{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:178cdbcc-4d51-4d42-bf37-b716ee123de5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-29T12:22:41Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "agent-lynx",
      "group": "",
      "version": "0.14.22",
      "description": "Agent-friendly Lynx DevTool CLI for inspecting and operating Lynx applications.",
      "purl": "pkg:npm/agent-lynx@0.14.22",
      "bom-ref": "pkg:npm/agent-lynx@0.14.22",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "agent-lynx"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test, test:e2e, test:e2e:public"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/lynx-community/skills.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@lynx-js\\n@microsoft\\n@rslib\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@lynx-js/devtool-connector/package.json\\nnode_modules/@lynx-js/skill-lynx-devtool/package.json\\nnode_modules/@lynx-js/skill-lynx-trace-analysis/package.json\\nnode_modules/@lynx-js/skill-lynx-trace-record/package.json\\nnode_modules/@lynx-js/trace-processor/package.json\\nnode_modules/@microsoft/api-extractor/package.json\\nnode_modules/@rslib/core/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/commander/package.json\\nnode_modules/core-js/package.json\\nnode_modules/obug/package.json\\nnode_modules/typescript/package.json\\nnode_modules/yaml/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Eemeli Aro <eemeli@gmail.com>"
        }
      ],
      "group": "",
      "name": "yaml",
      "version": "2.9.1",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.9.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eemeli.org/yaml/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yaml/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "yaml,parse,yaml/parse"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/yaml/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/commands/skills.ts",
            "line": 11
          },
          {
            "location": "src/commands/skills.ts",
            "line": 64
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "7.0.2",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@7.0.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@7.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Deng <sxzz@sxzz.moe>"
        }
      ],
      "group": "",
      "name": "obug",
      "version": "2.2.1",
      "description": "A lightweight JavaScript debugging utility, forked from debug, featuring TypeScript and ESM support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/obug@2.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sxzz/obug#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sxzz/obug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/obug@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/obug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/obug/package.json"
              }
            ],
            "concludedValue": "node_modules/obug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Denis Pushkarev <zloirock@zloirock.ru> (http://zloirock.ru)"
        }
      ],
      "group": "",
      "name": "core-js",
      "version": "3.51.0",
      "description": "Standard library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@3.51.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://core-js.io"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/zloirock/core-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@3.51.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-js/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "core-js/modules/es.promise.with-resolvers.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-js/package.json"
              }
            ],
            "concludedValue": "node_modules/core-js/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/index.ts",
            "line": 5
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "14.0.3",
      "description": "the complete solution for node.js command-line programs",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@14.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/tj/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@14.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/commander/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "commander,Command,commander/Command,ParseOptions,commander/ParseOptions"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/commander/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/cli-invocation.ts",
            "line": 5
          },
          {
            "location": "src/commands/app.ts",
            "line": 5
          },
          {
            "location": "src/commands/cdp.ts",
            "line": 5
          },
          {
            "location": "src/commands/daemon.ts",
            "line": 9
          },
          {
            "location": "src/commands/evaluate.ts",
            "line": 5
          },
          {
            "location": "src/commands/fill.ts",
            "line": 6
          },
          {
            "location": "src/commands/get-console.ts",
            "line": 6
          },
          {
            "location": "src/commands/get-source-info.ts",
