{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:af9a0617-0d2b-49bd-a94d-225a66c02089", "version": 1, "metadata": { "timestamp": "2026-04-30T21:50:11Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "distributionConstraints": { "tlp": "CLEAR" }, "component": { "name": "vite", "group": "", "version": "2.9.18-tuxcare.1", "description": "Native-ESM powered web dev build tool", "purl": "pkg:npm/vite@2.9.18-tuxcare.1", "bom-ref": "pkg:npm/vite@2.9.18-tuxcare.1", "author": "Evan You", "properties": [ { "name": "cdx:npm:bin", "value": "vite" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "dev, build, build-bundle, build-types, build-temp-types, ci-build, patch-types, roll-types, lint, format, prepublishOnly" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitejs/vite/tree/main/#readme" }, { "type": "vcs", "url": "git+https://github.com/vitejs/vite.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@ampproject\\n@babel\\n@jridgewell\\n@rollup\\n@types\\n@vue" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@ampproject/remapping/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@rollup/plugin-alias/package.json\\nnode_modules/@rollup/plugin-commonjs/package.json\\nnode_modules/@rollup/plugin-dynamic-import-vars/package.json\\nnode_modules/@rollup/plugin-json/package.json\\nnode_modules/@rollup/plugin-node-resolve/package.json\\nnode_modules/@rollup/plugin-typescript/package.json\\nnode_modules/@rollup/pluginutils/package.json\\nnode_modules/@types/convert-source-map/package.json\\nnode_modules/@types/cross-spawn/package.json\\nnode_modules/@types/debug/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/etag/package.json\\nnode_modules/@types/less/package.json\\nnode_modules/@types/micromatch/package.json\\nnode_modules/@types/mime/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/resolve/package.json\\nnode_modules/@types/sass/package.json\\nnode_modules/@types/stylus/package.json\\nnode_modules/@types/ws/package.json\\nnode_modules/@vue/compiler-dom/package.json\\nnode_modules/acorn/package.json\\nnode_modules/cac/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/connect-history-api-fallback/package.json\\nnode_modules/connect/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/cors/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/dotenv-expand/package.json\\nnode_modules/dotenv/package.json\\nnode_modules/es-module-lexer/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/estree-walker/package.json\\nnode_modules/etag/package.json\\nnode_modules/fast-glob/package.json\\nnode_modules/http-proxy/package.json\\nnode_modules/json5/package.json\\nnode_modules/launch-editor-middleware/package.json\\nnode_modules/less/package.json\\nnode_modules/magic-string/package.json\\nnode_modules/micromatch/package.json\\nnode_modules/mrmime/package.json\\nnode_modules/node-forge/package.json\\nnode_modules/okie/package.json\\nnode_modules/open/package.json\\nnode_modules/periscopic/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/postcss-import/package.json\\nnode_modules/postcss-load-config/package.json\\nnode_modules/postcss-modules/package.json\\nnode_modules/postcss/package.json\\nnode_modules/resolve.exports/package.json\\nnode_modules/resolve/package.json\\nnode_modules/rollup-plugin-license/package.json\\nnode_modules/rollup/package.json\\nnode_modules/sass/package.json\\nnode_modules/sirv/package.json\\nnode_modules/source-map-js/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-literal/package.json\\nnode_modules/stylus/package.json\\nnode_modules/terser/package.json\\nnode_modules/tsconfck/package.json\\nnode_modules/tslib/package.json\\nnode_modules/ws/package.json" } ] }, "components": [ { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "8.6.0", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ws@8.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "ImportedModules", "value": "ws,ServerOptions,ws/ServerOptions,WebSocket,ws/WebSocket,WebSocketServer,ws/WebSocketServer" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ], "occurrences": [ { "location": "src/node/server/ws.ts#7" }, { "location": "src/node/server/ws.ts#8" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "tslib", "version": "2.4.0", "description": "Runtime library for TypeScript helper functions", "scope": "optional", "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD" } } ], "purl": "pkg:npm/tslib@2.4.0", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/tslib.git" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tslib/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tslib/package.json" } ], "concludedValue": "node_modules/tslib/package.json" } ] } }, { "authors": [ { "name": "dominikg" } ], "group": "", "name": "tsconfck", "version": "1.2.2", "description": "A utility to work with tsconfig.json without typescript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tsconfck@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominikg/tsconfck/tree/main/#readme" }, { "type": "vcs", "url": "git+https://github.com/dominikg/tsconfck.git" } ], "type": "library", "bom-ref": "pkg:npm/tsconfck@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tsconfck/package.json" }, { "name": "ImportedModules", "value": "tsconfck,TSConfckParseOptions,tsconfck/TSConfckParseOptions,TSConfckParseResult,tsconfck/TSConfckParseResult,TSConfckParseError,tsconfck/TSConfckParseError,findAll,tsconfck/findAll,parse,tsconfck/parse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsconfck/package.json" } ], "concludedValue": "node_modules/tsconfck/package.json" } ], "occurrences": [ { "location": "src/node/plugins/esbuild.ts#13" }, { "location": "src/node/plugins/esbuild.ts#14" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "terser", "version": "5.13.1", "description": "JavaScript parser, mangler/compressor and beautifier toolkit for ES6+", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/terser@5.13.1", "externalReferences": [ { "type": "website", "url": "https://terser.org" } ], "type": "library", "bom-ref": "pkg:npm/terser@5.13.1", "properties": [ { "name": "SrcFile", "value": "node_modules/terser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser/package.json" } ], "concludedValue": "node_modules/terser/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "stylus", "version": "0.55.0", "description": "Robust, expressive, and feature-rich CSS superset", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/stylus@0.55.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stylus/stylus" }, { "type": "vcs", "url": "git://github.com/stylus/stylus" } ], "type": "library", "bom-ref": "pkg:npm/stylus@0.55.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stylus/package.json" }, { "name": "ImportedModules", "value": "stylus" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stylus/package.json" } ], "concludedValue": "node_modules/stylus/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#20" } ] } }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "strip-literal", "version": "0.2.0", "description": "Strip comments and string literals from JavaScript code", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-literal@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/antfu/strip-literal#readme" }, { "type": "vcs", "url": "git+https://github.com/antfu/strip-literal.