{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:8842d6eb-3a9c-4b14-ad83-841b697ca993", "version": 1, "metadata": { "timestamp": "2026-09-15T15:24:55Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "onnxruntime-common", "group": "", "version": "1.30.0", "description": "ONNXRuntime JavaScript API library", "purl": "pkg:npm/onnxruntime-common@1.30.0", "bom-ref": "pkg:npm/onnxruntime-common@1.30.0", "author": "fs-eire", "properties": [ { "name": "cdx:npm:scripts", "value": "build:cjs, build:esm, build:bundles, build, prepare, pretest, test, test:f16" }, { "name": "cdx:npm:buildScripts", "value": "build:cjs, build:esm, build:bundles, build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Microsoft/onnxruntime.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@gerrit0\\n@nodelib\\n@shikijs\\n@sindresorhus\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "globby", "version": "15.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a01e2f9101aa94c97af36c0bd48956774dad5c26eab8658ce2fa0f108f3942634a09ac3ccc64e6d5fd6bb9b160920dc4962d8fb4a94582b9e652a6ac6d05a593" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globby@15.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/globby/-/globby-15.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/globby@15.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/globby/-/globby-15.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@sindresorhus", "name": "merge-streams", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b65a98f71ab9ba4c53519066a0ea7e9bad5cab0403e691c9b45637327f0203ca6ceb28212c7fc7c3c50f76a83838b9855b720595c5e740d9a8fdd87c1f35d821" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/merge-streams@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-glob", "version": "3.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ecca6d2fc53472a705773233c0e4c7a22957f71e41acdab27bb67f2ee0bb9023118a8d44312caa44adc1100503eec5d1ab8893e00cd356e65d8604364c2bd82e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-glob@3.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-glob@3.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@nodelib", "name": "fs.stat", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "46484f3e9db3aea0c0400ff68cd867ced70f025bfae17761229edaef8e78039a2f23b06e93182decc5fbb9dc00bb7ce0d437293d4d2bcf7555d5279aaaf638f8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@nodelib", "name": "fs.walk", "version": "1.2.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0607e53196059c810920c28f067041b07a6a1316ddc520ef5a6da6c199a1b05c8a01299f864f2d293f5f396de1a0ecb96287f3521d25765c0b35967ce7a1c4a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@nodelib", "name": "fs.scandir", "version": "2.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "run-parallel", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e65e15c9947ce8b67f943c594d1ea3a8bf00144d92d0814b30fdba01b8ec2d5003c4776107f734194b07fb2dfd51f0a2dddcf3f0e950b8f9a768938ca031d004" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-parallel@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/run-parallel@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "queue-microtask", "version": "1.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "36e68d49ae9f94a4f925a498433268934e09cd32f5080e9a1a1bf9adf2d6dcf82a03e3360a1a59427002f21f22e19164052f17e51aa40c11c0eebe217a3dcaf4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/queue-microtask@1.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/queue-microtask@1.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fastq", "version": "1.20.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1864e8c49ff0d71df6b3f0f610a343ee44e29789fc39593ff66c9c4dce150f36b5de53afa54653197de61520ad57d92c746055cefb320152ccea61c54e1c57c7" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fastq@1.20.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fastq@1.20.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "reusify", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83a4147dfd38a19a47b34786e69f37ac52e11de574d2e83f61ff6764ce9f2de52b3e0b814e44d039da40596b29321e794d97d54033da37735025f6d5440c5d23" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/reusify@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/reusify@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob-parent", "version": "5.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob-parent@5.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob-parent@5.