            "line": 9
          },
          {
            "location": "src/commands/get-sources.ts",
            "line": 6
          },
          {
            "location": "src/commands/get.ts",
            "line": 6
          },
          {
            "location": "src/commands/global-switch.ts",
            "line": 5
          },
          {
            "location": "src/commands/inspect.ts",
            "line": 5
          },
          {
            "location": "src/commands/list-clients.ts",
            "line": 6
          },
          {
            "location": "src/commands/list-sessions.ts",
            "line": 6
          },
          {
            "location": "src/commands/open.ts",
            "line": 6
          },
          {
            "location": "src/commands/reactlynx/find.ts",
            "line": 13
          },
          {
            "location": "src/commands/reactlynx/index.ts",
            "line": 5
          },
          {
            "location": "src/commands/reactlynx/inspect.ts",
            "line": 11
          },
          {
            "location": "src/commands/reactlynx/link.ts",
            "line": 6
          },
          {
            "location": "src/commands/reactlynx/tree.ts",
            "line": 10
          },
          {
            "location": "src/commands/reactlynx/update.ts",
            "line": 9
          },
          {
            "location": "src/commands/recorder-end.ts",
            "line": 6
          },
          {
            "location": "src/commands/recorder-start.ts",
            "line": 5
          },
          {
            "location": "src/commands/result.ts",
            "line": 10
          },
          {
            "location": "src/commands/screenshot.ts",
            "line": 10
          },
          {
            "location": "src/commands/scroll.ts",
            "line": 6
          },
          {
            "location": "src/commands/skills.ts",
            "line": 5
          },
          {
            "location": "src/commands/snapshot.ts",
            "line": 9
          },
          {
            "location": "src/commands/take-content-screenshot.ts",
            "line": 6
          },
          {
            "location": "src/commands/take-heap-snapshot.ts",
            "line": 8
          },
          {
            "location": "src/commands/take-screenshot.ts",
            "line": 6
          },
          {
            "location": "src/commands/tap.ts",
            "line": 6
          },
          {
            "location": "src/commands/trace-query.ts",
            "line": 5
          },
          {
            "location": "src/commands/trace.ts",
            "line": 6
          },
          {
            "location": "src/commands/wait-for-client.ts",
            "line": 10
          },
          {
            "location": "src/commands/wait.ts",
            "line": 10
          },
          {
            "location": "src/devtool.ts",
            "line": 18
          },
          {
            "location": "src/program.ts",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "24.19.2",
      "description": "TypeScript definitions for node",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@24.19.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@24.19.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/node/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/node/package.json"
          }
        ]
      }
    },
    {
      "group": "@rslib",
      "name": "core",
      "version": "1.0.4",
      "description": "The Rsbuild-based library development tool.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40rslib/core@1.0.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://rslib.rs"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/web-infra-dev/rslib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rslib/core@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@rslib/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@rslib/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@rslib/core/package.json"
          }
        ]
      }
    },
    {
      "group": "@microsoft",
      "name": "api-extractor",
      "version": "7.59.4",
      "description": "Analyze the exported API for a TypeScript library and generate reviews, documentation, and .d.ts rollups",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40microsoft/api-extractor@7.59.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://api-extractor.com"
        },
        {
          "type": "vcs",
          "url": "https://github.com/microsoft/rushstack.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@microsoft/api-extractor@7.59.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@microsoft/api-extractor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@microsoft/api-extractor/package.json"
              }
            ],
            "concludedValue": "node_modules/@microsoft/api-extractor/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "group": "@lynx-js",
      "name": "trace-processor",
      "version": "0.0.1",
      "description": "A WebAssembly build of the Perfetto Trace Processor providing a JavaScript API for querying Perfetto traces",
