{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:7304f861-bd1b-4719-8e03-ba39850c8e69", "version": 1, "metadata": { "timestamp": "2026-07-24T12:31:13Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "react-router", "group": "", "version": "7.5.1-tuxcare.5", "description": "Declarative routing for React", "purl": "pkg:npm/react-router@7.5.1-tuxcare.5", "bom-ref": "pkg:npm/react-router@7.5.1-tuxcare.5", "author": "Remix Software ", "properties": [ { "name": "cdx:npm:scripts", "value": "build, typecheck" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/remix-run/react-router" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@types/set-cookie-parser/package.json\\nnode_modules/cookie/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/set-cookie-parser/package.json\\nnode_modules/tsup/package.json\\nnode_modules/turbo-stream/package.json\\nnode_modules/typescript/package.json\\nnode_modules/wireit/package.json" } ] }, "components": [ { "authors": [ { "name": "Google LLC" } ], "group": "", "name": "wireit", "version": "0.14.9", "description": "Upgrade your npm scripts to make them smarter and more efficient", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/wireit@0.14.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/google/wireit.git" } ], "type": "library", "bom-ref": "pkg:npm/wireit@0.14.9", "properties": [ { "name": "SrcFile", "value": "node_modules/wireit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wireit/package.json" } ], "concludedValue": "node_modules/wireit/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.4.5", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@5.4.5", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Jacob Ebey " } ], "group": "", "name": "turbo-stream", "version": "2.4.0", "description": "A streaming data transport format that aims to support built-in features such as Promises, Dates, RegExps, Maps, Sets and more.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/turbo-stream@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jacob-ebey/turbo-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/turbo-stream@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/turbo-stream/package.json" }, { "name": "ImportedModules", "value": "turbo-stream,decode,turbo-stream/decode,encode,turbo-stream/encode" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/turbo-stream/package.json" } ], "concludedValue": "node_modules/turbo-stream/package.json" } ], "occurrences": [ { "location": "dist/development/dom-export.js#4871" }, { "location": "dist/development/index.js#6499" }, { "location": "dist/development/index.js#9805" }, { "location": "dist/production/dom-export.js#4871" }, { "location": "dist/production/index.js#6499" }, { "location": "dist/production/index.js#9805" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6350" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#9656" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6350" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#9656" }, { "location": "lib/server-runtime/single-fetch.ts#1" }, { "location": "lib/dom/ssr/single-fetch.tsx#2" } ] } }, { "authors": [ { "name": "EGOIST" } ], "group": "", "name": "tsup", "version": "8.3.0", "description": "Bundle your TypeScript library with no config, powered by esbuild", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tsup@8.3.0", "externalReferences": [ { "type": "website", "url": "https://tsup.egoist.dev/" }, { "type": "vcs", "url": "https://github.com/egoist/tsup.git" } ], "type": "library", "bom-ref": "pkg:npm/tsup@8.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsup/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsup/package.json" } ], "concludedValue": "node_modules/tsup/package.json" } ] } }, { "authors": [ { "name": "Nathan Friedly (http://nfriedly.com/)" } ], "group": "", "name": "set-cookie-parser", "version": "2.6.0", "description": "Parses set-cookie headers into objects", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/set-cookie-parser@2.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nfriedly/set-cookie-parser" } ], "type": "library", "bom-ref": "pkg:npm/set-cookie-parser@2.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-cookie-parser/package.json" }, { "name": "ImportedModules", "value": "set-cookie-parser,splitCookiesString,set-cookie-parser/splitCookiesString" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-cookie-parser/package.json" } ], "concludedValue": "node_modules/set-cookie-parser/package.json" } ], "occurrences": [ { "location": "dist/development/index.js#9808" }, { "location": "dist/production/index.js#9808" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#9659" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#9659" }, { "location": "lib/server-runtime/headers.ts#1" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "6.0.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/rimraf@6.0.1", "type": "library", "bom-ref": "pkg:npm/rimraf@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "group": "", "name": "react-dom", "version": "18.2.0", "description": "React package for working with the DOM.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/react-dom@18.2.0", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-dom@18.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react-dom/package.json" }, { "name": "ImportedModules", "value": "react-dom" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-dom/package.json" } ], "concludedValue": "node_modules/react-dom/package.json" } ], "occurrences": [ { "location": "dist/development/dom-export.js#56" }, { "location": "dist/production/dom-export.js#56" }, { "location": "dist/development/dom-export.mjs#33" }, { "location": "dist/production/dom-export.mjs#33" }, { "location": "lib/dom-export/dom-router-provider.tsx#2" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react", "version": "18.2.0", "description": "React is a JavaScript library for building user interfaces.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/react@18.2.0", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@18.