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-glob", "version": "4.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-glob@4.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-extglob", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "merge2", "version": "1.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge2@1.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/merge2@1.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "micromatch", "version": "4.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d7c1f06162ed210423f0f039f413e58361beda7f77522d558a8b71c6bfce08745e13c85a02d32b3115dd06a31c3b9d2bf84ff3f3109431b18b0488508aa3604" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/micromatch@4.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "braces", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c906d780efce499543d88b222e5ae8fbb1dfe90d7c109aca484b1da0ccca78f29772dde0bc3f282dc390748cc6ba9af9163f840def203bf9717350737cca71bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fill-range", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "62c1a97b75872caf19622e2d583836272dde6d1cf6ad7a300f19e57786e4401d3471cff5670f405a70b48bdced0c98ad8afb50bda23d29a2f22ab73e8415b4ca" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@7.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "to-regex-range", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-number", "version": "7.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "picomatch", "version": "2.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "57bfaf404274e99f9ce6d4b27bc4be9c751f239d71a172178c743df5c42d294910aaa3b590efca08951f657b81e3b87f60194385a8761f785d5065e7f227b4a0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@2.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ignore", "version": "7.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1ece7dc4135f508ba730581601b197e5cabaf3ddc86d68382a7ae36d8c17dedc74ceda2b5604c303a076b317fc7a31c9e30cfc06a194318967ccd05eaf936f1a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@7.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ignore@7.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-type", "version": "6.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "563eec7fefade69043eb7ecd49f931a4748c7d669e8a0e7e0ca58b85ca88631ea6590cf985d25318354c42225cc35658921b3b01acca0c6a515638b52c909951" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@6.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-type/-/path-type-6.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-type@6.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-type/-/path-type-6.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "slash", "version": "5.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "640ea84774ffa44caeab032000a4f4fe102ff28017724cdb926474524528b10f8c7384711a8264466c07807b9f69e9e5c80804d4cc60a5d72b7fbe72e977270e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@5.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/slash@5.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "unicorn-magic", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f900415c10af89f739e9fb1bbb1650e9289cdf0aaa7375966aac6ce7c82f26b70eb8df371c64c2c33de84b9a61cd4f4bb6144d13d56b2421422d480779e1677c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typedoc", "version": "0.28.19", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c0a87e9617663058af32573abd145c3065de1841c653683c6b60a43d3263265c117f58976e299620f705a250aa7b813477f151b46b33a48aeca7758ba4307c3f" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedoc@0.28.19", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typedoc/-/typedoc-0.28.19.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typedoc@0.28.19", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typedoc/-/typedoc-0.28.19.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/typedoc" }, { "name": "cdx:npm:bin", "value": "typedoc" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "5.9.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8e5d6f6733c38a72ebf5e52ddc9feded5e8580d130f508ef04f772b33f4a7d00c3e357d0ac2d98e2f290762694a454f86d795bd511e12e9a7cc2d9ba3394e04b" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/tsc, /app/js/common/node_modules/.bin/tsserver" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@gerrit0", "name": "mini-shiki", "version": "3.23.