{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:fa683de1-1512-484b-8695-5d1d07602548", "version": 1, "metadata": { "timestamp": "2026-09-14T04:57:48Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "globby", "group": "", "version": "16.2.3", "description": "User-friendly glob matching", "purl": "pkg:npm/globby@16.2.3", "bom-ref": "pkg:npm/globby@16.2.3", "author": "Sindre Sorhus (https://sindresorhus.com)", "properties": [ { "name": "cdx:npm:scripts", "value": "bench, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@nodelib\\n@sindresorhus" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@nodelib/fs.scandir/package.json\\nnode_modules/@nodelib/fs.stat/package.json\\nnode_modules/@nodelib/fs.walk/package.json\\nnode_modules/@sindresorhus/merge-streams/package.json\\nnode_modules/braces/package.json\\nnode_modules/fast-glob/package.json\\nnode_modules/fastq/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/ignore/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-number/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/merge2/package.json\\nnode_modules/micromatch/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/queue-microtask/package.json\\nnode_modules/reusify/package.json\\nnode_modules/run-parallel/package.json\\nnode_modules/slash/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/unicorn-magic/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unicorn-magic", "version": "0.4.0", "description": "Some useful utilities I often need", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.4.0", "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unicorn-magic/package.json" }, { "name": "ImportedModules", "value": "unicorn-magic/node,toPath,unicorn-magic/node/toPath" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicorn-magic/package.json" } ], "concludedValue": "node_modules/unicorn-magic/package.json" } ], "occurrences": [ { "location": "ignore.js", "line": 10 }, { "location": "ignore.js", "line": 255 }, { "location": "ignore.js", "line": 289 }, { "location": "ignore.js", "line": 760 }, { "location": "ignore.js", "line": 778 }, { "location": "index.js", "line": 7 }, { "location": "index.js", "line": 166 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "to-regex-range", "version": "5.0.1", "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/to-regex-range" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-regex-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-regex-range/package.json" } ], "concludedValue": "node_modules/to-regex-range/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "slash", "version": "5.1.0", "description": "Convert Windows backslash paths to slash paths", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@5.1.0", "type": "library", "bom-ref": "pkg:npm/slash@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slash/package.json" }, { "name": "ImportedModules", "value": "slash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slash/package.json" } ], "concludedValue": "node_modules/slash/package.json" } ], "occurrences": [ { "location": "ignore.js", "line": 9 }, { "location": "ignore.js", "line": 211 }, { "location": "ignore.js", "line": 280 }, { "location": "ignore.js", "line": 450 }, { "location": "ignore.js", "line": 521 }, { "location": "utilities.js", "line": 7 }, { "location": "utilities.js", "line": 385 }, { "location": "utilities.js", "line": 476 } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "run-parallel", "version": "1.2.0", "description": "Run an array of functions in parallel", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-parallel@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/run-parallel" }, { "type": "vcs", "url": "git://github.com/feross/run-parallel.git" } ], "type": "library", "bom-ref": "pkg:npm/run-parallel@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/run-parallel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/run-parallel/package.json" } ], "concludedValue": "node_modules/run-parallel/package.json" } ] } }, { "authors": [ { "name": "Matteo Collina " } ], "group": "", "name": "reusify", "version": "1.1.0", "description": "Reuse objects and functions with style", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/reusify@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcollina/reusify#readme" }, { "type": "vcs", "url": "git+https://github.com/mcollina/reusify.git" } ], "type": "library", "bom-ref": "pkg:npm/reusify@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/reusify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/reusify/package.json" } ], "concludedValue": "node_modules/reusify/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "queue-microtask", "version": "1.2.3", "description": "fast, tiny `queueMicrotask` shim for modern engines", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/queue-microtask@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/queue-microtask" }, { "type": "vcs", "url": "git://github.com/feross/queue-microtask.git" } ], "type": "library", "bom-ref": "pkg:npm/queue-microtask@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/queue-microtask/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/queue-microtask/package.json" } ], "concludedValue": "node_modules/queue-microtask/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "2.3.2", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@2.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "micromatch", "version": "4.0.8", "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/micromatch@4.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/micromatch" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/micromatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/micromatch/package.json" } ], "concludedValue": "node_modules/micromatch/package.json" } ] } }, { "group": "", "name": "merge2", "version": "1.4.1", "description": "Merge multiple streams into one stream in sequence or parallel.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge2@1.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/teambition/merge2" } ], "type": "library", "bom-ref": "pkg:npm/merge2@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/merge2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge2/package.json" } ], "concludedValue": "node_modules/merge2/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "4.0.0", "description": "Check if a path is inside another path", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-path-inside@4.0.0", "type": "library", "bom-ref": "pkg:npm/is-path-inside@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" }, { "name": "ImportedModules", "value": "is-path-inside" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ], "occurrences": [ { "location": "ignore.js", "line": 8 }, { "location": "ignore.js", "line": 220 }, { "location": "ignore.js", "line": 361 }, { "location": "ignore.js", "line": 851 }, { "location": "utilities.js", "line": 6 }, { "location": "utilities.js", "line": 320 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-number", "version": "7.0.0", "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-number" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number/package.json" } ], "concludedValue": "node_modules/is-number/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-glob", "version": "4.0.3", "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-glob@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/is-glob" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-glob/package.json" } ], "concludedValue": "node_modules/is-glob/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-extglob", "version": "2.1.1", "description": "Returns true if a string has an extglob.