{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d8b5fa8c-2396-42e9-a244-40bbcf4f8fb0", "version": 1, "metadata": { "timestamp": "2026-09-09T12:05:52Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "brace", "group": "", "version": "0.11.0", "description": "browserify compatible version of the ace editor.", "purl": "pkg:npm/brace@0.11.0", "bom-ref": "pkg:npm/brace@0.11.0", "author": "Thorsten Lorenz (http://thlorenz.com)", "properties": [ { "name": "cdx:npm:scripts", "value": "update, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/brace" }, { "type": "vcs", "url": "git://github.com/thlorenz/brace.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "example/node_modules/brace/package.json\\nexample/node_modules/browserify/package.json\\nnode_modules/Base64/package.json\\nnode_modules/JSONStream/package.json\\nnode_modules/acorn-node/node_modules/acorn/package.json\\nnode_modules/acorn-node/node_modules/xtend/package.json\\nnode_modules/acorn-node/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/amdefine/package.json\\nnode_modules/assert/node_modules/inherits/package.json\\nnode_modules/assert/node_modules/util/package.json\\nnode_modules/assert/package.json\\nnode_modules/astw/package.json\\nnode_modules/async/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-pack/node_modules/JSONStream/node_modules/through/package.json\\nnode_modules/browser-pack/node_modules/JSONStream/package.json\\nnode_modules/browser-pack/package.json\\nnode_modules/browser-resolve/node_modules/resolve/package.json\\nnode_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json\\nnode_modules/browser-resolve/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/browserify/package.json\\nnode_modules/buffer/package.json\\nnode_modules/builtins/package.json\\nnode_modules/callsite/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/combine-source-map/package.json\\nnode_modules/commondir/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/constants-browserify/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/defined/package.json\\nnode_modules/deps-sort/node_modules/JSONStream/node_modules/through/package.json\\nnode_modules/deps-sort/node_modules/JSONStream/package.json\\nnode_modules/deps-sort/package.json\\nnode_modules/derequire/package.json\\nnode_modules/detective/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/duplexer/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/escodegen/node_modules/esprima/package.json\\nnode_modules/escodegen/package.json\\nnode_modules/escope/package.json\\nnode_modules/esprima-fb/package.json\\nnode_modules/esrefactor/node_modules/esprima/package.json\\nnode_modules/esrefactor/node_modules/estraverse/package.json\\nnode_modules/esrefactor/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/events/package.json\\nnode_modules/glob/package.json\\nnode_modules/http-browserify/package.json\\nnode_modules/https-browserify/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/indexof/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inline-source-map/node_modules/source-map/package.json\\nnode_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/JSONStream/package.json\\nnode_modules/insert-module-globals/node_modules/process/package.json\\nnode_modules/insert-module-globals/package.json\\nnode_modules/is-array/package.json\\nnode_modules/isarray/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/lexical-scope/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/module-deps/node_modules/JSONStream/package.json\\nnode_modules/module-deps/node_modules/browser-resolve/example/custom/package.json\\nnode_modules/module-deps/node_modules/browser-resolve/example/skip/package.json\\nnode_modules/module-deps/node_modules/browser-resolve/package.json\\nnode_modules/module-deps/node_modules/parents/package.json\\nnode_modules/module-deps/node_modules/resolve/package.json\\nnode_modules/module-deps/node_modules/stream-combiner/package.json\\nnode_modules/module-deps/node_modules/string_decoder/package.json\\nnode_modules/module-deps/node_modules/through2/node_modules/readable-stream/package.json\\nnode_modules/module-deps/node_modules/through2/package.json\\nnode_modules/module-deps/node_modules/xtend/package.json\\nnode_modules/module-deps/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/once/package.json\\nnode_modules/opener/package.json\\nnode_modules/optimist/package.json\\nnode_modules/os-browserify/package.json\\nnode_modules/pako/package.json\\nnode_modules/parents/package.json\\nnode_modules/path-browserify/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-platform/package.json\\nnode_modules/process/package.json\\nnode_modules/punycode/package.json\\nnode_modules/querystring-es3/package.json\\nnode_modules/querystring/package.json\\nnode_modules/readable-stream/node_modules/string_decoder/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resumer/package.json\\nnode_modules/rfile/node_modules/resolve/package.json\\nnode_modules/rfile/package.json\\nnode_modules/ripemd160/package.json\\nnode_modules/ruglify/package.json\\nnode_modules/sha.js/node_modules/buffer/package.json\\nnode_modules/sha.js/node_modules/ieee754/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shallow-copy/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/shelljs/package.json\\nnode_modules/sigmund/package.json\\nnode_modules/source-map/package.json\\nnode_modules/stream-browserify/package.json\\nnode_modules/stream-combiner/package.json\\nnode_modules/string_decoder/build/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/subarg/package.json\\nnode_modules/syntax-error/package.json\\nnode_modules/tape/node_modules/deep-equal/package.json\\nnode_modules/tape/node_modules/glob/package.json\\nnode_modules/tape/node_modules/minimatch/package.json\\nnode_modules/tape/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/node_modules/xtend/package.json\\nnode_modules/through2/package.json\\nnode_modules/timers-browserify/node_modules/process/package.json\\nnode_modules/timers-browserify/package.json\\nnode_modules/tty-browserify/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/uglify-to-browserify/package.json\\nnode_modules/umd/node_modules/source-map/package.json\\nnode_modules/umd/node_modules/uglify-js/package.json\\nnode_modules/umd/package.json\\nnode_modules/url/node_modules/punycode/package.json\\nnode_modules/url/package.json\\nnode_modules/util/node_modules/inherits/package.json\\nnode_modules/util/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/window-size/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/xtend/package.json\\nnode_modules/yargs/node_modules/wordwrap/package.json\\nnode_modules/yargs/package.json" } ] }, "components": [ { "authors": [ { "name": "Alex Ford (http://CodeTunnel.com)" } ], "group": "", "name": "yargs", "version": "3.5.4", "description": "Light-weight option parsing with an argv hash. No optstrings attached.