{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:75c9032c-fbff-4ee2-bfb5-8de7c2d619ee", "version": 1, "metadata": { "timestamp": "2026-04-23T08:32:49Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.2.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "distributionConstraints": { "tlp": "CLEAR" }, "component": { "name": "uglify-js", "group": "", "version": "2.8.29-tuxcare.1", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "purl": "pkg:npm/uglify-js@2.8.29-tuxcare.1", "bom-ref": "pkg:npm/uglify-js@2.8.29-tuxcare.1", "author": "Mihai Bazon (http://lisperator.net/)", "type": "application", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "externalReferences": [ { "type": "website", "url": "http://lisperator.net/uglifyjs" }, { "type": "vcs", "url": "https://github.com/mishoo/UglifyJS2.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "source-map", "version": "0.5.7", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz" }, { "name": "ImportedModules", "value": "source-map" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "tools/node.js#30" } ] } }, { "group": "", "name": "yargs", "version": "3.10.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "405cd46a1f3c1801b2f65c8328606a65d918029b7adeb0976011989c43f8c4324f5cda975e70430029dbad79d5895ea3452a8078fc2b0138b68bc99f626e0bd4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yargs@3.10.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yargs@3.10.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz" }, { "name": "ImportedModules", "value": "yargs" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bin/extract-props.js#7" } ] } }, { "group": "", "name": "camelcase", "version": "1.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/camelcase@1.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@1.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cliui", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "188398462cc6f931a873b5a07352e23932daadef794779b32a0a259fe43f944e1c7a2607d7d814a65d25d057eae2524311fdc5c6e8cc7ba2017ce0acee97ea34" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/cliui@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cliui@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "center-align", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "05acf768d7b681dd8b3f6aa4e54fac0e4fe6e284aec120dc05f6b24c24c1a16a5f2063b95c5c4f9a320b4082383468998c3e83a0323a91fee029ac647fbb3755" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/center-align@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/center-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "align-text", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1ab4d92d1a66a7ac080b6cedad65bd3238d381229c71f7e015a81b343397f79fdd72311c61989b61379a3a7b724902dc770d73b41a0592f8a252f4cc6dbf4c62" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/align-text@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/align-text@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "kind-of", "version": "3.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/kind-of@3.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@3.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-buffer", "version": "1.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-buffer@1.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "longest", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93ecade67de5e3c254e24f1fb67286e95eeedf6c321f635f2b378cb68f45fd0444d1a9b1cbf2dacb1c25be38e4644233a91fb5f48aed14ef29e6407d41a61416" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/longest@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/longest@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "repeat-string", "version": "1.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d5d1dcc260335f462d630836c9ce95bb8cd34346e08e1bf8c8e5cb507062adfdc9590fe61c3d2df22255ae4c93261120bc69ebc2166589cb9c2300580da8deb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/repeat-string@1.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/repeat-string@1.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lazy-cache", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "444da0d1be55199b0e08538280fee899345816ac9d999901c25e68367435943602e7bbb23bd2aa367355c53ec23921d3c6b44259570054e71b8e4fadbe1feb81" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lazy-cache@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lazy-cache@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "right-align", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "caa20db4bfc6eefb36bfe7452199855036e757215424529dea02b6d8a828e91e237c9185b62b0aca77160c350b8237ea7f801242e210ca327b5d9fb7696a6c02" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/right-align@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/right-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9" } ], "licenses": [ { "license": { "name": "MIT/X11" } } ], "purl": "pkg:npm/wordwrap@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "decamelize", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/decamelize@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "window-size", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d694cf40329375deb5a3394a18d0a384d45df8a3e680b4866b79994c7a0e962686704483f06d4f5e187b7357e088f8d56cd55f832d856b0e0123cfe6d1c0bc32" } ], "purl": "pkg:npm/window-size@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/window-size@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uglify-to-browserify", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bdbdacd65631db106d520cbeb5af9bd89fc62d5511fb09a920dc0778f98f4613ac215086db00f3289d27d781ac947d4189fb2a57348ec1085168202c67f9c8e1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/uglify-to-browserify@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "acorn", "version": "5.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "060f19accdd87d8d7698f66438d4b9b8a66c4e3f5cb4876e69bfab91f2226c4756795699b77ec77aab173dffbb7a4384084ecdc4e39ae15c6e64a4a44c6a3c4f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/acorn@5.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/acorn/-/acorn-5.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/acorn@5.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/acorn/-/acorn-5.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "2.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8aec62d5e2eb458e9956ae4e9ac422705c2e2f99f8dd38b31a04e795f2a0d886d09c5be38cc7adfd3f38c9f47c0c58d19743b79b801967ee8aa997c3029b3d68" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@2.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-2.