{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:a2f31277-c4ee-40ba-bc97-be004d62ade6",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-17T14:47:20Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "plugin-sdk-value",
      "group": "@portabletext",
      "version": "6.0.32",
      "description": "Synchronizes the Portable Text Editor value with the Sanity SDK, allowing for two-way editing.",
      "purl": "pkg:npm/%40portabletext/plugin-sdk-value@6.0.32",
      "bom-ref": "pkg:npm/@portabletext/plugin-sdk-value@6.0.32",
      "author": "Sanity.io <hello@sanity.io>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, check:lint, check:react-compiler, check:types, check:types:watch, clean, dev, lint:fix, prepublishOnly, test:browser, test:browser:chromium, test:browser:chromium:watch, test:browser:firefox, test:browser:firefox:watch, test:browser:webkit, test:browser:webkit:watch, test:unit, test:unit:watch, test:watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, check:types:watch, test:browser:chromium:watch, test:browser:firefox:watch, test:browser:webkit:watch, test:unit:watch, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://portabletext.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/portabletext/editor.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@portabletext\\n@sanity\\n@types\\n@vitejs\\n@vitest\\n@xstate"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@portabletext/editor/package.json\\nnode_modules/@portabletext/patches/package.json\\nnode_modules/@portabletext/schema/package.json\\nnode_modules/@portabletext/test/package.json\\nnode_modules/@sanity/diff-patch/package.json\\nnode_modules/@sanity/json-match/package.json\\nnode_modules/@sanity/sdk-react/package.json\\nnode_modules/@sanity/tsconfig/package.json\\nnode_modules/@types/react-dom/package.json\\nnode_modules/@types/react/package.json\\nnode_modules/@vitejs/plugin-react/package.json\\nnode_modules/@vitest/browser-playwright/package.json\\nnode_modules/@vitest/browser/package.json\\nnode_modules/@xstate/react/package.json\\nnode_modules/babel-plugin-react-compiler/package.json\\nnode_modules/eslint-plugin-react-hooks/package.json\\nnode_modules/eslint/package.json\\nnode_modules/jsdom/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react/package.json\\nnode_modules/typescript-eslint/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest-browser-react/package.json\\nnode_modules/vitest/package.json\\nnode_modules/xstate/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "David Khourshid <davidkpiano@gmail.com>"
        }
      ],
      "group": "",
      "name": "xstate",
      "version": "5.30.0",
      "description": "Finite State Machines and Statecharts for the Modern Web.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xstate@5.30.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/statelyai/xstate/tree/main/packages/core#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/statelyai/xstate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xstate@5.30.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xstate/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "xstate,fromCallback,xstate/fromCallback,setup,xstate/setup,AnyEventObject,xstate/AnyEventObject"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xstate/package.json"
              }
            ],
            "concludedValue": "node_modules/xstate/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 8
          },
          {
            "location": "dist/index.js",
            "line": 103
          },
          {
            "location": "dist/index.js",
            "line": 120
          },
          {
            "location": "dist/index.js",
            "line": 127
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 28
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 176
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 193
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 202
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Vitest Team"
        }
      ],
      "group": "",
      "name": "vitest-browser-react",
      "version": "2.1.0",
      "description": "Render React components in Vitest Browser Mode",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vitest-browser-react@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/vitest-community/vitest-browser-react#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitest-community/vitest-browser-react.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vitest-browser-react@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vitest-browser-react/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vitest-browser-react/package.json"
              }
            ],
            "concludedValue": "node_modules/vitest-browser-react/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Anthony Fu <anthonyfu117@hotmail.com>"
        }
      ],
      "group": "",
      "name": "vitest",
      "version": "4.1.0",
      "description": "Next generation testing framework powered by Vite",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vitest@4.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://vitest.dev"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitest-dev/vitest.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/vitest@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vitest/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vitest/package.json"
              }
            ],
            "concludedValue": "node_modules/vitest/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "typescript-eslint",
      "version": "8.48.0",
      "description": "Tooling which enables you to use TypeScript with ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript-eslint@8.48.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://typescript-eslint.io/packages/typescript-eslint"
        },
        {
          "type": "vcs",
          "url": "https://github.com/typescript-eslint/typescript-eslint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript-eslint@8.48.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript-eslint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript-eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript-eslint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.9.3",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.9.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "19.2.3",
      "description": "React package for working with the DOM.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-dom@19.2.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://react.dev/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@19.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/react-dom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/react-dom/package.json"
              }
            ],
            "concludedValue": "node_modules/react-dom/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "19.2.3",
      "description": "React is a JavaScript library for building user interfaces.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react@19.2.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://react.dev/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@19.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/react/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "react/jsx-runtime,react/jsx-runtime/jsx,react/compiler-runtime,react/compiler-runtime/c"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/react/package.json"
              }
            ],
            "concludedValue": "node_modules/react/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 1
          },
          {
            "location": "dist/index.js",
            "line": 256
          },
          {
            "location": "dist/index.js",
            "line": 2
