{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:b4556458-3964-44b5-9caa-e9b1bd65e137", "version": 1, "metadata": { "timestamp": "2026-09-17T14:33:47Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "functions", "group": "@netlify", "version": "3.1.0", "description": "JavaScript utilities for Netlify Functions", "purl": "pkg:npm/%40netlify/functions@3.1.0", "bom-ref": "pkg:npm/@netlify/functions@3.1.0", "author": "Netlify Inc.", "properties": [ { "name": "cdx:npm:scripts", "value": "dev, build, prepack, test, test:dev, test:dev:tsd, test:dev:vitest, test:ci, test:ci:vitest" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@esbuild\\n@rollup\\n@types\\n@vitest" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@esbuild/linux-x64/package.json\\nnode_modules/@rollup/rollup-linux-x64-gnu/package.json\\nnode_modules/@rollup/rollup-linux-x64-musl/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@vitest/expect/package.json\\nnode_modules/@vitest/runner/package.json\\nnode_modules/@vitest/snapshot/package.json\\nnode_modules/@vitest/spy/package.json\\nnode_modules/@vitest/utils/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/assertion-error/package.json\\nnode_modules/bundle-require/package.json\\nnode_modules/chai/package.json\\nnode_modules/check-error/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/deep-eql/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/lilconfig/package.json\\nnode_modules/loupe/package.json\\nnode_modules/npm-run-all2/package.json\\nnode_modules/pathval/package.json\\nnode_modules/pidtree/package.json\\nnode_modules/postcss-load-config/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/rollup/package.json\\nnode_modules/semver/package.json\\nnode_modules/tinypool/package.json\\nnode_modules/tinyspy/package.json\\nnode_modules/tsup/package.json\\nnode_modules/vite-node/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "2.1.9", "description": "Next generation testing framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vite-node", "version": "2.1.9", "description": "Vite as Node.js runtime", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vite-node@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/blob/main/packages/vite-node#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/vite-node@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/vite-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vite-node/package.json" } ], "concludedValue": "node_modules/vite-node/package.json" } ] } }, { "authors": [ { "name": "EGOIST" } ], "group": "", "name": "tsup", "version": "8.4.0", "description": "Bundle your TypeScript library with no config, powered by esbuild", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsup@8.4.0", "externalReferences": [ { "type": "website", "url": "https://tsup.egoist.dev/" }, { "type": "vcs", "url": "https://github.com/egoist/tsup.git" } ], "type": "library", "bom-ref": "pkg:npm/tsup@8.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsup/package.json" } ], "concludedValue": "node_modules/tsup/package.json" } ] } }, { "group": "", "name": "tinyspy", "version": "3.0.2", "description": "A minimal fork of nanospy, with more features", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyspy@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tinylibs/tinyspy#readme" }, { "type": "vcs", "url": "git+https://github.com/tinylibs/tinyspy.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyspy@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyspy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyspy/package.json" } ], "concludedValue": "node_modules/tinyspy/package.json" } ] } }, { "group": "", "name": "tinypool", "version": "1.0.2", "description": "A minimal and tiny Node.js Worker Thread Pool implementation, a fork of piscina, but with fewer features", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinypool@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tinylibs/tinypool#readme" }, { "type": "vcs", "url": "https://github.com/tinylibs/tinypool.git" } ], "type": "library", "bom-ref": "pkg:npm/tinypool@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tinypool/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinypool/package.json" } ], "concludedValue": "node_modules/tinypool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.7.1", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.7.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "dist-dev/main.js", "line": 18 }, { "location": "dist-dev/main.js", "line": 116 }, { "location": "dev/function.ts", "line": 8 }, { "location": "dev/function.ts", "line": 152 } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "rollup", "version": "4.40.0", "description": "Next-generation ES module bundler", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rollup@4.40.0", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" } ], "type": "library", "bom-ref": "pkg:npm/rollup@4.40.0", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup/package.json" } ], "concludedValue": "node_modules/rollup/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "4.1.2", "description": "Recursive version of fs.readdir with small RAM & CPU footprint.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readdirp@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] } }, { "authors": [ { "name": "Michael Ciniawky " } ], "group": "", "name": "postcss-load-config", "version": "6.0.1", "description": "Autoload Config for PostCSS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss-load-config@6.0.1", "type": "library", "bom-ref": "pkg:npm/postcss-load-config@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-load-config/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-load-config/package.json" } ], "concludedValue": "node_modules/postcss-load-config/package.json" } ] } }, { "authors": [ { "name": "Simone Primarosa (https://github.com/simonepri)" } ], "group": "", "name": "pidtree", "version": "0.5.0", "description": "Cross platform children list of a PID", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pidtree@0.5.