{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:9b1868ce-3be6-41a2-88f3-7ffbf20f9327", "version": 1, "metadata": { "timestamp": "2026-09-14T07:54:05Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "workbox-routing", "group": "", "version": "5.1.4", "description": "A service worker helper library to route request URLs to handlers.", "purl": "pkg:npm/workbox-routing@5.1.4", "bom-ref": "pkg:npm/workbox-routing@5.1.4", "author": "Google's Web DevRel Team", "properties": [ { "name": "cdx:npm:scripts", "value": "build, version, prepare" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/GoogleChrome/workbox" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "workbox-core", "version": "5.0.0-alpha.0", "scope": "required", "purl": "pkg:npm/workbox-core@5.0.0-alpha.0", "type": "library", "bom-ref": "pkg:npm/workbox-core@5.0.0-alpha.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:versionMismatchError", "value": "5.1.4 used instead of 5.0.0-alpha.0" }, { "name": "ImportedModules", "value": "workbox-core/_private/assert.js,assert,workbox-core/_private/assert.js/assert,workbox-core/_private/logger.js,logger,workbox-core/_private/logger.js/logger,workbox-core/_private/WorkboxError.js,WorkboxError,workbox-core/_private/WorkboxError.js/WorkboxError,workbox-core/_private/getFriendlyURL.js,getFriendlyURL,workbox-core/_private/getFriendlyURL.js/getFriendlyURL,workbox-core/types.js,RouteHandler,workbox-core/types.js/RouteHandler,RouteHandlerObject,workbox-core/types.js/RouteHandlerObject,RouteHandlerCallback,workbox-core/types.js/RouteHandlerCallback,RouteHandlerCallbackOptions,workbox-core/types.js/RouteHandlerCallbackOptions,RouteMatchCallback,workbox-core/types.js/RouteMatchCallback,RouteMatchCallbackOptions,workbox-core/types.js/RouteMatchCallbackOptions" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "NavigationRoute.js", "line": 8 }, { "location": "NavigationRoute.js", "line": 49 }, { "location": "NavigationRoute.js", "line": 55 }, { "location": "RegExpRoute.js", "line": 8 }, { "location": "RegExpRoute.js", "line": 41 }, { "location": "Route.js", "line": 8 }, { "location": "Route.js", "line": 35 }, { "location": "Route.js", "line": 42 }, { "location": "Router.js", "line": 8 }, { "location": "Router.js", "line": 123 }, { "location": "Router.js", "line": 223 }, { "location": "Router.js", "line": 229 }, { "location": "Router.js", "line": 295 }, { "location": "Router.js", "line": 301 }, { "location": "Router.js", "line": 307 }, { "location": "Router.js", "line": 313 }, { "location": "Router.js", "line": 319 }, { "location": "utils/normalizeHandler.js", "line": 8 }, { "location": "utils/normalizeHandler.js", "line": 20 }, { "location": "utils/normalizeHandler.js", "line": 31 }, { "location": "src/NavigationRoute.ts", "line": 9 }, { "location": "src/RegExpRoute.ts", "line": 9 }, { "location": "src/Route.ts", "line": 9 }, { "location": "src/Router.ts", "line": 9 }, { "location": "src/utils/normalizeHandler.ts", "line": 9 }, { "location": "NavigationRoute.js", "line": 9 }, { "location": "RegExpRoute.js", "line": 9 }, { "location": "Router.js", "line": 9 }, { "location": "Router.js", "line": 10 }, { "location": "Router.js", "line": 11 }, { "location": "registerRoute.js", "line": 8 }, { "location": "registerRoute.js", "line": 9 }, { "location": "src/NavigationRoute.ts", "line": 10 }, { "location": "src/RegExpRoute.ts", "line": 10 }, { "location": "src/Router.ts", "line": 10 }, { "location": "src/Router.ts", "line": 11 }, { "location": "src/Router.ts", "line": 12 }, { "location": "src/_types.ts", "line": 16 }, { "location": "src/registerRoute.ts", "line": 9 }, { "location": "src/registerRoute.ts", "line": 10 }, { "location": "NavigationRoute.js", "line": 84 }, { "location": "NavigationRoute.js", "line": 93 }, { "location": "NavigationRoute.js", "line": 99 }, { "location": "RegExpRoute.js", "line": 60 }, { "location": "Router.js", "line": 88 }, { "location": "Router.js", "line": 133 }, { "location": "Router.js", "line": 165 }, { "location": "Router.js", "line": 172 }, { "location": "Router.js", "line": 175 }, { "location": "Router.js", "line": 178 }, { "location": "Router.js", "line": 181 }, { "location": "Router.js", "line": 197 }, { "location": "Router.js", "line": 199 }, { "location": "Router.js", "line": 200 }, { "location": "Router.js", "line": 201 }, { "location": "registerRoute.js", "line": 52 }, { "location": "registerRoute.js", "line": 61 }, { "location": "src/NavigationRoute.ts", "line": 101 }, { "location": "src/NavigationRoute.ts", "line": 111 }, { "location": "src/NavigationRoute.ts", "line": 118 }, { "location": "src/RegExpRoute.ts", "line": 68 }, { "location": "src/Router.ts", "line": 112 }, { "location": "src/Router.ts", "line": 168 }, { "location": "src/Router.ts", "line": 206 }, { "location": "src/Router.ts", "line": 214 }, { "location": "src/Router.ts", "line": 218 }, { "location": "src/Router.ts", "line": 220 }, { "location": "src/Router.ts", "line": 224 }, { "location": "src/Router.ts", "line": 241 }, { "location": "src/Router.ts", "line": 243 }, { "location": "src/Router.ts", "line": 244 }, { "location": "src/Router.ts", "line": 245 }, { "location": "src/registerRoute.ts", "line": 64 }, { "location": "src/registerRoute.ts", "line": 76 }, { "location": "Router.js", "line": 198 }, { "location": "src/Router.ts", "line": 242 } ] } } ], "dependencies": [ { "ref": "pkg:npm/workbox-core@5.0.0-alpha.0", "dependsOn": [] }, { "ref": "pkg:npm/workbox-routing@5.1.4", "dependsOn": [ "pkg:npm/workbox-core@5.0.0-alpha.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/workbox-routing@5.1.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-14T07:54:05Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'workbox-routing' with version '5.1.4'." } ] }