{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:fc279d3f-3cc7-43e8-8674-14c6f56afcaf",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-16T18:46:21Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "cspell-config-lib",
      "group": "",
      "version": "10.2.0",
      "description": "CSpell Config library",
      "purl": "pkg:npm/cspell-config-lib@10.2.0",
      "bom-ref": "pkg:npm/cspell-config-lib@10.2.0",
      "author": "Jason Dent <jason@streetsidesoftware.nl>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, watch, clean, clean-build, coverage, test-watch, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, watch, clean-build, test-watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/streetsidesoftware/cspell/tree/main/packages/cspell-config-lib#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/streetsidesoftware/cspell.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@cspell"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@cspell/cspell-types/package.json\\nnode_modules/comment-json/package.json\\nnode_modules/smol-toml/package.json\\nnode_modules/yaml/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Eemeli Aro <eemeli@gmail.com>"
        }
      ],
      "group": "",
      "name": "yaml",
      "version": "2.9.0",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.9.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eemeli.org/yaml/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yaml/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "yaml,Document,yaml/Document,isAlias,yaml/isAlias,isMap,yaml/isMap,isNode,yaml/isNode,isPair,yaml/isPair,isScalar,yaml/isScalar,isSeq,yaml/isSeq,parseDocument,yaml/parseDocument,Scalar,yaml/Scalar,stringify,yaml/stringify,visit,yaml/visit,YAMLMap,yaml/YAMLMap,YAMLSeq,yaml/YAMLSeq,Node,yaml/Node,Pair,yaml/Pair"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/yaml/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 2
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 25
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 41
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 82
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 119
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 121
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 136
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 137
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 173
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 176
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 183
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 197
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 199
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 202
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 216
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 222
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 244
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 254
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 295
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 305
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 317
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 320
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 465
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 500
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 503
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 505
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 507
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 509
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 527
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 532
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 540
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 551
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 552
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 556
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileYaml.js",
            "line": 561
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 4
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 19
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 59
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 75
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 128
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 171
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 173
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 190
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 191
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 230
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 234
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 242
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 260
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 262
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 265
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 279
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 286
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 312
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 320
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 361
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 373
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 389
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 392
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 560
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 607
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 611
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 612
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 613
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 614
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 632
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 637
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 645
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 657
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 658
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 661
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 665
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Cynthia Rey <cynthia@cynthia.dev>"
        }
      ],
      "group": "",
      "name": "smol-toml",
      "version": "1.8.0",
      "description": "A small, fast, and correct TOML parser/serializer",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/smol-toml@1.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "github:squirrelchat/smol-toml"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/smol-toml@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/smol-toml/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "smol-toml,parse,smol-toml/parse,stringify,smol-toml/stringify"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/smol-toml/package.json"
              }
            ],
            "concludedValue": "node_modules/smol-toml/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileToml.js",
            "line": 1
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileToml.js",
            "line": 11
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileToml.js",
            "line": 25
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileToml.ts",
            "line": 2
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileToml.ts",
            "line": 17
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileToml.ts",
            "line": 35
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kaelzhang"
        }
      ],
      "group": "",
      "name": "comment-json",
      "version": "5.0.0",
      "description": "Parse and stringify JSON with comments. It will retain comments even after saved!",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/comment-json@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kaelzhang/node-comment-json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/comment-json@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/comment-json/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "comment-json,parse,comment-json/parse,stringify,comment-json/stringify"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/comment-json/package.json"
              }
            ],
            "concludedValue": "node_modules/comment-json/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileJson.js",
            "line": 1
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileJson.js",
            "line": 13
          },
          {
            "location": "dist/CSpellConfigFile/CSpellConfigFileJson.js",
            "line": 68
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileJson.ts",
            "line": 2
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileJson.ts",
            "line": 20
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileJson.ts",
            "line": 80
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Jason Dent"
        }
      ],
      "group": "@cspell",
      "name": "cspell-types",
      "version": "10.2.0",
      "description": "Types for cspell and cspell-lib",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40cspell/cspell-types@10.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/streetsidesoftware/cspell/tree/main/packages/cspell-types#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/streetsidesoftware/cspell.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@cspell/cspell-types@10.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@cspell/cspell-types/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@cspell/cspell-types,CSpellSettings,@cspell/cspell-types/CSpellSettings"
        },
        {
          "name": "cdx:npm:package:type-only",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@cspell/cspell-types/package.json"
              }
            ],
            "concludedValue": "node_modules/@cspell/cspell-types/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileInMemory.ts",
            "line": 1
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileJavaScript.ts",
            "line": 1
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileJson.ts",
            "line": 1
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFilePackageJson.ts",
            "line": 1
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileToml.ts",
            "line": 1
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileWithErrors.ts",
            "line": 1
          },
          {
            "location": "src/CSpellConfigFile/CSpellConfigFileYaml.ts",
            "line": 3
          },
          {
            "location": "src/CSpellConfigFile.ts",
            "line": 1
          },
          {
            "location": "src/Serializer.ts",
            "line": 1
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/cspell-config-lib@10.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-16T18:46:21Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 16, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'cspell-config-lib' with version '10.2.0'. The package type in this SBOM is npm with a single purl namespace '@cspell' described under components. The components were identified from 4 source files."
    }
  ]
}