{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:6be614ca-b131-4724-bc19-1dc53d0112fc",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-25T10:50:45Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "react-router",
      "group": "",
      "version": "7.5.1-tuxcare.8",
      "description": "Declarative routing for React",
      "purl": "pkg:npm/react-router@7.5.1-tuxcare.8",
      "bom-ref": "pkg:npm/react-router@7.5.1-tuxcare.8",
      "author": "Remix Software <hello@remix.run>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, typecheck"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/remix-run/react-router"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@types/set-cookie-parser/package.json\\nnode_modules/cookie/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/set-cookie-parser/package.json\\nnode_modules/tsup/package.json\\nnode_modules/typescript/package.json\\nnode_modules/wireit/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Google LLC"
        }
      ],
      "group": "",
      "name": "wireit",
      "version": "0.14.9",
      "description": "Upgrade your npm scripts to make them smarter and more efficient",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/wireit@0.14.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/google/wireit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wireit@0.14.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wireit/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wireit/package.json"
              }
            ],
            "concludedValue": "node_modules/wireit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.4.5",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.4.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "EGOIST"
        }
      ],
      "group": "",
      "name": "tsup",
      "version": "8.3.0",
      "description": "Bundle your TypeScript library with no config, powered by esbuild",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tsup@8.3.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://tsup.egoist.dev/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/egoist/tsup.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsup@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tsup/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tsup/package.json"
              }
            ],
            "concludedValue": "node_modules/tsup/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Friedly (http://nfriedly.com/)"
        }
      ],
      "group": "",
      "name": "set-cookie-parser",
      "version": "2.6.0",
      "description": "Parses set-cookie headers into objects",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/set-cookie-parser@2.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nfriedly/set-cookie-parser"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-cookie-parser@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-cookie-parser/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "set-cookie-parser,splitCookiesString,set-cookie-parser/splitCookiesString"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-cookie-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/set-cookie-parser/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/development/index.js#10532"
          },
          {
            "location": "dist/production/index.js#10532"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#10383"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#10383"
          },
          {
            "location": "lib/server-runtime/headers.ts#1"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "rimraf",
      "version": "6.0.1",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/rimraf@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rimraf/package.json"
              }
            ],
            "concludedValue": "node_modules/rimraf/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "18.2.0",
      "description": "React package for working with the DOM.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react-dom@18.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://reactjs.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@18.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/react-dom/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/react-dom/package.json"
              }
            ],
            "concludedValue": "node_modules/react-dom/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/development/dom-export.js#56"
          },
          {
            "location": "dist/production/dom-export.js#56"
          },
          {
            "location": "dist/development/dom-export.mjs#33"
          },
          {
            "location": "dist/production/dom-export.mjs#33"
          },
          {
            "location": "lib/dom-export/dom-router-provider.tsx#2"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "18.2.0",
      "description": "React is a JavaScript library for building user interfaces.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/react@18.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://reactjs.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@18.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/react/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "react,ComponentType,react/ComponentType,ReactElement,react/ReactElement,FocusEventHandler,react/FocusEventHandler,MouseEventHandler,react/MouseEventHandler,TouchEventHandler,react/TouchEventHandler"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/react/package.json"
              }
            ],
            "concludedValue": "node_modules/react/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/development/dom-export.js#55"
          },
          {
            "location": "dist/development/dom-export.js#4071"
          },
          {
            "location": "dist/development/dom-export.js#4074"
          },
          {
            "location": "dist/development/dom-export.js#4107"
          },
          {
            "location": "dist/development/dom-export.js#4760"
          },
          {
            "location": "dist/development/dom-export.js#4894"
          },
          {
            "location": "dist/development/dom-export.js#5626"
          },
          {
            "location": "dist/development/dom-export.js#5629"
          },
          {
            "location": "dist/development/dom-export.js#5632"
          },
          {
            "location": "dist/development/dom-export.js#5730"
          },
          {
            "location": "dist/development/dom-export.js#6527"
          },
          {
            "location": "dist/development/index.js#4983"
          },
          {
            "location": "dist/development/index.js#4986"
          },
          {
            "location": "dist/development/index.js#5019"
          },
          {
            "location": "dist/development/index.js#6135"
          },
          {
            "location": "dist/development/index.js#6266"
          },
          {
            "location": "dist/development/index.js#6522"
          },
          {
            "location": "dist/development/index.js#7649"
          },
          {
            "location": "dist/development/index.js#7652"
          },
          {
            "location": "dist/development/index.js#7655"
          },
          {
            "location": "dist/development/index.js#7753"
          },
          {
            "location": "dist/development/index.js#9662"
          },
          {
            "location": "dist/development/index.js#9922"