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-literal@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-literal/package.json" }, { "name": "ImportedModules", "value": "strip-literal,stripLiteral,strip-literal/stripLiteral" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-literal/package.json" } ], "concludedValue": "node_modules/strip-literal/package.json" } ], "occurrences": [ { "location": "src/node/plugins/assetImportMetaUrl.ts#3" }, { "location": "src/node/plugins/html.ts#18" }, { "location": "src/node/plugins/workerImportMetaUrl.ts#5" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "ImportedModules", "value": "strip-ansi" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ], "occurrences": [ { "location": "src/node/server/middlewares/error.ts#4" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "source-map-support", "version": "0.5.21", "description": "Fixes stack traces for files with source maps", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/source-map-support@0.5.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.5.21", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" }, { "name": "ImportedModules", "value": "source-map-support" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ], "occurrences": [ { "location": "bin/vite.js#7" } ] } }, { "authors": [ { "name": "Valentin 7rulnik Semirulnik " } ], "group": "", "name": "source-map-js", "version": "1.0.2", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map-js@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/7rulnik/source-map-js" } ], "type": "library", "bom-ref": "pkg:npm/source-map-js@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-js/package.json" } ], "concludedValue": "node_modules/source-map-js/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "sirv", "version": "2.0.2", "description": "The optimized & lightweight middleware for serving requests to static assets", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/sirv@2.0.2", "type": "library", "bom-ref": "pkg:npm/sirv@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sirv/package.json" }, { "name": "ImportedModules", "value": "sirv,Options,sirv/Options" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sirv/package.json" } ], "concludedValue": "node_modules/sirv/package.json" } ], "occurrences": [ { "location": "src/node/preview.ts#5" }, { "location": "src/node/server/middlewares/static.ts#3" }, { "location": "src/node/server/middlewares/static.ts#4" } ] }, "tags": [ "middleware" ] }, { "authors": [ { "name": "Natalie Weizenbaum (https://github.com/nex3)" } ], "group": "", "name": "sass", "version": "1.45.1", "description": "A pure JavaScript implementation of Sass.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/sass@1.45.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sass/dart-sass" }, { "type": "vcs", "url": "https://github.com/sass/dart-sass" } ], "type": "library", "bom-ref": "pkg:npm/sass@1.45.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sass/package.json" }, { "name": "ImportedModules", "value": "sass" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sass/package.json" } ], "concludedValue": "node_modules/sass/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#17" } ] } }, { "authors": [ { "name": "Mickael Jeanroy " } ], "group": "", "name": "rollup-plugin-license", "version": "2.7.0", "description": "Rollup plugin to add license banner to the final bundle and output third party licenses", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-plugin-license@2.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mjeanroy/rollup-plugin-license" }, { "type": "vcs", "url": "https://github.com/mjeanroy/rollup-plugin-license" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-license@2.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup-plugin-license/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup-plugin-license/package.json" } ], "concludedValue": "node_modules/rollup-plugin-license/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "rollup", "version": "2.62.0", "description": "Next-generation ES module bundler", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup@2.62.0", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" } ], "type": "library", "bom-ref": "pkg:npm/rollup@2.62.0", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup/package.json" }, { "name": "ImportedModules", "value": "rollup,ExternalOption,rollup/ExternalOption,ModuleFormat,rollup/ModuleFormat,OutputOptions,rollup/OutputOptions,Plugin,rollup/Plugin,RollupBuild,rollup/RollupBuild,RollupError,rollup/RollupError,RollupOptions,rollup/RollupOptions,RollupOutput,rollup/RollupOutput,RollupWarning,rollup/RollupWarning,RollupWatcher,rollup/RollupWatcher,WarningHandler,rollup/WarningHandler,WatcherOptions,rollup/WatcherOptions,CustomPluginOptions,rollup/CustomPluginOptions,LoadResult,rollup/LoadResult,PluginContext,rollup/PluginContext,ResolveIdResult,rollup/ResolveIdResult,TransformPluginContext,rollup/TransformPluginContext,TransformResult,rollup/TransformResult,ExistingRawSourceMap,rollup/ExistingRawSourceMap,NormalizedOutputOptions,rollup/NormalizedOutputOptions,OutputChunk,rollup/OutputChunk,RenderedChunk,rollup/RenderedChunk,SourceMapInput,rollup/SourceMapInput,SourceMap,rollup/SourceMap,OutputAsset,rollup/OutputAsset,OutputBundle,rollup/OutputBundle,PartialResolvedId,rollup/PartialResolvedId,GetManualChunk,rollup/GetManualChunk,GetManualChunkApi,rollup/GetManualChunkApi,GetModuleInfo,rollup/GetModuleInfo,EmittedFile,rollup/EmittedFile,ModuleInfo,rollup/ModuleInfo,InputOptions,rollup/InputOptions,MinimalPluginContext,rollup/MinimalPluginContext,NormalizedInputOptions,rollup/NormalizedInputOptions,ResolvedId,rollup/ResolvedId,SourceDescription,rollup/SourceDescription" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup/package.json" } ], "concludedValue": "node_modules/rollup/package.json" } ], "occurrences": [ { "location": "dist/node/chunks/dep-f207d8dc.js#41600" }, { "location": "dist/node/chunks/dep-f207d8dc.js#61101" }, { "location": "src/node/build.ts#17" }, { "location": "src/node/build.ts#18" }, { "location": "src/node/build.ts#422" }, { "location": "src/node/importGlob.ts#5" }, { "location": "src/node/logger.ts#7" }, { "location": "src/node/plugin.ts#9" }, { "location": "src/node/plugins/asset.ts#6" }, { "location": "src/node/plugins/css.ts#12" }, { "location": "src/node/plugins/define.ts#2" }, { "location": "src/node/plugins/esbuild.ts#11" }, { "location": "src/node/plugins/html.ts#8" }, { "location": "src/node/plugins/importAnalysisBuild.ts#5" }, { "location": "src/node/plugins/json.ts#10" }, { "location": "src/node/plugins/manifest.ts#2" }, { "location": "src/node/plugins/reporter.ts#5" }, { "location": "src/node/plugins/resolve.ts#4" }, { "location": "src/node/plugins/splitVendorChunk.ts#6" }, { "location": "src/node/plugins/worker.ts#2" }, { "location": "src/node/plugins/worker.ts#3" }, { "location": "src/node/plugins/worker.ts#84" }, { "location": "src/node/plugins/workerImportMetaUrl.ts#4" }, { "location": "src/node/server/hmr.ts#6" }, { "location": "src/node/server/index.ts#15" }, { "location": "src/node/server/middlewares/error.ts#2" }, { "location": "src/node/server/middlewares/indexHtml.ts#4" }, { "location": "src/node/server/moduleGraph.ts#3" }, { "location": "src/node/server/pluginContainer.ts#50" }, { "location": "src/node/server/send.ts#3" }, { "location": "src/node/server/sourcemap.ts#3" }, { "location": "src/node/server/transformRequest.ts#6" }, { "location": "src/node/ssr/ssrManifestPlugin.ts#4" }, { "location": "src/node/ssr/ssrTransform.ts#2" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "resolve.exports", "version": "1.1.0", "description": "A tiny (737b), correct, general-purpose, and configurable \"exports\" resolver without file-system reliance", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/resolve.exports@1.1.0", "type": "library", "bom-ref": "pkg:npm/resolve.exports@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve.exports/package.json" }, { "name": "ImportedModules", "value": "resolve.exports,resolve,resolve.exports/resolve" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve.exports/package.json" } ], "concludedValue": "node_modules/resolve.exports/package.json" } ], "occurrences": [ { "location": "src/node/plugins/resolve.ts#5" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.0", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/resolve@1.22.