      "scope": "required",
      "purl": "pkg:npm/%40lynx-js/trace-processor@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/@lynx-js/trace-processor@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lynx-js/trace-processor/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@lynx-js/trace-processor"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lynx-js/trace-processor/package.json"
              }
            ],
            "concludedValue": "node_modules/@lynx-js/trace-processor/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cli.mjs",
            "line": 10376
          },
          {
            "location": "dist/commands/trace-query.mjs",
            "line": 9
          },
          {
            "location": "src/commands/trace-query.ts",
            "line": 126
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "group": "@lynx-js",
      "name": "skill-lynx-trace-record",
      "version": "0.0.6",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lynx-js/skill-lynx-trace-record@0.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lynx-family/lynx-trace.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lynx-js/skill-lynx-trace-record@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lynx-js/skill-lynx-trace-record/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lynx-js/skill-lynx-trace-record/package.json"
              }
            ],
            "concludedValue": "node_modules/@lynx-js/skill-lynx-trace-record/package.json"
          }
        ]
      }
    },
    {
      "group": "@lynx-js",
      "name": "skill-lynx-trace-analysis",
      "version": "0.0.12",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lynx-js/skill-lynx-trace-analysis@0.0.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lynx-family/lynx-trace.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lynx-js/skill-lynx-trace-analysis@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lynx-js/skill-lynx-trace-analysis/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lynx-js/skill-lynx-trace-analysis/package.json"
              }
            ],
            "concludedValue": "node_modules/@lynx-js/skill-lynx-trace-analysis/package.json"
          }
        ]
      }
    },
    {
      "group": "@lynx-js",
      "name": "skill-lynx-devtool",
      "version": "0.14.22",
      "description": "Lynx DevTool Agent Skill and compatibility launcher for agent-lynx.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lynx-js/skill-lynx-devtool@0.14.22",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lynx-community/skills"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lynx-js/skill-lynx-devtool@0.14.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lynx-js/skill-lynx-devtool/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lynx-js/skill-lynx-devtool/package.json"
              }
            ],
            "concludedValue": "node_modules/@lynx-js/skill-lynx-devtool/package.json"
          }
        ]
      }
    },
    {
      "group": "@lynx-js",
      "name": "devtool-connector",
      "version": "0.18.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lynx-js/devtool-connector@0.18.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/lynx-community/skills.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lynx-js/devtool-connector@0.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lynx-js/devtool-connector/package.json"
        },
        {
          "name": "ExportedModules",
          "value": "@lynx-js/devtool-connector,@lynx-js/devtool-connector/command,@lynx-js/devtool-connector/transport,@lynx-js/devtool-connector/daemon,@lynx-js/devtool-connector/streams,HttpCommandClient,@lynx-js/devtool-connector/command/HttpCommandClient,InProcessCommandClient,@lynx-js/devtool-connector/command/InProcessCommandClient,captureScreenshot,@lynx-js/devtool-connector/command/captureScreenshot,deserializeRendererState,@lynx-js/devtool-connector/command/deserializeRendererState,fail,@lynx-js/devtool-connector/command/fail,formatReactLynxTree,@lynx-js/devtool-connector/command/formatReactLynxTree,getOriginalNodeSourceInfo,@lynx-js/devtool-connector/command/getOriginalNodeSourceInfo,typeTag,@lynx-js/devtool-connector/command/typeTag,AndroidTransport,@lynx-js/devtool-connector/transport/AndroidTransport,DaemonTransport,@lynx-js/devtool-connector/transport/DaemonTransport,DesktopTransport,@lynx-js/devtool-connector/transport/DesktopTransport,HDTTransport,@lynx-js/devtool-connector/transport/HDTTransport,iOSTransport,@lynx-js/devtool-connector/transport/iOSTransport,DEFAULT_DAEMON_PORT,@lynx-js/devtool-connector/daemon/DEFAULT_DAEMON_PORT,DaemonManager,@lynx-js/devtool-connector/daemon/DaemonManager"
        },
        {
          "name": "ImportedModules",