          },
          {
            "location": "dist/development/index.js#9986"
          },
          {
            "location": "dist/production/dom-export.js#55"
          },
          {
            "location": "dist/production/dom-export.js#4071"
          },
          {
            "location": "dist/production/dom-export.js#4074"
          },
          {
            "location": "dist/production/dom-export.js#4107"
          },
          {
            "location": "dist/production/dom-export.js#4760"
          },
          {
            "location": "dist/production/dom-export.js#4894"
          },
          {
            "location": "dist/production/dom-export.js#5626"
          },
          {
            "location": "dist/production/dom-export.js#5629"
          },
          {
            "location": "dist/production/dom-export.js#5632"
          },
          {
            "location": "dist/production/dom-export.js#5730"
          },
          {
            "location": "dist/production/dom-export.js#6527"
          },
          {
            "location": "dist/production/index.js#4983"
          },
          {
            "location": "dist/production/index.js#4986"
          },
          {
            "location": "dist/production/index.js#5019"
          },
          {
            "location": "dist/production/index.js#6135"
          },
          {
            "location": "dist/production/index.js#6266"
          },
          {
            "location": "dist/production/index.js#6522"
          },
          {
            "location": "dist/production/index.js#7649"
          },
          {
            "location": "dist/production/index.js#7652"
          },
          {
            "location": "dist/production/index.js#7655"
          },
          {
            "location": "dist/production/index.js#7753"
          },
          {
            "location": "dist/production/index.js#9662"
          },
          {
            "location": "dist/production/index.js#9922"
          },
          {
            "location": "dist/production/index.js#9986"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#4834"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#4837"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#4870"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#5986"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#6117"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#6373"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#7500"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#7503"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#7506"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#7604"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#9513"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#9773"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#9837"
          },
          {
            "location": "dist/development/dom-export.mjs#32"
          },
          {
            "location": "dist/development/dom-export.mjs#39"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#4834"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#4837"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#4870"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#5986"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#6117"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#6373"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#7500"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#7503"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#7506"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#7604"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#9513"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#9773"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#9837"
          },
          {
            "location": "dist/production/dom-export.mjs#32"
          },
          {
            "location": "dist/production/dom-export.mjs#39"
          },
          {
            "location": "lib/context.ts#1"
          },
          {
            "location": "lib/dom/ssr/fog-of-war.ts#1"
          },
          {
            "location": "lib/dom/ssr/routeModules.ts#1"
          },
          {
            "location": "lib/components.tsx#1"
          },
          {
            "location": "lib/dom/lib.tsx#1"
          },
          {
            "location": "lib/dom/server.tsx#1"
          },
          {
            "location": "lib/dom/ssr/components.tsx#5"
          },
          {
            "location": "lib/dom/ssr/components.tsx#6"
          },
          {
            "location": "lib/dom/ssr/errorBoundaries.tsx#1"
          },
          {
            "location": "lib/dom/ssr/fallback.tsx#1"
          },
          {
            "location": "lib/dom/ssr/routes-test-stub.tsx#1"
          },
          {
            "location": "lib/dom/ssr/routes.tsx#1"
          },
          {
            "location": "lib/dom/ssr/server.tsx#1"
          },
          {
            "location": "lib/dom/ssr/server.tsx#2"
          },
          {
            "location": "lib/dom/ssr/single-fetch.tsx#1"
          },
          {
            "location": "lib/dom-export/dom-router-provider.tsx#1"
          },
          {
            "location": "lib/dom-export/hydrated-router.tsx#1"
          },
          {
            "location": "lib/hooks.tsx#1"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "cookie",
      "version": "1.0.1",
      "description": "HTTP server cookie parsing and serialization",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cookie@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/cookie@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookie/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "cookie,parse,cookie/parse,serialize,cookie/serialize,ParseOptions,cookie/ParseOptions,SerializeOptions,cookie/SerializeOptions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookie/package.json"
              }
            ],
            "concludedValue": "node_modules/cookie/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/development/index.js#10091"
          },
          {
            "location": "dist/production/index.js#10091"
          },
          {
            "location": "dist/development/chunk-4VSWRMNA.mjs#9942"
          },
          {
            "location": "dist/production/chunk-4R6UR3HT.mjs#9942"
          },
          {
            "location": "lib/server-runtime/cookies.ts#1"
          },
          {
            "location": "lib/server-runtime/cookies.ts#2"
          },
          {
            "location": "lib/server-runtime/sessions.ts#1"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "set-cookie-parser",
      "version": "2.4.7",
      "description": "TypeScript definitions for set-cookie-parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/set-cookie-parser@2.4.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/set-cookie-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/set-cookie-parser@2.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/set-cookie-parser/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/set-cookie-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/set-cookie-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/react-router@7.5.1-tuxcare.8"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-25T10:50:45Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'react-router' with version '7.5.1-tuxcare.8'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 9 source files."
    }
  ]
}