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/simonepri/pidtree#readme" } ], "type": "library", "bom-ref": "pkg:npm/pidtree@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pidtree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pidtree/package.json" } ], "concludedValue": "node_modules/pidtree/package.json" } ] } }, { "authors": [ { "name": "Veselin Todorov " } ], "group": "", "name": "pathval", "version": "2.0.0", "description": "Object value retrieval given a string path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pathval@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chaijs/pathval" }, { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/pathval.git" } ], "type": "library", "bom-ref": "pkg:npm/pathval@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pathval/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pathval/package.json" } ], "concludedValue": "node_modules/pathval/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima" } ], "group": "", "name": "npm-run-all2", "version": "5.0.2", "description": "A CLI tool to run multiple npm-scripts in parallel or sequential. (Maintainence fork)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-all2@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bcomnes/npm-run-all2" }, { "type": "vcs", "url": "https://github.com/bcomnes/npm-run-all2.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-run-all2@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-all2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-all2/package.json" } ], "concludedValue": "node_modules/npm-run-all2/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Veselin Todorov " } ], "group": "", "name": "loupe", "version": "3.1.3", "description": "Inspect utility for Node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/loupe@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chaijs/loupe" }, { "type": "vcs", "url": "https://github.com/chaijs/loupe" } ], "type": "library", "bom-ref": "pkg:npm/loupe@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/loupe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loupe/package.json" } ], "concludedValue": "node_modules/loupe/package.json" } ] } }, { "authors": [ { "name": "antonk52" } ], "group": "", "name": "lilconfig", "version": "3.1.3", "description": "A zero-dependency alternative to cosmiconfig", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lilconfig@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antonk52/lilconfig" } ], "type": "library", "bom-ref": "pkg:npm/lilconfig@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lilconfig/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lilconfig/package.json" } ], "concludedValue": "node_modules/lilconfig/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "4.0.1", "description": "Check if something is a Node.js stream", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@4.0.1", "type": "library", "bom-ref": "pkg:npm/is-stream@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "ImportedModules", "value": "is-stream,isStream,is-stream/isStream" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ], "occurrences": [ { "location": "dev/runtimes/nodejs/worker.js", "line": 9 }, { "location": "dev/runtimes/nodejs/worker.js", "line": 55 }, { "location": "dist-dev/worker.js", "line": 9 }, { "location": "dist-dev/worker.js", "line": 55 } ] } }, { "group": "", "name": "esbuild", "version": "0.25.2", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild@0.25.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/esbuild@0.25.2", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "deep-eql", "version": "5.0.2", "description": "Improved deep equality testing for Node.js and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-eql@5.0.2", "type": "library", "bom-ref": "pkg:npm/deep-eql@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-eql/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-eql/package.json" } ], "concludedValue": "node_modules/deep-eql/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "4.0.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://alogicalparadox.com)" } ], "group": "", "name": "check-error", "version": "2.1.1", "description": "Error comparison and information related utility for node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/check-error@2.1.1", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/check-error.git" } ], "type": "library", "bom-ref": "pkg:npm/check-error@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/check-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/check-error/package.json" } ], "concludedValue": "node_modules/check-error/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "chai", "version": "5.2.0", "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chai@5.2.0", "externalReferences": [ { "type": "website", "url": "http://chaijs.com" }, { "type": "vcs", "url": "https://github.com/chaijs/chai" } ], "type": "framework", "bom-ref": "pkg:npm/chai@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chai/package.json" } ], "concludedValue": "node_modules/chai/package.json" } ] }, "tags": [ "framework", "test" ] }, { "group": "", "name": "bundle-require", "version": "5.1.0", "description": "bundle and require a file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bundle-require@5.1.0", "type": "library", "bom-ref": "pkg:npm/bundle-require@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bundle-require/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bundle-require/package.json" } ], "concludedValue": "node_modules/bundle-require/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://qualiancy.com)" } ], "group": "", "name": "assertion-error", "version": "2.0.1", "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assertion-error@2.0.1", "type": "framework", "bom-ref": "pkg:npm/assertion-error@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/assertion-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assertion-error/package.json" } ], "concludedValue": "node_modules/assertion-error/package.json" } ] }, "tags": [ "framework", "test", "validation" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "5.2.