{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:781b3abd-f4ad-4942-b505-2401abe0b5de", "version": 1, "metadata": { "timestamp": "2026-11-08T16:05:30Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "node-api", "group": "@duckdb", "version": "2.0.0-r.1", "purl": "pkg:npm/%40duckdb/node-api@2.0.0-r.1", "bom-ref": "pkg:npm/@duckdb/node-api@2.0.0-r.1", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/duckdb/duckdb-node-neo.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@duckdb" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@duckdb/node-bindings/package.json" } ] }, "components": [ { "group": "@duckdb", "name": "node-bindings", "version": "2.0.0-r.1", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40duckdb/node-bindings@2.0.0-r.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/duckdb/duckdb-node-neo.git" } ], "type": "library", "bom-ref": "pkg:npm/@duckdb/node-bindings@2.0.0-r.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@duckdb/node-bindings/package.json" }, { "name": "ImportedModules", "value": "@duckdb/node-bindings" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@duckdb/node-bindings/package.json" } ], "concludedValue": "node_modules/@duckdb/node-bindings/package.json" } ], "occurrences": [ { "location": "lib/DuckDBAppender.js", "line": 7 }, { "location": "lib/DuckDBClientContext.js", "line": 7 }, { "location": "lib/DuckDBConnection.js", "line": 7 }, { "location": "lib/DuckDBDataChunk.js", "line": 7 }, { "location": "lib/DuckDBDataChunkWriter.js", "line": 7 }, { "location": "lib/DuckDBExtractedStatements.js", "line": 7 }, { "location": "lib/DuckDBInstance.js", "line": 7 }, { "location": "lib/DuckDBInstanceCache.js", "line": 7 }, { "location": "lib/DuckDBLogicalType.js", "line": 7 }, { "location": "lib/DuckDBMaterializedResult.js", "line": 7 }, { "location": "lib/DuckDBPendingResult.js", "line": 7 }, { "location": "lib/DuckDBPreparedStatement.js", "line": 7 }, { "location": "lib/DuckDBResult.js", "line": 7 }, { "location": "lib/DuckDBScalarFunction.js", "line": 7 }, { "location": "lib/DuckDBScalarFunctionBindInfo.js", "line": 7 }, { "location": "lib/DuckDBScalarFunctionInfo.js", "line": 7 }, { "location": "lib/DuckDBScalarFunctionInitInfo.js", "line": 7 }, { "location": "lib/DuckDBTableFunction.js", "line": 7 }, { "location": "lib/DuckDBTableFunctionBindInfo.js", "line": 7 }, { "location": "lib/DuckDBTableFunctionInfo.js", "line": 7 }, { "location": "lib/DuckDBTableFunctionInitInfo.js", "line": 7 }, { "location": "lib/configurationOptionDescriptions.js", "line": 7 }, { "location": "lib/createResult.js", "line": 7 }, { "location": "lib/createValue.js", "line": 7 }, { "location": "lib/duckdb.js", "line": 18 }, { "location": "lib/enums.js", "line": 7 }, { "location": "lib/readValue.js", "line": 7 }, { "location": "lib/values/DuckDBDateValue.js", "line": 8 }, { "location": "lib/values/DuckDBDecimalValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimeTZValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimeValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimestampMillisecondsValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimestampNanosecondsValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimestampSecondsValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimestampTZNanosecondsValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimestampTZValue.js", "line": 8 }, { "location": "lib/values/DuckDBTimestampValue.js", "line": 8 }, { "location": "lib/vectors/DuckDBArrayVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBBigIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBBigNumVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBBitVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBBlobVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBBooleanVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBDateVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBDecimal128Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBDecimal16Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBDecimal32Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBDecimal64Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBDoubleVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBEnum16Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBEnum32Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBEnum8Vector.js", "line": 7 }, { "location": "lib/vectors/DuckDBFloatVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBGeometryVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBHugeIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBIntegerVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBIntervalVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBListVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBSmallIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBStructVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimeNSVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimeTZVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimeVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimestampMillisecondsVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimestampNanosecondsVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimestampSecondsVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimestampTZNanosecondsVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimestampTZVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTimestampVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTinyIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBTupleVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBUBigIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBUHugeIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBUIntegerVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBUSmallIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBUTinyIntVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBUUIDVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBValidity.js", "line": 7 }, { "location": "lib/vectors/DuckDBVarCharVector.js", "line": 7 }, { "location": "lib/vectors/DuckDBVector.js", "line": 7 }, { "location": "lib/vectors/createVector.js", "line": 6 }, { "location": "lib/vectors/dataAccessors.js", "line": 45 }, { "location": "lib/version.js", "line": 7 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@duckdb/node-api@2.0.0-r.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-08T16:05:30Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, November 8, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'node-api' with version '2.0.0-r.1'. The package type in this SBOM is npm with a single purl namespace '@duckdb' described under components. The components were identified from the source files: node_modules/@duckdb/node-bindings/package.json." } ] }