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "ImportedModules", "value": "resolve" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ], "occurrences": [ { "location": "dist/node/chunks/dep-a9015192.js#4" }, { "location": "dist/node/chunks/dep-d1fadabd.js#14" }, { "location": "dist/node/chunks/dep-f207d8dc.js#12" }, { "location": "dist/node/cli.js#13" }, { "location": "dist/node/index.js#15" }, { "location": "src/node/utils.ts#9" } ] } }, { "authors": [ { "name": "Alexander Madyankin " } ], "group": "", "name": "postcss-modules", "version": "4.3.1", "description": "PostCSS plugin to use CSS Modules everywhere", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/postcss-modules@4.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/css-modules/postcss-modules.git" } ], "type": "library", "bom-ref": "pkg:npm/postcss-modules@4.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-modules/package.json" }, { "name": "ImportedModules", "value": "postcss-modules" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-modules/package.json" } ], "concludedValue": "node_modules/postcss-modules/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#766" } ] } }, { "authors": [ { "name": "Michael Ciniawky " } ], "group": "", "name": "postcss-load-config", "version": "3.1.4", "description": "Autoload Config for PostCSS", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/postcss-load-config@3.1.4", "type": "library", "bom-ref": "pkg:npm/postcss-load-config@3.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-load-config/package.json" }, { "name": "ImportedModules", "value": "postcss-load-config" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-load-config/package.json" } ], "concludedValue": "node_modules/postcss-load-config/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#4" } ] } }, { "authors": [ { "name": "Maxime Thirouin" } ], "group": "", "name": "postcss-import", "version": "14.1.0", "description": "PostCSS plugin to import CSS files", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/postcss-import@14.1.0", "type": "library", "bom-ref": "pkg:npm/postcss-import@14.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-import/package.json" }, { "name": "ImportedModules", "value": "postcss-import" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-import/package.json" } ], "concludedValue": "node_modules/postcss-import/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#738" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "postcss", "version": "8.4.13", "description": "Tool for transforming styles with JS plugins", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/postcss@8.4.13", "externalReferences": [ { "type": "website", "url": "https://postcss.org/" } ], "type": "library", "bom-ref": "pkg:npm/postcss@8.4.13", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/package.json" }, { "name": "ImportedModules", "value": "postcss" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/package.json" } ], "concludedValue": "node_modules/postcss/package.json" } ], "occurrences": [ { "location": "dist/node/chunks/dep-f207d8dc.js#37463" }, { "location": "dist/node/chunks/dep-f3c3a2e3.js#3" }, { "location": "src/node/plugins/css.ts#16" }, { "location": "src/node/plugins/css.ts#800" }, { "location": "src/node/server/pluginContainer.ts#57" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.0.0", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/picocolors@1.0.0", "type": "library", "bom-ref": "pkg:npm/picocolors@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "ImportedModules", "value": "picocolors" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ], "occurrences": [ { "location": "scripts/patchTypes.ts#4" }, { "location": "src/node/build.ts#3" }, { "location": "src/node/cli.ts#3" }, { "location": "src/node/importGlob.ts#6" }, { "location": "src/node/logger.ts#6" }, { "location": "src/node/optimizer/index.ts#6" }, { "location": "src/node/optimizer/registerMissing.ts#1" }, { "location": "src/node/optimizer/scan.ts#9" }, { "location": "src/node/plugins/css.ts#14" }, { "location": "src/node/plugins/esbuild.ts#2" }, { "location": "src/node/plugins/importAnalysis.ts#4" }, { "location": "src/node/plugins/optimizedDeps.ts#2" }, { "location": "src/node/plugins/reporter.ts#4" }, { "location": "src/node/plugins/resolve.ts#3" }, { "location": "src/node/server/hmr.ts#4" }, { "location": "src/node/server/index.ts#9" }, { "location": "src/node/server/middlewares/error.ts#1" }, { "location": "src/node/server/middlewares/proxy.ts#5" }, { "location": "src/node/server/middlewares/transform.ts#5" }, { "location": "src/node/server/openBrowser.ts#15" }, { "location": "src/node/server/pluginContainer.ts#56" }, { "location": "src/node/server/transformRequest.ts#7" }, { "location": "src/node/server/ws.ts#6" }, { "location": "src/node/utils.ts#13" } ] } }, { "group": "", "name": "periscopic", "version": "2.0.3", "description": "periscopic", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/periscopic@2.0.3", "type": "library", "bom-ref": "pkg:npm/periscopic@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/periscopic/package.json" }, { "name": "ImportedModules", "value": "periscopic,extract_names,periscopic/extract_names" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/periscopic/package.json" } ], "concludedValue": "node_modules/periscopic/package.json" } ], "occurrences": [ { "location": "src/node/ssr/ssrTransform.ts#10" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "open", "version": "8.4.0", "description": "Open stuff like URLs, files, executables. Cross-platform.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/open@8.4.0", "type": "library", "bom-ref": "pkg:npm/open@8.