{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:49b4b07a-c3cf-428c-9553-283c6dfc7443", "version": 1, "metadata": { "timestamp": "2026-07-15T11:09:35Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "svelte", "group": "", "version": "4.2.20-tuxcare.2", "description": "Cybernetically enhanced web apps", "purl": "pkg:npm/svelte@4.2.20-tuxcare.2", "bom-ref": "pkg:npm/svelte@4.2.20-tuxcare.2", "author": "Rich Harris", "properties": [ { "name": "cdx:npm:scripts", "value": "format, check, test, build, generate:version, dev, posttest, prepublishOnly, types, lint" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "website", "url": "https://svelte.dev" }, { "type": "vcs", "url": "https://github.com/sveltejs/svelte.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@ampproject\\n@jridgewell\\n@playwright\\n@rollup\\n@sveltejs\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@ampproject/remapping/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@playwright/test/package.json\\nnode_modules/@rollup/plugin-commonjs/package.json\\nnode_modules/@rollup/plugin-json/package.json\\nnode_modules/@rollup/plugin-node-resolve/package.json\\nnode_modules/@sveltejs/eslint-config/package.json\\nnode_modules/@types/aria-query/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/acorn/package.json\\nnode_modules/agadoo/package.json\\nnode_modules/aria-query/package.json\\nnode_modules/axobject-query/package.json\\nnode_modules/code-red/package.json\\nnode_modules/css-tree/package.json\\nnode_modules/dts-buddy/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/eslint-plugin-lube/package.json\\nnode_modules/estree-walker/package.json\\nnode_modules/happy-dom/package.json\\nnode_modules/is-reference/package.json\\nnode_modules/jsdom/package.json\\nnode_modules/kleur/package.json\\nnode_modules/locate-character/package.json\\nnode_modules/magic-string/package.json\\nnode_modules/periscopic/package.json\\nnode_modules/rollup/package.json\\nnode_modules/source-map/package.json\\nnode_modules/tiny-glob/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "0.33.0", "description": "A blazing fast unit test framework powered by Vite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/vitest@0.33.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest#readme" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@0.33.0", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.3.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@5.3.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Terkel Gjervig (https://terkel.com)" } ], "group": "", "name": "tiny-glob", "version": "0.2.9", "description": "Tiny and extremely fast globbing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tiny-glob@0.2.9", "type": "library", "bom-ref": "pkg:npm/tiny-glob@0.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/tiny-glob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tiny-glob/package.json" } ], "concludedValue": "node_modules/tiny-glob/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.7.4", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "rollup", "version": "3.29.4", "description": "Next-generation ES module bundler", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup@3.29.4", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" } ], "type": "library", "bom-ref": "pkg:npm/rollup@3.29.4", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup/package.json" } ], "concludedValue": "node_modules/rollup/package.json" } ] } }, { "group": "", "name": "periscopic", "version": "3.1.0", "description": "periscopic", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/periscopic@3.1.0", "type": "library", "bom-ref": "pkg:npm/periscopic@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/periscopic/package.json" }, { "name": "ImportedModules", "value": "periscopic,extract_identifiers,periscopic/extract_identifiers,extract_names,periscopic/extract_names,analyze,periscopic/analyze,Scope,periscopic/Scope" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/periscopic/package.json" } ], "concludedValue": "node_modules/periscopic/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/nodes/ConstTag.js#5" }, { "location": "src/compiler/compile/render_dom/index.js#4" }, { "location": "src/compiler/compile/render_dom/wrappers/Element/index.js#28" }, { "location": "src/compiler/compile/render_dom/wrappers/SlotTemplate.js#7" }, { "location": "src/compiler/compile/render_ssr/index.js#4" }, { "location": "src/compiler/compile/utils/scope.js#1" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.30.5", "description": "Modify strings, generate sourcemaps", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/magic-string@0.30.5", "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.5", "properties": [ { "name": "SrcFile", "value": "node_modules/magic-string/package.json" }, { "name": "ImportedModules", "value": "magic-string" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magic-string/package.json" } ], "concludedValue": "node_modules/magic-string/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/css/Stylesheet.js#1" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "locate-character", "version": "3.0.0", "description": "Get the line and column number of a specific character in a string", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/locate-character@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://gitlab.com/Rich-Harris/locate-character#README" }, { "type": "vcs", "url": "git+https://gitlab.com/Rich-Harris/locate-character.git" } ], "type": "library", "bom-ref": "pkg:npm/locate-character@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-character/package.json" }, { "name": "ImportedModules", "value": "locate-character,getLocator,locate-character/getLocator,locate,locate-character/locate" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-character/package.json" } ], "concludedValue": "node_modules/locate-character/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/Component.js#3" }, { "location": "src/compiler/preprocess/index.js#1" }, { "location": "src/compiler/utils/error.js#1" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "kleur", "version": "4.1.5", "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/kleur@4.1.5", "type": "library", "bom-ref": "pkg:npm/kleur@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/kleur/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kleur/package.json" } ], "concludedValue": "node_modules/kleur/package.json" } ] } }, { "group": "", "name": "jsdom", "version": "22.0.0", "description": "A JavaScript implementation of many web standards", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/jsdom@22.0.0", "type": "library", "bom-ref": "pkg:npm/jsdom@22.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsdom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsdom/package.json" } ], "concludedValue": "node_modules/jsdom/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "is-reference", "version": "3.0.2", "description": "Determine whether an AST node is a reference", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-reference@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/is-reference#readme" }, { "type": "vcs", "url": "git+https://github.com/Rich-Harris/is-reference.git" } ], "type": "library", "bom-ref": "pkg:npm/is-reference@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-reference/package.json" }, { "name": "ImportedModules", "value": "is-reference" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-reference/package.json" } ], "concludedValue": "node_modules/is-reference/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/Component.js#16" }, { "location": "src/compiler/compile/nodes/ConstTag.js#6" }, { "location": "src/compiler/compile/nodes/shared/Context.js#3" }, { "location": "src/compiler/compile/nodes/shared/Expression.js#2" }, { "location": "src/compiler/compile/utils/is_used_as_reference.js#1" } ] } }, { "authors": [ { "name": "David Ortner" } ], "group": "", "name": "happy-dom", "version": "9.20.3", "description": "Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/happy-dom@9.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/capricorn86/happy-dom" } ], "type": "library", "bom-ref": "pkg:npm/happy-dom@9.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/happy-dom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/happy-dom/package.json" } ], "concludedValue": "node_modules/happy-dom/package.json" } ] }, "tags": [ "html", "web" ] }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "estree-walker", "version": "3.0.3", "description": "Traverse an ESTree-compliant AST", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/estree-walker@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/estree-walker" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/estree-walker/package.json" }, { "name": "ExportedModules", "value": "estree-walker" }, { "name": "ImportedModules", "value": "estree-walker,walk,estree-walker/walk" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estree-walker/package.json" } ], "concludedValue": "node_modules/estree-walker/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/Component.js#2" }, { "location": "src/compiler/compile/css/Stylesheet.js#2" }, { "location": "src/compiler/compile/nodes/ConstTag.js#4" }, { "location": "src/compiler/compile/nodes/Element.js#3" }, { "location": "src/compiler/compile/nodes/Let.js#2" }, { "location": "src/compiler/compile/nodes/shared/Context.js#2" }, { "location": "src/compiler/compile/nodes/shared/Expression.js#1" }, { "location": "src/compiler/compile/render_dom/index.js#3" }, { "location": "src/compiler/compile/render_dom/wrappers/IfBlock.js#5" }, { "location": "src/compiler/compile/render_ssr/index.js#5" }, { "location": "src/compiler/index.js#4" }, { "location": "src/compiler/parse/read/style.js#4" } ] } }, { "authors": [ { "name": "artxe2" } ], "group": "", "name": "eslint-plugin-lube", "version": "0.1.7", "description": "Eslint rules expand options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/eslint-plugin-lube@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Artxe2/lube-series" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-lube@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-lube/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-lube/package.json" } ], "concludedValue": "node_modules/eslint-plugin-lube/package.json" } ] } }, { "group": "", "name": "esbuild", "version": "0.18.20", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/esbuild@0.18.20", "type": "library", "bom-ref": "pkg:npm/esbuild@0.18.20", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ] } }, { "group": "", "name": "dts-buddy", "version": "0.4.3", "description": "A tool for creating .d.ts bundles", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/dts-buddy@0.