{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:e8a58ed1-13ec-43d2-899b-ca71df76990b", "version": 1, "metadata": { "timestamp": "2026-09-18T17:25:25Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "devalue", "group": "", "version": "4.3.3-tuxcare.5", "description": "Gets the job done when JSON.stringify can't", "purl": "pkg:npm/devalue@4.3.3-tuxcare.5", "bom-ref": "pkg:npm/devalue@4.3.3-tuxcare.5", "properties": [ { "name": "cdx:npm:scripts", "value": "build, test, prepublishOnly" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@jridgewell" }, { "name": "cdx:bom:componentSrcFiles", "value": "pnpm-lock.yaml" } ] }, "components": [ { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "gen-mapping", "version": "0.3.3", "description": "Generate source maps", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1cb85258e2d18bcef9ce38cc1bfafe36fd28096f2e9866f4060121c97ddd0d7dde83066d07c3ea2e78f3df279db7c4794ad06bcdc838681a6787c500f43d41a1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3", "type": "library", "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.0", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1769ac95aded69df8c7e1b79709abb2d25dc76e74a4d6095614830ea92c538e1d24ed6658fa496358029f8086ea8b9967413b65f984facb72ef1c54ff1fcb6f3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0", "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "set-array", "version": "1.1.2", "description": "Like a Set, but provides the index of the `key` in the backing array", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/set-array@1.1.2", "type": "library", "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "source-map", "version": "0.3.3", "description": "Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6fe7ec65778b622f5f1142e67c1ae1c67e08acf94835ff1f88d6abcd3a1fd34e2fde515d9ed7706bd3c5eef149aa6de683bb3e49c24cc57684dc0729d62ad972" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/source-map@0.3.3", "type": "library", "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.4.14", "description": "Encode/decode sourcemap mappings", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5cf4891d69a2dfde1fb94bb30e71b3d7088aa967e8d725de70740c45fda5ea1ced4cefa73ebbbae7c0320e781a05eee2b08c44911b0f47715987eb3b8956b853" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemap-codec.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.4.15", "description": "Encode/decode sourcemap mappings", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "785dabc4246e9442971d34620eb0f2e9eacc616a8dc382cf750f14400e21baec5a42c55e44f165da833ca031b130584951665ff4c7292ed25ab030d96ff0697a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemap-codec.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.18", "description": "Trace the original position through a source map", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c3e9e2258ccc1dd77b5127621f653af3af67aa10f69db7d95cd0f9629f77a886c49a70cd93b3c3e3ca3e61c851569ccc53b33a8d509b7a74d1ecf03514b43da4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.18", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/trace-mapping.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.18", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:watch" }, { "name": "cdx:npm:buildScripts", "value": "build, build:rollup, build:ts, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, bench" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "2.0.1", "description": "Brace expansion as known from sh/bash", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5e7008bd0f1e33e902e9a50bc7ac2e422c15b27cec8bd7775b1cd5dc5a564c6035f45eb6d64c1d6ec01c14a5e02941d95accbe998ea22f5b074f1584142cad0c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, gentest, bench" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "dequal", "version": "2.0.3", "description": "A tiny (304B to 489B) utility for check for deep equality", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d237bea8f28710ca21bdf453084a370ab3c6e9c033018826ccacb1462612483912e9e1897725499bb59a600e4409a003f702c1d93e0411eca603968555c61708" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dequal@2.0.3", "type": "library", "bom-ref": "pkg:npm/dequal@2.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, pretest, postbuild, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "diff", "version": "5.1.0", "description": "A javascript text diff implementation.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0fe9a4faa13c542fcf014ae5014df837e55f5debf48217b9cb09a9aab6b0a6199565cd5b11f9f9eaea3daa9c86a75a78c69cce1e4496e33b4177a2fb5f1e000b" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@5.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@5.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "clean, build:node, test" }, { "name": "cdx:npm:buildScripts", "value": "build:node" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "dts-buddy", "version": "0.