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/open/package.json" }, { "name": "ImportedModules", "value": "open" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/open/package.json" } ], "concludedValue": "node_modules/open/package.json" } ], "occurrences": [ { "location": "src/node/server/openBrowser.ts#13" } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "", "name": "okie", "version": "1.0.1", "description": "Dead simple worker thread pool", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/okie@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/yyx990803/okie.git" } ], "type": "library", "bom-ref": "pkg:npm/okie@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/okie/package.json" }, { "name": "ImportedModules", "value": "okie,Worker,okie/Worker" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/okie/package.json" } ], "concludedValue": "node_modules/okie/package.json" } ], "occurrences": [ { "location": "src/node/plugins/terser.ts#1" } ] } }, { "authors": [ { "name": "Digital Bazaar" }, { "name": " Inc. (http://digitalbazaar.com/)" } ], "group": "", "name": "node-forge", "version": "1.3.1", "description": "JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.", "scope": "required", "licenses": [ { "expression": "(BSD-3-Clause OR GPL-2.0)" } ], "purl": "pkg:npm/node-forge@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/digitalbazaar/forge" }, { "type": "vcs", "url": "https://github.com/digitalbazaar/forge" } ], "type": "library", "bom-ref": "pkg:npm/node-forge@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/node-forge/package.json" }, { "name": "ImportedModules", "value": "node-forge/lib/forge,node-forge/lib/pki" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-forge/package.json" } ], "concludedValue": "node_modules/node-forge/package.json" } ], "occurrences": [ { "location": "src/node/certificate.ts#37" }, { "location": "src/node/certificate.ts#39" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "mrmime", "version": "1.0.0", "description": "A tiny (2.8kB) and fast utility for getting a MIME type from an extension or filename", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mrmime@1.0.0", "type": "library", "bom-ref": "pkg:npm/mrmime@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mrmime/package.json" }, { "name": "ImportedModules", "value": "mrmime" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mrmime/package.json" } ], "concludedValue": "node_modules/mrmime/package.json" } ], "occurrences": [ { "location": "src/node/plugins/asset.ts#5" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "micromatch", "version": "4.0.5", "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/micromatch@4.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/micromatch" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/micromatch/package.json" }, { "name": "ImportedModules", "value": "micromatch,isMatch,micromatch/isMatch" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/micromatch/package.json" } ], "concludedValue": "node_modules/micromatch/package.json" } ], "occurrences": [ { "location": "src/node/server/hmr.ts#7" }, { "location": "src/node/server/middlewares/static.ts#6" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.26.1", "description": "Modify strings, generate sourcemaps", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/magic-string@0.26.1", "type": "library", "bom-ref": "pkg:npm/magic-string@0.26.1", "properties": [ { "name": "SrcFile", "value": "node_modules/magic-string/package.json" }, { "name": "ImportedModules", "value": "magic-string" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magic-string/package.json" } ], "concludedValue": "node_modules/magic-string/package.json" } ], "occurrences": [ { "location": "scripts/patchTypes.ts#6" }, { "location": "src/node/optimizer/scan.ts#8" }, { "location": "src/node/plugins/asset.ts#7" }, { "location": "src/node/plugins/assetImportMetaUrl.ts#2" }, { "location": "src/node/plugins/css.ts#15" }, { "location": "src/node/plugins/define.ts#1" }, { "location": "src/node/plugins/html.ts#9" }, { "location": "src/node/plugins/importAnalysis.ts#5" }, { "location": "src/node/plugins/importAnalysisBuild.ts#2" }, { "location": "src/node/plugins/ssrRequireHook.ts#1" }, { "location": "src/node/plugins/workerImportMetaUrl.ts#3" }, { "location": "src/node/server/middlewares/indexHtml.ts#3" }, { "location": "src/node/server/pluginContainer.ts#54" }, { "location": "src/node/ssr/ssrTransform.ts#1" } ] } }, { "authors": [ { "name": "Alexis Sellier " } ], "group": "", "name": "less", "version": "4.1.2", "description": "Leaner CSS", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/less@4.1.2", "externalReferences": [ { "type": "website", "url": "http://lesscss.org" }, { "type": "vcs", "url": "https://github.com/less/less.js.git" } ], "type": "library", "bom-ref": "pkg:npm/less@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/less/package.json" }, { "name": "ImportedModules", "value": "less" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/less/package.json" } ], "concludedValue": "node_modules/less/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#21" } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "", "name": "launch-editor-middleware", "version": "2.3.0", "description": "express middleware for launching editor", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/launch-editor-middleware@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yyx990803/launch-editor#readme" }, { "type": "vcs", "url": "git+https://github.com/yyx990803/launch-editor.git" } ], "type": "library", "bom-ref": "pkg:npm/launch-editor-middleware@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/launch-editor-middleware/package.json" }, { "name": "ImportedModules", "value": "launch-editor-middleware" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/launch-editor-middleware/package.json" } ], "concludedValue": "node_modules/launch-editor-middleware/package.json" } ], "occurrences": [ { "location": "src/node/server/index.ts#13" } ] }, "tags": [ "middleware" ] }, { "authors": [ { "name": "Aseem Kishore " } ], "group": "", "name": "json5", "version": "2.2.1", "description": "JSON for humans.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/json5@2.2.1", "externalReferences": [ { "type": "website", "url": "http://json5.org/" }, { "type": "vcs", "url": "git+https://github.com/json5/json5.git" } ], "type": "library", "bom-ref": "pkg:npm/json5@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json5/package.json" }, { "name": "ImportedModules", "value": "json5" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json5/package.json" } ], "concludedValue": "node_modules/json5/package.json" } ], "occurrences": [ { "location": "src/node/importGlob.ts#4" }, { "location": "src/node/plugins/workerImportMetaUrl.ts#2" } ] } }, { "authors": [ { "name": "Charlie Robbins " } ], "group": "", "name": "http-proxy", "version": "1.18.1", "description": "HTTP proxying for the masses", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/http-proxy@1.18.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/http-party/node-http-proxy.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy@1.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/http-proxy/package.json" }, { "name": "ImportedModules", "value": "http-proxy" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-proxy/package.json" } ], "concludedValue": "node_modules/http-proxy/package.json" } ], "occurrences": [ { "location": "src/node/server/middlewares/proxy.ts#2" } ] } }, { "authors": [ { "name": "Denis Malinochkin (https://mrmlnc.com)" } ], "group": "", "name": "fast-glob", "version": "3.2.11", "description": "It's a very fast and efficient glob library for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/fast-glob@3.2.11", "type": "library", "bom-ref": "pkg:npm/fast-glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-glob/package.json" }, { "name": "ImportedModules", "value": "fast-glob" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-glob/package.json" } ], "concludedValue": "node_modules/fast-glob/package.json" } ], "occurrences": [ { "location": "src/node/importGlob.ts#3" }, { "location": "src/node/optimizer/scan.ts#4" }, { "location": "src/node/plugins/css.ts#3" } ] } }, { "group": "", "name": "etag", "version": "1.8.1", "description": "Create simple HTTP ETags", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/etag@1.8.1", "type": "library", "bom-ref": "pkg:npm/etag@1.