{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d0fc841b-e38c-40b8-86eb-c4c4caa557eb", "version": 1, "metadata": { "timestamp": "2026-08-10T10:19:20Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "devalue", "group": "", "version": "4.3.2-tuxcare.1", "description": "Gets the job done when JSON.stringify can't", "purl": "pkg:npm/devalue@4.3.2-tuxcare.1", "bom-ref": "pkg:npm/devalue@4.3.2-tuxcare.1", "properties": [ { "name": "cdx:npm:scripts", "value": "build, test, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@jridgewell" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json\\npnpm-lock.yaml" } ] }, "components": [ { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "gen-mapping", "version": "0.3.3", "description": "Generate source maps", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1cb85258e2d18bcef9ce38cc1bfafe36fd28096f2e9866f4060121c97ddd0d7dde83066d07c3ea2e78f3df279db7c4794ad06bcdc838681a6787c500f43d41a1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:code, build:types, build:types:force, build:types:emit, build:types:mts, clean, clean:code, clean:types, test, test:format, test:only, test:types, lint, lint:format, lint:types, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build, build:code, build:types, build:types:force, build:types:emit, build:types:mts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.0", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1769ac95aded69df8c7e1b79709abb2d25dc76e74a4d6095614830ea92c538e1d24ed6658fa496358029f8086ea8b9967413b65f984facb72ef1c54ff1fcb6f3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0", "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "@jridgewell", "name": "set-array", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033" } ], "purl": "pkg:npm/%40jridgewell/set-array@1.1.2", "type": "library", "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "source-map", "version": "0.3.3", "description": "Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6fe7ec65778b622f5f1142e67c1ae1c67e08acf94835ff1f88d6abcd3a1fd34e2fde515d9ed7706bd3c5eef149aa6de683bb3e49c24cc57684dc0729d62ad972" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/source-map@0.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/source-map" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:code, build:types, build:types:force, build:types:emit, build:types:mts, clean, clean:code, clean:types, test, test:format, test:only, test:types, lint, lint:format, lint:types, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build, build:code, build:types, build:types:force, build:types:emit, build:types:mts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.4.14", "description": "Encode/decode sourcemap mappings", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5cf4891d69a2dfde1fb94bb30e71b3d7088aa967e8d725de70740c45fda5ea1ced4cefa73ebbbae7c0320e781a05eee2b08c44911b0f47715987eb3b8956b853" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:code, build:types, build:types:force, build:types:emit, build:types:mts, clean, clean:code, clean:types, test, test:format, test:only, test:types, lint, lint:format, lint:types, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build, build:code, build:types, build:types:force, build:types:emit, build:types:mts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.4.15", "description": "Encode/decode sourcemap mappings", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "785dabc4246e9442971d34620eb0f2e9eacc616a8dc382cf750f14400e21baec5a42c55e44f165da833ca031b130584951665ff4c7292ed25ab030d96ff0697a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:code, build:types, build:types:force, build:types:emit, build:types:mts, clean, clean:code, clean:types, test, test:format, test:only, test:types, lint, lint:format, lint:types, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build, build:code, build:types, build:types:force, build:types:emit, build:types:mts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.18", "description": "Trace the original position through a source map", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c3e9e2258ccc1dd77b5127621f653af3af67aa10f69db7d95cd0f9629f77a886c49a70cd93b3c3e3ca3e61c851569ccc53b33a8d509b7a74d1ecf03514b43da4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.18", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:code, build:types, build:types:force, build:types:emit, build:types:mts, clean, clean:code, clean:types, test, test:format, test:only, test:types, lint, lint:format, lint:types, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build, build:code, build:types, build:types:force, build:types:emit, build:types:mts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, bench" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "brace-expansion", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5e7008bd0f1e33e902e9a50bc7ac2e422c15b27cec8bd7775b1cd5dc5a564c6035f45eb6d64c1d6ec01c14a5e02941d95accbe998ea22f5b074f1584142cad0c" } ], "purl": "pkg:npm/brace-expansion@2.0.1", "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "dequal", "version": "2.0.3", "description": "A tiny (304B to 489B) utility for check for deep equality", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d237bea8f28710ca21bdf453084a370ab3c6e9c033018826ccacb1462612483912e9e1897725499bb59a600e4409a003f702c1d93e0411eca603968555c61708" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dequal@2.0.3", "type": "library", "bom-ref": "pkg:npm/dequal@2.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, pretest, postbuild, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "5.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0fe9a4faa13c542fcf014ae5014df837e55f5debf48217b9cb09a9aab6b0a6199565cd5b11f9f9eaea3daa9c86a75a78c69cce1e4496e33b4177a2fb5f1e000b" } ], "purl": "pkg:npm/diff@5.1.0", "type": "library", "bom-ref": "pkg:npm/diff@5.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "dts-buddy", "version": "0.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de3a06229ab78d9dcb31d79404d161e2687ba60f74d7aebdf55a50201a30f6767a4b7e7f0c5c152a9a1a252839df8981023194d70eed3c719bd1338b1b87aa82" } ], "purl": "pkg:npm/dts-buddy@0.0.4", "type": "library", "bom-ref": "pkg:npm/dts-buddy@0.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "./src/cli.js" }, { "name": "cdx:npm:scripts", "value": "prepublishOnly, test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dts-buddy/-/dts-buddy-0.0.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/dts-buddy" }, { "name": "cdx:npm:bin", "value": "dts-buddy" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" }, { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "8.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ba5978e7934748723f63516a19a69815a2c690d30c25b6af32b1061571bf3c6ae0eb2eecbad587507af3ea0cba584047e9a90cd4ce35e1d58a08db3e22129d89" } ], "purl": "pkg:npm/glob@8.0.3", "type": "library", "bom-ref": "pkg:npm/glob@8.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Terkel Gjervig" } ], "group": "", "name": "globalyzer", "version": "0.1.0", "description": "Detects and extract the glob part of a string", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e34a0d4ccf547c6e9a066b8ac64fe08879f99d0f11573fd24b822beb38333aff7fa82de4299f6fe1eb464dc25b125fcdc95407ec5194eddf97d5e82be7b31dd9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globalyzer@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/terkelg/globalyzer" } ], "type": "library", "bom-ref": "pkg:npm/globalyzer@0.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/globalyzer/-/globalyzer-0.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Terkel Gjervig" } ], "group": "", "name": "globrex", "version": "0.1.2", "description": "Glob to regular expression with support for extended globs", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b872606f000cc0d15fe662ecb7b2162cd835e31d4291eaa09496ff2b77688b8770eaad88bc002633f63cd647afcbcdf03fe4acb7e9eeb454d838683777596cc6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globrex@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/terkelg/globrex" } ], "type": "library", "bom-ref": "pkg:npm/globrex@0.1.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/globrex/-/globrex-0.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ignore-walk", "version": "5.0.1", "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c9e9a2e2931fe7558a4fb92122726a02fb081b3a2a6176e59eccf4aa5f2d33eca2d442984d8d5ebd7e0d01b26b2cbfc06a7af61f265e96ea94f8e8bb3061e893" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore-walk@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/ignore-walk.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore-walk@5.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, posttest, lint, eslint, lintfix, preversion, postversion, postpublish, npmclilint, postsnap, postlint, template-oss-apply, prepublishOnly, snap" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-5.