{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ccb8e4c1-2314-460e-8f57-3702dcc9cff6", "version": 1, "metadata": { "timestamp": "2026-09-15T15:21:10Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "urql-core", "group": "", "purl": "pkg:npm/urql-core", "bom-ref": "pkg:npm/urql-core", "properties": [], "type": "application" }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@urql" }, { "name": "cdx:bom:componentSrcFiles", "value": "core/yarn.lock" } ] }, "components": [ { "group": "@urql", "name": "core", "version": "1.9.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "d1e8ad8d6fc7954024313c22585432424726c009675a5b1c1f7fc0294d58e4c254cf37a102439f7c7150f5e0f9b2dff44e5292bde85bcff7940070eafc29d7f3" } ], "purl": "pkg:npm/%40urql/core@1.9.2", "type": "library", "bom-ref": "pkg:npm/@urql/core@1.9.2", "properties": [ { "name": "SrcFile", "value": "core/yarn.lock" }, { "name": "ImportedModules", "value": "@urql/core,createRequest,@urql/core/createRequest,AnyVariables,@urql/core/AnyVariables,DocumentInput,@urql/core/DocumentInput,Client,@urql/core/Client,OperationResult,@urql/core/OperationResult,OperationContext,@urql/core/OperationContext,CombinedError,@urql/core/CombinedError,Operation,@urql/core/Operation,GraphQLRequestParams,@urql/core/GraphQLRequestParams,RequestPolicy,@urql/core/RequestPolicy,GraphQLRequest,@urql/core/GraphQLRequest" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "core/yarn.lock" } ], "concludedValue": "core/yarn.lock" } ], "occurrences": [ { "location": "core/index.esm.js", "line": 1 }, { "location": "core/index.js", "line": 1 }, { "location": "dist/urql.es.js", "line": 1 }, { "location": "dist/urql.es.js", "line": 3 }, { "location": "dist/urql.es.js", "line": 79 }, { "location": "dist/urql.es.js", "line": 104 }, { "location": "dist/urql.es.js", "line": 118 }, { "location": "dist/urql.es.js", "line": 309 }, { "location": "dist/urql.es.js", "line": 317 }, { "location": "dist/urql.es.js", "line": 325 }, { "location": "dist/urql.js", "line": 3 }, { "location": "src/components/Mutation.ts", "line": 2 }, { "location": "src/components/Query.ts", "line": 2 }, { "location": "src/components/Subscription.ts", "line": 2 }, { "location": "src/context.ts", "line": 2 }, { "location": "src/hooks/cache.ts", "line": 2 }, { "location": "src/hooks/useMutation.ts", "line": 11 }, { "location": "src/hooks/useMutation.ts", "line": 12 }, { "location": "src/hooks/useMutation.ts", "line": 160 }, { "location": "src/hooks/useQuery.ts", "line": 16 }, { "location": "src/hooks/useRequest.ts", "line": 2 }, { "location": "src/hooks/useRequest.ts", "line": 3 }, { "location": "src/hooks/useRequest.ts", "line": 20 }, { "location": "src/hooks/useSubscription.ts", "line": 12 }, { "location": "src/index.ts", "line": 1 } ] } }, { "group": "", "name": "wonka", "version": "4.0.7", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "521ca5d9c81609492c62d53426df0c4b3294a8ae01554adec16c679f562528bdd9728e2c0dc0940e46e01f48bbeb61c9b35aedb2ad3771fcec096c4929a0e056" } ], "purl": "pkg:npm/wonka@4.0.7", "type": "library", "bom-ref": "pkg:npm/wonka@4.0.7", "properties": [ { "name": "SrcFile", "value": "core/yarn.lock" }, { "name": "ImportedModules", "value": "wonka,toPromise,wonka/toPromise,take,wonka/take,filter,wonka/filter,onPush,wonka/onPush,subscribe,wonka/subscribe,takeWhile,wonka/takeWhile,onEnd,wonka/onEnd,pipe,wonka/pipe,Source,wonka/Source" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "core/yarn.lock" } ], "concludedValue": "core/yarn.lock" } ], "occurrences": [ { "location": "dist/urql.es.js", "line": 7 }, { "location": "dist/urql.es.js", "line": 92 }, { "location": "dist/urql.es.js", "line": 104 }, { "location": "dist/urql.es.js", "line": 133 }, { "location": "dist/urql.es.js", "line": 136 }, { "location": "dist/urql.es.js", "line": 141 }, { "location": "dist/urql.es.js", "line": 144 }, { "location": "dist/urql.es.js", "line": 165 }, { "location": "dist/urql.es.js", "line": 169 }, { "location": "dist/urql.es.js", "line": 170 }, { "location": "dist/urql.es.js", "line": 179 }, { "location": "dist/urql.es.js", "line": 182 }, { "location": "dist/urql.es.js", "line": 185 }, { "location": "dist/urql.es.js", "line": 187 }, { "location": "dist/urql.es.js", "line": 192 }, { "location": "dist/urql.es.js", "line": 195 }, { "location": "dist/urql.es.js", "line": 222 }, { "location": "dist/urql.es.js", "line": 233 }, { "location": "dist/urql.es.js", "line": 234 }, { "location": "dist/urql.es.js", "line": 248 }, { "location": "dist/urql.es.js", "line": 249 }, { "location": "dist/urql.es.js", "line": 250 }, { "location": "dist/urql.es.js", "line": 260 }, { "location": "dist/urql.es.js", "line": 280 }, { "location": "dist/urql.es.js", "line": 286 }, { "location": "dist/urql.es.js", "line": 298 }, { "location": "dist/urql.js", "line": 5 }, { "location": "src/hooks/cache.ts", "line": 1 }, { "location": "src/hooks/cache.ts", "line": 22 }, { "location": "src/hooks/cache.ts", "line": 24 }, { "location": "src/hooks/useMutation.ts", "line": 2 }, { "location": "src/hooks/useMutation.ts", "line": 158 }, { "location": "src/hooks/useMutation.ts", "line": 163 }, { "location": "src/hooks/useMutation.ts", "line": 176 }, { "location": "src/hooks/useMutation.ts", "line": 177 }, { "location": "src/hooks/useQuery.ts", "line": 3 }, { "location": "src/hooks/useQuery.ts", "line": 4 }, { "location": "src/hooks/useQuery.ts", "line": 238 }, { "location": "src/hooks/useQuery.ts", "line": 240 }, { "location": "src/hooks/useQuery.ts", "line": 266 }, { "location": "src/hooks/useQuery.ts", "line": 268 }, { "location": "src/hooks/useQuery.ts", "line": 274 }, { "location": "src/hooks/useQuery.ts", "line": 345 }, { "location": "src/hooks/useQuery.ts", "line": 347 }, { "location": "src/hooks/useQuery.ts", "line": 350 }, { "location": "src/hooks/useQuery.ts", "line": 374 }, { "location": "src/hooks/useQuery.ts", "line": 376 }, { "location": "src/hooks/useSubscription.ts", "line": 3 }, { "location": "src/hooks/useSubscription.ts", "line": 285 }, { "location": "src/hooks/useSubscription.ts", "line": 287 }, { "location": "src/hooks/useSubscription.ts", "line": 290 } ] } } ], "dependencies": [ { "ref": "pkg:npm/@urql/core@1.9.2", "dependsOn": [ "pkg:npm/wonka@4.0.7" ] }, { "ref": "pkg:npm/wonka@4.0.7", "dependsOn": [] }, { "ref": "pkg:npm/urql-core", "dependsOn": [ "pkg:npm/@urql/core@1.9.2", "pkg:npm/wonka@4.0.7" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/urql-core" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-15T15:21:10Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'urql-core'. The package type in this SBOM is npm with a single purl namespace '@urql' described under components. The components were identified from the source files: core/yarn.lock." } ] }