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6c430e4651b472a763572084b94d1c0d06ce4565fe91809ea34915d656f11796ede2bed2203da5f5baacc4910cd339dd6b1a4e513eeb882c88544baaabf627c6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40gerrit0/mini-shiki@3.23.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@gerrit0/mini-shiki/-/mini-shiki-3.23.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@gerrit0/mini-shiki@3.23.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@gerrit0/mini-shiki/-/mini-shiki-3.23.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@shikijs", "name": "engine-oniguruma", "version": "3.23.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d67588370297c4a28ba8f89b4f97f8a4014b7a3f68673413b1bcbcf78d8e4e5b09cce059d0c58a8b0cccb1dfa3873bbc60f08702cc069e737562d41f8ab2f7e6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40shikijs/engine-oniguruma@3.23.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@shikijs/engine-oniguruma/-/engine-oniguruma-3.23.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@shikijs/engine-oniguruma@3.23.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@shikijs/engine-oniguruma/-/engine-oniguruma-3.23.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@shikijs", "name": "types", "version": "3.23.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dc96791d73997d88ec612934c8fc01ae4ba9c9848ba40136e907341cb8218593464d983f48ac57208828c4ea6699e40fd114520c94e4d7fbcf7f0f6d6f0fa349" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40shikijs/types@3.23.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@shikijs/types/-/types-3.23.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@shikijs/types@3.23.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@shikijs/types/-/types-3.23.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@shikijs", "name": "vscode-textmate", "version": "10.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f37c9e821676c718a7dcd8fccf534c77f342b9c6be82c617b30cb00f2e5b1efc2558bf2da53426cc6794b8777d142dc4fd204432fcc94705843b3e6019eb3d42" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40shikijs/vscode-textmate@10.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@shikijs/vscode-textmate/-/vscode-textmate-10.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@shikijs/vscode-textmate@10.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@shikijs/vscode-textmate/-/vscode-textmate-10.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "hast", "version": "3.0.4", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "58fb3e6db430e5a0a3fb1ea568d1962c7df0be21eda02bff3f7fa8b4185b3a12601bcaada5d00c9530b12edb13580ecb1f53a1fdb1421ec067d133d2e66df411" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/hast@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/hast@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/hast" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "unist", "version": "3.0.3", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "928fe0205251bf5efb5e066c65c0709ea24de71fc689e9fca8d3a7d03e5b414ff303355ff59b7706571488baa157dcb801193419b4f7b675223cd8274d7cdcfd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/unist@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/unist@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/@types/unist" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@shikijs", "name": "langs", "version": "3.23.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d84a785b745ee5a075ffad914984089caf663371ec2de07dd5c1eace700932eca5aa3ccd54054232735644716d70d1d7b283516b23fdcf5aa3e12ab79cca985e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40shikijs/langs@3.23.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@shikijs/langs/-/langs-3.23.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@shikijs/langs@3.23.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@shikijs/langs/-/langs-3.23.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@shikijs", "name": "themes", "version": "3.23.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e6ac9261ad598004f5f0747fca910d2fd71448639e236c7ee08bd826ee0981525d8b39fa906e226b94358c310e8bb8136cde116ee62d9878745b779c70eae330" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40shikijs/themes@3.23.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@shikijs/themes/-/themes-3.23.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@shikijs/themes@3.23.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@shikijs/themes/-/themes-3.23.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lunr", "version": "2.3.