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/dts-buddy" } ], "type": "library", "bom-ref": "pkg:npm/dts-buddy@0.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/dts-buddy/package.json" }, { "name": "ImportedModules", "value": "dts-buddy,createBundle,dts-buddy/createBundle" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dts-buddy/package.json" } ], "concludedValue": "node_modules/dts-buddy/package.json" } ], "occurrences": [ { "location": "scripts/generate-dts.js#2" } ] } }, { "authors": [ { "name": "Roman Dvornov (https://github.com/lahmatiy)" } ], "group": "", "name": "css-tree", "version": "2.3.1", "description": "A tool set for CSS: fast detailed parser (CSS → AST), walker (AST traversal), generator (AST → CSS) and lexer (validation and matching) based on specs and browser implementations", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/css-tree@2.3.1", "type": "library", "bom-ref": "pkg:npm/css-tree@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/css-tree/package.json" }, { "name": "ImportedModules", "value": "css-tree,fork,css-tree/fork,css-tree/tokenizer,Delim,css-tree/tokenizer/Delim,Function,css-tree/tokenizer/Function,Ident,css-tree/tokenizer/Ident,Number,css-tree/tokenizer/Number,Dimension,css-tree/tokenizer/Dimension,RightParenthesis,css-tree/tokenizer/RightParenthesis,Colon,css-tree/tokenizer/Colon,WhiteSpace,css-tree/tokenizer/WhiteSpace,Comment,css-tree/tokenizer/Comment,LeftParenthesis,css-tree/tokenizer/LeftParenthesis,css-tree/tokenizer/EOF,LeftCurlyBracket,css-tree/tokenizer/LeftCurlyBracket" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/css-tree/package.json" } ], "concludedValue": "node_modules/css-tree/package.json" } ], "occurrences": [ { "location": "src/compiler/parse/read/css-tree-cq/css_tree_parse.js#2" }, { "location": "src/compiler/parse/read/css-tree-cq/node/comparison.js#2" }, { "location": "src/compiler/parse/read/css-tree-cq/node/container_feature_style.js#10" }, { "location": "src/compiler/parse/read/css-tree-cq/node/container_query.js#2" }, { "location": "src/compiler/parse/read/css-tree-cq/node/lookahead_is_range.js#9" }, { "location": "src/compiler/parse/read/css-tree-cq/node/media_query.js#2" }, { "location": "src/compiler/parse/read/css-tree-cq/node/query_css_function.js#2" }, { "location": "src/compiler/parse/read/css-tree-cq/node/query_feature.js#11" }, { "location": "src/compiler/parse/read/css-tree-cq/node/query_feature_range.js#11" } ] } }, { "group": "", "name": "code-red", "version": "1.0.4", "description": "code-red", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/code-red@1.0.4", "type": "library", "bom-ref": "pkg:npm/code-red@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/code-red/package.json" }, { "name": "ImportedModules", "value": "code-red,print,code-red/print,code-red/b,code-red/x,code-red/p" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/code-red/package.json" } ], "concludedValue": "node_modules/code-red/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/Component.js#21" }, { "location": "src/compiler/compile/create_module.js#1" }, { "location": "src/compiler/compile/nodes/Attribute.js#5" }, { "location": "src/compiler/compile/nodes/shared/Context.js#1" }, { "location": "src/compiler/compile/nodes/shared/Expression.js#8" }, { "location": "src/compiler/compile/render_dom/Block.js#1" }, { "location": "src/compiler/compile/render_dom/Renderer.js#3" }, { "location": "src/compiler/compile/render_dom/index.js#1" }, { "location": "src/compiler/compile/render_dom/invalidate.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/AwaitBlock.js#3" }, { "location": "src/compiler/compile/render_dom/wrappers/Body.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/Comment.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/DebugTag.js#3" }, { "location": "src/compiler/compile/render_dom/wrappers/Document.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/EachBlock.js#4" }, { "location": "src/compiler/compile/render_dom/wrappers/Element/Attribute.js#3" }, { "location": "src/compiler/compile/render_dom/wrappers/Element/Binding.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/Element/EventHandler.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/Element/StyleAttribute.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/Element/index.js#7" }, { "location": "src/compiler/compile/render_dom/wrappers/Head.js#3" }, { "location": "src/compiler/compile/render_dom/wrappers/IfBlock.js#4" }, { "location": "src/compiler/compile/render_dom/wrappers/InlineComponent/index.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/KeyBlock.js#4" }, { "location": "src/compiler/compile/render_dom/wrappers/MustacheTag.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/RawMustacheTag.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/Slot.js#3" }, { "location": "src/compiler/compile/render_dom/wrappers/SlotTemplate.js#5" }, { "location": "src/compiler/compile/render_dom/wrappers/Text.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/Title.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/Window.js#2" }, { "location": "src/compiler/compile/render_dom/wrappers/shared/Tag.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/shared/Wrapper.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/shared/add_actions.