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de3a06229ab78d9dcb31d79404d161e2687ba60f74d7aebdf55a50201a30f6767a4b7e7f0c5c152a9a1a252839df8981023194d70eed3c719bd1338b1b87aa82" } ], "purl": "pkg:npm/dts-buddy@0.0.4", "type": "library", "bom-ref": "pkg:npm/dts-buddy@0.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "./src/cli.js" }, { "name": "cdx:npm:scripts", "value": "prepublishOnly, test" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "8.0.3", "description": "a little globber", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ba5978e7934748723f63516a19a69815a2c690d30c25b6af32b1061571bf3c6ae0eb2eecbad587507af3ea0cba584047e9a90cd4ce35e1d58a08db3e22129d89" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@8.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@8.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "prepublish, profclean, test, test-regen, bench, prof, benchclean" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Terkel Gjervig" } ], "group": "", "name": "globalyzer", "version": "0.1.0", "description": "Detects and extract the glob part of a string", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e34a0d4ccf547c6e9a066b8ac64fe08879f99d0f11573fd24b822beb38333aff7fa82de4299f6fe1eb464dc25b125fcdc95407ec5194eddf97d5e82be7b31dd9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globalyzer@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/terkelg/globalyzer" } ], "type": "library", "bom-ref": "pkg:npm/globalyzer@0.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Terkel Gjervig" } ], "group": "", "name": "globrex", "version": "0.1.2", "description": "Glob to regular expression with support for extended globs", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b872606f000cc0d15fe662ecb7b2162cd835e31d4291eaa09496ff2b77688b8770eaad88bc002633f63cd647afcbcdf03fe4acb7e9eeb454d838683777596cc6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globrex@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/terkelg/globrex" } ], "type": "library", "bom-ref": "pkg:npm/globrex@0.1.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ignore-walk", "version": "5.0.1", "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c9e9a2e2931fe7558a4fb92122726a02fb081b3a2a6176e59eccf4aa5f2d33eca2d442984d8d5ebd7e0d01b26b2cbfc06a7af61f265e96ea94f8e8bb3061e893" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore-walk@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/ignore-walk.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore-walk@5.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, posttest, lint, eslint, lintfix, preversion, postversion, postpublish, npmclilint, postsnap, postlint, template-oss-apply, prepublishOnly, snap" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "kleur", "version": "4.1.5", "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a3e34efbc5ab462404138ffb9f044984dd475a9566266e75d690475313cbb69d015084b3941a653916129937250a726f42adad2aefec825df156991ced95ae41" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kleur@4.1.5", "type": "library", "bom-ref": "pkg:npm/kleur@4.1.5", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "locate-character", "version": "2.0.5", "description": "Get the line and column number of a specific character in a string", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9f61a67a30d7b4e3c1019748884172e5d279377f310425cb34eb70d96a41f641a1ea99eb12e2a5c1823e4e4a687dce300ed5571eda0038968c465606fe861ac6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-character@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/locate-character#README" } ], "type": "library", "bom-ref": "pkg:npm/locate-character@2.0.5", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, pretest, build, prepublish" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.30.0", "description": "Modify strings, generate sourcemaps", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2c0fb7d4960324bb3cdabd9270bae5cf51a34a0bbae99579d7c7b2593f92f15872427fc92f4bbd31e04ebd03066223e4d4306248df430cc39c5ef8a025969589" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magic-string@0.30.0", "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, changelog, format, lint, prepare, prepublishOnly, release, pretest, test, bench, watch" }, { "name": "cdx:npm:buildScripts", "value": "build, watch" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "5.1.2", "description": "a glob matcher in javascript", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6cd1fd9a633daac2765f8af635ab7507fff574955c9f7fa204b6b7220a89ec46c668335ea4bf504873b13789e0df7b39d9530c86121f8026039370b866694302" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@5.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@5.1.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, snap, preversion, postversion, prepublishOnly" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "mri", "version": "1.2.0", "description": "Quickly scan for CLI flags and arguments", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b73cec91bddb1bc2ef606145fe60d3a6ade3a48e90f707372c49816a086ef83742b2c77515a90dec17348553661321aad5bab74607e409bddc9902e934f3aba0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mri@1.2.0", "type": "library", "bom-ref": "pkg:npm/mri@1.2.