{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:9566d437-03cc-4dd0-92d1-5b920e5baf86", "version": 1, "metadata": { "timestamp": "2026-09-14T07:40:30Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "core-js-compat", "group": "", "version": "3.21.1", "description": "core-js compat", "purl": "pkg:npm/core-js-compat@3.21.1", "bom-ref": "pkg:npm/core-js-compat@3.21.1", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/zloirock/core-js.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/baseline-browser-mapping/package.json\\nnode_modules/browserslist/package.json\\nnode_modules/caniuse-lite/package.json\\nnode_modules/electron-to-chromium/package.json\\nnode_modules/escalade/package.json\\nnode_modules/node-releases/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/semver/package.json\\nnode_modules/update-browserslist-db/package.json" } ] }, "components": [ { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "update-browserslist-db", "version": "1.3.3", "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/update-browserslist-db@1.3.3", "type": "library", "bom-ref": "pkg:npm/update-browserslist-db@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/update-browserslist-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/update-browserslist-db/package.json" } ], "concludedValue": "node_modules/update-browserslist-db/package.json" } ] } }, { "group": "", "name": "semver", "version": "7.0.0", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.0.0", "type": "library", "bom-ref": "pkg:npm/semver@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver/functions/cmp,semver/functions/coerce" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "helpers.js", "line": 2 }, { "location": "helpers.js", "line": 3 } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "authors": [ { "name": "Sergey Rubanov " } ], "group": "", "name": "node-releases", "version": "2.0.55", "description": "Node.js releases data", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-releases@2.0.55", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chicoxyzzy/node-releases.git" } ], "type": "library", "bom-ref": "pkg:npm/node-releases@2.0.55", "properties": [ { "name": "SrcFile", "value": "node_modules/node-releases/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-releases/package.json" } ], "concludedValue": "node_modules/node-releases/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "authors": [ { "name": "Kilian Valkhof" } ], "group": "", "name": "electron-to-chromium", "version": "1.5.427", "description": "Provides a list of electron-to-chromium version mappings", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/electron-to-chromium@1.5.427", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Kilian/electron-to-chromium.git" } ], "type": "library", "bom-ref": "pkg:npm/electron-to-chromium@1.5.427", "properties": [ { "name": "SrcFile", "value": "node_modules/electron-to-chromium/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/electron-to-chromium/package.json" } ], "concludedValue": "node_modules/electron-to-chromium/package.json" } ] } }, { "authors": [ { "name": "Ben Briggs (http://beneb.info)" } ], "group": "", "name": "caniuse-lite", "version": "1.0.30001810", "description": "A smaller version of caniuse-db, with only the essentials!", "scope": "optional", "licenses": [ { "license": { "id": "CC-BY-4.0", "url": "https://opensource.org/licenses/CC-BY-4.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caniuse-lite@1.0.30001810", "type": "library", "bom-ref": "pkg:npm/caniuse-lite@1.0.30001810", "properties": [ { "name": "SrcFile", "value": "node_modules/caniuse-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caniuse-lite/package.json" } ], "concludedValue": "node_modules/caniuse-lite/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "browserslist", "version": "4.28.9", "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserslist@4.28.9", "type": "library", "bom-ref": "pkg:npm/browserslist@4.28.9", "properties": [ { "name": "SrcFile", "value": "node_modules/browserslist/package.json" }, { "name": "ImportedModules", "value": "browserslist" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserslist/package.json" } ], "concludedValue": "node_modules/browserslist/package.json" } ], "occurrences": [ { "location": "targets-parser.js", "line": 2 } ] } }, { "group": "", "name": "baseline-browser-mapping", "version": "2.11.23", "description": "A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/baseline-browser-mapping@2.11.23", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/web-platform-dx/baseline-browser-mapping.git" } ], "type": "library", "bom-ref": "pkg:npm/baseline-browser-mapping@2.11.23", "properties": [ { "name": "SrcFile", "value": "node_modules/baseline-browser-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/baseline-browser-mapping/package.json" } ], "concludedValue": "node_modules/baseline-browser-mapping/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/core-js-compat@3.21.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-14T07:40:30Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'core-js-compat' with version '3.21.1'." } ] }