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cd35370da65a17746df6b84ddee04c1900f7743dbfbc542a9ef6420efe1d97988ecead88650a93c6ef74af813927e9cfef42778a5a950ab6e1a3679669e5bc3b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lunr@2.3.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lunr/-/lunr-2.3.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lunr@2.3.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lunr/-/lunr-2.3.9.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "markdown-it", "version": "14.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d531a2422255450dcd3e6647eacc7909f9e683a1909bd8ef0b5721e132b9d75363489be3cca2f39f9a4f7d944d66444f64fd07a828a84a776a1fcbf69d169655" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/markdown-it@14.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/markdown-it@14.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.2.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/markdown-it" }, { "name": "cdx:npm:bin", "value": "markdown-it" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "argparse", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd" } ], "licenses": [ { "license": { "id": "Python-2.0", "url": "https://opensource.org/licenses/Python-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/argparse@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "entities", "version": "4.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5748631f87463e1f40a39a74328458e8156ab700a3873eaf2392d3f00279e47fb883dff8bdb1f1d48e787d2d17b9c94b8431c0acf40288c8c3c6368bf1f3f187" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@4.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@4.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "linkify-it", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c15a138cfe10e91d0d5b986266454968564f5a0b577e8185fba2ee70bdff16d88d8e67078588c4af97f52aa8e2adcd67056d3b27f66e445ba6aabda8a9c7045a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/linkify-it@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/linkify-it@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uc.micro", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0110c99a986676f524e86970ef2f434366c590a047c101cb8b696c687e8f3e6cff29af6c14e06c065ba8ce10e5b569a7bfdbbf705e91b7cef39d14cf57eca9fc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uc.micro@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uc.micro@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mdurl", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2dffbdfb6afe4dda79c170d70b83dc2018d30edab850a8c23cc421288bb3a49356d1bf7a915a92c16d1b4fb1614527e602215880ff92091bddac3a337e1d14e7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mdurl@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mdurl@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "punycode.js", "version": "2.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bb11481d4d189476210d0b55e11f49e9ae7648bc76f010a34fee227a1ec819b83054958efa49b8df5738c9195111402c026b7fb8c8d05324073443dfd0cdfd08" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode.js@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/punycode.js@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "10.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3142e454b7ca1980c561e8cfd3b40ebab0cb2d0a5c8e4ec5c3eee35d2d91d9ccd1433479eb21d1bde5393432443af887fa111364a4a4224e5cf93db71a315432" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "90ba71bab638678afdb2032cc86d19f6ecec06582253f1052a18ff87dd7ff321eed1e768ed7ba2c4e207dd5709f24931b3afe33f3a08e94f558f75aa6cc43de2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@5.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "4.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "04bae011c453c17da8ea01b118e08dc8cbc64a9df96287ee633c3d87520c4d198aaadb40659554ebb6dd6fd3ebdaf50703cfa3de2dad25f8cee82ebee26c864c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yaml", "version": "2.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d80be1357de66fccdde99cbb20d4ed4a9975175e475ba5a7aa3d2cad696428b729625fe03083098b2b86ab629e236605c543e376507edcb735d2c78c2ed2f870" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@2.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yaml@2.