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/shared/add_const_tags.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/shared/bind_this.js#1" }, { "location": "src/compiler/compile/render_dom/wrappers/shared/get_slot_definition.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/AwaitBlock.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/DebugTag.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/EachBlock.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/Element.js#9" }, { "location": "src/compiler/compile/render_ssr/handlers/Head.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/IfBlock.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/InlineComponent.js#3" }, { "location": "src/compiler/compile/render_ssr/handlers/Slot.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/Tag.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/Title.js#1" }, { "location": "src/compiler/compile/render_ssr/handlers/shared/get_attribute_value.js#2" }, { "location": "src/compiler/compile/render_ssr/index.js#1" }, { "location": "src/compiler/compile/utils/get_slot_data.js#1" }, { "location": "src/compiler/parse/acorn.js#1" } ] } }, { "authors": [ { "name": "Jesse Beach " } ], "group": "", "name": "axobject-query", "version": "4.0.0", "description": "Programmatic access to information about the AXObject Model", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/axobject-query@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/A11yance/axobject-query#readme" }, { "type": "vcs", "url": "git+https://github.com/A11yance/axobject-query.git" } ], "type": "library", "bom-ref": "pkg:npm/axobject-query@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/axobject-query/package.json" }, { "name": "ImportedModules", "value": "axobject-query,AXObjects,axobject-query/AXObjects,AXObjectRoles,axobject-query/AXObjectRoles,elementAXObjects,axobject-query/elementAXObjects" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/axobject-query/package.json" } ], "concludedValue": "node_modules/axobject-query/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/utils/a11y.js#2" } ] } }, { "authors": [ { "name": "Jesse Beach " } ], "group": "", "name": "aria-query", "version": "5.3.0", "description": "Programmatic access to the ARIA specification", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/aria-query@5.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/A11yance/aria-query#readme" }, { "type": "vcs", "url": "git+https://github.com/A11yance/aria-query.git" } ], "type": "library", "bom-ref": "pkg:npm/aria-query@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aria-query/package.json" }, { "name": "ImportedModules", "value": "aria-query,roles,aria-query/roles,aria,aria-query/aria,elementRoles,aria-query/elementRoles" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aria-query/package.json" } ], "concludedValue": "node_modules/aria-query/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/nodes/Element.js#34" }, { "location": "src/compiler/compile/utils/a11y.js#1" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "agadoo", "version": "3.0.0", "description": "Check whether a package is tree-shakeable", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/agadoo@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/agadoo#readme" }, { "type": "vcs", "url": "git+https://github.com/Rich-Harris/agadoo.git" } ], "type": "library", "bom-ref": "pkg:npm/agadoo@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/agadoo/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/agadoo/package.json" } ], "concludedValue": "node_modules/agadoo/package.json" } ] } }, { "group": "", "name": "acorn", "version": "8.11.3", "description": "ECMAScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/acorn@8.11.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.11.3", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "ImportedModules", "value": "acorn,isIdentifierStart,acorn/isIdentifierStart,isIdentifierChar,acorn/isIdentifierChar" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ], "occurrences": [ { "location": "src/compiler/parse/index.js#1" }, { "location": "src/compiler/parse/read/context.js#1" }, { "location": "src/compiler/utils/names.js#1" } ] } }, { "group": "@types", "name": "node", "version": "14.18.63", "description": "TypeScript definitions for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/node@14.18.63", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@14.18.63", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "estree", "version": "1.0.5", "description": "TypeScript definitions for estree", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/estree@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/estree/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/estree/package.json" } ], "concludedValue": "node_modules/@types/estree/package.json" } ] } }, { "group": "@types", "name": "aria-query", "version": "5.0.4", "description": "TypeScript definitions for aria-query", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/aria-query@5.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/aria-query" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/aria-query@5.