          "value": "@lynx-js/devtool-connector,Connector,@lynx-js/devtool-connector/Connector,CDPResponseMessage,@lynx-js/devtool-connector/CDPResponseMessage,@lynx-js/devtool-connector/command,HttpCommandClient,@lynx-js/devtool-connector/command/HttpCommandClient,InProcessCommandClient,@lynx-js/devtool-connector/command/InProcessCommandClient,buildReactLynxUpdatePath,@lynx-js/devtool-connector/command/buildReactLynxUpdatePath,buildRegexMatcher,@lynx-js/devtool-connector/command/buildRegexMatcher,buildSubstringMatcher,@lynx-js/devtool-connector/command/buildSubstringMatcher,captureScreenshot,@lynx-js/devtool-connector/command/captureScreenshot,deserializeRendererState,@lynx-js/devtool-connector/command/deserializeRendererState,fail,@lynx-js/devtool-connector/command/fail,findReactLynxComponents,@lynx-js/devtool-connector/command/findReactLynxComponents,formatReactLynxTree,@lynx-js/devtool-connector/command/formatReactLynxTree,getOriginalNodeSourceInfo,@lynx-js/devtool-connector/command/getOriginalNodeSourceInfo,@lynx-js/devtool-connector/command/ok,parseReactLynxComponentRef,@lynx-js/devtool-connector/command/parseReactLynxComponentRef,typeTag,@lynx-js/devtool-connector/command/typeTag,CommandData,@lynx-js/devtool-connector/command/CommandData,CommandClient,@lynx-js/devtool-connector/command/CommandClient,ReactLynxFindMatch,@lynx-js/devtool-connector/command/ReactLynxFindMatch,ReactLynxInspectResult,@lynx-js/devtool-connector/command/ReactLynxInspectResult,ReactLynxComponentData,@lynx-js/devtool-connector/command/ReactLynxComponentData,CommandResult,@lynx-js/devtool-connector/command/CommandResult,ScreenshotAnnotation,@lynx-js/devtool-connector/command/ScreenshotAnnotation,SnapshotData,@lynx-js/devtool-connector/command/SnapshotData,SnapshotRef,@lynx-js/devtool-connector/command/SnapshotRef,SnapshotAfterResult,@lynx-js/devtool-connector/command/SnapshotAfterResult,StreamCommandParams,@lynx-js/devtool-connector/command/StreamCommandParams,CommandParams,@lynx-js/devtool-connector/command/CommandParams,@lynx-js/devtool-connector/transport,AndroidTransport,@lynx-js/devtool-connector/transport/AndroidTransport,DaemonTransport,@lynx-js/devtool-connector/transport/DaemonTransport,DesktopTransport,@lynx-js/devtool-connector/transport/DesktopTransport,HDTTransport,@lynx-js/devtool-connector/transport/HDTTransport,iOSTransport,@lynx-js/devtool-connector/transport/iOSTransport,Transport,@lynx-js/devtool-connector/transport/Transport,Client,@lynx-js/devtool-connector/transport/Client,@lynx-js/devtool-connector/daemon,DEFAULT_DAEMON_PORT,@lynx-js/devtool-connector/daemon/DEFAULT_DAEMON_PORT,DaemonManager,@lynx-js/devtool-connector/daemon/DaemonManager,@lynx-js/devtool-connector/streams,CDPResponseTransformStream,@lynx-js/devtool-connector/streams/CDPResponseTransformStream"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lynx-js/devtool-connector/package.json"
              }
            ],
            "concludedValue": "node_modules/@lynx-js/devtool-connector/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/2.mjs",
            "line": 9019
          },
          {
            "location": "dist/cli.mjs",
            "line": 2
          },
          {
            "location": "dist/connector.mjs",
            "line": 1
          },
          {
            "location": "dist/connector.mjs",
            "line": 3
          },
          {
            "location": "src/commands/recorder-end.ts",
            "line": 5
          },
          {
            "location": "src/commands/take-content-screenshot.ts",
            "line": 5
          },
          {
            "location": "src/commands/take-heap-snapshot.ts",
            "line": 6
          },
          {
            "location": "src/commands/trace.ts",
            "line": 5
          },
          {
            "location": "src/commands/utils.ts",
            "line": 5
          },
          {
            "location": "src/connector.ts",
            "line": 5
          },
          {
            "location": "src/connector.ts",
            "line": 11
          },
          {
            "location": "src/devtool.ts",
            "line": 5
          },
          {
            "location": "src/evaluate-expression.ts",
            "line": 5
          },
          {
            "location": "dist/2.mjs",
            "line": 9020
          },
          {
            "location": "dist/cli.mjs",
            "line": 5
          },
          {
            "location": "dist/cli.mjs",
            "line": 8577
          },
          {
            "location": "dist/cli.mjs",
            "line": 8600
          },
          {
            "location": "dist/cli.mjs",
            "line": 9169
          },
          {
            "location": "dist/cli.mjs",
            "line": 9179
          },
          {
            "location": "dist/cli.mjs",
            "line": 9217
          },
          {
            "location": "dist/cli.mjs",
            "line": 9254
          },
          {
            "location": "dist/cli.mjs",
            "line": 9675
          },
          {
            "location": "dist/cli.mjs",
            "line": 10329
          },
          {
            "location": "dist/cli.mjs",
            "line": 11040
          },
          {
            "location": "dist/cli.mjs",
            "line": 11052
          },
          {
            "location": "src/commands/fill.ts",
            "line": 5
          },
          {
            "location": "src/commands/get-source-info.ts",
            "line": 8
          },
          {
            "location": "src/commands/get.ts",
            "line": 5
