{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ac4ad9f3-a177-4583-a25b-67bc946500be", "version": 1, "metadata": { "timestamp": "2026-04-28T20:06:30Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.2.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "distributionConstraints": { "tlp": "CLEAR" }, "component": { "name": "next-polyfill-nomodule", "group": "", "version": "16.0.6-tuxcare.3", "description": "A polyfill for non-dead, nomodule browsers.", "purl": "pkg:npm/next-polyfill-nomodule@16.0.6-tuxcare.3", "bom-ref": "pkg:npm/next-polyfill-nomodule@16.0.6-tuxcare.3", "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/core-js/package.json\\nnode_modules/microbundle/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/whatwg-fetch/package.json" } ] }, "components": [ { "group": "", "name": "whatwg-fetch", "version": "3.0.0", "description": "A window.fetch polyfill.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/whatwg-fetch@3.0.0", "type": "library", "bom-ref": "pkg:npm/whatwg-fetch@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/whatwg-fetch/package.json" }, { "name": "ImportedModules", "value": "whatwg-fetch" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/whatwg-fetch/package.json" } ], "concludedValue": "node_modules/whatwg-fetch/package.json" } ], "occurrences": [ { "location": "src/index.js#61" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "object-assign", "version": "4.1.1", "description": "ES2015 `Object.assign()` ponyfill", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/object-assign@4.1.1", "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-assign/package.json" }, { "name": "ImportedModules", "value": "object-assign" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-assign/package.json" } ], "concludedValue": "node_modules/object-assign/package.json" } ], "occurrences": [ { "location": "src/index.js#62" } ] } }, { "authors": [ { "name": "Jason Miller (http://jasonformat.com)" } ], "group": "", "name": "microbundle", "version": "0.15.0", "description": "Zero-configuration bundler for tiny JS libs, powered by Rollup.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/microbundle@0.15.0", "type": "library", "bom-ref": "pkg:npm/microbundle@0.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/microbundle/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/microbundle/package.json" } ], "concludedValue": "node_modules/microbundle/package.json" } ] } }, { "authors": [ { "name": "Denis Pushkarev (http://zloirock.ru)" } ], "group": "", "name": "core-js", "version": "3.38.1", "description": "Standard library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/core-js@3.38.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/zloirock/core-js.git" } ], "type": "library", "bom-ref": "pkg:npm/core-js@3.38.1", "properties": [ { "name": "SrcFile", "value": "node_modules/core-js/package.json" }, { "name": "ImportedModules", "value": "core-js/features/array/at,core-js/features/array/copy-within,core-js/features/array/fill,core-js/features/array/find,core-js/features/array/find-index,core-js/features/array/flat-map,core-js/features/array/flat,core-js/features/array/from,core-js/features/array/includes,core-js/features/array/iterator,core-js/features/array/of,core-js/features/function/has-instance,core-js/features/function/name,core-js/features/map,core-js/features/number/constructor,core-js/features/number/epsilon,core-js/features/number/is-finite,core-js/features/number/is-integer,core-js/features/number/is-nan,core-js/features/number/is-safe-integer,core-js/features/number/max-safe-integer,core-js/features/number/min-safe-integer,core-js/features/number/parse-float,core-js/features/number/parse-int,core-js/features/object/entries,core-js/features/object/get-own-property-descriptors,core-js/features/object/keys,core-js/features/object/is,core-js/features/object/values,core-js/features/object/has-own,core-js/features/reflect,core-js/features/regexp,core-js/features/set,core-js/features/symbol,core-js/features/symbol/async-iterator,core-js/features/string/code-point-at,core-js/features/string/ends-with,core-js/features/string/from-code-point,core-js/features/string/includes,core-js/features/string/iterator,core-js/features/string/pad-start,core-js/features/string/pad-end,core-js/features/string/raw,core-js/features/string/repeat,core-js/features/string/starts-with,core-js/features/string/trim-left,core-js/features/string/trim-right,core-js/features/url,core-js/features/url/to-json,core-js/features/url/can-parse,core-js/features/url-search-params,core-js/features/weak-map,core-js/features/weak-set,core-js/features/promise,core-js/features/promise/all-settled,core-js/features/promise/finally" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-js/package.json" } ], "concludedValue": "node_modules/core-js/package.json" } ], "occurrences": [ { "location": "src/index.js#3" }, { "location": "src/index.js#4" }, { "location": "src/index.js#5" }, { "location": "src/index.js#6" }, { "location": "src/index.js#7" }, { "location": "src/index.js#8" }, { "location": "src/index.js#9" }, { "location": "src/index.js#10" }, { "location": "src/index.js#11" }, { "location": "src/index.js#12" }, { "location": "src/index.js#13" }, { "location": "src/index.js#14" }, { "location": "src/index.js#15" }, { "location": "src/index.js#16" }, { "location": "src/index.js#17" }, { "location": "src/index.js#18" }, { "location": "src/index.js#19" }, { "location": "src/index.js#20" }, { "location": "src/index.js#21" }, { "location": "src/index.js#22" }, { "location": "src/index.js#23" }, { "location": "src/index.js#24" }, { "location": "src/index.js#25" }, { "location": "src/index.js#26" }, { "location": "src/index.js#27" }, { "location": "src/index.js#28" }, { "location": "src/index.js#29" }, { "location": "src/index.js#30" }, { "location": "src/index.js#31" }, { "location": "src/index.js#32" }, { "location": "src/index.js#33" }, { "location": "src/index.js#34" }, { "location": "src/index.js#35" }, { "location": "src/index.js#36" }, { "location": "src/index.js#37" }, { "location": "src/index.js#38" }, { "location": "src/index.js#39" }, { "location": "src/index.js#40" }, { "location": "src/index.js#41" }, { "location": "src/index.js#42" }, { "location": "src/index.js#43" }, { "location": "src/index.js#44" }, { "location": "src/index.js#45" }, { "location": "src/index.js#46" }, { "location": "src/index.js#47" }, { "location": "src/index.js#48" }, { "location": "src/index.js#49" }, { "location": "src/index.js#50" }, { "location": "src/index.js#51" }, { "location": "src/index.js#52" }, { "location": "src/index.js#53" }, { "location": "src/index.js#54" }, { "location": "src/index.js#55" }, { "location": "src/index.js#56" }, { "location": "src/index.js#57" }, { "location": "src/index.js#58" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/next-polyfill-nomodule@16.0.6-tuxcare.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.2.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-04-28T20:06:30Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, April 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'next-polyfill-nomodule' with version '16.0.6-tuxcare.3'." } ] }