          },
          {
            "location": "dist/index.js",
            "line": 240
          },
          {
            "location": "dist/index.js",
            "line": 259
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "jsdom",
      "version": "27.2.0",
      "description": "A JavaScript implementation of many web standards",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsdom@27.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jsdom/jsdom.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdom@27.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsdom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsdom/package.json"
              }
            ],
            "concludedValue": "node_modules/jsdom/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "group": "",
      "name": "eslint-plugin-react-hooks",
      "version": "7.0.1",
      "description": "ESLint rules for React Hooks",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react-hooks@7.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://react.dev/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-react-hooks@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-react-hooks/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-react-hooks/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-react-hooks/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "eslint",
      "version": "9.39.1",
      "description": "An AST-based pattern checker for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint@9.39.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@9.39.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-react-compiler",
      "version": "1.0.0",
      "description": "Babel plugin for React Compiler.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-react-compiler@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/facebook/react.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-react-compiler@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-plugin-react-compiler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-plugin-react-compiler/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-plugin-react-compiler/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "David Khourshid <davidkpiano@gmail.com>"
        }
      ],
      "group": "@xstate",
      "name": "react",
      "version": "6.1.0",
      "description": "XState tools for React",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40xstate/react@6.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/statelyai/xstate/tree/main/packages/xstate-react#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/statelyai/xstate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xstate/react@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@xstate/react/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "react/jsx-runtime,react/jsx-runtime/jsx,react/compiler-runtime,react/compiler-runtime/c"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@xstate/react/package.json"
              }
            ],
            "concludedValue": "node_modules/@xstate/react/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 1
          },
          {
            "location": "dist/index.js",
            "line": 256
          },
          {
            "location": "dist/index.js",
            "line": 2
          },
          {
            "location": "dist/index.js",
            "line": 240
          },
          {
            "location": "dist/index.js",
            "line": 259
          }
        ]
      },
      "tags": [
        "tools"
      ]
    },
    {
      "group": "@vitest",
      "name": "browser-playwright",
      "version": "4.1.0",
      "description": "Browser running for Vitest using playwright",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40vitest/browser-playwright@4.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://vitest.dev/config/browser/playwright"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitest-dev/vitest.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/browser-playwright@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@vitest/browser-playwright/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@vitest/browser-playwright/package.json"
              }
            ],
            "concludedValue": "node_modules/@vitest/browser-playwright/package.json"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "browser",
      "version": "4.1.0",
      "description": "Browser running for Vitest",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40vitest/browser@4.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://vitest.dev/guide/browser/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitest-dev/vitest.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/browser@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@vitest/browser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@vitest/browser/package.json"
              }
            ],
            "concludedValue": "node_modules/@vitest/browser/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evan You"
        }
      ],
      "group": "@vitejs",
      "name": "plugin-react",
      "version": "5.1.4",
      "description": "The default Vite plugin for React projects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40vitejs/plugin-react@5.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vitejs/vite-plugin-react.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@vitejs/plugin-react@5.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@vitejs/plugin-react/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@vitejs/plugin-react/package.json"
              }
            ],
            "concludedValue": "node_modules/@vitejs/plugin-react/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "react-dom",
      "version": "19.2.3",
      "description": "TypeScript definitions for react-dom",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/react-dom@19.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react-dom"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/react-dom@19.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/react-dom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/react-dom/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/react-dom/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "react",
      "version": "19.2.14",
      "description": "TypeScript definitions for react",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/react@19.2.14",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/react@19.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/react/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/react/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/react/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@sanity",
      "name": "tsconfig",
      "version": "2.1.0",
      "description": "Shared tsconfig.json presets following best practices at Sanity.io",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sanity/tsconfig@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sanity-io/pkg-utils/tree/main/packages/%40sanity/tsconfig#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/sanity-io/pkg-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sanity/tsconfig@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sanity/tsconfig/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sanity/tsconfig/package.json"
              }
            ],
            "concludedValue": "node_modules/@sanity/tsconfig/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity <developers@sanity.io>"
        }
      ],
      "group": "@sanity",
      "name": "sdk-react",
      "version": "2.3.1",