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/etag/package.json" }, { "name": "ImportedModules", "value": "etag" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/etag/package.json" } ], "concludedValue": "node_modules/etag/package.json" } ], "occurrences": [ { "location": "src/node/server/send.ts#2" }, { "location": "src/node/server/transformRequest.ts#4" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "estree-walker", "version": "2.0.2", "description": "Traverse an ESTree-compliant AST", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/estree-walker@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/estree-walker" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/estree-walker/package.json" }, { "name": "ImportedModules", "value": "estree-walker,walk,estree-walker/walk" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estree-walker/package.json" } ], "concludedValue": "node_modules/estree-walker/package.json" } ], "occurrences": [ { "location": "src/node/ssr/ssrTransform.ts#11" } ] } }, { "group": "", "name": "esbuild", "version": "0.14.27", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/esbuild@0.14.27", "type": "library", "bom-ref": "pkg:npm/esbuild@0.14.27", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" }, { "name": "ExportedModules", "value": "esbuild" }, { "name": "ImportedModules", "value": "esbuild,TransformOptions,esbuild/TransformOptions,ImportKind,esbuild/ImportKind,Plugin,esbuild/Plugin,BuildOptions,esbuild/BuildOptions,build,esbuild/build,Loader,esbuild/Loader,OnLoadResult,esbuild/OnLoadResult,transform,esbuild/transform,formatMessages,esbuild/formatMessages,Message,esbuild/Message,TransformResult,esbuild/TransformResult" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ], "occurrences": [ { "location": "dist/node/chunks/dep-d1fadabd.js#11" }, { "location": "dist/node/chunks/dep-f207d8dc.js#9" }, { "location": "dist/node/cli.js#11" }, { "location": "dist/node/index.js#12" }, { "location": "src/node/build.ts#24" }, { "location": "src/node/index.ts#73" }, { "location": "src/node/optimizer/esbuildDepPlugin.ts#2" }, { "location": "src/node/optimizer/index.ts#7" }, { "location": "src/node/optimizer/index.ts#8" }, { "location": "src/node/optimizer/scan.ts#5" }, { "location": "src/node/optimizer/scan.ts#6" }, { "location": "src/node/plugins/css.ts#23" }, { "location": "src/node/plugins/esbuild.ts#8" }, { "location": "src/node/plugins/esbuild.ts#9" }, { "location": "src/node/server/index.ts#14" } ] } }, { "authors": [ { "name": "Guy Bedford" } ], "group": "", "name": "es-module-lexer", "version": "0.10.5", "description": "Lexes ES modules returning their import/export metadata", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/es-module-lexer@0.10.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/guybedford/es-module-lexer#readme" }, { "type": "vcs", "url": "git+https://github.com/guybedford/es-module-lexer.git" } ], "type": "library", "bom-ref": "pkg:npm/es-module-lexer@0.10.5", "properties": [ { "name": "SrcFile", "value": "node_modules/es-module-lexer/package.json" }, { "name": "ImportedModules", "value": "es-module-lexer,init,es-module-lexer/init,parse,es-module-lexer/parse,ImportSpecifier,es-module-lexer/ImportSpecifier" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-module-lexer/package.json" } ], "concludedValue": "node_modules/es-module-lexer/package.json" } ], "occurrences": [ { "location": "src/node/optimizer/index.ts#9" }, { "location": "src/node/optimizer/scan.ts#7" }, { "location": "src/node/plugins/importAnalysis.ts#6" }, { "location": "src/node/plugins/importAnalysis.ts#7" }, { "location": "src/node/plugins/importAnalysisBuild.ts#3" }, { "location": "src/node/plugins/importAnalysisBuild.ts#4" }, { "location": "src/node/ssr/ssrManifestPlugin.ts#2" }, { "location": "src/node/ssr/ssrManifestPlugin.ts#3" } ] } }, { "authors": [ { "name": "motdotla" } ], "group": "", "name": "dotenv-expand", "version": "5.1.0", "description": "Expand environment variables using dotenv", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/dotenv-expand@5.1.0", "type": "library", "bom-ref": "pkg:npm/dotenv-expand@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/dotenv-expand/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dotenv-expand/package.json" } ], "concludedValue": "node_modules/dotenv-expand/package.json" } ] } }, { "group": "", "name": "dotenv", "version": "14.3.2", "description": "Loads environment variables from .env file", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/dotenv@14.3.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/motdotla/dotenv.git" } ], "type": "library", "bom-ref": "pkg:npm/dotenv@14.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/dotenv/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dotenv/package.json" } ], "concludedValue": "node_modules/dotenv/package.json" } ] } }, { "authors": [ { "name": "Josh Junon " } ], "group": "", "name": "debug", "version": "4.3.4", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@4.3.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "dist/node/chunks/dep-f207d8dc.js#56023" }, { "location": "src/node/optimizer/index.ts#5" }, { "location": "src/node/optimizer/registerMissing.ts#2" }, { "location": "src/node/utils.ts#14" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.3", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cross-spawn@7.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "ImportedModules", "value": "cross-spawn" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ], "occurrences": [ { "location": "src/node/server/openBrowser.ts#14" } ] } }, { "authors": [ { "name": "Troy Goode (https://github.com/troygoode/)" } ], "group": "", "name": "cors", "version": "2.8.5", "description": "Node.js CORS middleware", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cors@2.8.5", "type": "library", "bom-ref": "pkg:npm/cors@2.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/cors/package.json" }, { "name": "ImportedModules", "value": "cors" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cors/package.json" } ], "concludedValue": "node_modules/cors/package.json" } ], "occurrences": [ { "location": "src/node/preview.ts#7" }, { "location": "src/node/server/index.ts#8" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.8.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/convert-source-map@1.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "ImportedModules", "value": "convert-source-map" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ], "occurrences": [ { "location": "src/node/server/transformRequest.ts#5" } ] } }, { "authors": [ { "name": "Ben Ripkens (http://bripkens.de)" } ], "group": "", "name": "connect-history-api-fallback", "version": "1.6.0", "description": "Provides a fallback for non-existing directories so that the HTML 5 history API can be used.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/connect-history-api-fallback@1.6.