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" }, { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "kleur", "version": "4.1.5", "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a3e34efbc5ab462404138ffb9f044984dd475a9566266e75d690475313cbb69d015084b3941a653916129937250a726f42adad2aefec825df156991ced95ae41" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kleur@4.1.5", "type": "library", "bom-ref": "pkg:npm/kleur@4.1.5", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "locate-character", "version": "2.0.5", "description": "Get the line and column number of a specific character in a string", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9f61a67a30d7b4e3c1019748884172e5d279377f310425cb34eb70d96a41f641a1ea99eb12e2a5c1823e4e4a687dce300ed5571eda0038968c465606fe861ac6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-character@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/locate-character#README" } ], "type": "library", "bom-ref": "pkg:npm/locate-character@2.0.5", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, pretest, build, prepublish" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/locate-character/-/locate-character-2.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.30.0", "description": "Modify strings, generate sourcemaps", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2c0fb7d4960324bb3cdabd9270bae5cf51a34a0bbae99579d7c7b2593f92f15872427fc92f4bbd31e04ebd03066223e4d4306248df430cc39c5ef8a025969589" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magic-string@0.30.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Rich-Harris/magic-string.git" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, changelog, format, lint, lint:fix, release, pretest, test, test:dev, bench, watch" }, { "name": "cdx:npm:buildScripts", "value": "build, watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "minimatch", "version": "5.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6cd1fd9a633daac2765f8af635ab7507fff574955c9f7fa204b6b7220a89ec46c668335ea4bf504873b13789e0df7b39d9530c86121f8026039370b866694302" } ], "purl": "pkg:npm/minimatch@5.1.2", "type": "library", "bom-ref": "pkg:npm/minimatch@5.1.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "mri", "version": "1.2.0", "description": "Quickly scan for CLI flags and arguments", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b73cec91bddb1bc2ef606145fe60d3a6ade3a48e90f707372c49816a086ef83742b2c77515a90dec17348553661321aad5bab74607e409bddc9902e934f3aba0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mri@1.2.0", "type": "library", "bom-ref": "pkg:npm/mri@1.2.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, bench, pretest, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-bundled", "version": "2.0.1", "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8192f15dd8c4cc4ffe98eb2d183a91e9bd0492127e90ce9fc4ceaf52e724b9cb6e54f87cd10ea9c3fad2663f6ce067b1f46c56b4889c3b5a5cf0307d2995ae77" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-bundled@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-bundled.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-bundled@2.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, preversion, postversion, postpublish, lint, postlint, template-oss-apply, lintfix, prepublishOnly, snap, posttest" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/npm-bundled/-/npm-bundled-2.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-normalize-package-bin", "version": "2.0.0", "description": "Turn any flavor of allowable package.json bin into a normalized object", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6b0cdf2943bbbf416c72b4a9468a20c8d9b4b1a8e2921056a54d1032b5b4f40322f67d4fa0a53a59a22a533b894909e9722659989fe3319d8481f99bffd2e259" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-normalize-package-bin.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, snap, preversion, postversion, postpublish, lint, postlint, template-oss-apply, lintfix, prepublishOnly, posttest" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-2.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-packlist", "version": "5.1.3", "description": "Get a list of the files to add from a folder into an npm package", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dbadffd0d1ab9f7d981588b8279df7ab3ad0fe4ae69ab5b084a933c13b8ce1fff4eee839d6876868d8d47b1c4ee2fc65cd444772660c1f5423bc78ec34328b56" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-packlist@5.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-packlist.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-packlist@5.1.