{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ffd8429c-3164-4c4f-8aa9-31fad5150e60", "version": 1, "metadata": { "timestamp": "2026-09-17T12:41:33Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "static-store", "group": "@solid-primitives", "version": "0.1.1", "description": "Primitives for creating small reactive objects that doesn't change their shape over time - don't need a proxy wrapper.", "purl": "pkg:npm/%40solid-primitives/static-store@0.1.1", "bom-ref": "pkg:npm/@solid-primitives/static-store@0.1.1", "author": "Damian Tarnawski ", "properties": [ { "name": "cdx:npm:scripts", "value": "dev, build, vitest, test, test:ssr" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://primitives.solidjs.community/package/static-store" }, { "type": "vcs", "url": "git+https://github.com/solidjs-community/solid-primitives.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@solid-primitives" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@solid-primitives/utils/package.json\\nnode_modules/solid-js/package.json" } ] }, "components": [ { "authors": [ { "name": "Ryan Carniato" } ], "group": "", "name": "solid-js", "version": "1.8.20", "description": "A declarative JavaScript library for building user interfaces.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/solid-js@1.8.20", "externalReferences": [ { "type": "website", "url": "https://solidjs.com" }, { "type": "vcs", "url": "https://github.com/solidjs/solid" } ], "type": "library", "bom-ref": "pkg:npm/solid-js@1.8.20", "properties": [ { "name": "SrcFile", "value": "node_modules/solid-js/package.json" }, { "name": "ImportedModules", "value": "solid-js,batch,solid-js/batch,createMemo,solid-js/createMemo,createSignal,solid-js/createSignal,getListener,solid-js/getListener,getOwner,solid-js/getOwner,onMount,solid-js/onMount,runWithOwner,solid-js/runWithOwner,sharedConfig,solid-js/sharedConfig,untrack,solid-js/untrack,solid-js/web,isServer,solid-js/web/isServer,Accessor,solid-js/Accessor,EffectFunction,solid-js/EffectFunction,MemoOptions,solid-js/MemoOptions,NoInfer,solid-js/NoInfer,Signal,solid-js/Signal,Component,solid-js/Component" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/solid-js/package.json" } ], "concludedValue": "node_modules/solid-js/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 2 }, { "location": "dist/index.js", "line": 3 }, { "location": "dist/index.js", "line": 30 }, { "location": "dist/index.js", "line": 32 }, { "location": "dist/index.js", "line": 51 }, { "location": "dist/index.js", "line": 52 }, { "location": "dist/index.js", "line": 79 }, { "location": "dist/index.js", "line": 85 }, { "location": "dist/index.js", "line": 91 }, { "location": "dist/index.js", "line": 93 }, { "location": "src/index.ts", "line": 17 }, { "location": "src/index.ts", "line": 18 }, { "location": "src/index.ts", "line": 57 }, { "location": "src/index.ts", "line": 58 }, { "location": "src/index.ts", "line": 78 }, { "location": "src/index.ts", "line": 81 }, { "location": "src/index.ts", "line": 109 }, { "location": "src/index.ts", "line": 149 }, { "location": "src/index.ts", "line": 150 }, { "location": "src/index.ts", "line": 151 }, { "location": "src/index.ts", "line": 159 }, { "location": "src/index.ts", "line": 160 }, { "location": "dev/index.tsx", "line": 1 }, { "location": "dev/index.tsx", "line": 4 } ] } }, { "authors": [ { "name": "Damian Tarnawski @thetarnav " } ], "group": "@solid-primitives", "name": "utils", "version": "6.3.1", "description": "A bunch of reactive utility types and functions, for building primitives with Solid.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40solid-primitives/utils@6.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/solidjs-community/solid-primitives/tree/main/packages/utils#readme" }, { "type": "vcs", "url": "git+https://github.com/solidjs-community/solid-primitives.git" } ], "type": "library", "bom-ref": "pkg:npm/@solid-primitives/utils@6.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@solid-primitives/utils/package.json" }, { "name": "ImportedModules", "value": "@solid-primitives/utils,accessWith,@solid-primitives/utils/accessWith,isObject,@solid-primitives/utils/isObject,SetterParam,@solid-primitives/utils/SetterParam" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solid-primitives/utils/package.json" } ], "concludedValue": "node_modules/@solid-primitives/utils/package.json" } ], "occurrences": [ { "location": "dist/index.js", "line": 1 }, { "location": "dist/index.js", "line": 45 }, { "location": "dist/index.js", "line": 50 }, { "location": "dist/index.js", "line": 51 }, { "location": "src/index.ts", "line": 1 }, { "location": "src/index.ts", "line": 71 }, { "location": "src/index.ts", "line": 77 }, { "location": "src/index.ts", "line": 79 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@solid-primitives/static-store@0.1.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-17T12:41:33Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 17, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'static-store' with version '0.1.1'. The package type in this SBOM is npm with a single purl namespace '@solid-primitives' described under components. The components were identified from the source files: node_modules/@solid-primitives/utils/package.json, node_modules/solid-js/package.json." } ] }