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@5.2.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "group": "@vitest", "name": "utils", "version": "2.1.9", "description": "Shared Vitest utility functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/utils@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/utils#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/utils@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/utils/package.json" } ], "concludedValue": "node_modules/@vitest/utils/package.json" } ] } }, { "group": "@vitest", "name": "spy", "version": "2.1.9", "description": "Lightweight Jest compatible spy implementation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/spy@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/spy#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/spy@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/spy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/spy/package.json" } ], "concludedValue": "node_modules/@vitest/spy/package.json" } ] } }, { "group": "@vitest", "name": "snapshot", "version": "2.1.9", "description": "Vitest snapshot manager", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/snapshot@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/snapshot#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/snapshot@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/snapshot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/snapshot/package.json" } ], "concludedValue": "node_modules/@vitest/snapshot/package.json" } ] } }, { "group": "@vitest", "name": "runner", "version": "2.1.9", "description": "Vitest test runner", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/runner@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/runner#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/runner@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/runner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/runner/package.json" } ], "concludedValue": "node_modules/@vitest/runner/package.json" } ] }, "tags": [ "test" ] }, { "group": "@vitest", "name": "expect", "version": "2.1.9", "description": "Jest's expect matchers as a Chai plugin", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/expect@2.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/expect#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/expect@2.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/expect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/expect/package.json" } ], "concludedValue": "node_modules/@vitest/expect/package.json" } ] }, "tags": [ "test" ] }, { "group": "@types", "name": "estree", "version": "1.0.7", "description": "TypeScript definitions for estree", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/estree@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/estree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/estree/package.json" } ], "concludedValue": "node_modules/@types/estree/package.json" } ] } }, { "authors": [ { "name": "Lukas Taegert-Atkinson" } ], "group": "@rollup", "name": "rollup-linux-x64-musl", "version": "4.40.0", "description": "Native bindings for Rollup", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.40.0", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/rollup-linux-x64-musl@4.40.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/rollup-linux-x64-musl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/rollup-linux-x64-musl/package.json" } ], "concludedValue": "node_modules/@rollup/rollup-linux-x64-musl/package.json" } ] } }, { "authors": [ { "name": "Lukas Taegert-Atkinson" } ], "group": "@rollup", "name": "rollup-linux-x64-gnu", "version": "4.40.0", "description": "Native bindings for Rollup", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.40.0", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/rollup-linux-x64-gnu@4.40.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/rollup-linux-x64-gnu/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/rollup-linux-x64-gnu/package.json" } ], "concludedValue": "node_modules/@rollup/rollup-linux-x64-gnu/package.json" } ] } }, { "group": "@esbuild", "name": "linux-x64", "version": "0.25.2", "description": "The Linux 64-bit binary for esbuild, a JavaScript bundler.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-x64@0.25.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-x64@0.25.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@esbuild/linux-x64/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@esbuild/linux-x64/package.json" } ], "concludedValue": "node_modules/@esbuild/linux-x64/package.json" } ] }, "tags": [ "binary" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@netlify/functions@3.1.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-17T14:33:47Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 17, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'functions' with version '3.1.0'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 32 source files." } ] }