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-extglob" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-extglob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-extglob/package.json" } ], "concludedValue": "node_modules/is-extglob/package.json" } ] } }, { "authors": [ { "name": "kael" } ], "group": "", "name": "ignore", "version": "7.0.6", "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@7.0.6", "type": "library", "bom-ref": "pkg:npm/ignore@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore/package.json" }, { "name": "ExportedModules", "value": "ignore,isGitIgnored,ignore.js/isGitIgnored,isGitIgnoredSync,ignore.js/isGitIgnoredSync,isIgnoredByIgnoreFiles,ignore.js/isIgnoredByIgnoreFiles,isIgnoredByIgnoreFilesSync,ignore.js/isIgnoredByIgnoreFilesSync" }, { "name": "ImportedModules", "value": "ignore,isPathValid,ignore/isPathValid" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore/package.json" } ], "concludedValue": "node_modules/ignore/package.json" } ], "occurrences": [ { "location": "ignore.js", "line": 7 }, { "location": "ignore.js", "line": 249 }, { "location": "utilities.js", "line": 5 }, { "location": "utilities.js", "line": 396 }, { "location": "utilities.js", "line": 403 } ] } }, { "authors": [ { "name": "Gulp Team (https://gulpjs.com/)" } ], "group": "", "name": "glob-parent", "version": "5.1.2", "description": "Extract the non-magic parent path from a glob string.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob-parent@5.1.2", "type": "library", "bom-ref": "pkg:npm/glob-parent@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/glob-parent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob-parent/package.json" } ], "concludedValue": "node_modules/glob-parent/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "fill-range", "version": "7.1.1", "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@7.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/fill-range" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fill-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fill-range/package.json" } ], "concludedValue": "node_modules/fill-range/package.json" } ] } }, { "authors": [ { "name": "Matteo Collina " } ], "group": "", "name": "fastq", "version": "1.20.1", "description": "Fast, in memory work queue", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fastq@1.20.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcollina/fastq#readme" }, { "type": "vcs", "url": "git+https://github.com/mcollina/fastq.git" } ], "type": "library", "bom-ref": "pkg:npm/fastq@1.20.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fastq/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fastq/package.json" } ], "concludedValue": "node_modules/fastq/package.json" } ] } }, { "authors": [ { "name": "Denis Malinochkin (https://mrmlnc.com)" } ], "group": "", "name": "fast-glob", "version": "3.3.3", "description": "It's a very fast and efficient glob library for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-glob@3.3.3", "type": "library", "bom-ref": "pkg:npm/fast-glob@3.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-glob/package.json" }, { "name": "ImportedModules", "value": "fast-glob" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-glob/package.json" } ], "concludedValue": "node_modules/fast-glob/package.json" } ], "occurrences": [ { "location": "bench.js", "line": 8 }, { "location": "ignore.js", "line": 6 }, { "location": "ignore.js", "line": 852 }, { "location": "index.js", "line": 6 }, { "location": "index.js", "line": 646 }, { "location": "index.js", "line": 659 }, { "location": "index.js", "line": 678 }, { "location": "index.js", "line": 695 }, { "location": "utilities.js", "line": 4 }, { "location": "utilities.js", "line": 32 }, { "location": "utilities.js", "line": 59 }, { "location": "utilities.js", "line": 367 }, { "location": "utilities.js", "line": 477 }, { "location": "utilities.js", "line": 505 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "braces", "version": "3.0.3", "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/braces" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/braces/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/braces/package.json" } ], "concludedValue": "node_modules/braces/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "merge-streams", "version": "4.0.0", "description": "Merge multiple streams into a unified stream", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/merge-streams@4.0.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/merge-streams/package.json" }, { "name": "ImportedModules", "value": "@sindresorhus/merge-streams" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/merge-streams/package.json" } ], "concludedValue": "node_modules/@sindresorhus/merge-streams/package.json" } ], "occurrences": [ { "location": "index.js", "line": 5 }, { "location": "index.js", "line": 680 } ] } }, { "group": "@nodelib", "name": "fs.walk", "version": "1.2.8", "description": "A library for efficiently walking a directory recursively", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8", "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@nodelib/fs.walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@nodelib/fs.walk/package.json" } ], "concludedValue": "node_modules/@nodelib/fs.walk/package.json" } ] } }, { "group": "@nodelib", "name": "fs.stat", "version": "2.0.5", "description": "Get the status of a file with some features", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5", "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@nodelib/fs.stat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@nodelib/fs.stat/package.json" } ], "concludedValue": "node_modules/@nodelib/fs.stat/package.json" } ] } }, { "group": "@nodelib", "name": "fs.scandir", "version": "2.1.5", "description": "List files and directories inside the specified directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5", "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@nodelib/fs.scandir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@nodelib/fs.scandir/package.json" } ], "concludedValue": "node_modules/@nodelib/fs.scandir/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/globby@16.2.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-14T04:57:48Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'globby' with version '16.2.3'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 23 source files." } ] }