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@2.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-2.3.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "commander", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "083e39d9f9e4d2343293735f9caf8a911fe150fa07b79a5568a1e882dcb2bf737453841f01a97d5b4feb5cb3a0fef55981029aee376d5f2a4ab356008a9d75b9" } ], "purl": "pkg:npm/commander@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5f4ac6bc972c906d5cdd381208fa872745c983095cbce0bb7a5279634858b8a059a15a96a4031f2ce788876508fc3090e6bba87488efb2e819b63518530da953" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@2.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "0.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9512e2211f5f48da673fa4c2e2ff3ee0e53ba12b42d357acb8da30750df82fe1a4f1ee4fba873cf08a89f97018fc1dcc9f664a8acf25f075fdd2853c8afcd41e" } ], "purl": "pkg:npm/ms@0.7.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@0.7.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "57355ce3684c65b614f52c7f96d6fb298b90ea9a80c3e71b156572e1729d92e10bd8215a44b1849c848fb3b61dcda506a62f82a48aaf466bbb84f4384fb110e7" } ], "purl": "pkg:npm/diff@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "710a5489dedb7535271629fc4bb06735d3a4fbf783a9098a80200d4b277f8c086b284bf152fafd550f176735e23ad7acb7c34b7e4dc5481673c2f7a664d43a56" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb" } ], "licenses": [ { "license": { "name": "BSD" } } ], "purl": "pkg:npm/glob@3.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-3.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-3.2.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "85c8ff353516bfe0b731baab55bf45f9a1fa96f4f010725dc767e807196b56ae61eb313c05fbb8a6fe02000a9b0dc66bc3ff4093996c457958f40a3cfc5d13bb" } ], "licenses": [ { "license": { "name": "BSD" } } ], "purl": "pkg:npm/graceful-fs@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.2.14", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimatch@0.2.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.2.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5a989b589eb4737020033f1ada2604ac3adc4f60bb3a62a7b168487073a39141c58e45e770986d2f1352a949b147146e9e96f923c569addeda35277636d92c25" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1eaeb5b2faa15c705363cd0ab2e2eb22d27d03460fd4f49e892e21862efb35c3d07fe17ec9a80e4a486e85974d0fb35f01ca479b8f7914a51399173283317438" } ], "purl": "pkg:npm/growl@1.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.8.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jade", "version": "0.26.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a4937bf3507163cca8e90977aef888d77990fe40e4e351476e6e0987b474c3c2f00ed994e43134d5adaa6db39096cf726f26bca1ff82966698de66b09ea59dc" } ], "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d1f2f272997550c4c65f6e7b851b2efdaacbfdc51b72f40ce3330ac2f2efcd7b5f75ecc8578ca8b4f4b6758b649c5f8d9847d64a808417afa18fd5cb9bfea113" } ], "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "387b1d51c54043aa4eb60e49616a42068f56fc6c9256ec2f3fd86e791316ed4aac842d2d6dfccbbfcc23c924cf9b7b5f519ff6d4213d135a496a0380f753f17b" } ], "licenses": [ { "license": { "name": "MIT/X11" } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c638cd1b2fabcb5961b4829caf63d3ea89376acce141f82b503a783992c769c811805985e9747d5c238955c5e55464289c8a9770ad43bea80a29038f5981927f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "992e71b278d38796fb7f60cce9b721ea5479f36502393a61cc83656670ec7e9211af023aaf9f2b6fa612486b1d7b1926f2ac366c154ed880f67e724e4ee2e23c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/source-map@0.5.7", "dependsOn": [] }, { "ref": "pkg:npm/camelcase@1.2.1", "dependsOn": [] }, { "ref": "pkg:npm/is-buffer@1.1.6", "dependsOn": [] }, { "ref": "pkg:npm/kind-of@3.2.2", "dependsOn": [ "pkg:npm/is-buffer@1.1.6" ] }, { "ref": "pkg:npm/longest@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/repeat-string@1.6.1", "dependsOn": [] }, { "ref": "pkg:npm/align-text@0.1.4", "dependsOn": [ "pkg:npm/kind-of@3.2.2", "pkg:npm/longest@1.0.1", "pkg:npm/repeat-string@1.6.1" ] }, { "ref": "pkg:npm/lazy-cache@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/center-align@0.1.3", "dependsOn": [ "pkg:npm/align-text@0.1.4", "pkg:npm/lazy-cache@1.0.4" ] }, { "ref": "pkg:npm/right-align@0.1.3", "dependsOn": [ "pkg:npm/align-text@0.1.4" ] }, { "ref": "pkg:npm/wordwrap@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/cliui@2.1.0", "dependsOn": [ "pkg:npm/center-align@0.1.3", "pkg:npm/right-align@0.1.3", "pkg:npm/wordwrap@0.0.2" ] }, { "ref": "pkg:npm/decamelize@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/window-size@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/yargs@3.10.0", "dependsOn": [ "pkg:npm/camelcase@1.2.1", "pkg:npm/cliui@2.1.0", "pkg:npm/decamelize@1.2.0", "pkg:npm/window-size@0.1.0" ] }, { "ref": "pkg:npm/uglify-to-browserify@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/acorn@5.0.3", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.3.0", "dependsOn": [] }, { "ref": "pkg:npm/ms@0.7.1", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.2.0", "dependsOn": [ "pkg:npm/ms@0.7.1" ] }, { "ref": "pkg:npm/diff@1.4.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.2.14", "dependsOn": [ "pkg:npm/lru-cache@2.7.3", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/glob@3.2.3", "dependsOn": [ "pkg:npm/graceful-fs@2.0.3", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@0.2.14" ] }, { "ref": "pkg:npm/growl@1.8.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/jade@0.26.3", "dependsOn": [ "pkg:npm/commander@0.6.1", "pkg:npm/mkdirp@0.3.0" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.0", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/supports-color@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/mocha@2.3.4", "dependsOn": [ "pkg:npm/commander@2.3.0", "pkg:npm/debug@2.2.0", "pkg:npm/diff@1.4.0", "pkg:npm/escape-string-regexp@1.0.2", "pkg:npm/glob@3.2.3", "pkg:npm/growl@1.8.1", "pkg:npm/jade@0.26.3", "pkg:npm/mkdirp@0.5.0", "pkg:npm/supports-color@1.2.0" ] }, { "ref": "pkg:npm/uglify-js@2.8.29-tuxcare.1", "dependsOn": [ "pkg:npm/acorn@5.0.3", "pkg:npm/mocha@2.3.4", "pkg:npm/source-map@0.5.7", "pkg:npm/uglify-to-browserify@1.0.2", "pkg:npm/yargs@3.10.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/uglify-js@2.8.29-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.2.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-04-23T08:32:49Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, April 23, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'uglify-js' with version '2.8.29-tuxcare.1'." } ] }