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/bripkens/connect-history-api-fallback.git" } ], "type": "library", "bom-ref": "pkg:npm/connect-history-api-fallback@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/connect-history-api-fallback/package.json" }, { "name": "ImportedModules", "value": "connect-history-api-fallback" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/connect-history-api-fallback/package.json" } ], "concludedValue": "node_modules/connect-history-api-fallback/package.json" } ], "occurrences": [ { "location": "src/node/server/middlewares/spaFallback.ts#3" } ] }, "tags": [ "api", "html" ] }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "connect", "version": "3.7.0", "description": "High performance middleware framework", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/connect@3.7.0", "type": "framework", "bom-ref": "pkg:npm/connect@3.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/connect/package.json" }, { "name": "ImportedModules", "value": "connect" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/connect/package.json" } ], "concludedValue": "node_modules/connect/package.json" } ], "occurrences": [ { "location": "src/node/preview.ts#4" }, { "location": "src/node/server/index.ts#7" } ] }, "tags": [ "framework", "middleware", "performance" ] }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "3.5.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chokidar@3.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@3.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "ImportedModules", "value": "chokidar,FSWatcher,chokidar/FSWatcher" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ], "occurrences": [ { "location": "src/node/server/index.ts#10" }, { "location": "src/node/server/pluginContainer.ts#55" }, { "location": "src/node/utils.ts#10" } ] } }, { "authors": [ { "name": "egoist <0x142857@gmail.com>" } ], "group": "", "name": "cac", "version": "6.7.9", "description": "Simple yet powerful framework for building command-line apps.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cac@6.7.9", "type": "framework", "bom-ref": "pkg:npm/cac@6.7.9", "properties": [ { "name": "SrcFile", "value": "node_modules/cac/package.json" }, { "name": "ImportedModules", "value": "cac,cac/cac" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cac/package.json" } ], "concludedValue": "node_modules/cac/package.json" } ], "occurrences": [ { "location": "src/node/cli.ts#2" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "acorn", "version": "8.7.1", "description": "ECMAScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/acorn@8.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "ImportedModules", "value": "acorn,parse,acorn/parse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ], "occurrences": [ { "location": "dist/node/terser.js#32569" }, { "location": "src/node/plugins/importAnalysis.ts#8" }, { "location": "src/node/server/pluginContainer.ts#51" } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "@vue", "name": "compiler-dom", "version": "3.2.33", "description": "@vue/compiler-dom", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40vue/compiler-dom@3.2.33", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vuejs/core/tree/main/packages/compiler-dom#readme" }, { "type": "vcs", "url": "git+https://github.com/vuejs/core.git" } ], "type": "library", "bom-ref": "pkg:npm/@vue/compiler-dom@3.2.33", "properties": [ { "name": "SrcFile", "value": "node_modules/@vue/compiler-dom/package.json" }, { "name": "ImportedModules", "value": "@vue/compiler-dom,AttributeNode,@vue/compiler-dom/AttributeNode,CompilerError,@vue/compiler-dom/CompilerError,ElementNode,@vue/compiler-dom/ElementNode,NodeTransform,@vue/compiler-dom/NodeTransform,TextNode,@vue/compiler-dom/TextNode,NodeTypes,@vue/compiler-dom/NodeTypes" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vue/compiler-dom/package.json" } ], "concludedValue": "node_modules/@vue/compiler-dom/package.json" } ], "occurrences": [ { "location": "src/node/plugins/html.ts#16" }, { "location": "src/node/plugins/html.ts#17" }, { "location": "src/node/plugins/html.ts#144" }, { "location": "src/node/server/middlewares/indexHtml.ts#5" }, { "location": "src/node/server/middlewares/indexHtml.ts#6" } ] } }, { "group": "@types", "name": "ws", "version": "8.5.3", "description": "TypeScript definitions for ws", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/ws@8.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/ws@8.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/ws/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/ws/package.json" } ], "concludedValue": "node_modules/@types/ws/package.json" } ] } }, { "group": "@types", "name": "stylus", "version": "0.48.37", "description": "TypeScript definitions for stylus", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/stylus@0.48.37", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/stylus" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/stylus@0.48.37", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/stylus/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/stylus/package.json" } ], "concludedValue": "node_modules/@types/stylus/package.json" } ] } }, { "group": "@types", "name": "sass", "version": "1.43.1", "description": "TypeScript definitions for sass", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/sass@1.43.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sass" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/sass@1.43.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/sass/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/sass/package.json" } ], "concludedValue": "node_modules/@types/sass/package.json" } ] } }, { "group": "@types", "name": "resolve", "version": "1.20.2", "description": "TypeScript definitions for resolve", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/resolve@1.20.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/resolve" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/resolve@1.20.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/resolve/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/resolve/package.json" } ], "concludedValue": "node_modules/@types/resolve/package.json" } ] } }, { "group": "@types", "name": "node", "version": "17.0.25", "description": "TypeScript definitions for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/node@17.0.25", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@17.0.25", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "mime", "version": "2.0.3", "description": "TypeScript definitions for mime", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/mime@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/mime@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/mime/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/mime/package.json" } ], "concludedValue": "node_modules/@types/mime/package.json" } ] } }, { "group": "@types", "name": "micromatch", "version": "4.0.2", "description": "TypeScript definitions for micromatch", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/micromatch@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/micromatch" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/micromatch@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/micromatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/micromatch/package.json" } ], "concludedValue": "node_modules/@types/micromatch/package.json" } ] } }, { "group": "@types", "name": "less", "version": "3.0.3", "description": "TypeScript definitions for LESS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/less@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/less" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/less@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/less/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/less/package.json" } ], "concludedValue": "node_modules/@types/less/package.json" } ] } }, { "group": "@types", "name": "etag", "version": "1.8.1", "description": "TypeScript definitions for etag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/etag@1.