{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:a908efd0-d386-4a35-9bfc-0b74354433cd", "version": 1, "metadata": { "timestamp": "2026-04-28T21:28:27Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.2.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "distributionConstraints": { "tlp": "CLEAR" }, "component": { "name": "next-react-dev-overlay", "group": "", "version": "13.5.10-tuxcare.12", "description": "A development-only overlay for developing React applications.", "purl": "pkg:npm/next-react-dev-overlay@13.5.10-tuxcare.12", "bom-ref": "pkg:npm/next-react-dev-overlay@13.5.10-tuxcare.12", "author": "Joe Haddad ", "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@types/babel__code-frame/package.json\\nnode_modules/anser/package.json\\nnode_modules/chalk/package.json\\nnode_modules/css.escape/package.json\\nnode_modules/data-uri-to-buffer/package.json\\nnode_modules/platform/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/source-map/package.json\\nnode_modules/stacktrace-parser/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/webpack/package.json" } ] }, "components": [ { "authors": [ { "name": "Tobias Koppers @sokra" } ], "group": "", "name": "webpack", "version": "5.86.0", "description": "Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/webpack@5.86.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/webpack/webpack" }, { "type": "vcs", "url": "https://github.com/webpack/webpack.git" } ], "type": "library", "bom-ref": "pkg:npm/webpack@5.86.0", "properties": [ { "name": "SrcFile", "value": "node_modules/webpack/package.json" }, { "name": "ImportedModules", "value": "webpack" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/webpack/package.json" } ], "concludedValue": "node_modules/webpack/package.json" } ], "occurrences": [ { "location": "src/middleware.ts#11" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "ImportedModules", "value": "strip-ansi" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ], "occurrences": [ { "location": "dist/internal/components/CodeFrame/CodeFrame.js#32" }, { "location": "src/internal/components/CodeFrame/CodeFrame.tsx#4" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Georg Tavonius (http://jaz-lounge.com)" } ], "group": "", "name": "stacktrace-parser", "version": "0.1.10", "description": "Parses every stack trace into a nicely formatted array of hashes.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/stacktrace-parser@0.1.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/errwischt/stacktrace-parser" }, { "type": "vcs", "url": "https://github.com/errwischt/stacktrace-parser" } ], "type": "library", "bom-ref": "pkg:npm/stacktrace-parser@0.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/stacktrace-parser/package.json" }, { "name": "ImportedModules", "value": "stacktrace-parser,StackFrame,stacktrace-parser/StackFrame,parse,stacktrace-parser/parse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stacktrace-parser/package.json" } ], "concludedValue": "node_modules/stacktrace-parser/package.json" } ], "occurrences": [ { "location": "dist/internal/helpers/nodeStackFrames.js#4" }, { "location": "dist/internal/helpers/parseStack.js#4" }, { "location": "src/internal/bus.ts#1" }, { "location": "src/internal/helpers/nodeStackFrames.ts#1" }, { "location": "src/internal/helpers/nodeStackFrames.ts#2" }, { "location": "src/internal/helpers/parseStack.ts#1" }, { "location": "src/internal/helpers/parseStack.ts#2" }, { "location": "src/internal/helpers/stack-frame.ts#1" }, { "location": "src/middleware.ts#7" }, { "location": "src/internal/components/CodeFrame/CodeFrame.tsx#3" }, { "location": "src/internal/container/RuntimeError.tsx#2" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.8.0-beta.0", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.8.0-beta.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.8.0-beta.0", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map,RawSourceMap,source-map/RawSourceMap,NullableMappedPosition,source-map/NullableMappedPosition,SourceMapConsumer,source-map/SourceMapConsumer" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "dist/middleware.js#10" }, { "location": "src/internal/helpers/getRawSourceMap.ts#3" }, { "location": "src/middleware.ts#5" }, { "location": "src/middleware.ts#6" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shell-quote", "version": "1.7.3", "description": "quote and parse shell commands", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/shell-quote@1.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-shell-quote" }, { "type": "vcs", "url": "http://github.com/substack/node-shell-quote.git" } ], "type": "library", "bom-ref": "pkg:npm/shell-quote@1.