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/aria-query/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/aria-query/package.json" } ], "concludedValue": "node_modules/@types/aria-query/package.json" } ] } }, { "authors": [ { "name": "Svelte" } ], "group": "@sveltejs", "name": "eslint-config", "version": "6.0.4", "description": "Svelte ESLint config", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40sveltejs/eslint-config@6.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/svelte/eslint-config#readme" } ], "type": "framework", "bom-ref": "pkg:npm/@sveltejs/eslint-config@6.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@sveltejs/eslint-config/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sveltejs/eslint-config/package.json" } ], "concludedValue": "node_modules/@sveltejs/eslint-config/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "plugin-node-resolve", "version": "15.2.3", "description": "Locate and bundle third-party dependencies in node_modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-node-resolve@15.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/node-resolve/#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-node-resolve@15.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-node-resolve/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-node-resolve/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-node-resolve/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "rollup" } ], "group": "@rollup", "name": "plugin-json", "version": "6.1.0", "description": "Convert .json files to ES6 modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-json@6.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/json#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-json@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-json/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-json/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-json/package.json" } ] } }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "plugin-commonjs", "version": "24.1.0", "description": "Convert CommonJS modules to ES2015", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-commonjs@24.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/commonjs/#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-commonjs@24.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-commonjs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-commonjs/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-commonjs/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corporation" } ], "group": "@playwright", "name": "test", "version": "1.40.1", "description": "A high-level API to automate web browsers", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40playwright/test@1.40.1", "externalReferences": [ { "type": "website", "url": "https://playwright.dev" }, { "type": "vcs", "url": "git+https://github.com/microsoft/playwright.git" } ], "type": "framework", "bom-ref": "pkg:npm/@playwright/test@1.40.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@playwright/test/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@playwright/test/package.json" } ], "concludedValue": "node_modules/@playwright/test/package.json" } ] }, "tags": [ "api", "framework", "web" ] }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.20", "description": "Trace the original position through a source map", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.20", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/trace-mapping.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.20", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "ImportedModules", "value": "@jridgewell/trace-mapping,TraceMap,@jridgewell/trace-mapping/TraceMap,originalPositionFor,@jridgewell/trace-mapping/originalPositionFor" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ], "occurrences": [ { "location": "src/compiler/compile/Component.js#1" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.4.15", "description": "Encode/decode sourcemap mappings", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemap-codec.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" }, { "name": "ImportedModules", "value": "@jridgewell/sourcemap-codec,decode,@jridgewell/sourcemap-codec/decode" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "occurrences": [ { "location": "src/compiler/preprocess/decode_sourcemap.js#1" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@ampproject", "name": "remapping", "version": "2.2.1", "description": "Remap sequential sourcemaps through transformations to point at the original source code", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40ampproject/remapping@2.2.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ampproject/remapping.git" } ], "type": "library", "bom-ref": "pkg:npm/@ampproject/remapping@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@ampproject/remapping/package.json" }, { "name": "ImportedModules", "value": "@ampproject/remapping" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@ampproject/remapping/package.json" } ], "concludedValue": "node_modules/@ampproject/remapping/package.json" } ], "occurrences": [ { "location": "src/compiler/utils/mapped_code.js#1" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/svelte@4.2.20-tuxcare.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-15T11:09:35Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'svelte' with version '4.2.20-tuxcare.2'. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from 33 source files." } ] }