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@3.5.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bcoe/yargs" }, { "type": "vcs", "url": "git+ssh://git@github.com/bcoe/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@3.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "0.0.2", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-wordwrap#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/yargs/node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "3.0.0", "description": "extend like a boss", "scope": "optional", "purl": "pkg:npm/xtend@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" }, { "type": "vcs", "url": "git://github.com/Raynos/xtend.git" } ], "type": "library", "bom-ref": "pkg:npm/xtend@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "git+https://github.com/npm/wrappy.git" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "0.0.3", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-wordwrap#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "window-size", "version": "0.1.0", "description": "Reliable way to to get the height and width of the terminal/console in a node.js environment.", "scope": "optional", "purl": "pkg:npm/window-size@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/window-size" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/window-size.git" } ], "type": "library", "bom-ref": "pkg:npm/window-size@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/window-size/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/window-size/package.json" } ], "concludedValue": "node_modules/window-size/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "vm-browserify", "version": "0.0.4", "description": "vm module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vm-browserify@0.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/vm-browserify" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/vm-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/vm-browserify@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/vm-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vm-browserify/package.json" } ], "concludedValue": "node_modules/vm-browserify/package.json" } ] } }, { "authors": [ { "name": "Joyent (http://www.joyent.com)" } ], "group": "", "name": "util", "version": "0.10.4", "description": "Node.JS util module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.10.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-util" }, { "type": "vcs", "url": "git://github.com/defunctzombie/node-util.git" } ], "type": "library", "bom-ref": "pkg:npm/util@0.10.4", "properties": [ { "name": "SrcFile", "value": "node_modules/util/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/package.json" } ], "concludedValue": "node_modules/util/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/util/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/util/node_modules/inherits/package.json" } ] } }, { "group": "", "name": "url", "version": "0.10.3", "description": "The core `url` packaged standalone for use with Browserify.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url@0.10.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-url" }, { "type": "vcs", "url": "git+https://github.com/defunctzombie/node-url.git" } ], "type": "library", "bom-ref": "pkg:npm/url@0.10.3", "properties": [ { "name": "SrcFile", "value": "node_modules/url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/package.json" } ], "concludedValue": "node_modules/url/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.3.2", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@1.3.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "git+https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/url/node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/node_modules/punycode/package.json" } ], "concludedValue": "node_modules/url/node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "umd", "version": "2.1.0", "description": "Universal Module Definition for use in automated build systems", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/umd@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/umd" }, { "type": "vcs", "url": "git+https://github.com/ForbesLindesay/umd.git" } ], "type": "library", "bom-ref": "pkg:npm/umd@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/umd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/umd/package.json" } ], "concludedValue": "node_modules/umd/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "uglify-js", "version": "2.4.24", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "required", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@2.4.24", "externalReferences": [ { "type": "website", "url": "http://lisperator.net/uglifyjs" }, { "type": "vcs", "url": "git+https://github.com/mishoo/UglifyJS2.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@2.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/umd/node_modules/uglify-js/package.json" }, { "name": "ImportedModules", "value": "uglify-js" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/umd/node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/umd/node_modules/uglify-js/package.json" } ], "occurrences": [ { "location": "build/stringify-workers.js", "line": 4 } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.1.34", "description": "Generates and consumes source maps", "scope": "optional", "purl": "pkg:npm/source-map@0.1.34", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "git+ssh://git@github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.1.34", "properties": [ { "name": "SrcFile", "value": "node_modules/umd/node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/umd/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/umd/node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "uglify-to-browserify", "version": "1.0.2", "description": "A transform to make UglifyJS work in browserify.