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "npm-packlist" }, { "name": "cdx:npm:scripts", "value": "test, posttest, snap, postsnap, preversion, postversion, prepublishOnly, eslint, lint, lintfix, npmclilint, postlint, template-oss-apply" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-5.1.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/npm-packlist" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" }, { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.0.0", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d5fca0ae84cb947bbaeb38b6e95a130eff324609b415c71e72cb2da3e321b19d03fc3196dac9bc13c0235bb354e5555346de46c5b799e6a06e26bf87c8b6248d" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.0.0", "type": "library", "bom-ref": "pkg:npm/picocolors@1.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Bjorn Lu" } ], "group": "", "name": "publint", "version": "0.1.7", "description": "Lint packaging errors", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fd8a98929ef13f721e38f1a07291cae305a465a6607f729c42bbeab2ee168b6470b3f35361e166eb83a981848f2d75f3ef2f418e0534ab6d85f2b4867a5f7f22" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/publint@0.1.7", "externalReferences": [ { "type": "website", "url": "https://publint.dev" }, { "type": "vcs", "url": "git+https://github.com/bluwy/publint.git" } ], "type": "library", "bom-ref": "pkg:npm/publint@0.1.7", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "./lib/cli.js" }, { "name": "cdx:npm:scripts", "value": "cli, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "sade", "version": "1.8.1", "description": "Smooth (CLI) operator 🎶", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5a9770995f55e5a3f938029c0216b1d50028bd7c1a89ed5fa6c2106cb9fff520e29b072d3df057b1f966bfe5032e6f0d3da5267fbbc118f0f5a07af26c5e9d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sade@1.8.1", "type": "library", "bom-ref": "pkg:npm/sade@1.8.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Terkel Gjervig (https://terkel.com)" } ], "group": "", "name": "tiny-glob", "version": "0.2.9", "description": "Tiny and extremely fast globbing", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83fe79b2c44f5234a187ec647f1f543c35ea85c90712c1ebe1577dcd7e79a1274665cfcc0f49b7b1f7ab3a4c16b69f7c6effa47157c41ed449801549cde96bce" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tiny-glob@0.2.9", "type": "library", "bom-ref": "pkg:npm/tiny-glob@0.2.9", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "bench, test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tiny-glob/-/tiny-glob-0.2.9.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "3.9.10", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c3a7c8c5513f1f53e42ca7023ec16a284ecabfb414c2153ca9063632e7995d6c7970f65dc05ba92e028adef9ed70af7c06d34766d005e0b03fca5d9aee4f11e9" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@3.9.10", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.9.10", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:scripts", "value": "pretest, test, build, build:compiler, build:tests, start, clean, gulp, jake, lint, setup-hooks" }, { "name": "cdx:npm:buildScripts", "value": "build, build:compiler, build:tests" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.0.4", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "716f53e56f71637edc73e8df127694bd7f757e8c6d1e4cdadcdc37c24a05e2c4a52a7d0c38d7647449dd8a0fea3c15973649a9961dcdcdac90cc2887338fe1ab" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.0.4", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:scripts", "value": "pretest, test, build, build:compiler, build:tests, start, clean, gulp, jake, lint, setup-hooks" }, { "name": "cdx:npm:buildScripts", "value": "build, build:compiler, build:tests" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-5.0.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/dts-buddy/node_modules/.bin/tsc, /app/node_modules/dts-buddy/node_modules/.bin/tsserver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uvu", "version": "0.5.6", "description": "uvu is an extremely fast and lightweight test runner for Node.js and the browser", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fa0f043517b2afc62c39ce9fbff35526cdaf15d1c19c135d7c4e3daec86b4f30d63a5531e06abb28e4b6183f1eaa1cb68fe123ab6f7e49b287f328e402a5eaa0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uvu@0.5.6", "type": "library", "bom-ref": "pkg:npm/uvu@0.5.6", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "uvu" }, { "name": "cdx:npm:scripts", "value": "build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uvu/-/uvu-0.5.6.