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "ImportedModules", "value": "react,ComponentType,react/ComponentType,ReactElement,react/ReactElement,FocusEventHandler,react/FocusEventHandler,MouseEventHandler,react/MouseEventHandler,TouchEventHandler,react/TouchEventHandler" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ], "occurrences": [ { "location": "dist/development/dom-export.js#55" }, { "location": "dist/development/dom-export.js#4047" }, { "location": "dist/development/dom-export.js#4050" }, { "location": "dist/development/dom-export.js#4083" }, { "location": "dist/development/dom-export.js#4736" }, { "location": "dist/development/dom-export.js#4870" }, { "location": "dist/development/dom-export.js#5228" }, { "location": "dist/development/dom-export.js#5231" }, { "location": "dist/development/dom-export.js#5234" }, { "location": "dist/development/dom-export.js#5332" }, { "location": "dist/development/dom-export.js#6129" }, { "location": "dist/development/index.js#4959" }, { "location": "dist/development/index.js#4962" }, { "location": "dist/development/index.js#4995" }, { "location": "dist/development/index.js#6111" }, { "location": "dist/development/index.js#6242" }, { "location": "dist/development/index.js#6498" }, { "location": "dist/development/index.js#6922" }, { "location": "dist/development/index.js#6925" }, { "location": "dist/development/index.js#6928" }, { "location": "dist/development/index.js#7026" }, { "location": "dist/development/index.js#8935" }, { "location": "dist/development/index.js#9195" }, { "location": "dist/development/index.js#9259" }, { "location": "dist/production/dom-export.js#55" }, { "location": "dist/production/dom-export.js#4047" }, { "location": "dist/production/dom-export.js#4050" }, { "location": "dist/production/dom-export.js#4083" }, { "location": "dist/production/dom-export.js#4736" }, { "location": "dist/production/dom-export.js#4870" }, { "location": "dist/production/dom-export.js#5228" }, { "location": "dist/production/dom-export.js#5231" }, { "location": "dist/production/dom-export.js#5234" }, { "location": "dist/production/dom-export.js#5332" }, { "location": "dist/production/dom-export.js#6129" }, { "location": "dist/production/index.js#4959" }, { "location": "dist/production/index.js#4962" }, { "location": "dist/production/index.js#4995" }, { "location": "dist/production/index.js#6111" }, { "location": "dist/production/index.js#6242" }, { "location": "dist/production/index.js#6498" }, { "location": "dist/production/index.js#6922" }, { "location": "dist/production/index.js#6925" }, { "location": "dist/production/index.js#6928" }, { "location": "dist/production/index.js#7026" }, { "location": "dist/production/index.js#8935" }, { "location": "dist/production/index.js#9195" }, { "location": "dist/production/index.js#9259" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#4810" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#4813" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#4846" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#5962" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6093" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6349" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6773" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6776" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6779" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#6877" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#8786" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#9046" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#9110" }, { "location": "dist/development/dom-export.mjs#32" }, { "location": "dist/development/dom-export.mjs#39" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#4810" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#4813" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#4846" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#5962" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6093" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6349" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6773" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6776" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6779" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#6877" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#8786" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#9046" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#9110" }, { "location": "dist/production/dom-export.mjs#32" }, { "location": "dist/production/dom-export.mjs#39" }, { "location": "lib/context.ts#1" }, { "location": "lib/dom/ssr/fog-of-war.ts#1" }, { "location": "lib/dom/ssr/routeModules.ts#1" }, { "location": "lib/components.tsx#1" }, { "location": "lib/dom/lib.tsx#1" }, { "location": "lib/dom/server.tsx#1" }, { "location": "lib/dom/ssr/components.tsx#5" }, { "location": "lib/dom/ssr/components.tsx#6" }, { "location": "lib/dom/ssr/errorBoundaries.tsx#1" }, { "location": "lib/dom/ssr/fallback.tsx#1" }, { "location": "lib/dom/ssr/routes-test-stub.tsx#1" }, { "location": "lib/dom/ssr/routes.tsx#1" }, { "location": "lib/dom/ssr/server.tsx#1" }, { "location": "lib/dom/ssr/server.tsx#2" }, { "location": "lib/dom/ssr/single-fetch.tsx#1" }, { "location": "lib/dom-export/dom-router-provider.tsx#1" }, { "location": "lib/dom-export/hydrated-router.tsx#1" }, { "location": "lib/hooks.tsx#1" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "cookie", "version": "1.0.1", "description": "HTTP server cookie parsing and serialization", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cookie@1.0.1", "type": "library", "bom-ref": "pkg:npm/cookie@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie/package.json" }, { "name": "ImportedModules", "value": "cookie,parse,cookie/parse,serialize,cookie/serialize,ParseOptions,cookie/ParseOptions,SerializeOptions,cookie/SerializeOptions" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie/package.json" } ], "concludedValue": "node_modules/cookie/package.json" } ], "occurrences": [ { "location": "dist/development/index.js#9364" }, { "location": "dist/production/index.js#9364" }, { "location": "dist/development/chunk-P4E3ADCV.mjs#9215" }, { "location": "dist/production/chunk-IBIXDZGL.mjs#9215" }, { "location": "lib/server-runtime/cookies.ts#1" }, { "location": "lib/server-runtime/cookies.ts#2" }, { "location": "lib/server-runtime/sessions.ts#1" } ] } }, { "group": "@types", "name": "set-cookie-parser", "version": "2.4.7", "description": "TypeScript definitions for set-cookie-parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/set-cookie-parser@2.4.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/set-cookie-parser" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/set-cookie-parser@2.4.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/set-cookie-parser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/set-cookie-parser/package.json" } ], "concludedValue": "node_modules/@types/set-cookie-parser/package.json" } ] }, "tags": [ "parse" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/react-router@7.5.1-tuxcare.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-24T12:31:13Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'react-router' with version '7.5.1-tuxcare.5'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 10 source files." } ] }