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-to-browserify@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/uglify-to-browserify" }, { "type": "vcs", "url": "git+https://github.com/ForbesLindesay/uglify-to-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-to-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-to-browserify/package.json" } ], "concludedValue": "node_modules/uglify-to-browserify/package.json" } ] }, "tags": [ "transform" ] }, { "group": "", "name": "uglify-js", "version": "2.2.5", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "required", "purl": "pkg:npm/uglify-js@2.2.5", "externalReferences": [ { "type": "website", "url": "http://lisperator.net/uglifyjs" }, { "type": "vcs", "url": "git+https://github.com/mishoo/UglifyJS2.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@2.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" }, { "name": "ImportedModules", "value": "uglify-js" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ], "occurrences": [ { "location": "build/stringify-workers.js", "line": 4 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "typedarray", "version": "0.0.7", "description": "TypedArray polyfill for old browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedarray@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/typedarray" }, { "type": "vcs", "url": "git://github.com/es-shims/typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/typedarray@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typedarray/package.json" } ], "concludedValue": "node_modules/typedarray/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tty-browserify", "version": "0.0.1", "description": "the tty module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tty-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/tty-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/tty-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/tty-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tty-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tty-browserify/package.json" } ], "concludedValue": "node_modules/tty-browserify/package.json" } ] } }, { "authors": [ { "name": "J. Ryan Stinnett (http://convolv.es/)" } ], "group": "", "name": "timers-browserify", "version": "1.4.2", "description": "timers module for browserify", "scope": "optional", "purl": "pkg:npm/timers-browserify@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jryans/timers-browserify" }, { "type": "vcs", "url": "git://github.com/jryans/timers-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/timers-browserify@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/timers-browserify/package.json" } ], "concludedValue": "node_modules/timers-browserify/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.11.10", "description": "process information for node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process@0.11.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shtylman/node-process#readme" }, { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.11.10", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-browserify/node_modules/process/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/timers-browserify/node_modules/process/package.json" } ], "concludedValue": "node_modules/timers-browserify/node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "1.1.1", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2" }, { "type": "vcs", "url": "git+https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" }, { "type": "vcs", "url": "git://github.com/Raynos/xtend.git" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/node_modules/xtend/package.json" }, { "name": "SrcFile", "value": "node_modules/acorn-node/node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-node/node_modules/xtend/package.json" } ], "concludedValue": "node_modules/acorn-node/node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "git+https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through/package.json" } ], "concludedValue": "node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tape", "version": "4.0.3", "description": "tap-producing test harness for node and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tape@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/tape" }, { "type": "vcs", "url": "git://github.com/substack/tape.git" } ], "type": "library", "bom-ref": "pkg:npm/tape@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/package.json" } ], "concludedValue": "node_modules/tape/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/tape/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "5.0.15", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@5.0.15", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@5.0.15", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/node_modules/glob/package.json" } ], "concludedValue": "node_modules/tape/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "1.0.1", "description": "node's assert.deepEqual algorithm", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-deep-equal#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/tape/node_modules/deep-equal/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "syntax-error", "version": "1.4.0", "description": "detect and report syntax errors in source code strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/syntax-error@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-syntax-error" }, { "type": "vcs", "url": "git://github.com/substack/node-syntax-error.git" } ], "type": "library", "bom-ref": "pkg:npm/syntax-error@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/syntax-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/syntax-error/package.json" } ], "concludedValue": "node_modules/syntax-error/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "subarg", "version": "0.0.1", "description": "parse arguments with recursive