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/uvu" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" }, { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@jridgewell", "name": "source-map", "version": "0.3.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "64ca7557c64570f1b97485a740baf7352235322094ed4113752fc0d06f15fd7587bc9bf766c16abad267d58e513e600f5fa177062137f7b3aabde53ff4d0ae20" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/source-map@0.3.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.11.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@jridgewell", "name": "gen-mapping", "version": "0.3.13", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "da492dffb9e227a32010fc45d1b61d43a7ad65a03e7d0bc370b29c921cb5c8840ecdaa0a8c10634a3eb7fda2d58d8137aa146de5dbccfae5327c283a50a0816c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "71843ddf5d20aeac6e7966e5f96b885086a251a0dc8fb58eab97d58449633558117ce52163d7f2db34ef7e8a96b2779b87c4a5ef45527056c80af2672ca0743a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "magic-string", "version": "0.30.21", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bddd85e1853211728670b1e8abe4c4c828f1b9e49e1e7171cb28cda7cd328345d5e2f5219c37abfe5bef96a33f6ab0796d740de4adbfde88a7c82472c7c4f609" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magic-string@0.30.21", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.21", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "publint", "version": "0.1.16", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c09824ec79d70d3e40a740e31586c6cfbf243e4378e2242f0e26aaf0feb7204132354f66617bda31dd9c03220ce8e82a5ccfc803708ae97588b11abec2336983" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/publint@0.1.16", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/publint/-/publint-0.1.16.tgz" } ], "type": "library", "bom-ref": "pkg:npm/publint@0.1.16", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/publint/-/publint-0.1.16.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/publint" }, { "name": "cdx:npm:bin", "value": "publint" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "8.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "afc869123890118945d9053475fddd4be9f1c5222b797412d6a461309334439343751dfce82ee36fb1f0c2877c1608ae7b1fa4d0616381fb75f32bf19b95e809" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@8.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-8.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@8.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-8.1.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "5.1.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ee8d70100d91c8c3fb22eec635b6bdbdcd11596180089382641257d862568a9d22915fb070eb2056e63db84f023e2c908641854a586e4a464f6af37bbb573617" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@5.1.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@5.1.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "2.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8467d5ccfc6d85b7f7fb6ca383f441b3ad1c074161a814bfcef755ff8c27e3f0663746cd30c1cf73857f05b1627aa7f54ca0061801e76387928da8c29747f65e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@2.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "picocolors", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "3.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb81e476246fd72619b127b8c42d565606a636281562396cb08a1a1f61dc645d3e8a3b24e582b68341b7e30f70264cdef3ee68c38493776d80ca77cee996182f" } ], "purl": "pkg:npm/typescript@3.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-3.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-3.5.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/tsc, /app/node_modules/.bin/tsserver" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "5.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bed7037c7dd33a33fc51e932b6f9c71f5a353f815c51db78790d58f806daa75b64fce07631642f7304b60a509dd73b8885cdc928ec7aa7792877c55fcacdc4f8" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@5.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-5.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@5.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-5.2.