      "description": "Sanity SDK React toolkit for Content OS",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sanity/sdk-react@2.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sanity-io/sdk/tree/main/packages/react/README.md"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/sanity-io/sdk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sanity/sdk-react@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sanity/sdk-react/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@sanity/sdk-react,useEditDocument,@sanity/sdk-react/useEditDocument,useSanityInstance,@sanity/sdk-react/useSanityInstance,getDocumentState,@sanity/sdk-react/getDocumentState,DocumentHandle,@sanity/sdk-react/DocumentHandle"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sanity/sdk-react/package.json"
              }
            ],
            "concludedValue": "node_modules/@sanity/sdk-react/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 6
          },
          {
            "location": "dist/index.js",
            "line": 244
          },
          {
            "location": "dist/index.js",
            "line": 246
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 26
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 324
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 325
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 328
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@sanity",
      "name": "json-match",
      "version": "1.0.5",
      "description": "A lightweight and lazy implementation of JSONMatch made for JavaScript",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sanity/json-match@1.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sanity-io/json-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sanity/json-match@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sanity/json-match/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@sanity/json-match,parsePath,@sanity/json-match/parsePath,ExprNode,@sanity/json-match/ExprNode,PathNode,@sanity/json-match/PathNode,SegmentNode,@sanity/json-match/SegmentNode,ThisNode,@sanity/json-match/ThisNode"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sanity/json-match/package.json"
              }
            ],
            "concludedValue": "node_modules/@sanity/json-match/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 5
          },
          {
            "location": "dist/index.js",
            "line": 17
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 20
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 63
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@sanity",
      "name": "diff-patch",
      "version": "6.0.0",
      "description": "Generates a set of Sanity patches needed to change an item (usually a document) from one shape to another",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sanity/diff-patch@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/sanity-io/diff-patch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sanity/diff-patch@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sanity/diff-patch/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@sanity/diff-patch,diffValue,@sanity/diff-patch/diffValue,SanityPatchOperations,@sanity/diff-patch/SanityPatchOperations"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sanity/diff-patch/package.json"
              }
            ],
            "concludedValue": "node_modules/@sanity/diff-patch/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 4
          },
          {
            "location": "dist/index.js",
            "line": 96
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 13
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 169
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@portabletext",
      "name": "test",
      "version": "1.0.3",
      "description": "Testing utilities for the Portable Text Editor",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40portabletext/test@1.0.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.portabletext.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/portabletext/editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@portabletext/test@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@portabletext/test/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@portabletext/test/package.json"
              }
            ],
            "concludedValue": "node_modules/@portabletext/test/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@portabletext",
      "name": "schema",
      "version": "2.1.1",
      "description": "Portable Text Schema",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40portabletext/schema@2.1.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.portabletext.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/portabletext/editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@portabletext/schema@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@portabletext/schema/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@portabletext/schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@portabletext/schema/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@portabletext",
      "name": "patches",
      "version": "2.0.4",
      "description": "Apply Sanity patches to a value",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40portabletext/patches@2.0.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.sanity.io/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/portabletext/editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@portabletext/patches@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@portabletext/patches/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@portabletext/patches,JSONValue,@portabletext/patches/JSONValue,Path,@portabletext/patches/Path,PathSegment,@portabletext/patches/PathSegment,InsertPatch,@portabletext/patches/InsertPatch"
        },
        {
          "name": "cdx:npm:package:type-only",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@portabletext/patches/package.json"
              }
            ],
            "concludedValue": "node_modules/@portabletext/patches/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 12
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sanity.io <hello@sanity.io>"
        }
      ],
      "group": "@portabletext",
      "name": "editor",
      "version": "6.6.9",
      "description": "Portable Text Editor made in React",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40portabletext/editor@6.6.9",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.sanity.io/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/portabletext/editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@portabletext/editor@6.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@portabletext/editor/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@portabletext/editor,useEditor,@portabletext/editor/useEditor,Editor,@portabletext/editor/Editor,PortableTextBlock,@portabletext/editor/PortableTextBlock,Patch,@portabletext/editor/Patch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@portabletext/editor/package.json"
              }
            ],
            "concludedValue": "node_modules/@portabletext/editor/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 3
          },
          {
            "location": "dist/index.js",
            "line": 263
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 6
          },
          {
            "location": "src/plugin.sdk-value.tsx",
            "line": 363
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@portabletext/plugin-sdk-value@6.0.32"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-17T14:47:20Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 17, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'plugin-sdk-value' with version '6.0.32'. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from 25 source files."
    }
  ]
}