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/etag" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/etag@1.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/etag/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/etag/package.json" } ], "concludedValue": "node_modules/@types/etag/package.json" } ] } }, { "group": "@types", "name": "estree", "version": "0.0.51", "description": "TypeScript definitions for ESTree AST specification", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/estree@0.0.51", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@0.0.51", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/estree/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/estree/package.json" } ], "concludedValue": "node_modules/@types/estree/package.json" } ] } }, { "group": "@types", "name": "debug", "version": "4.1.7", "description": "TypeScript definitions for debug", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/debug@4.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/debug@4.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/debug/package.json" } ], "concludedValue": "node_modules/@types/debug/package.json" } ] } }, { "group": "@types", "name": "cross-spawn", "version": "6.0.2", "description": "TypeScript definitions for cross-spawn", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/cross-spawn@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/cross-spawn@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/cross-spawn/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/cross-spawn/package.json" } ], "concludedValue": "node_modules/@types/cross-spawn/package.json" } ] } }, { "group": "@types", "name": "convert-source-map", "version": "1.5.2", "description": "TypeScript definitions for convert-source-map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/convert-source-map@1.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/convert-source-map" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/convert-source-map@1.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/convert-source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/convert-source-map/package.json" } ], "concludedValue": "node_modules/@types/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "pluginutils", "version": "4.2.1", "description": "A set of utility functions commonly used by Rollup plugins", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/pluginutils@4.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/pluginutils#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/pluginutils@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/pluginutils/package.json" }, { "name": "ImportedModules", "value": "@rollup/pluginutils,createFilter,@rollup/pluginutils/createFilter,dataToEsm,@rollup/pluginutils/dataToEsm,makeLegalIdentifier,@rollup/pluginutils/makeLegalIdentifier" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/pluginutils/package.json" } ], "concludedValue": "node_modules/@rollup/pluginutils/package.json" } ], "occurrences": [ { "location": "src/node/packages.ts#3" }, { "location": "src/node/plugins/css.ts#13" }, { "location": "src/node/plugins/esbuild.ts#12" }, { "location": "src/node/plugins/importAnalysis.ts#10" }, { "location": "src/node/plugins/json.ts#9" }, { "location": "src/node/ssr/ssrExternal.ts#3" } ] } }, { "authors": [ { "name": "Oskar Segersvärd" } ], "group": "@rollup", "name": "plugin-typescript", "version": "8.3.2", "description": "Seamless integration between Rollup and TypeScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-typescript@8.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/typescript/#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-typescript@8.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-typescript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-typescript/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-typescript/package.json" } ] } }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "plugin-node-resolve", "version": "13.2.1", "description": "Locate and bundle third-party dependencies in node_modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-node-resolve@13.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/node-resolve/#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-node-resolve@13.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-node-resolve/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-node-resolve/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-node-resolve/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "rollup" } ], "group": "@rollup", "name": "plugin-json", "version": "4.1.0", "description": "Convert .json files to ES6 modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-json@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/json#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-json@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-json/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-json/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-json/package.json" } ] } }, { "authors": [ { "name": "LarsDenBakker" } ], "group": "@rollup", "name": "plugin-dynamic-import-vars", "version": "1.4.3", "description": "Resolving dynamic imports that contain variables.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-dynamic-import-vars@1.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/dynamic-import-vars" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-dynamic-import-vars@1.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-dynamic-import-vars/package.json" }, { "name": "ImportedModules", "value": "@rollup/plugin-dynamic-import-vars" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-dynamic-import-vars/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-dynamic-import-vars/package.json" } ], "occurrences": [ { "location": "src/node/build.ts#22" } ] } }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "plugin-commonjs", "version": "21.1.0", "description": "Convert CommonJS modules to ES2015", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-commonjs@21.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/commonjs/#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-commonjs@21.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-commonjs/package.json" }, { "name": "ImportedModules", "value": "@rollup/plugin-commonjs" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-commonjs/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-commonjs/package.json" } ], "occurrences": [ { "location": "src/node/build.ts#20" } ] } }, { "authors": [ { "name": "Johannes Stein" } ], "group": "@rollup", "name": "plugin-alias", "version": "3.1.9", "description": "Define and resolve aliases for bundle dependencies", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-alias@3.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/alias#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-alias@3.