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, bench, pretest, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-bundled", "version": "2.0.1", "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8192f15dd8c4cc4ffe98eb2d183a91e9bd0492127e90ce9fc4ceaf52e724b9cb6e54f87cd10ea9c3fad2663f6ce067b1f46c56b4889c3b5a5cf0307d2995ae77" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-bundled@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-bundled.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-bundled@2.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, preversion, postversion, postpublish, lint, postlint, template-oss-apply, lintfix, prepublishOnly, snap, posttest" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-normalize-package-bin", "version": "2.0.0", "description": "Turn any flavor of allowable package.json bin into a normalized object", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6b0cdf2943bbbf416c72b4a9468a20c8d9b4b1a8e2921056a54d1032b5b4f40322f67d4fa0a53a59a22a533b894909e9722659989fe3319d8481f99bffd2e259" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-normalize-package-bin@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-normalize-package-bin.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-normalize-package-bin@2.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, snap, preversion, postversion, postpublish, lint, postlint, template-oss-apply, lintfix, prepublishOnly, posttest" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-packlist", "version": "5.1.3", "description": "Get a list of the files to add from a folder into an npm package", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dbadffd0d1ab9f7d981588b8279df7ab3ad0fe4ae69ab5b084a933c13b8ce1fff4eee839d6876868d8d47b1c4ee2fc65cd444772660c1f5423bc78ec34328b56" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-packlist@5.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-packlist.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-packlist@5.1.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "npm-packlist" }, { "name": "cdx:npm:scripts", "value": "test, posttest, snap, postsnap, preversion, postversion, prepublishOnly, eslint, lint, lintfix, npmclilint, postlint, template-oss-apply" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.0.0", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d5fca0ae84cb947bbaeb38b6e95a130eff324609b415c71e72cb2da3e321b19d03fc3196dac9bc13c0235bb354e5555346de46c5b799e6a06e26bf87c8b6248d" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.0.0", "type": "library", "bom-ref": "pkg:npm/picocolors@1.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Bjorn Lu" } ], "group": "", "name": "publint", "version": "0.1.7", "description": "Lint packaging errors", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fd8a98929ef13f721e38f1a07291cae305a465a6607f729c42bbeab2ee168b6470b3f35361e166eb83a981848f2d75f3ef2f418e0534ab6d85f2b4867a5f7f22" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/publint@0.1.7", "externalReferences": [ { "type": "website", "url": "https://publint.dev" }, { "type": "vcs", "url": "git+https://github.com/bluwy/publint.git" } ], "type": "library", "bom-ref": "pkg:npm/publint@0.1.7", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "./lib/cli.js" }, { "name": "cdx:npm:scripts", "value": "cli, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "sade", "version": "1.8.1", "description": "Smooth (CLI) operator 🎶", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5a9770995f55e5a3f938029c0216b1d50028bd7c1a89ed5fa6c2106cb9fff520e29b072d3df057b1f966bfe5032e6f0d3da5267fbbc118f0f5a07af26c5e9d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sade@1.8.1", "type": "library", "bom-ref": "pkg:npm/sade@1.8.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Terkel Gjervig (https://terkel.com)" } ], "group": "", "name": "tiny-glob", "version": "0.2.9", "description": "Tiny and extremely fast globbing", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83fe79b2c44f5234a187ec647f1f543c35ea85c90712c1ebe1577dcd7e79a1274665cfcc0f49b7b1f7ab3a4c16b69f7c6effa47157c41ed449801549cde96bce" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tiny-glob@0.2.9", "type": "library", "bom-ref": "pkg:npm/tiny-glob@0.2.9", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "bench, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "3.9.10", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c3a7c8c5513f1f53e42ca7023ec16a284ecabfb414c2153ca9063632e7995d6c7970f65dc05ba92e028adef9ed70af7c06d34766d005e0b03fca5d9aee4f11e9" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@3.9.10", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.9.10", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:scripts", "value