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/yaml" }, { "name": "cdx:npm:bin", "value": "yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@nodelib/fs.stat@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/queue-microtask@1.2.3", "dependsOn": [] }, { "ref": "pkg:npm/run-parallel@1.2.0", "dependsOn": [ "pkg:npm/queue-microtask@1.2.3" ] }, { "ref": "pkg:npm/@nodelib/fs.scandir@2.1.5", "dependsOn": [ "pkg:npm/@nodelib/fs.stat@2.0.5", "pkg:npm/run-parallel@1.2.0" ] }, { "ref": "pkg:npm/reusify@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/fastq@1.20.1", "dependsOn": [ "pkg:npm/reusify@1.1.0" ] }, { "ref": "pkg:npm/@nodelib/fs.walk@1.2.8", "dependsOn": [ "pkg:npm/@nodelib/fs.scandir@2.1.5", "pkg:npm/fastq@1.20.1" ] }, { "ref": "pkg:npm/is-extglob@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/is-glob@4.0.3", "dependsOn": [ "pkg:npm/is-extglob@2.1.1" ] }, { "ref": "pkg:npm/glob-parent@5.1.2", "dependsOn": [ "pkg:npm/is-glob@4.0.3" ] }, { "ref": "pkg:npm/merge2@1.4.1", "dependsOn": [] }, { "ref": "pkg:npm/is-number@7.0.0", "dependsOn": [] }, { "ref": "pkg:npm/to-regex-range@5.0.1", "dependsOn": [ "pkg:npm/is-number@7.0.0" ] }, { "ref": "pkg:npm/fill-range@7.1.1", "dependsOn": [ "pkg:npm/to-regex-range@5.0.1" ] }, { "ref": "pkg:npm/braces@3.0.3", "dependsOn": [ "pkg:npm/fill-range@7.1.1" ] }, { "ref": "pkg:npm/picomatch@2.3.2", "dependsOn": [] }, { "ref": "pkg:npm/micromatch@4.0.8", "dependsOn": [ "pkg:npm/braces@3.0.3", "pkg:npm/picomatch@2.3.2" ] }, { "ref": "pkg:npm/fast-glob@3.3.3", "dependsOn": [ "pkg:npm/@nodelib/fs.stat@2.0.5", "pkg:npm/@nodelib/fs.walk@1.2.8", "pkg:npm/glob-parent@5.1.2", "pkg:npm/merge2@1.4.1", "pkg:npm/micromatch@4.0.8" ] }, { "ref": "pkg:npm/ignore@7.0.5", "dependsOn": [] }, { "ref": "pkg:npm/path-type@6.0.0", "dependsOn": [] }, { "ref": "pkg:npm/slash@5.1.0", "dependsOn": [] }, { "ref": "pkg:npm/unicorn-magic@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/globby@15.0.0", "dependsOn": [ "pkg:npm/@sindresorhus/merge-streams@4.0.0", "pkg:npm/fast-glob@3.3.3", "pkg:npm/ignore@7.0.5", "pkg:npm/path-type@6.0.0", "pkg:npm/slash@5.1.0", "pkg:npm/unicorn-magic@0.3.0" ] }, { "ref": "pkg:npm/typescript@5.9.3", "dependsOn": [] }, { "ref": "pkg:npm/@shikijs/vscode-textmate@10.0.2", "dependsOn": [] }, { "ref": "pkg:npm/@types/unist@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/@types/hast@3.0.4", "dependsOn": [ "pkg:npm/@types/unist@3.0.3" ] }, { "ref": "pkg:npm/@shikijs/types@3.23.0", "dependsOn": [ "pkg:npm/@shikijs/vscode-textmate@10.0.2", "pkg:npm/@types/hast@3.0.4" ] }, { "ref": "pkg:npm/@shikijs/engine-oniguruma@3.23.0", "dependsOn": [ "pkg:npm/@shikijs/types@3.23.0", "pkg:npm/@shikijs/vscode-textmate@10.0.2" ] }, { "ref": "pkg:npm/@shikijs/langs@3.23.0", "dependsOn": [ "pkg:npm/@shikijs/types@3.23.0" ] }, { "ref": "pkg:npm/@shikijs/themes@3.23.0", "dependsOn": [ "pkg:npm/@shikijs/types@3.23.0" ] }, { "ref": "pkg:npm/@gerrit0/mini-shiki@3.23.0", "dependsOn": [ "pkg:npm/@shikijs/engine-oniguruma@3.23.0", "pkg:npm/@shikijs/langs@3.23.0", "pkg:npm/@shikijs/themes@3.23.0", "pkg:npm/@shikijs/types@3.23.0", "pkg:npm/@shikijs/vscode-textmate@10.0.2" ] }, { "ref": "pkg:npm/lunr@2.3.9", "dependsOn": [] }, { "ref": "pkg:npm/argparse@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/entities@4.5.0", "dependsOn": [] }, { "ref": "pkg:npm/uc.micro@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/linkify-it@5.0.1", "dependsOn": [ "pkg:npm/uc.micro@2.1.0" ] }, { "ref": "pkg:npm/mdurl@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/punycode.js@2.3.1", "dependsOn": [] }, { "ref": "pkg:npm/markdown-it@14.2.0", "dependsOn": [ "pkg:npm/argparse@2.0.1", "pkg:npm/entities@4.5.0", "pkg:npm/linkify-it@5.0.1", "pkg:npm/mdurl@2.0.0", "pkg:npm/punycode.js@2.3.1", "pkg:npm/uc.micro@2.1.0" ] }, { "ref": "pkg:npm/balanced-match@4.0.4", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@5.0.6", "dependsOn": [ "pkg:npm/balanced-match@4.0.4" ] }, { "ref": "pkg:npm/minimatch@10.2.5", "dependsOn": [ "pkg:npm/brace-expansion@5.0.6" ] }, { "ref": "pkg:npm/yaml@2.9.0", "dependsOn": [] }, { "ref": "pkg:npm/typedoc@0.28.19", "dependsOn": [ "pkg:npm/@gerrit0/mini-shiki@3.23.0", "pkg:npm/lunr@2.3.9", "pkg:npm/markdown-it@14.2.0", "pkg:npm/minimatch@10.2.5", "pkg:npm/typescript@5.9.3", "pkg:npm/yaml@2.9.0" ] }, { "ref": "pkg:npm/onnxruntime-common@1.30.0", "dependsOn": [ "pkg:npm/globby@15.0.0", "pkg:npm/typedoc@0.28.19", "pkg:npm/typescript@5.9.3" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/onnxruntime-common@1.30.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-15T15:24:55Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'onnxruntime-common' with version '1.30.0'. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }