{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:0ab701cf-cd33-44ef-98fe-0021eed71757", "version": 1, "metadata": { "timestamp": "2026-10-29T22:05:36Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "selenium-webdriver", "group": "", "version": "2.47.0-tuxcare.1", "description": "The official WebDriver JavaScript bindings from the Selenium project", "purl": "pkg:npm/selenium-webdriver@2.47.0-tuxcare.1", "bom-ref": "pkg:npm/selenium-webdriver@2.47.0-tuxcare.1", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/SeleniumHQ/selenium" }, { "type": "vcs", "url": "https://github.com/SeleniumHQ/selenium.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/accepts/package.json\\nnode_modules/adm-zip/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-flatten/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/batch/package.json\\nnode_modules/bindings/package.json\\nnode_modules/body-parser/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/bufferutil/package.json\\nnode_modules/busboy/package.json\\nnode_modules/bytes/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/content-disposition/package.json\\nnode_modules/content-type/package.json\\nnode_modules/cookie-signature/package.json\\nnode_modules/cookie/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/debug/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/depd/package.json\\nnode_modules/destroy/package.json\\nnode_modules/dicer/package.json\\nnode_modules/diff/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/ee-first/package.json\\nnode_modules/encodeurl/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/escape-html/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/etag/package.json\\nnode_modules/express/package.json\\nnode_modules/finalhandler/package.json\\nnode_modules/find-up-simple/package.json\\nnode_modules/for-each/package.json\\nnode_modules/formatio/package.json\\nnode_modules/forwarded/package.json\\nnode_modules/fresh/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/generator-function/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/glob/package.json\\nnode_modules/gopd/package.json\\nnode_modules/growl/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/hasown/package.json\\nnode_modules/http-errors/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ipaddr.js/package.json\\nnode_modules/is-arguments/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-generator-function/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isarray/package.json\\nnode_modules/jade/node_modules/commander/package.json\\nnode_modules/jade/node_modules/mkdirp/package.json\\nnode_modules/jade/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/lolex/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/media-typer/package.json\\nnode_modules/merge-descriptors/package.json\\nnode_modules/methods/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/minipass/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/balanced-match/package.json\\nnode_modules/mocha/node_modules/brace-expansion/package.json\\nnode_modules/mocha/node_modules/debug/package.json\\nnode_modules/mocha/node_modules/glob/package.json\\nnode_modules/mocha/node_modules/minimatch/package.json\\nnode_modules/mocha/node_modules/ms/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/multer/node_modules/mime-db/package.json\\nnode_modules/multer/node_modules/mime-types/package.json\\nnode_modules/multer/node_modules/qs/package.json\\nnode_modules/multer/node_modules/type-is/package.json\\nnode_modules/multer/package.json\\nnode_modules/nan/package.json\\nnode_modules/nan/tools/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/on-finished/package.json\\nnode_modules/once/package.json\\nnode_modules/options/package.json\\nnode_modules/parseurl/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/path-to-regexp/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/promises-aplus-tests/node_modules/debug/package.json\\nnode_modules/promises-aplus-tests/node_modules/diff/package.json\\nnode_modules/promises-aplus-tests/node_modules/glob/package.json\\nnode_modules/promises-aplus-tests/node_modules/lru-cache/package.json\\nnode_modules/promises-aplus-tests/node_modules/minimatch/package.json\\nnode_modules/promises-aplus-tests/node_modules/mkdirp/package.json\\nnode_modules/promises-aplus-tests/node_modules/mocha/package.json\\nnode_modules/promises-aplus-tests/node_modules/ms/package.json\\nnode_modules/promises-aplus-tests/node_modules/supports-color/package.json\\nnode_modules/promises-aplus-tests/package.json\\nnode_modules/proxy-addr/package.json\\nnode_modules/qs/package.json\\nnode_modules/range-parser/package.json\\nnode_modules/raw-body/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safe-regex-test/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/samsam/package.json\\nnode_modules/sax/package.json\\nnode_modules/send/node_modules/ms/package.json\\nnode_modules/send/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/serve-index/node_modules/depd/package.json\\nnode_modules/serve-index/node_modules/http-errors/package.json\\nnode_modules/serve-index/node_modules/statuses/package.json\\nnode_modules/serve-index/package.json\\nnode_modules/serve-static/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/setprototypeof/package.json\\nnode_modules/side-channel-list/package.json\\nnode_modules/side-channel-map/package.json\\nnode_modules/side-channel-weakmap/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/sigmund/package.json\\nnode_modules/sinon/package.json\\nnode_modules/statuses/package.json\\nnode_modules/streamsearch/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/tmp/package.json\\nnode_modules/to-iso-string/package.json\\nnode_modules/toidentifier/package.json\\nnode_modules/type-is/package.json\\nnode_modules/ultron/package.json\\nnode_modules/underscore/package.json\\nnode_modules/unpipe/package.json\\nnode_modules/utf-8-validate/node_modules/nan/package.json\\nnode_modules/utf-8-validate/node_modules/nan/tools/package.json\\nnode_modules/utf-8-validate/package.json\\nnode_modules/util/package.json\\nnode_modules/utils-merge/package.json\\nnode_modules/vary/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/workerpool/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/ws/package.json\\nnode_modules/xml2js/package.json\\nnode_modules/xmlbuilder/package.json" } ] }, "components": [ { "authors": [ { "name": "Ozgur Ozcitak " } ], "group": "", "name": "xmlbuilder", "version": "15.1.1", "description": "An XML builder for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xmlbuilder@15.1.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/oozcitak/xmlbuilder-js" }, { "type": "vcs", "url": "git://github.com/oozcitak/xmlbuilder-js.git" } ], "type": "library", "bom-ref": "pkg:npm/xmlbuilder@15.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/xmlbuilder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xmlbuilder/package.json" } ], "concludedValue": "node_modules/xmlbuilder/package.json" } ] }, "tags": [ "xml" ] }, { "authors": [ { "name": "Marek Kubica (http://xivilization.net)" } ], "group": "", "name": "xml2js", "version": "0.4.4", "description": "Simple XML to JavaScript object converter.", "scope": "required", "purl": "pkg:npm/xml2js@0.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Leonidas-from-XIV/node-xml2js" }, { "type": "vcs", "url": "git+https://github.com/Leonidas-from-XIV/node-xml2js.git" } ], "type": "library", "bom-ref": "pkg:npm/xml2js@0.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/xml2js/package.json" }, { "name": "ImportedModules", "value": "xml2js" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xml2js/package.json" } ], "concludedValue": "node_modules/xml2js/package.json" } ], "occurrences": [ { "location": "firefox/extension.js", "line": 26 } ] }, "tags": [ "xml" ] }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "0.8.1", "description": "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@0.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws#readme" }, { "type": "vcs", "url": "git://github.com/websockets/ws.git" } ], "type": "library", "bom-ref": "pkg:npm/ws@0.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "ImportedModules", "value": "ws" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ], "occurrences": [ { "location": "safari.js", "line": 35 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "git+https://github.com/npm/wrappy.git" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Jos de Jong (https://github.com/josdejong)" } ], "group": "", "name": "workerpool", "version": "10.0.3", "description": "Offload tasks to a pool of workers on node.js and in the browser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/workerpool@10.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/josdejong/workerpool" }, { "type": "vcs", "url": "git://github.com/josdejong/workerpool.git" } ], "type": "library", "bom-ref": "pkg:npm/workerpool@10.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/workerpool/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/workerpool/package.json" } ], "concludedValue": "node_modules/workerpool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "which-typed-array", "version": "1.1.24", "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-typed-array@1.1.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/which-typed-array#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/which-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/which-typed-array@1.1.24", "properties": [ { "name": "SrcFile", "value": "node_modules/which-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-typed-array/package.json" } ], "concludedValue": "node_modules/which-typed-array/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "vary", "version": "1.1.2", "description": "Manipulate the HTTP Vary header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vary@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/vary#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/vary.git" } ], "type": "library", "bom-ref": "pkg:npm/vary@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/vary/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vary/package.json" } ], "concludedValue": "node_modules/vary/package.json" } ] } }, { "authors": [ { "name": "Jared Hanson (http://www.jaredhanson.net/)" } ], "group": "", "name": "utils-merge", "version": "1.0.1", "description": "merge() utility function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/utils-merge@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jaredhanson/utils-merge#readme" }, { "type": "vcs", "url": "git://github.com/jaredhanson/utils-merge.git" } ], "type": "library", "bom-ref": "pkg:npm/utils-merge@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/utils-merge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/utils-merge/package.json" } ], "concludedValue": "node_modules/utils-merge/package.json" } ] } }, { "authors": [ { "name": "Joyent (http://www.joyent.com)" } ], "group": "", "name": "util", "version": "0.12.5", "description": "Node.js's util module for all engines", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.12.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/node-util" }, { "type": "vcs", "url": "git://github.com/browserify/node-util.git" } ], "type": "library", "bom-ref": "pkg:npm/util@0.12.5", "properties": [ { "name": "SrcFile", "value": "node_modules/util/package.json" }, { "name": "ImportedModules", "value": "util" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/package.json" } ], "concludedValue": "node_modules/util/package.json" } ], "occurrences": [ { "location": "chrome.js", "line": 118 }, { "location": "firefox/binary.js", "line": 28 }, { "location": "firefox/extension.js", "line": 25 }, { "location": "firefox/index.js", "line": 98 }, { "location": "firefox/profile.js", "line": 28 }, { "location": "ie.js", "line": 31 }, { "location": "opera.js", "line": 76 }, { "location": "phantomjs.js", "line": 21 }, { "location": "proxy.js", "line": 32 }, { "location": "remote/index.js", "line": 24 }, { "location": "safari.js", "line": 34 } ] } }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "utf-8-validate", "version": "1.2.2", "description": "Validate UTF-8 for Web", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/utf-8-validate@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/utf-8-validate" }, { "type": "vcs", "url": "git+https://github.com/websockets/utf-8-validate.git" } ], "type": "library", "bom-ref": "pkg:npm/utf-8-validate@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/utf-8-validate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/utf-8-validate/package.json" } ], "concludedValue": "node_modules/utf-8-validate/package.json" } ] } }, { "group": "", "name": "nan", "version": "2.4.0", "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 6 compatibility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nan@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/nan#readme" }, { "type": "vcs", "url": "git://github.com/nodejs/nan.git" } ], "type": "library", "bom-ref": "pkg:npm/nan@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/utf-8-validate/node_modules/nan/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/utf-8-validate/node_modules/nan/package.json" } ], "concludedValue": "node_modules/utf-8-validate/node_modules/nan/package.json" } ] } }, { "group": "", "name": "1to2", "version": "1.0.0", "description": "NAN 1 -> 2 Migration Script", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/1to2@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/nan.git" } ], "type": "library", "bom-ref": "pkg:npm/1to2@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/utf-8-validate/node_modules/nan/tools/package.json" }, { "name": "SrcFile", "value": "node_modules/nan/tools/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nan/tools/package.json" } ], "concludedValue": "node_modules/nan/tools/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "unpipe", "version": "1.0.0", "description": "Unpipe a stream from all destinations", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unpipe@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stream-utils/unpipe#readme" }, { "type": "vcs", "url": "git+https://github.com/stream-utils/unpipe.git" } ], "type": "library", "bom-ref": "pkg:npm/unpipe@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unpipe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unpipe/package.json" } ], "concludedValue": "node_modules/unpipe/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Jeremy Ashkenas " } ], "group": "", "name": "underscore", "version": "1.8.3", "description": "JavaScript's functional programming helper library.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/underscore@1.8.3", "externalReferences": [ { "type": "website", "url": "http://underscorejs.org" }, { "type": "vcs", "url": "git://github.com/jashkenas/underscore.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/underscore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/underscore/package.json" } ], "concludedValue": "node_modules/underscore/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "ultron", "version": "1.0.2", "description": "Ultron is high-intelligence robot. It gathers intel so it can start improving upon his rudimentary design", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ultron@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unshiftio/ultron" }, { "type": "vcs", "url": "git+https://github.com/unshiftio/ultron.git" } ], "type": "library", "bom-ref": "pkg:npm/ultron@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ultron/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ultron/package.json" } ], "concludedValue": "node_modules/ultron/package.json" } ] } }, { "group": "", "name": "type-is", "version": "1.6.18", "description": "Infer the content-type of a request.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-is@1.6.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/type-is#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/type-is.git" } ], "type": "library", "bom-ref": "pkg:npm/type-is@1.6.18", "properties": [ { "name": "SrcFile", "value": "node_modules/type-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-is/package.json" } ], "concludedValue": "node_modules/type-is/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "toidentifier", "version": "1.0.1", "description": "Convert a string of words to a JavaScript identifier", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/toidentifier@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/component/toidentifier#readme" }, { "type": "vcs", "url": "git+https://github.com/component/toidentifier.git" } ], "type": "library", "bom-ref": "pkg:npm/toidentifier@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/toidentifier/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/toidentifier/package.json" } ], "concludedValue": "node_modules/toidentifier/package.json" } ] } }, { "group": "", "name": "to-iso-string", "version": "0.0.2", "description": "Cross-browser toISOString support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-iso-string@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/segmentio/to-iso-string#readme" }, { "type": "vcs", "url": "git://github.com/segmentio/to-iso-string.git" } ], "type": "library", "bom-ref": "pkg:npm/to-iso-string@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/to-iso-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-iso-string/package.json" } ], "concludedValue": "node_modules/to-iso-string/package.json" } ] } }, { "authors": [ { "name": "KARASZI István (http://raszi.hu/)" } ], "group": "", "name": "tmp", "version": "0.0.24", "description": "Temporary file and directory creator", "scope": "required", "purl": "pkg:npm/tmp@0.0.24", "externalReferences": [ { "type": "vcs", "url": "http://github.com/raszi/node-tmp" }, { "type": "vcs", "url": "git://github.com/raszi/node-tmp.git" } ], "type": "library", "bom-ref": "pkg:npm/tmp@0.0.24", "properties": [ { "name": "SrcFile", "value": "node_modules/tmp/package.json" }, { "name": "ImportedModules", "value": "tmp" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tmp/package.json" } ], "concludedValue": "node_modules/tmp/package.json" } ], "occurrences": [ { "location": "io/index.js", "line": 21 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "8.1.1", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@8.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@8.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "5.0.3", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@5.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-json-comments#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-json-comments.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@5.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "string_decoder", "version": "0.10.31", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Brian White " } ], "group": "", "name": "streamsearch", "version": "0.1.2", "description": "Streaming Boyer-Moore-Horspool searching for node.js", "scope": "optional", "purl": "pkg:npm/streamsearch@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mscdex/streamsearch#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/mscdex/streamsearch.git" } ], "type": "library", "bom-ref": "pkg:npm/streamsearch@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/streamsearch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/streamsearch/package.json" } ], "concludedValue": "node_modules/streamsearch/package.json" } ] } }, { "group": "", "name": "statuses", "version": "2.0.2", "description": "HTTP status utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/statuses@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/statuses#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/statuses.git" } ], "type": "library", "bom-ref": "pkg:npm/statuses@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/statuses/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/statuses/package.json" } ], "concludedValue": "node_modules/statuses/package.json" } ] } }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "sinon", "version": "1.17.7", "description": "JavaScript test spies, stubs and mocks.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sinon@1.17.7", "externalReferences": [ { "type": "website", "url": "http://sinonjs.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/cjohansen/Sinon.JS.git" } ], "type": "library", "bom-ref": "pkg:npm/sinon@1.17.7", "properties": [ { "name": "SrcFile", "value": "node_modules/sinon/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sinon/package.json" } ], "concludedValue": "node_modules/sinon/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sigmund", "version": "1.0.1", "description": "Quick and dirty signatures for Objects.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/sigmund#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/sigmund.git" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sigmund/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sigmund/package.json" } ], "concludedValue": "node_modules/sigmund/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-weakmap", "version": "1.0.2", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-weakmap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-weakmap#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-weakmap.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-weakmap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-weakmap/package.json" } ], "concludedValue": "node_modules/side-channel-weakmap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-map", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a Map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-map@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-map#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-map.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-map@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-map/package.json" } ], "concludedValue": "node_modules/side-channel-map/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-list", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a linked list", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-list@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-list#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-list.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-list@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-list/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-list/package.json" } ], "concludedValue": "node_modules/side-channel-list/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel", "version": "1.1.1", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel/package.json" } ], "concludedValue": "node_modules/side-channel/package.json" } ] } }, { "authors": [ { "name": "Wes Todd" } ], "group": "", "name": "setprototypeof", "version": "1.2.0", "description": "A small polyfill for Object.setprototypeof", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/setprototypeof@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/wesleytodd/setprototypeof" }, { "type": "vcs", "url": "git+https://github.com/wesleytodd/setprototypeof.git" } ], "type": "library", "bom-ref": "pkg:npm/setprototypeof@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/setprototypeof/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/setprototypeof/package.json" } ], "concludedValue": "node_modules/setprototypeof/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-length", "version": "1.2.2", "description": "Set a function's length property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-length@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-length#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-length.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-length@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-length/package.json" } ], "concludedValue": "node_modules/set-function-length/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "serve-static", "version": "1.16.3", "description": "Serve static files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serve-static@1.16.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expressjs/serve-static#readme" }, { "type": "vcs", "url": "git+https://github.com/expressjs/serve-static.git" } ], "type": "library", "bom-ref": "pkg:npm/serve-static@1.16.3", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-static/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-static/package.json" } ], "concludedValue": "node_modules/serve-static/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "serve-index", "version": "1.9.2", "description": "Serve directory listings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serve-index@1.9.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expressjs/serve-index#readme" }, { "type": "vcs", "url": "git+https://github.com/expressjs/serve-index.git" } ], "type": "library", "bom-ref": "pkg:npm/serve-index@1.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-index/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-index/package.json" } ], "concludedValue": "node_modules/serve-index/package.json" } ] } }, { "group": "", "name": "statuses", "version": "1.5.0", "description": "HTTP status utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/statuses@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/statuses#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/statuses.git" } ], "type": "library", "bom-ref": "pkg:npm/statuses@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-index/node_modules/statuses/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-index/node_modules/statuses/package.json" } ], "concludedValue": "node_modules/serve-index/node_modules/statuses/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "http-errors", "version": "1.8.1", "description": "Create HTTP error objects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-errors@1.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/http-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/http-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/http-errors@1.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-index/node_modules/http-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-index/node_modules/http-errors/package.json" } ], "concludedValue": "node_modules/serve-index/node_modules/http-errors/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "depd", "version": "1.1.2", "description": "Deprecate all the things", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/depd@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dougwilson/nodejs-depd#readme" }, { "type": "vcs", "url": "git+https://github.com/dougwilson/nodejs-depd.git" } ], "type": "library", "bom-ref": "pkg:npm/depd@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-index/node_modules/depd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-index/node_modules/depd/package.json" } ], "concludedValue": "node_modules/serve-index/node_modules/depd/package.json" } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "7.1.4", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serialize-javascript@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "send", "version": "0.19.2", "description": "Better streaming static file server with Range and conditional-GET support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/send@0.19.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/send#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/send.git" } ], "type": "library", "bom-ref": "pkg:npm/send@0.19.2", "properties": [ { "name": "SrcFile", "value": "node_modules/send/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/send/package.json" } ], "concludedValue": "node_modules/send/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vercel/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/vercel/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/send/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/mocha/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/ms/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sax", "version": "0.6.1", "description": "An evented streaming XML parser in JavaScript", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sax@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/sax-js#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/sax-js.git" } ], "type": "framework", "bom-ref": "pkg:npm/sax@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sax/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sax/package.json" } ], "concludedValue": "node_modules/sax/package.json" } ] }, "tags": [ "framework", "xml" ] }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "samsam", "version": "1.1.2", "description": "Value identification and comparison functions", "scope": "optional", "purl": "pkg:npm/samsam@1.1.2", "externalReferences": [ { "type": "website", "url": "http://busterjs.org/docs/buster-assertions" }, { "type": "vcs", "url": "git+https://github.com/busterjs/samsam.git" } ], "type": "library", "bom-ref": "pkg:npm/samsam@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/samsam/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/samsam/package.json" } ], "concludedValue": "node_modules/samsam/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ChALkeR/safer-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "safe-regex-test", "version": "1.1.0", "description": "Give a regex, get a robust predicate function that tests it against a string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-regex-test@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/safe-regex-test#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/safe-regex-test.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-regex-test@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-regex-test/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-regex-test/package.json" } ], "concludedValue": "node_modules/safe-regex-test/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.7.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/rimraf#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/rimraf.git" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "ImportedModules", "value": "rimraf" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ], "occurrences": [ { "location": "io/index.js", "line": 20 } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "5.1.1", "description": "Recursive version of fs.readdir with small RAM & CPU footprint", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readdirp@5.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.1.14", "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "raw-body", "version": "2.5.3", "description": "Get and validate the raw body of a readable stream.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/raw-body@2.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stream-utils/raw-body#readme" }, { "type": "vcs", "url": "git+https://github.com/stream-utils/raw-body.git" } ], "type": "library", "bom-ref": "pkg:npm/raw-body@2.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/raw-body/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/raw-body/package.json" } ], "concludedValue": "node_modules/raw-body/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "range-parser", "version": "1.2.1", "description": "Range header field string parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/range-parser@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/range-parser#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/range-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/range-parser@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/range-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/range-parser/package.json" } ], "concludedValue": "node_modules/range-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "qs", "version": "6.16.2", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.16.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "git+https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.16.2", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "proxy-addr", "version": "2.0.8", "description": "Determine address of proxied request", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-addr@2.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/proxy-addr#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/proxy-addr.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-addr@2.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-addr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-addr/package.json" } ], "concludedValue": "node_modules/proxy-addr/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me)" } ], "group": "", "name": "promises-aplus-tests", "version": "2.1.2", "description": "Compliance test suite for Promises/A+", "scope": "optional", "licenses": [ { "license": { "id": "WTFPL", "url": "https://opensource.org/licenses/WTFPL", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promises-aplus-tests@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/promises-aplus/promises-tests#readme" }, { "type": "vcs", "url": "git+https://github.com/promises-aplus/promises-tests.git" } ], "type": "library", "bom-ref": "pkg:npm/promises-aplus-tests@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "1.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/supports-color/package.json" } ] } }, { "group": "", "name": "ms", "version": "0.7.1", "description": "Tiny ms conversion utility", "scope": "optional", "purl": "pkg:npm/ms@0.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/guille/ms.js#readme" }, { "type": "vcs", "url": "git://github.com/guille/ms.js.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@0.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/ms/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/ms/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "2.5.3", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@2.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mochajs/mocha#readme" }, { "type": "vcs", "url": "git://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@2.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/mocha/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.1", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp#readme" }, { "type": "vcs", "url": "git+https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "0.3.0", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "2.7.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-lru-cache#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.2.11", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/glob/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/glob/package.json" } ] } }, { "group": "", "name": "diff", "version": "1.4.0", "description": "A javascript text diff implementation.", "scope": "optional", "purl": "pkg:npm/diff@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff#readme" }, { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/diff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/diff/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.2.0", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/promises-aplus-tests/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promises-aplus-tests/node_modules/debug/package.json" } ], "concludedValue": "node_modules/promises-aplus-tests/node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "possible-typed-array-names", "version": "1.1.0", "description": "A simple list of possible Typed Array names.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/possible-typed-array-names@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/possible-typed-array-names#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/possible-typed-array-names.git" } ], "type": "library", "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/possible-typed-array-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/possible-typed-array-names/package.json" } ], "concludedValue": "node_modules/possible-typed-array-names/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexeyraspopov/picocolors#readme" }, { "type": "vcs", "url": "git+https://github.com/alexeyraspopov/picocolors.git" } ], "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "group": "", "name": "path-to-regexp", "version": "0.1.13", "description": "Express style path to RegExp utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-to-regexp@0.1.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/path-to-regexp#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/path-to-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/path-to-regexp@0.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/path-to-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-to-regexp/package.json" } ], "concludedValue": "node_modules/path-to-regexp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "2.0.2", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-scurry@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/path-scurry#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry.git" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-is-absolute#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "group": "", "name": "parseurl", "version": "1.3.3", "description": "parse a url with memoization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parseurl@1.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/parseurl#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/parseurl.git" } ], "type": "library", "bom-ref": "pkg:npm/parseurl@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/parseurl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parseurl/package.json" } ], "concludedValue": "node_modules/parseurl/package.json" } ] } }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "options", "version": "0.0.6", "description": "A very light-weight in-code option parsers for node.js.", "scope": "optional", "purl": "pkg:npm/options@0.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/einaros/options.js#readme" }, { "type": "vcs", "url": "git://github.com/einaros/options.js.git" } ], "type": "library", "bom-ref": "pkg:npm/options@0.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/options/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/options/package.json" } ], "concludedValue": "node_modules/options/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/once#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/once.git" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "group": "", "name": "on-finished", "version": "2.4.2", "description": "Execute a callback when a request closes, finishes, or errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/on-finished@2.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/on-finished#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/on-finished.git" } ], "type": "library", "bom-ref": "pkg:npm/on-finished@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/on-finished/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/on-finished/package.json" } ], "concludedValue": "node_modules/on-finished/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.13.4", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/object-inspect" }, { "type": "vcs", "url": "git://github.com/inspect-js/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "0.6.3", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/negotiator#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/negotiator.git" } ], "type": "library", "bom-ref": "pkg:npm/negotiator@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "group": "", "name": "nan", "version": "2.30.0", "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 26 compatibility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nan@2.30.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/nan#readme" }, { "type": "vcs", "url": "git://github.com/nodejs/nan.git" } ], "type": "library", "bom-ref": "pkg:npm/nan@2.30.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nan/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nan/package.json" } ], "concludedValue": "node_modules/nan/package.json" } ] } }, { "group": "", "name": "multer", "version": "0.1.8", "description": "Middleware for handling `multipart/form-data`.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/multer@0.1.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expressjs/multer#readme" }, { "type": "vcs", "url": "git+https://github.com/expressjs/multer.git" } ], "type": "library", "bom-ref": "pkg:npm/multer@0.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/multer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multer/package.json" } ], "concludedValue": "node_modules/multer/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "type-is", "version": "1.5.7", "description": "Infer the content-type of a request.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-is@1.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/type-is#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/type-is.git" } ], "type": "library", "bom-ref": "pkg:npm/type-is@1.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/multer/node_modules/type-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multer/node_modules/type-is/package.json" } ], "concludedValue": "node_modules/multer/node_modules/type-is/package.json" } ] } }, { "authors": [ { "name": "Nathan LaFreniere " } ], "group": "", "name": "qs", "version": "1.2.2", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "purl": "pkg:npm/qs@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hapijs/qs" }, { "type": "vcs", "url": "git+https://github.com/hapijs/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/multer/node_modules/qs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multer/node_modules/qs/package.json" } ], "concludedValue": "node_modules/multer/node_modules/qs/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.0.14", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-types#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-types.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/multer/node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multer/node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/multer/node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.12.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-db#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-db.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/multer/node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multer/node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/multer/node_modules/mime-db/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zeit/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/zeit/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Mark Wiemer (https://markwiemer.com/software/mocha)" } ], "group": "", "name": "mocha", "version": "12.0.3", "description": "Classic, reliable, trusted test framework for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@12.0.3", "externalReferences": [ { "type": "website", "url": "https://mochajs.org/" }, { "type": "vcs", "url": "git+https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@12.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.6", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/glob/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/debug-js/debug#readme" }, { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/debug/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/debug/package.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.12", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@5.0.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion#readme" }, { "type": "vcs", "url": "git+https://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "balanced-match", "version": "4.0.4", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match#readme" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.3.5", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minipass#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-types#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-types.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-db#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-db.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "1.6.0", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-mime#readme" }, { "type": "vcs", "url": "git+https://github.com/broofa/node-mime.git" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "group": "", "name": "methods", "version": "1.1.2", "description": "HTTP methods that node supports", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/methods@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/methods#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/methods.git" } ], "type": "library", "bom-ref": "pkg:npm/methods@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/methods/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/methods/package.json" } ], "concludedValue": "node_modules/methods/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "merge-descriptors", "version": "1.0.3", "description": "Merge objects using descriptors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-descriptors@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/merge-descriptors#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/merge-descriptors.git" } ], "type": "library", "bom-ref": "pkg:npm/merge-descriptors@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-descriptors/package.json" } ], "concludedValue": "node_modules/merge-descriptors/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "media-typer", "version": "0.3.0", "description": "Simple RFC 6838 media type parser and formatter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/media-typer@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/media-typer#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/media-typer.git" } ], "type": "library", "bom-ref": "pkg:npm/media-typer@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/media-typer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/media-typer/package.json" } ], "concludedValue": "node_modules/media-typer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "math-intrinsics", "version": "1.1.0", "description": "ES Math-related intrinsics and helpers, robustly cached.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/math-intrinsics#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/math-intrinsics.git" } ], "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/math-intrinsics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/math-intrinsics/package.json" } ], "concludedValue": "node_modules/math-intrinsics/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "11.5.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@11.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-lru-cache#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "lolex", "version": "1.3.2", "description": "Fake JavaScript timers", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lolex@1.3.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/sinonjs/lolex" }, { "type": "vcs", "url": "git+ssh://git@github.com/sinonjs/lolex.git" } ], "type": "library", "bom-ref": "pkg:npm/lolex@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lolex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lolex/package.json" } ], "concludedValue": "node_modules/lolex/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "5.5.0", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@5.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml#readme" }, { "type": "vcs", "url": "git+https://github.com/nodeca/js-yaml.git" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "jade", "version": "0.26.3", "description": "Jade template engine", "scope": "optional", "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/jade#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/jade.git" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jade/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jade/package.json" } ], "concludedValue": "node_modules/jade/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.3.0", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jade/node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jade/node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/jade/node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "0.6.1", "description": "the complete solution for node.js command-line programs", "scope": "optional", "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/commander.js#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jade/node_modules/commander/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jade/node_modules/commander/package.json" } ], "concludedValue": "node_modules/jade/node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "0.0.1", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "0.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-unicode-supported@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-unicode-supported#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-unicode-supported.git" } ], "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-typed-array", "version": "1.1.15", "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typed-array@1.1.15", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-typed-array#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typed-array@1.1.15", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typed-array/package.json" } ], "concludedValue": "node_modules/is-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-regex", "version": "1.2.1", "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regex@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-regex" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regex/package.json" } ], "concludedValue": "node_modules/is-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "4.0.0", "description": "Check if a path is inside another path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-path-inside@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-path-inside#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-path-inside.git" } ], "type": "library", "bom-ref": "pkg:npm/is-path-inside@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-generator-function", "version": "1.1.2", "description": "Determine if a function is a native generator function.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-generator-function@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-generator-function#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-generator-function.git" } ], "type": "library", "bom-ref": "pkg:npm/is-generator-function@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-generator-function/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-generator-function/package.json" } ], "concludedValue": "node_modules/is-generator-function/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-callable", "version": "1.2.7", "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-callable@1.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-callable#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-callable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/is-callable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-callable/package.json" } ], "concludedValue": "node_modules/is-callable/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-arguments", "version": "1.2.0", "description": "Is this an arguments object? It's a harder question than you think.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arguments@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-arguments" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-arguments.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arguments@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arguments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arguments/package.json" } ], "concludedValue": "node_modules/is-arguments/package.json" } ] } }, { "authors": [ { "name": "whitequark " } ], "group": "", "name": "ipaddr.js", "version": "1.9.1", "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ipaddr.js@1.9.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/whitequark/ipaddr.js#readme" }, { "type": "vcs", "url": "git://github.com/whitequark/ipaddr.js.git" } ], "type": "library", "bom-ref": "pkg:npm/ipaddr.js@1.9.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ipaddr.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ipaddr.js/package.json" } ], "concludedValue": "node_modules/ipaddr.js/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "git+https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.4.24", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.4.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "http-errors", "version": "2.0.1", "description": "Create HTTP error objects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-errors@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/http-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/http-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/http-errors@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/http-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-errors/package.json" } ], "concludedValue": "node_modules/http-errors/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-tostringtag", "version": "1.0.2", "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-tostringtag@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-tostringtag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-tostringtag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-tostringtag@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-tostringtag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-tostringtag/package.json" } ], "concludedValue": "node_modules/has-tostringtag/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-symbols", "version": "1.1.0", "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-symbols@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/has-symbols#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/has-symbols.git" } ], "type": "library", "bom-ref": "pkg:npm/has-symbols@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-symbols/package.json" } ], "concludedValue": "node_modules/has-symbols/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "has-property-descriptors", "version": "1.0.2", "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-property-descriptors@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/has-property-descriptors#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/has-property-descriptors.git" } ], "type": "library", "bom-ref": "pkg:npm/has-property-descriptors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-property-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-property-descriptors/package.json" } ], "concludedValue": "node_modules/has-property-descriptors/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/has-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "growl", "version": "1.9.2", "description": "Growl unobtrusive notifications", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/growl@1.9.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/node-growl#readme" }, { "type": "vcs", "url": "git://github.com/tj/node-growl.git" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/growl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/growl/package.json" } ], "concludedValue": "node_modules/growl/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "gopd", "version": "1.2.0", "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gopd@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/gopd#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/gopd.git" } ], "type": "library", "bom-ref": "pkg:npm/gopd@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gopd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gopd/package.json" } ], "concludedValue": "node_modules/gopd/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.2.3", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-proto", "version": "1.0.1", "description": "Robustly get the [[Prototype]] of an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/get-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-proto/package.json" } ], "concludedValue": "node_modules/get-proto/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "get-intrinsic", "version": "1.3.0", "description": "Get and robustly cache all JS language-level intrinsics at first require time", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-intrinsic@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/get-intrinsic#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/get-intrinsic.git" } ], "type": "library", "bom-ref": "pkg:npm/get-intrinsic@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-intrinsic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-intrinsic/package.json" } ], "concludedValue": "node_modules/get-intrinsic/package.json" } ] } }, { "authors": [ { "name": "Jordan Harbamd " } ], "group": "", "name": "generator-function", "version": "2.0.1", "description": "A function that returns the normally hidden `GeneratorFunction` constructor", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/generator-function@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TimothyGu/generator-function#readme" }, { "type": "vcs", "url": "git+https://github.com/TimothyGu/generator-function.git" } ], "type": "library", "bom-ref": "pkg:npm/generator-function@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/generator-function/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/generator-function/package.json" } ], "concludedValue": "node_modules/generator-function/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "git+https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/fs.realpath#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "fresh", "version": "0.5.2", "description": "HTTP response freshness testing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fresh@0.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/fresh#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/fresh.git" } ], "type": "library", "bom-ref": "pkg:npm/fresh@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fresh/package.json" } ], "concludedValue": "node_modules/fresh/package.json" } ] } }, { "group": "", "name": "forwarded", "version": "0.2.0", "description": "Parse HTTP X-Forwarded-For header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forwarded@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/forwarded#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/forwarded.git" } ], "type": "library", "bom-ref": "pkg:npm/forwarded@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/forwarded/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forwarded/package.json" } ], "concludedValue": "node_modules/forwarded/package.json" } ] } }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "formatio", "version": "1.1.1", "description": "Human-readable object formatting", "scope": "optional", "purl": "pkg:npm/formatio@1.1.1", "externalReferences": [ { "type": "website", "url": "http://busterjs.org/docs/formatio/" }, { "type": "vcs", "url": "git+https://github.com/busterjs/formatio.git" } ], "type": "library", "bom-ref": "pkg:npm/formatio@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/formatio/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/formatio/package.json" } ], "concludedValue": "node_modules/formatio/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "for-each", "version": "0.3.5", "description": "A better forEach", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/for-each@0.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/for-each" }, { "type": "vcs", "url": "git+https://github.com/Raynos/for-each.git" } ], "type": "library", "bom-ref": "pkg:npm/for-each@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/for-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/for-each/package.json" } ], "concludedValue": "node_modules/for-each/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up-simple", "version": "1.0.1", "description": "Find a file or directory by walking up parent directories — Zero dependencies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up-simple@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/find-up-simple#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/find-up-simple.git" } ], "type": "library", "bom-ref": "pkg:npm/find-up-simple@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up-simple/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up-simple/package.json" } ], "concludedValue": "node_modules/find-up-simple/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "finalhandler", "version": "1.3.2", "description": "Node.js final http responder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/finalhandler@1.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/finalhandler#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/finalhandler.git" } ], "type": "library", "bom-ref": "pkg:npm/finalhandler@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/finalhandler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/finalhandler/package.json" } ], "concludedValue": "node_modules/finalhandler/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "express", "version": "4.22.3", "description": "Fast, unopinionated, minimalist web framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/express@4.22.3", "externalReferences": [ { "type": "website", "url": "http://expressjs.com/" }, { "type": "vcs", "url": "git+https://github.com/expressjs/express.git" } ], "type": "framework", "bom-ref": "pkg:npm/express@4.22.3", "properties": [ { "name": "SrcFile", "value": "node_modules/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/express/package.json" } ], "concludedValue": "node_modules/express/package.json" } ] }, "tags": [ "framework", "web" ] }, { "group": "", "name": "etag", "version": "1.8.1", "description": "Create simple HTTP ETags", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/etag@1.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/etag#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/etag.git" } ], "type": "library", "bom-ref": "pkg:npm/etag@1.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/etag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/etag/package.json" } ], "concludedValue": "node_modules/etag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.2", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/escape-string-regexp#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/escape-string-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "group": "", "name": "escape-html", "version": "1.0.3", "description": "Escape string for use in HTML", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-html@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/component/escape-html#readme" }, { "type": "vcs", "url": "git+https://github.com/component/escape-html.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-html@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-html/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-html/package.json" } ], "concludedValue": "node_modules/escape-html/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-object-atoms", "version": "1.1.2", "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-object-atoms@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-object-atoms#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-object-atoms.git" } ], "type": "library", "bom-ref": "pkg:npm/es-object-atoms@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/es-object-atoms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-object-atoms/package.json" } ], "concludedValue": "node_modules/es-object-atoms/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-define-property", "version": "1.0.1", "description": "`Object.defineProperty`, but not IE 8's broken one.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-define-property@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-define-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-define-property.git" } ], "type": "library", "bom-ref": "pkg:npm/es-define-property@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es-define-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-define-property/package.json" } ], "concludedValue": "node_modules/es-define-property/package.json" } ] } }, { "group": "", "name": "encodeurl", "version": "2.0.1", "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/encodeurl@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/encodeurl#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/encodeurl.git" } ], "type": "library", "bom-ref": "pkg:npm/encodeurl@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/encodeurl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/encodeurl/package.json" } ], "concludedValue": "node_modules/encodeurl/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "ee-first", "version": "1.1.1", "description": "return the first event in a set of ee/event pairs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ee-first@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonathanong/ee-first#readme" }, { "type": "vcs", "url": "git+https://github.com/jonathanong/ee-first.git" } ], "type": "library", "bom-ref": "pkg:npm/ee-first@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ee-first/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ee-first/package.json" } ], "concludedValue": "node_modules/ee-first/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "dunder-proto", "version": "1.0.1", "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dunder-proto@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/dunder-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/dunder-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/dunder-proto@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dunder-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dunder-proto/package.json" } ], "concludedValue": "node_modules/dunder-proto/package.json" } ] } }, { "group": "", "name": "diff", "version": "9.0.0", "description": "A JavaScript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff#readme" }, { "type": "vcs", "url": "git+https://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Brian White " } ], "group": "", "name": "dicer", "version": "0.2.5", "description": "A very fast streaming multipart parser for node.js", "scope": "optional", "purl": "pkg:npm/dicer@0.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mscdex/dicer#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/mscdex/dicer.git" } ], "type": "library", "bom-ref": "pkg:npm/dicer@0.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/dicer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dicer/package.json" } ], "concludedValue": "node_modules/dicer/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "destroy", "version": "1.2.0", "description": "destroy a stream if possible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/destroy@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stream-utils/destroy#readme" }, { "type": "vcs", "url": "git+https://github.com/stream-utils/destroy.git" } ], "type": "library", "bom-ref": "pkg:npm/destroy@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/destroy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/destroy/package.json" } ], "concludedValue": "node_modules/destroy/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "depd", "version": "2.0.0", "description": "Deprecate all the things", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/depd@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dougwilson/nodejs-depd#readme" }, { "type": "vcs", "url": "git+https://github.com/dougwilson/nodejs-depd.git" } ], "type": "library", "bom-ref": "pkg:npm/depd@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/depd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/depd/package.json" } ], "concludedValue": "node_modules/depd/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "define-data-property", "version": "1.1.4", "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/define-data-property@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/define-data-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/define-data-property.git" } ], "type": "library", "bom-ref": "pkg:npm/define-data-property@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/define-data-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/define-data-property/package.json" } ], "concludedValue": "node_modules/define-data-property/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.3", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/core-util-is#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/core-util-is.git" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "cookie-signature", "version": "1.0.7", "description": "Sign and unsign cookies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cookie-signature@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-cookie-signature#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/node-cookie-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/cookie-signature@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie-signature/package.json" } ], "concludedValue": "node_modules/cookie-signature/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "cookie", "version": "0.7.2", "description": "HTTP server cookie parsing and serialization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cookie@0.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/cookie#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/cookie@0.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie/package.json" } ], "concludedValue": "node_modules/cookie/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "content-type", "version": "1.0.5", "description": "Create and parse HTTP Content-Type header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/content-type@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/content-type#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/content-type.git" } ], "type": "library", "bom-ref": "pkg:npm/content-type@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/content-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/content-type/package.json" } ], "concludedValue": "node_modules/content-type/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "content-disposition", "version": "0.5.4", "description": "Create and parse Content-Disposition header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/content-disposition@0.5.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/content-disposition#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/content-disposition.git" } ], "type": "library", "bom-ref": "pkg:npm/content-disposition@0.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/content-disposition/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/content-disposition/package.json" } ], "concludedValue": "node_modules/content-disposition/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-concat-map#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.3.0", "description": "the complete solution for node.js command-line programs", "scope": "optional", "purl": "pkg:npm/commander@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/commander.js#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "5.0.0", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bound", "version": "1.0.4", "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bound@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bound#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bound.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bound@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bound/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bound/package.json" } ], "concludedValue": "node_modules/call-bound/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind-apply-helpers", "version": "1.0.2", "description": "Helper functions around Function call/apply/bind, for use in `call-bind`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind-apply-helpers#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind-apply-helpers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind-apply-helpers/package.json" } ], "concludedValue": "node_modules/call-bind-apply-helpers/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "call-bind", "version": "1.0.9", "description": "Robustly `.call.bind()` a function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/call-bind@1.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/call-bind#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/call-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/call-bind@1.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/call-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/call-bind/package.json" } ], "concludedValue": "node_modules/call-bind/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "bytes", "version": "3.1.2", "description": "Utility to parse a string bytes to bytes and vice-versa", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bytes@3.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/bytes.js#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/bytes.js.git" } ], "type": "library", "bom-ref": "pkg:npm/bytes@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bytes/package.json" } ], "concludedValue": "node_modules/bytes/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Brian White " } ], "group": "", "name": "busboy", "version": "0.2.14", "description": "A streaming parser for HTML form data for node.js", "scope": "optional", "purl": "pkg:npm/busboy@0.2.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mscdex/busboy#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/mscdex/busboy.git" } ], "type": "library", "bom-ref": "pkg:npm/busboy@0.2.14", "properties": [ { "name": "SrcFile", "value": "node_modules/busboy/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/busboy/package.json" } ], "concludedValue": "node_modules/busboy/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "bufferutil", "version": "1.2.1", "description": "WebSocket buffer utils", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bufferutil@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/bufferutil" }, { "type": "vcs", "url": "git+https://github.com/websockets/bufferutil.git" } ], "type": "library", "bom-ref": "pkg:npm/bufferutil@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/bufferutil/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bufferutil/package.json" } ], "concludedValue": "node_modules/bufferutil/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "description": "`process.stdout` in your browser.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kumavis/browser-stdout#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.21", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.21", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "body-parser", "version": "1.20.9", "description": "Node.js body parsing middleware", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/body-parser@1.20.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expressjs/body-parser#readme" }, { "type": "vcs", "url": "git+https://github.com/expressjs/body-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/body-parser@1.20.9", "properties": [ { "name": "SrcFile", "value": "node_modules/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/package.json" } ], "concludedValue": "node_modules/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "bindings", "version": "1.2.1", "description": "Helper module for loading your native module's .node file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bindings@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/node-bindings" }, { "type": "vcs", "url": "git://github.com/TooTallNate/node-bindings.git" } ], "type": "library", "bom-ref": "pkg:npm/bindings@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/bindings/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bindings/package.json" } ], "concludedValue": "node_modules/bindings/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "batch", "version": "0.6.1", "description": "Simple async batch with concurrency control and progress reporting.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/batch@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/batch#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/batch.git" } ], "type": "library", "bom-ref": "pkg:npm/batch@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/batch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/batch/package.json" } ], "concludedValue": "node_modules/batch/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "available-typed-arrays", "version": "1.0.7", "description": "Returns an array of Typed Array names that are available in the current environment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/available-typed-arrays@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/available-typed-arrays#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/available-typed-arrays.git" } ], "type": "library", "bom-ref": "pkg:npm/available-typed-arrays@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/available-typed-arrays/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/available-typed-arrays/package.json" } ], "concludedValue": "node_modules/available-typed-arrays/package.json" } ] } }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "", "name": "array-flatten", "version": "1.1.1", "description": "Flatten an array of nested arrays into a single flat array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-flatten@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/blakeembrey/array-flatten" }, { "type": "vcs", "url": "git://github.com/blakeembrey/array-flatten.git" } ], "type": "library", "bom-ref": "pkg:npm/array-flatten@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/array-flatten/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-flatten/package.json" } ], "concludedValue": "node_modules/array-flatten/package.json" } ] } }, { "group": "", "name": "argparse", "version": "3.0.4", "description": "CLI arguments parser. Native port of python's argparse.", "scope": "optional", "licenses": [ { "license": { "id": "PSF-2.0", "url": "https://opensource.org/licenses/PSF-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@3.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/argparse#readme" }, { "type": "vcs", "url": "git+https://github.com/nodeca/argparse.git" } ], "type": "library", "bom-ref": "pkg:npm/argparse@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] } }, { "authors": [ { "name": "Nasca Iacob (https://github.com/cthackers)" } ], "group": "", "name": "adm-zip", "version": "0.4.4", "description": "A Javascript implementation of zip for nodejs. Allows user to create or extract zip files both in memory or to/from disk", "scope": "required", "purl": "pkg:npm/adm-zip@0.4.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/cthackers/adm-zip" }, { "type": "vcs", "url": "git+https://github.com/cthackers/adm-zip.git" } ], "type": "library", "bom-ref": "pkg:npm/adm-zip@0.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/adm-zip/package.json" }, { "name": "ImportedModules", "value": "adm-zip" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/adm-zip/package.json" } ], "concludedValue": "node_modules/adm-zip/package.json" } ], "occurrences": [ { "location": "firefox/extension.js", "line": 22 }, { "location": "firefox/profile.js", "line": 25 }, { "location": "remote/index.js", "line": 20 } ] } }, { "group": "", "name": "accepts", "version": "1.3.8", "description": "Higher-level content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/accepts@1.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/accepts#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/accepts.git" } ], "type": "library", "bom-ref": "pkg:npm/accepts@1.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/accepts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/accepts/package.json" } ], "concludedValue": "node_modules/accepts/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/selenium-webdriver@2.47.0-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-29T22:05:36Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'selenium-webdriver' with version '2.47.0-tuxcare.1'." } ] }