          },
          {
            "location": "src/commands/list-clients.ts",
            "line": 5
          },
          {
            "location": "src/commands/list-sessions.ts",
            "line": 5
          },
          {
            "location": "src/commands/open.ts",
            "line": 5
          },
          {
            "location": "src/commands/reactlynx/find.ts",
            "line": 12
          },
          {
            "location": "src/commands/reactlynx/find.ts",
            "line": 108
          },
          {
            "location": "src/commands/reactlynx/inspect.ts",
            "line": 10
          },
          {
            "location": "src/commands/reactlynx/inspect.ts",
            "line": 40
          },
          {
            "location": "src/commands/reactlynx/link.ts",
            "line": 5
          },
          {
            "location": "src/commands/reactlynx/link.ts",
            "line": 35
          },
          {
            "location": "src/commands/reactlynx/tree.ts",
            "line": 9
          },
          {
            "location": "src/commands/reactlynx/tree.ts",
            "line": 77
          },
          {
            "location": "src/commands/reactlynx/tree.ts",
            "line": 78
          },
          {
            "location": "src/commands/reactlynx/update.ts",
            "line": 8
          },
          {
            "location": "src/commands/result.ts",
            "line": 9
          },
          {
            "location": "src/commands/result.ts",
            "line": 102
          },
          {
            "location": "src/commands/result.ts",
            "line": 144
          },
          {
            "location": "src/commands/screenshot.ts",
            "line": 9
          },
          {
            "location": "src/commands/screenshot.ts",
            "line": 95
          },
          {
            "location": "src/commands/scroll.ts",
            "line": 5
          },
          {
            "location": "src/commands/snapshot.ts",
            "line": 8
          },
          {
            "location": "src/commands/take-screenshot.ts",
            "line": 5
          },
          {
            "location": "src/commands/take-screenshot.ts",
            "line": 44
          },
          {
            "location": "src/commands/tap.ts",
            "line": 5
          },
          {
            "location": "src/commands/utils.ts",
            "line": 10
          },
          {
            "location": "src/commands/wait-for-client.ts",
            "line": 8
          },
          {
            "location": "src/commands/wait.ts",
            "line": 9
          },
          {
            "location": "src/devtool.ts",
            "line": 9
          },
          {
            "location": "dist/2.mjs",
            "line": 9021
          },
          {
            "location": "dist/cli.mjs",
            "line": 17
          },
          {
            "location": "dist/cli.mjs",
            "line": 11133
          },
          {
            "location": "dist/connector.mjs",
            "line": 2
          },
          {
            "location": "dist/connector.mjs",
            "line": 5
          },
          {
            "location": "src/commands/utils.ts",
            "line": 11
          },
          {
            "location": "src/commands/wait-for-client.ts",
            "line": 9
          },
          {
            "location": "src/connector.ts",
            "line": 9
          },
          {
            "location": "src/connector.ts",
            "line": 13
          },
          {
            "location": "src/devtool.ts",
            "line": 17
          },
          {
            "location": "src/devtool.ts",
            "line": 78
          },
          {
            "location": "dist/2.mjs",
            "line": 9024
          },
          {
            "location": "dist/cli.mjs",
            "line": 4
          },
          {
            "location": "dist/cli.mjs",
            "line": 8476
          },
          {
            "location": "dist/cli.mjs",
            "line": 8477
          },
          {
            "location": "src/commands/daemon.ts",
            "line": 8
          },
          {
            "location": "src/commands/daemon.ts",
            "line": 37
          },
          {
            "location": "src/commands/daemon.ts",
            "line": 38
          },
          {
            "location": "dist/2.mjs",
            "line": 9034
          },
          {
            "location": "dist/cli.mjs",
            "line": 15
          },
          {
            "location": "dist/connector.mjs",
            "line": 4
          },
          {
            "location": "src/commands/take-heap-snapshot.ts",
            "line": 7
          },
          {
            "location": "src/connector.ts",
            "line": 12
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/agent-lynx@0.14.22"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-29T12:22:41Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'agent-lynx' with version '0.14.22'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 13 source files."
    }
  ]
}