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3", "dependsOn": [ "pkg:npm/@jridgewell/set-array@1.1.2", "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "pkg:npm/@jridgewell/trace-mapping@0.3.18" ] }, { "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/set-array@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/source-map@0.3.3", "dependsOn": [ "pkg:npm/@jridgewell/gen-mapping@0.3.3", "pkg:npm/@jridgewell/trace-mapping@0.3.18" ] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.18", "dependsOn": [ "pkg:npm/@jridgewell/resolve-uri@3.1.0", "pkg:npm/@jridgewell/sourcemap-codec@1.4.14" ] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@2.0.1", "dependsOn": [ "pkg:npm/balanced-match@1.0.2" ] }, { "ref": "pkg:npm/dequal@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/diff@5.1.0", "dependsOn": [] }, { "ref": "pkg:npm/dts-buddy@0.0.4", "dependsOn": [ "pkg:npm/@jridgewell/source-map@0.3.11", "pkg:npm/@jridgewell/source-map@0.3.3", "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "pkg:npm/globrex@0.1.2", "pkg:npm/kleur@4.1.5", "pkg:npm/locate-character@2.0.5", "pkg:npm/magic-string@0.30.0", "pkg:npm/magic-string@0.30.21", "pkg:npm/sade@1.8.1", "pkg:npm/tiny-glob@0.2.9", "pkg:npm/typescript@5.0.4" ] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@8.0.3", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@5.1.2", "pkg:npm/once@1.4.0" ] }, { "ref": "pkg:npm/globalyzer@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/globrex@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/ignore-walk@5.0.1", "dependsOn": [ "pkg:npm/minimatch@5.1.2", "pkg:npm/minimatch@5.1.9" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/kleur@4.1.5", "dependsOn": [] }, { "ref": "pkg:npm/locate-character@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/magic-string@0.30.0", "dependsOn": [ "pkg:npm/@jridgewell/sourcemap-codec@1.4.15" ] }, { "ref": "pkg:npm/minimatch@5.1.2", "dependsOn": [ "pkg:npm/brace-expansion@2.0.1" ] }, { "ref": "pkg:npm/mri@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/npm-bundled@2.0.1", "dependsOn": [ "pkg:npm/npm-normalize-package-bin@2.0.0" ] }, { "ref": "pkg:npm/npm-normalize-package-bin@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/npm-packlist@5.1.3", "dependsOn": [ "pkg:npm/glob@8.0.3", "pkg:npm/glob@8.1.0", "pkg:npm/ignore-walk@5.0.1", "pkg:npm/npm-bundled@2.0.1", "pkg:npm/npm-normalize-package-bin@2.0.0" ] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/picocolors@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/publint@0.1.7", "dependsOn": [ "pkg:npm/npm-packlist@5.1.3", "pkg:npm/picocolors@1.0.0", "pkg:npm/sade@1.8.1" ] }, { "ref": "pkg:npm/sade@1.8.1", "dependsOn": [ "pkg:npm/mri@1.2.0" ] }, { "ref": "pkg:npm/tiny-glob@0.2.9", "dependsOn": [ "pkg:npm/globalyzer@0.1.0", "pkg:npm/globrex@0.1.2" ] }, { "ref": "pkg:npm/typescript@3.9.10", "dependsOn": [] }, { "ref": "pkg:npm/typescript@5.0.4", "dependsOn": [] }, { "ref": "pkg:npm/uvu@0.5.6", "dependsOn": [ "pkg:npm/dequal@2.0.3", "pkg:npm/diff@5.1.0", "pkg:npm/diff@5.2.2", "pkg:npm/kleur@4.1.5", "pkg:npm/sade@1.8.1" ] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "dependsOn": [ "pkg:npm/@jridgewell/resolve-uri@3.1.2", "pkg:npm/@jridgewell/sourcemap-codec@1.5.5" ] }, { "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13", "dependsOn": [ "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "pkg:npm/@jridgewell/trace-mapping@0.3.31" ] }, { "ref": "pkg:npm/@jridgewell/source-map@0.3.11", "dependsOn": [ "pkg:npm/@jridgewell/gen-mapping@0.3.13", "pkg:npm/@jridgewell/trace-mapping@0.3.31" ] }, { "ref": "pkg:npm/magic-string@0.30.21", "dependsOn": [ "pkg:npm/@jridgewell/sourcemap-codec@1.5.5" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@2.1.4", "dependsOn": [ "pkg:npm/balanced-match@1.0.0" ] }, { "ref": "pkg:npm/minimatch@5.1.9", "dependsOn": [ "pkg:npm/brace-expansion@2.1.4" ] }, { "ref": "pkg:npm/glob@8.1.0", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@5.1.9", "pkg:npm/once@1.4.0" ] }, { "ref": "pkg:npm/picocolors@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/publint@0.1.16", "dependsOn": [ "pkg:npm/npm-packlist@5.1.3", "pkg:npm/picocolors@1.1.1", "pkg:npm/sade@1.8.1" ] }, { "ref": "pkg:npm/typescript@3.5.1", "dependsOn": [] }, { "ref": "pkg:npm/diff@5.2.2", "dependsOn": [] }, { "ref": "pkg:npm/devalue@4.3.2-tuxcare.1", "dependsOn": [ "pkg:npm/dts-buddy@0.0.4", "pkg:npm/publint@0.1.16", "pkg:npm/typescript@3.5.1", "pkg:npm/uvu@0.5.6" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/devalue@4.3.2-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-10T10:19:20Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'devalue' with version '4.3.2-tuxcare.1'. The package type in this SBOM is npm with a single purl namespace '@jridgewell' described under components. The components were identified from the source files: package-lock.json, pnpm-lock.yaml." } ] }