": "prepare, pretest, test, test:eslint-rules, build, build:compiler, build:tests, start, clean, gulp, jake, lint, lint:ci, lint:compiler, lint:scripts, setup-hooks" }, { "name": "cdx:npm:buildScripts", "value": "build, build:compiler, build:tests" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.0.4", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "716f53e56f71637edc73e8df127694bd7f757e8c6d1e4cdadcdc37c24a05e2c4a52a7d0c38d7647449dd8a0fea3c15973649a9961dcdcdac90cc2887338fe1ab" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.0.4", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:scripts", "value": "prepare, pretest, test, test:eslint-rules, build, build:compiler, build:tests, start, clean, gulp, jake, lint, lint:ci, lint:compiler, lint:scripts, setup-hooks" }, { "name": "cdx:npm:buildScripts", "value": "build, build:compiler, build:tests" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "uvu", "version": "0.5.6", "description": "uvu is an extremely fast and lightweight test runner for Node.js and the browser", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fa0f043517b2afc62c39ce9fbff35526cdaf15d1c19c135d7c4e3daec86b4f30d63a5531e06abb28e4b6183f1eaa1cb68fe123ab6f7e49b287f328e402a5eaa0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uvu@0.5.6", "type": "library", "bom-ref": "pkg:npm/uvu@0.5.6", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:bin", "value": "uvu" }, { "name": "cdx:npm:scripts", "value": "build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3", "dependsOn": [ "pkg:npm/@jridgewell/set-array@1.1.2", "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "pkg:npm/@jridgewell/trace-mapping@0.3.18" ] }, { "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/set-array@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/source-map@0.3.3", "dependsOn": [ "pkg:npm/@jridgewell/gen-mapping@0.3.3", "pkg:npm/@jridgewell/trace-mapping@0.3.18" ] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "dependsOn": [] }, { "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.18", "dependsOn": [ "pkg:npm/@jridgewell/resolve-uri@3.1.0", "pkg:npm/@jridgewell/sourcemap-codec@1.4.14" ] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@2.0.1", "dependsOn": [ "pkg:npm/balanced-match@1.0.2" ] }, { "ref": "pkg:npm/dequal@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/diff@5.1.0", "dependsOn": [] }, { "ref": "pkg:npm/dts-buddy@0.0.4", "dependsOn": [ "pkg:npm/@jridgewell/source-map@0.3.3", "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "pkg:npm/globrex@0.1.2", "pkg:npm/kleur@4.1.5", "pkg:npm/locate-character@2.0.5", "pkg:npm/magic-string@0.30.0", "pkg:npm/sade@1.8.1", "pkg:npm/tiny-glob@0.2.9", "pkg:npm/typescript@5.0.4" ] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@8.0.3", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@5.1.2", "pkg:npm/once@1.4.0" ] }, { "ref": "pkg:npm/globalyzer@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/globrex@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/ignore-walk@5.0.1", "dependsOn": [ "pkg:npm/minimatch@5.1.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/kleur@4.1.5", "dependsOn": [] }, { "ref": "pkg:npm/locate-character@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/magic-string@0.30.0", "dependsOn": [ "pkg:npm/@jridgewell/sourcemap-codec@1.4.15" ] }, { "ref": "pkg:npm/minimatch@5.1.2", "dependsOn": [ "pkg:npm/brace-expansion@2.0.1" ] }, { "ref": "pkg:npm/mri@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/npm-bundled@2.0.1", "dependsOn": [ "pkg:npm/npm-normalize-package-bin@2.0.0" ] }, { "ref": "pkg:npm/npm-normalize-package-bin@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/npm-packlist@5.1.3", "dependsOn": [ "pkg:npm/glob@8.0.3", "pkg:npm/ignore-walk@5.0.1", "pkg:npm/npm-bundled@2.0.1", "pkg:npm/npm-normalize-package-bin@2.0.0" ] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/picocolors@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/publint@0.1.7", "dependsOn": [ "pkg:npm/npm-packlist@5.1.3", "pkg:npm/picocolors@1.0.0", "pkg:npm/sade@1.8.1" ] }, { "ref": "pkg:npm/sade@1.8.1", "dependsOn": [ "pkg:npm/mri@1.2.0" ] }, { "ref": "pkg:npm/tiny-glob@0.2.9", "dependsOn": [ "pkg:npm/globalyzer@0.1.0", "pkg:npm/globrex@0.1.2" ] }, { "ref": "pkg:npm/typescript@3.9.10", "dependsOn": [] }, { "ref": "pkg:npm/typescript@5.0.4", "dependsOn": [] }, { "ref": "pkg:npm/uvu@0.5.6", "dependsOn": [ "pkg:npm/dequal@2.0.3", "pkg:npm/diff@5.1.0", "pkg:npm/kleur@4.1.5", "pkg:npm/sade@1.8.1" ] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/devalue@4.3.3-tuxcare.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-18T17:25:25Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, September 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'devalue' with version '4.3.3-tuxcare.5'. The package type in this SBOM is npm with a single purl namespace '@jridgewell' described under components. The components were identified from the source files: pnpm-lock.yaml." } ] }