contexts", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/subarg@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/subarg" }, { "type": "vcs", "url": "git://github.com/substack/subarg.git" } ], "type": "library", "bom-ref": "pkg:npm/subarg@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/subarg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/subarg/package.json" } ], "concludedValue": "node_modules/subarg/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "string_decoder", "version": "0.0.1", "description": "the string_decoder module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/string_decoder" }, { "type": "vcs", "url": "git://github.com/substack/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "group": "", "name": "string_decoder-build", "version": "0.0.0", "scope": "optional", "purl": "pkg:npm/string_decoder-build@0.0.0", "type": "library", "bom-ref": "pkg:npm/string_decoder-build@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/build/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/build/package.json" } ], "concludedValue": "node_modules/string_decoder/build/package.json" } ] } }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "stream-combiner", "version": "0.0.4", "description": "", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-combiner@0.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/stream-combiner" }, { "type": "vcs", "url": "git://github.com/dominictarr/stream-combiner.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-combiner/package.json" } ], "concludedValue": "node_modules/stream-combiner/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-browserify", "version": "1.0.0", "description": "the stream module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-browserify@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-browserify" }, { "type": "vcs", "url": "git://github.com/substack/stream-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-browserify@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-browserify/package.json" } ], "concludedValue": "node_modules/stream-browserify/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.1.43", "description": "Generates and consumes source maps", "scope": "optional", "purl": "pkg:npm/source-map@0.1.43", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "git+ssh://git@github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.1.43", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sigmund", "version": "1.0.1", "description": "Quick and dirty signatures for Objects.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/sigmund#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/sigmund.git" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sigmund/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sigmund/package.json" } ], "concludedValue": "node_modules/sigmund/package.json" } ] } }, { "authors": [ { "name": "Artur Adib " } ], "group": "", "name": "shelljs", "version": "0.2.6", "description": "Portable Unix shell commands for Node.js", "scope": "required", "purl": "pkg:npm/shelljs@0.2.6", "externalReferences": [ { "type": "vcs", "url": "http://github.com/arturadib/shelljs" }, { "type": "vcs", "url": "git://github.com/arturadib/shelljs.git" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/shelljs/package.json" }, { "name": "ImportedModules", "value": "shelljs/global" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shelljs/package.json" } ], "concludedValue": "node_modules/shelljs/package.json" } ], "occurrences": [ { "location": "build/update-ts.js", "line": 9 }, { "location": "build/update.js", "line": 11 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shell-quote", "version": "0.0.1", "description": "quote and parse shell commands", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shell-quote@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-shell-quote#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-shell-quote.git" } ], "type": "library", "bom-ref": "pkg:npm/shell-quote@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/shell-quote/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shell-quote/package.json" } ], "concludedValue": "node_modules/shell-quote/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shallow-copy", "version": "0.0.1", "description": "make a shallow copy of an object or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shallow-copy@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/shallow-copy" }, { "type": "vcs", "url": "git://github.com/substack/shallow-copy.git" } ], "type": "library", "bom-ref": "pkg:npm/shallow-copy@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/shallow-copy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shallow-copy/package.json" } ], "concludedValue": "node_modules/shallow-copy/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "sha.js", "version": "2.1.6", "description": "streaming sha1 hash in pure javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sha.js@2.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/sha.js" }, { "type": "vcs", "url": "git://github.com/dominictarr/sha.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sha.js@2.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/package.json" } ], "concludedValue": "node_modules/sha.js/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.1.13", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ieee754@1.1.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/ieee754#readme" }, { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/node_modules/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/sha.js/node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "buffer", "version": "2.3.4", "description": "Node.js Buffer API, for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer@2.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/buffer" }, { "type": "vcs", "url": "git://github.com/feross/buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer@2.