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/shell-quote/package.json" }, { "name": "ImportedModules", "value": "shell-quote" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shell-quote/package.json" } ], "concludedValue": "node_modules/shell-quote/package.json" } ], "occurrences": [ { "location": "dist/internal/helpers/launchEditor.js#36" }, { "location": "src/internal/helpers/launchEditor.ts#30" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "react-dom", "version": "17.0.2", "description": "React package for working with the DOM.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/react-dom@17.0.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-dom@17.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react-dom/package.json" }, { "name": "ImportedModules", "value": "react-dom,createPortal,react-dom/createPortal" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-dom/package.json" } ], "concludedValue": "node_modules/react-dom/package.json" } ], "occurrences": [ { "location": "dist/internal/components/ShadowPortal.js#28" }, { "location": "src/internal/components/ShadowPortal.tsx#2" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react", "version": "17.0.2", "description": "React is a JavaScript library for building user interfaces.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/react@17.0.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@17.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "ImportedModules", "value": "react" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ], "occurrences": [ { "location": "dist/internal/ErrorBoundary.js#7" }, { "location": "dist/internal/ReactDevOverlay.js#26" }, { "location": "dist/internal/components/CodeFrame/CodeFrame.js#31" }, { "location": "dist/internal/components/Dialog/Dialog.js#27" }, { "location": "dist/internal/components/Dialog/DialogBody.js#27" }, { "location": "dist/internal/components/Dialog/DialogContent.js#27" }, { "location": "dist/internal/components/Dialog/DialogHeader.js#27" }, { "location": "dist/internal/components/LeftRightDialogHeader/LeftRightDialogHeader.js#27" }, { "location": "dist/internal/components/Overlay/Overlay.js#32" }, { "location": "dist/internal/components/ShadowPortal.js#27" }, { "location": "dist/internal/components/Terminal/Terminal.js#31" }, { "location": "dist/internal/components/Toast/Toast.js#27" }, { "location": "dist/internal/container/BuildError.js#27" }, { "location": "dist/internal/container/Errors.js#27" }, { "location": "dist/internal/container/RuntimeError.js#27" }, { "location": "dist/internal/hooks/use-on-click-outside.js#27" }, { "location": "dist/internal/icons/CloseIcon.js#27" }, { "location": "dist/internal/styles/Base.js#27" }, { "location": "dist/internal/styles/ComponentStyles.js#27" }, { "location": "dist/internal/styles/CssReset.js#27" }, { "location": "src/internal/hooks/use-on-click-outside.ts#1" }, { "location": "src/internal/ErrorBoundary.tsx#1" }, { "location": "src/internal/ReactDevOverlay.tsx#1" }, { "location": "src/internal/components/CodeFrame/CodeFrame.tsx#2" }, { "location": "src/internal/components/Dialog/Dialog.tsx#1" }, { "location": "src/internal/components/Dialog/DialogBody.tsx#1" }, { "location": "src/internal/components/Dialog/DialogContent.tsx#1" }, { "location": "src/internal/components/Dialog/DialogHeader.tsx#1" }, { "location": "src/internal/components/LeftRightDialogHeader/LeftRightDialogHeader.tsx#1" }, { "location": "src/internal/components/Overlay/Overlay.tsx#3" }, { "location": "src/internal/components/ShadowPortal.tsx#1" }, { "location": "src/internal/components/Terminal/Terminal.tsx#2" }, { "location": "src/internal/components/Toast/Toast.tsx#1" }, { "location": "src/internal/container/BuildError.tsx#1" }, { "location": "src/internal/container/Errors.tsx#1" }, { "location": "src/internal/container/RuntimeError.tsx#1" }, { "location": "src/internal/icons/CloseIcon.tsx#1" }, { "location": "src/internal/styles/Base.tsx#1" }, { "location": "src/internal/styles/ComponentStyles.tsx#1" }, { "location": "src/internal/styles/CssReset.tsx#1" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Benjamin Tan " } ], "group": "", "name": "platform", "version": "1.3.6", "description": "A platform detection library that works on nearly all JavaScript platforms.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/platform@1.3.6", "type": "library", "bom-ref": "pkg:npm/platform@1.