memory-fs", "version": "0.5.0", "description": "A simple in-memory filesystem. Holds data in a javascript object.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/memory-fs@0.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/memory-fs" }, { "type": "vcs", "url": "https://github.com/webpack/memory-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/memory-fs@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/enhanced-resolve/node_modules/memory-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/enhanced-resolve/node_modules/memory-fs/package.json" } ], "concludedValue": "node_modules/enhanced-resolve/node_modules/memory-fs/package.json" } ] } }, { "group": "", "name": "core-js-compat", "version": "3.21.1", "description": "core-js compat", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-js-compat@3.21.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zloirock/core-js.git" } ], "type": "library", "bom-ref": "pkg:npm/core-js-compat@3.21.1", "properties": [ { "name": "SrcFile", "value": "node_modules/core-js-compat/package.json" }, { "name": "ImportedModules", "value": "core-js-compat/compat,core-js-compat/modules" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-js-compat/package.json" } ], "concludedValue": "node_modules/core-js-compat/package.json" } ], "occurrences": [ { "location": "index.js", "line": 13 }, { "location": "index.js", "line": 14 } ] } }, { "group": "", "name": "core-js", "version": "3.21.1", "description": "Standard library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-js@3.21.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zloirock/core-js.git" } ], "type": "library", "bom-ref": "pkg:npm/core-js@3.21.1", "properties": [ { "name": "SrcFile", "value": "node_modules/core-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-js/package.json" } ], "concludedValue": "node_modules/core-js/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.3", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "1.1.4", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@1.1.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chownr/package.json" } ], "concludedValue": "node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "cacache", "version": "12.0.4", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacache@12.0.4", "type": "library", "bom-ref": "pkg:npm/cacache@12.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/package.json" } ], "concludedValue": "node_modules/cacache/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "braces", "version": "2.3.2", "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@2.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/braces" } ], "type": "library", "bom-ref": "pkg:npm/braces@2.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/braces/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/braces/package.json" } ], "concludedValue": "node_modules/braces/package.json" } ] } }, { "group": "", "name": "acorn", "version": "6.4.2", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@6.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@6.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "wast-printer", "version": "1.9.0", "description": "WebAssembly text format printer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/wast-printer@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/wast-printer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/wast-printer/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/wast-printer/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "wasm-parser", "version": "1.9.0", "description": "WebAssembly binary format parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/wasm-parser@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/wasm-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/wasm-parser/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/wasm-parser/package.json" } ] }, "tags": [ "binary", "parse" ] }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "wasm-opt", "version": "1.9.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/wasm-opt@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/wasm-opt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/wasm-opt/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/wasm-opt/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "wasm-gen", "version": "1.9.0", "description": "WebAssembly binary format printer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/wasm-gen@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/wasm-gen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/wasm-gen/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/wasm-gen/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "wasm-edit", "version": "1.9.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/wasm-edit@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/wasm-edit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/wasm-edit/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/wasm-edit/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "utf8", "version": "1.9.0", "description": "UTF8 encoder/decoder for WASM", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/utf8@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/utf8@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/utf8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/utf8/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/utf8/package.json" } ] } }, { "group": "@webassemblyjs", "name": "leb128", "version": "1.9.0", "description": "LEB128 decoder and encoder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/leb128@1.9.0", "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/leb128@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/leb128/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/leb128/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/leb128/package.json" } ] } }, { "group": "@webassemblyjs", "name": "ieee754", "version": "1.9.0", "description": "IEEE754 decoder and encoder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/ieee754@1.9.0", "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/ieee754@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/ieee754/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/ieee754/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "helper-wasm-section", "version": "1.9.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/helper-wasm-section/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/helper-wasm-section/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/helper-wasm-section/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "helper-wasm-bytecode", "version": "1.9.0", "description": "WASM's Bytecode constants", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/helper-wasm-bytecode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/helper-wasm-bytecode/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/helper-wasm-bytecode/package.json" } ] }, "tags": [ "bytecode" ] }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "helper-buffer", "version": "1.9.0", "description": "Buffer manipulation utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/helper-buffer@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/helper-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/helper-buffer/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/helper-buffer/package.json" } ] } }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "helper-api-error", "version": "1.9.0", "description": "Common API errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.9.0", "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/helper-api-error@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/helper-api-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/helper-api-error/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/helper-api-error/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Sven Sauleau" } ], "group": "@webassemblyjs", "name": "ast", "version": "1.9.0", "description": "AST utils for webassemblyjs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40webassemblyjs/ast@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xtuc/webassemblyjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@webassemblyjs/ast@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@webassemblyjs/ast/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@webassemblyjs/ast/package.json" } ], "concludedValue": "node_modules/@webassemblyjs/ast/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/core-js-builder@3.21.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-14T07:40:28Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'core-js-builder' with version '3.21.1'. The package type in this SBOM is npm with a single purl namespace '@webassemblyjs' described under components. The components were identified from 57 source files." } ] }