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/node_modules/buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/node_modules/buffer/package.json" } ], "concludedValue": "node_modules/sha.js/node_modules/buffer/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "ruglify", "version": "1.0.0", "description": "'Require' minified JavaScript as a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ruglify@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/ruglify#readme" }, { "type": "vcs", "url": "git+https://github.com/ForbesLindesay/ruglify.git" } ], "type": "library", "bom-ref": "pkg:npm/ruglify@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ruglify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ruglify/package.json" } ], "concludedValue": "node_modules/ruglify/package.json" } ] } }, { "group": "", "name": "ripemd160", "version": "0.2.0", "description": "Compute RIPEMD160 of bytes or strings.", "scope": "optional", "purl": "pkg:npm/ripemd160@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cryptocoinjs/ripemd160" }, { "type": "vcs", "url": "git+https://github.com/cryptocoinjs/ripemd160.git" } ], "type": "library", "bom-ref": "pkg:npm/ripemd160@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/package.json" } ], "concludedValue": "node_modules/ripemd160/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "rfile", "version": "1.0.0", "description": "Require a plain text or binary file in node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rfile@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/rfile#readme" }, { "type": "vcs", "url": "git+https://github.com/ForbesLindesay/rfile.git" } ], "type": "library", "bom-ref": "pkg:npm/rfile@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/rfile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rfile/package.json" } ], "concludedValue": "node_modules/rfile/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "0.3.1", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-resolve#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rfile/node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rfile/node_modules/resolve/package.json" } ], "concludedValue": "node_modules/rfile/node_modules/resolve/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resumer", "version": "0.0.0", "description": "a through stream that starts paused and resumes on the next tick", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resumer@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/resumer" }, { "type": "vcs", "url": "git://github.com/substack/resumer.git" } ], "type": "library", "bom-ref": "pkg:npm/resumer@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resumer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resumer/package.json" } ], "concludedValue": "node_modules/resumer/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "0.7.4", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-resolve" }, { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.1.14", "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "string_decoder", "version": "0.10.31", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/string_decoder/package.json" }, { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring-es3", "version": "0.2.1", "description": "Node's querystring module for all engines. (ES3 compat fork)", "scope": "optional", "purl": "pkg:npm/querystring-es3@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mike-spainhower/querystring" }, { "type": "vcs", "url": "git://github.com/mike-spainhower/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring-es3@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring-es3/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring-es3/package.json" } ], "concludedValue": "node_modules/querystring-es3/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring", "version": "0.2.0", "description": "Node's querystring module for all engines.", "scope": "optional", "purl": "pkg:npm/querystring@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Gozala/querystring#readme" }, { "type": "vcs", "url": "git://github.com/Gozala/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring/package.json" } ], "concludedValue": "node_modules/querystring/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (http://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.2.4", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "purl": "pkg:npm/punycode@1.2.4", "externalReferences": [ { "type": "website", "url": "http://mths.be/punycode" }, { "type": "vcs", "url": "git+https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.7.0", "description": "process information for node.js and browsers", "scope": "optional", "purl": "pkg:npm/process@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shtylman/node-process" }, { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/process/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process/package.json" } ], "concludedValue": "node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Timothy J Fontaine (http://atxconsulting.com)" } ], "group": "", "name": "path-platform", "version": "0.0.1", "description": "Provide access to win32 and posix path operations", "scope": "optional", "purl": "pkg:npm/path-platform@0.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform" }, { "type": "vcs", "url": "git+ssh://git@github.com/tjfontaine/node-path-platform.git" } ], "type": "library", "bom-ref": "pkg:npm/path-platform@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-platform/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-platform/package.json" } ], "concludedValue": "node_modules/path-platform/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-is-absolute#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "path-browserify", "version": "0.0.1", "description": "the path module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/path-browserify" }, { "type": "vcs", "url": "git://github.com/substack/path-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/path-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-browserify/package.json" } ], "concludedValue": "node_modules/path-browserify/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "parents", "version": "0.0.3", "description": "return all the parent directories for a directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parents@0.