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-alias/package.json" }, { "name": "ImportedModules", "value": "@rollup/plugin-alias" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-alias/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-alias/package.json" } ], "occurrences": [ { "location": "src/node/plugins/index.ts#1" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.9", "description": "Trace the original position through a source map", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.9", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/trace-mapping.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "ImportedModules", "value": "@jridgewell/trace-mapping,TraceMap,@jridgewell/trace-mapping/TraceMap,originalPositionFor,@jridgewell/trace-mapping/originalPositionFor" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ], "occurrences": [ { "location": "src/node/server/pluginContainer.ts#53" }, { "location": "src/node/ssr/ssrStacktrace.ts#1" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "types", "version": "7.17.10", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40babel/types@7.17.10", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-types" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.17.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "ExportedModules", "value": "types/alias,types/hmrPayload,types/connect,types/ws,types/http-proxy,types/chokidar,types/terser,types/commonjs,types/dynamicImportVars,types/customEvent,types/anymatch,AliasOptions,types/alias/AliasOptions,ResolverFunction,types/alias/ResolverFunction,ResolverObject,types/alias/ResolverObject,ConnectedPayload,types/hmrPayload/ConnectedPayload,UpdatePayload,types/hmrPayload/UpdatePayload,Update,types/hmrPayload/Update,FullReloadPayload,types/hmrPayload/FullReloadPayload,CustomPayload,types/hmrPayload/CustomPayload,PrunePayload,types/hmrPayload/PrunePayload,ErrorPayload,types/hmrPayload/ErrorPayload,WebSocket,types/ws/WebSocket,WebSocketAlias,types/ws/WebSocketAlias,FSWatcher,types/chokidar/FSWatcher,WatchOptions,types/chokidar/WatchOptions,AwaitWriteFinishOptions,types/chokidar/AwaitWriteFinishOptions,CustomEventMap,types/customEvent/CustomEventMap,InferCustomEventPayload,types/customEvent/InferCustomEventPayload,Matcher,types/anymatch/Matcher,AnymatchPattern,types/anymatch/AnymatchPattern,AnymatchFn,types/anymatch/AnymatchFn" }, { "name": "ImportedModules", "value": "types/hmrPayload,ErrorPayload,types/hmrPayload/ErrorPayload,HMRPayload,types/hmrPayload/HMRPayload,Update,types/hmrPayload/Update,CustomPayload,types/hmrPayload/CustomPayload,types/hot,ViteHotContext,types/hot/ViteHotContext,types/customEvent,InferCustomEventPayload,types/customEvent/InferCustomEventPayload,types/terser,Terser,types/terser/Terser,types/commonjs,RollupCommonJSOptions,types/commonjs/RollupCommonJSOptions,types/dynamicImportVars,RollupDynamicImportVarsOptions,types/dynamicImportVars/RollupDynamicImportVarsOptions,types/connect,Connect,types/connect/Connect,types/alias,types/ws,types/http-proxy,types/chokidar,types/anymatch,Alias,types/alias/Alias,FSWatcher,types/chokidar/FSWatcher,WatchOptions,types/chokidar/WatchOptions,HttpProxy,types/http-proxy/HttpProxy,WebSocket,types/ws/WebSocket" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ], "occurrences": [ { "location": "src/client/client.ts#1" }, { "location": "src/client/overlay.ts#1" }, { "location": "src/node/index.ts#100" }, { "location": "src/node/server/hmr.ts#5" }, { "location": "src/node/server/middlewares/error.ts#5" }, { "location": "src/node/server/ws.ts#10" }, { "location": "src/client/client.ts#2" }, { "location": "src/client/client.ts#3" }, { "location": "src/node/build.ts#19" }, { "location": "src/node/build.ts#21" }, { "location": "src/node/build.ts#23" }, { "location": "src/node/http.ts#8" }, { "location": "src/node/index.ts#62" }, { "location": "src/node/index.ts#101" }, { "location": "src/node/index.ts#102" }, { "location": "src/node/index.ts#103" }, { "location": "src/node/index.ts#108" }, { "location": "src/node/index.ts#109" }, { "location": "src/node/index.ts#110" }, { "location": "src/node/index.ts#111" }, { "location": "src/node/index.ts#112" }, { "location": "src/node/index.ts#113" }, { "location": "src/node/plugins/css.ts#22" }, { "location": "src/node/plugins/terser.ts#2" }, { "location": "src/node/preview.ts#6" }, { "location": "src/node/server/index.ts#11" }, { "location": "src/node/server/index.ts#12" }, { "location": "src/node/server/middlewares/base.ts#2" }, { "location": "src/node/server/middlewares/error.ts#3" }, { "location": "src/node/server/middlewares/indexHtml.ts#7" }, { "location": "src/node/server/middlewares/proxy.ts#3" }, { "location": "src/node/server/middlewares/proxy.ts#4" }, { "location": "src/node/server/middlewares/rejectInvalidRequest.ts#1" }, { "location": "src/node/server/middlewares/spaFallback.ts#4" }, { "location": "src/node/server/middlewares/static.ts#5" }, { "location": "src/node/server/middlewares/time.ts#2" }, { "location": "src/node/server/middlewares/transform.ts#4" }, { "location": "src/node/server/ws.ts#9" }, { "location": "src/node/server/ws.ts#11" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "parser", "version": "7.17.10", "description": "A JavaScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40babel/parser@7.17.10", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-parser" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.17.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "ImportedModules", "value": "@babel/parser,ParseResult,@babel/parser/ParseResult,parse,@babel/parser/parse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ], "occurrences": [ { "location": "scripts/patchTypes.ts#1" }, { "location": "scripts/patchTypes.ts#2" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@ampproject", "name": "remapping", "version": "2.2.0", "description": "Remap sequential sourcemaps through transformations to point at the original source code", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40ampproject/remapping@2.2.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ampproject/remapping.git" } ], "type": "library", "bom-ref": "pkg:npm/@ampproject/remapping@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@ampproject/remapping/package.json" }, { "name": "ImportedModules", "value": "@ampproject/remapping,RawSourceMap,@ampproject/remapping/RawSourceMap,DecodedSourceMap,@ampproject/remapping/DecodedSourceMap" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@ampproject/remapping/package.json" } ], "concludedValue": "node_modules/@ampproject/remapping/package.json" } ], "occurrences": [ { "location": "src/node/plugins/css.ts#24" }, { "location": "src/node/plugins/esbuild.ts#10" }, { "location": "src/node/plugins/importAnalysisBuild.ts#6" }, { "location": "src/node/server/pluginContainer.ts#52" }, { "location": "src/node/ssr/ssrTransform.ts#12" }, { "location": "src/node/utils.ts#11" }, { "location": "src/node/utils.ts#12" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/vite@2.9.18-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-04-30T21:50:11Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, April 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'vite' with version '2.9.18-tuxcare.1'. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from 72 source files." } ] }