{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:fc9873cd-9730-470a-ade2-34b04c2df6a1", "version": 1, "metadata": { "timestamp": "2026-09-14T08:15:22Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "transloadit", "group": "", "version": "4.11.1", "description": "Node.js SDK for Transloadit", "purl": "pkg:npm/transloadit@4.11.1", "bom-ref": "pkg:npm/transloadit@4.11.1", "author": "Tim Koschuetzki ", "properties": [ { "name": "cdx:npm:bin", "value": "./dist/cli.js" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "check, sync:intent-docs, fix:js, lint:ts, fix:js:unsafe, lint:js, lint, fix, lint:deps, fix:deps, prepack, test:unit, test:e2e, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/transloadit/node-sdk/tree/main/packages/node" }, { "type": "vcs", "url": "https://github.com/transloadit/node-sdk" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/zod/package.json" } ] }, "components": [ { "authors": [ { "name": "Colin McDonnell " } ], "group": "", "name": "zod", "version": "3.25.76", "description": "TypeScript-first schema declaration and validation library with static type inference", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zod@3.25.76", "externalReferences": [ { "type": "website", "url": "https://zod.dev" }, { "type": "vcs", "url": "git+https://github.com/colinhacks/zod.git" } ], "type": "library", "bom-ref": "pkg:npm/zod@3.25.76", "properties": [ { "name": "SrcFile", "value": "node_modules/zod/package.json" }, { "name": "ImportedModules", "value": "zod,zod/z,ZodArray,zod/ZodArray,ZodBoolean,zod/ZodBoolean,ZodDefault,zod/ZodDefault,ZodEffects,zod/ZodEffects,ZodEnum,zod/ZodEnum,ZodLiteral,zod/ZodLiteral,ZodNullable,zod/ZodNullable,ZodNumber,zod/ZodNumber,ZodObject,zod/ZodObject,ZodOptional,zod/ZodOptional,ZodString,zod/ZodString,ZodUnion,zod/ZodUnion,Schema,zod/Schema,ZodRawShape,zod/ZodRawShape,ZodIssue,zod/ZodIssue,ZodTypeAny,zod/ZodTypeAny" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zod/package.json" } ], "concludedValue": "node_modules/zod/package.json" } ], "occurrences": [ { "location": "dist/alphalib/assembly-linter.js", "line": 2 }, { "location": "dist/alphalib/assembly-linter.js", "line": 18 }, { "location": "dist/alphalib/assembly-linter.js", "line": 19 }, { "location": "dist/alphalib/assembly-linter.js", "line": 20 }, { "location": "dist/alphalib/assembly-linter.js", "line": 21 }, { "location": "dist/alphalib/assembly-linter.js", "line": 23 }, { "location": "dist/alphalib/assembly-linter.js", "line": 24 }, { "location": "dist/alphalib/assembly-linter.js", "line": 26 }, { "location": "dist/alphalib/assembly-linter.js", "line": 27 }, { "location": "dist/alphalib/assembly-linter.js", "line": 28 }, { "location": "dist/alphalib/assembly-linter.js", "line": 30 }, { "location": "dist/alphalib/assembly-linter.js", "line": 31 }, { "location": "dist/alphalib/assembly-linter.js", "line": 33 }, { "location": "dist/alphalib/assembly-linter.js", "line": 34 }, { "location": "dist/alphalib/assembly-linter.js", "line": 35 }, { "location": "dist/alphalib/assembly-linter.js", "line": 36 }, { "location": "dist/alphalib/assembly-linter.js", "line": 37 }, { "location": "dist/alphalib/stepParsing.js", "line": 1 }, { "location": "dist/bearerToken.js", "line": 1 }, { "location": "dist/bearerToken.js", "line": 2 }, { "location": "dist/bearerToken.js", "line": 4 }, { "location": "dist/bearerToken.js", "line": 5 }, { "location": "dist/bearerToken.js", "line": 8 }, { "location": "dist/bearerToken.js", "line": 10 }, { "location": "dist/bearerToken.js", "line": 11 }, { "location": "dist/bearerToken.js", "line": 12 }, { "location": "dist/bearerToken.js", "line": 13 }, { "location": "dist/cli/commands/assemblies.js", "line": 15 }, { "location": "dist/cli/commands/assemblies.js", "line": 51 }, { "location": "dist/cli/commands/assemblies.js", "line": 52 }, { "location": "dist/cli/commands/auth.js", "line": 3 }, { "location": "dist/cli/commands/auth.js", "line": 9 }, { "location": "dist/cli/commands/auth.js", "line": 11 }, { "location": "dist/cli/commands/auth.js", "line": 12 }, { "location": "dist/cli/commands/auth.js", "line": 13 }, { "location": "dist/cli/commands/auth.js", "line": 14 }, { "location": "dist/cli/commands/auth.js", "line": 15 }, { "location": "dist/cli/commands/bills.js", "line": 2 }, { "location": "dist/cli/commands/bills.js", "line": 6 }, { "location": "dist/cli/commands/bills.js", "line": 7 }, { "location": "dist/cli/commands/templates.js", "line": 6 }, { "location": "dist/cli/commands/templates.js", "line": 83 }, { "location": "dist/cli/commands/templates.js", "line": 84 }, { "location": "dist/cli/intentFields.js", "line": 3 }, { "location": "dist/cli/types.js", "line": 1 }, { "location": "dist/cli/types.js", "line": 4 }, { "location": "dist/cli/types.js", "line": 5 }, { "location": "dist/cli/types.js", "line": 6 }, { "location": "dist/cli/types.js", "line": 8 }, { "location": "dist/cli/types.js", "line": 9 }, { "location": "dist/cli/types.js", "line": 10 }, { "location": "dist/cli/types.js", "line": 11 }, { "location": "dist/cli/types.js", "line": 12 }, { "location": "dist/cli/types.js", "line": 13 }, { "location": "dist/cli/types.js", "line": 15 }, { "location": "dist/cli/types.js", "line": 17 }, { "location": "dist/cli/types.js", "line": 20 }, { "location": "dist/cli/types.js", "line": 24 }, { "location": "dist/cli/types.js", "line": 26 }, { "location": "src/alphalib/assembly-linter.ts", "line": 3 }, { "location": "src/alphalib/assembly-linter.ts", "line": 90 }, { "location": "src/alphalib/assembly-linter.ts", "line": 91 }, { "location": "src/alphalib/assembly-linter.ts", "line": 92 }, { "location": "src/alphalib/assembly-linter.ts", "line": 93 }, { "location": "src/alphalib/assembly-linter.ts", "line": 96 }, { "location": "src/alphalib/assembly-linter.ts", "line": 97 }, { "location": "src/alphalib/assembly-linter.ts", "line": 100 }, { "location": "src/alphalib/assembly-linter.ts", "line": 101 }, { "location": "src/alphalib/assembly-linter.ts", "line": 102 }, { "location": "src/alphalib/assembly-linter.ts", "line": 105 }, { "location": "src/alphalib/assembly-linter.ts", "line": 106 }, { "location": "src/alphalib/assembly-linter.ts", "line": 109 }, { "location": "src/alphalib/assembly-linter.ts", "line": 111 }, { "location": "src/alphalib/assembly-linter.ts", "line": 113 }, { "location": "src/alphalib/assembly-linter.ts", "line": 115 }, { "location": "src/alphalib/assembly-linter.ts", "line": 117 }, { "location": "src/alphalib/mcache.ts", "line": 2 }, { "location": "src/alphalib/stepParsing.ts", "line": 1 }, { "location": "src/alphalib/stepParsing.ts", "line": 2 }, { "location": "src/alphalib/zodParseWithContext.ts", "line": 1 }, { "location": "src/bearerToken.ts", "line": 1 }, { "location": "src/bearerToken.ts", "line": 29 }, { "location": "src/bearerToken.ts", "line": 31 }, { "location": "src/bearerToken.ts", "line": 32 }, { "location": "src/bearerToken.ts", "line": 36 }, { "location": "src/bearerToken.ts", "line": 38 }, { "location": "src/bearerToken.ts", "line": 39 }, { "location": "src/bearerToken.ts", "line": 40 }, { "location": "src/bearerToken.ts", "line": 41 }, { "location": "src/cli/commands/assemblies.ts", "line": 30 }, { "location": "src/cli/commands/assemblies.ts", "line": 135 }, { "location": "src/cli/commands/assemblies.ts", "line": 136 }, { "location": "src/cli/commands/auth.ts", "line": 1 }, { "location": "src/cli/commands/auth.ts", "line": 10 }, { "location": "src/cli/commands/auth.ts", "line": 30 }, { "location": "src/cli/commands/auth.ts", "line": 32 }, { "location": "src/cli/commands/auth.ts", "line": 33 }, { "location": "src/cli/commands/auth.ts", "line": 34 }, { "location": "src/cli/commands/auth.ts", "line": 35 }, { "location": "src/cli/commands/auth.ts", "line": 36 }, { "location": "src/cli/commands/bills.ts", "line": 5 }, { "location": "src/cli/commands/bills.ts", "line": 17 }, { "location": "src/cli/commands/bills.ts", "line": 18 }, { "location": "src/cli/commands/templates.ts", "line": 12 }, { "location": "src/cli/commands/templates.ts", "line": 155 }, { "location": "src/cli/commands/templates.ts", "line": 156 }, { "location": "src/cli/intentCommandSpecs.ts", "line": 1 }, { "location": "src/cli/intentCommands.ts", "line": 2 }, { "location": "src/cli/intentFields.ts", "line": 1 }, { "location": "src/cli/intentFields.ts", "line": 18 }, { "location": "src/cli/intentRuntime.ts", "line": 1 }, { "location": "src/cli/types.ts", "line": 3 }, { "location": "src/cli/types.ts", "line": 8 }, { "location": "src/cli/types.ts", "line": 9 }, { "location": "src/cli/types.ts", "line": 10 }, { "location": "src/cli/types.ts", "line": 14 }, { "location": "src/cli/types.ts", "line": 15 }, { "location": "src/cli/types.ts", "line": 16 }, { "location": "src/cli/types.ts", "line": 17 }, { "location": "src/cli/types.ts", "line": 18 }, { "location": "src/cli/types.ts", "line": 19 }, { "location": "src/cli/types.ts", "line": 21 }, { "location": "src/cli/types.ts", "line": 23 }, { "location": "src/cli/types.ts", "line": 26 }, { "location": "src/cli/types.ts", "line": 39 }, { "location": "src/cli/types.ts", "line": 41 }, { "location": "src/robots.ts", "line": 1 } ] }, "tags": [ "validation" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/transloadit@4.11.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-14T08:15:22Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'transloadit' with version '4.11.1'." } ] }