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/platform/package.json" }, { "name": "ImportedModules", "value": "platform" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/platform/package.json" } ], "concludedValue": "node_modules/platform/package.json" } ], "occurrences": [ { "location": "dist/internal/components/Overlay/maintain--tab-focus.js#13" }, { "location": "src/internal/components/Overlay/maintain--tab-focus.ts#9" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "data-uri-to-buffer", "version": "3.0.1", "description": "Generate a Buffer instance from a Data URI string", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/data-uri-to-buffer@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/node-data-uri-to-buffer" }, { "type": "vcs", "url": "git://github.com/TooTallNate/node-data-uri-to-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/data-uri-to-buffer@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/data-uri-to-buffer/package.json" }, { "name": "ImportedModules", "value": "data-uri-to-buffer,MimeBuffer,data-uri-to-buffer/MimeBuffer" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/data-uri-to-buffer/package.json" } ], "concludedValue": "node_modules/data-uri-to-buffer/package.json" } ], "occurrences": [ { "location": "dist/internal/helpers/getRawSourceMap.js#7" }, { "location": "src/internal/helpers/getRawSourceMap.ts#1" }, { "location": "src/internal/helpers/getRawSourceMap.ts#2" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "css.escape", "version": "1.5.1", "description": "A robust polyfill for the `CSS.escape` utility method as defined in CSSOM.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/css.escape@1.5.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/cssescape" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/CSS.escape.git" } ], "type": "library", "bom-ref": "pkg:npm/css.escape@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/css.escape/package.json" }, { "name": "ImportedModules", "value": "css.escape" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/css.escape/package.json" } ], "concludedValue": "node_modules/css.escape/package.json" } ], "occurrences": [ { "location": "dist/internal/components/Overlay/maintain--tab-focus.js#14" }, { "location": "src/internal/components/Overlay/maintain--tab-focus.ts#10" } ] } }, { "group": "", "name": "chalk", "version": "4.0.0", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chalk@4.0.0", "type": "library", "bom-ref": "pkg:npm/chalk@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "dist/internal/helpers/launchEditor.js#30" }, { "location": "src/internal/helpers/launchEditor.ts#24" } ] } }, { "authors": [ { "name": "Ionică Bizău (https://ionicabizau.net)" } ], "group": "", "name": "anser", "version": "1.4.9", "description": "A low level parser for ANSI sequences.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/anser@1.4.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/IonicaBizau/anser#readme" }, { "type": "vcs", "url": "git://github.com/IonicaBizau/anser.git" } ], "type": "library", "bom-ref": "pkg:npm/anser@1.4.9", "properties": [ { "name": "SrcFile", "value": "node_modules/anser/package.json" }, { "name": "ImportedModules", "value": "anser" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/anser/package.json" } ], "concludedValue": "node_modules/anser/package.json" } ], "occurrences": [ { "location": "dist/internal/components/CodeFrame/CodeFrame.js#30" }, { "location": "dist/internal/components/Terminal/Terminal.js#30" }, { "location": "src/internal/components/CodeFrame/CodeFrame.tsx#1" }, { "location": "src/internal/components/Terminal/Terminal.tsx#1" } ] } }, { "group": "@types", "name": "babel__code-frame", "version": "7.0.2", "description": "TypeScript definitions for @babel/code-frame", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/babel__code-frame@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/babel__code-frame@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/babel__code-frame/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/babel__code-frame/package.json" } ], "concludedValue": "node_modules/@types/babel__code-frame/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "code-frame", "version": "7.12.11", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40babel/code-frame@7.12.11", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.12.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "ImportedModules", "value": "@babel/code-frame,codeFrameColumns,@babel/code-frame/codeFrameColumns" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ], "occurrences": [ { "location": "dist/middleware.js#7" }, { "location": "src/middleware.ts#1" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/next-react-dev-overlay@13.5.10-tuxcare.12" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.2.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-04-28T21:28:27Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, April 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'next-react-dev-overlay' with version '13.5.10-tuxcare.12'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 14 source files." } ] }