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-parents" }, { "type": "vcs", "url": "git://github.com/substack/node-parents.git" } ], "type": "library", "bom-ref": "pkg:npm/parents@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/parents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parents/package.json" } ], "concludedValue": "node_modules/parents/package.json" } ] } }, { "group": "", "name": "pako", "version": "0.2.9", "description": "zlib port to javascript - fast, modularized, with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pako@0.2.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/pako" }, { "type": "vcs", "url": "git+https://github.com/nodeca/pako.git" } ], "type": "library", "bom-ref": "pkg:npm/pako@0.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/pako/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pako/package.json" } ], "concludedValue": "node_modules/pako/package.json" } ] } }, { "authors": [ { "name": "Drew Young" } ], "group": "", "name": "os-browserify", "version": "0.1.2", "description": "os-browserify =============", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-browserify@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/drewyoung1/os-browserify" }, { "type": "vcs", "url": "git+ssh://git@github.com/drewyoung1/os-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/os-browserify@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-browserify/package.json" } ], "concludedValue": "node_modules/os-browserify/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "optimist", "version": "0.3.7", "description": "Light-weight option parsing with an argv hash. No optstrings attached.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optimist@0.3.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-optimist#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-optimist.git" } ], "type": "library", "bom-ref": "pkg:npm/optimist@0.3.7", "properties": [ { "name": "SrcFile", "value": "node_modules/optimist/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optimist/package.json" } ], "concludedValue": "node_modules/optimist/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (http://domenicdenicola.com)" } ], "group": "", "name": "opener", "version": "1.3.0", "description": "Opens stuff, like webpages and files and executables, cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "WTFPL", "url": "https://opensource.org/licenses/WTFPL", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/opener@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/domenic/opener#readme" }, { "type": "vcs", "url": "git://github.com/domenic/opener.git" } ], "type": "library", "bom-ref": "pkg:npm/opener@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/opener/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/opener/package.json" } ], "concludedValue": "node_modules/opener/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/once#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/once.git" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object-keys", "version": "0.4.0", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/kriskowal/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/object-keys#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.0.2", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/object-inspect" }, { "type": "vcs", "url": "git://github.com/substack/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "module-deps", "version": "2.1.5", "description": "walk the dependency graph to generate json output that can be fed into browser-pack", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/module-deps@2.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/module-deps" }, { "type": "vcs", "url": "git://github.com/substack/module-deps.git" } ], "type": "library", "bom-ref": "pkg:npm/module-deps@2.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/package.json" } ], "concludedValue": "node_modules/module-deps/package.json" } ] }, "tags": [ "graph", "json" ] }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "2.1.2", "description": "extend like a boss", "scope": "optional", "purl": "pkg:npm/xtend@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" }, { "type": "vcs", "url": "git://github.com/Raynos/xtend.git" } ], "type": "library", "bom-ref": "pkg:npm/xtend@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/xtend/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/xtend/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "0.4.2", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@0.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2" }, { "type": "vcs", "url": "git+https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@0.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/through2/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.0.34", "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.0.34", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.0.34", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/through2/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/through2/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/through2/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "stream-combiner", "version": "0.1.0", "description": "", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-combiner@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/stream-combiner" }, { "type": "vcs", "url": "git://github.com/dominictarr/stream-combiner.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/stream-combiner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/stream-combiner/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/stream-combiner/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "0.6.3", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-resolve" }, { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/resolve/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/resolve/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "parents", "version": "0.0.2", "description": "return all the parent directories for a directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parents@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-parents" }, { "type": "vcs", "url": "git://github.com/substack/node-parents.git" } ], "type": "library", "bom-ref": "pkg:npm/parents@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/parents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/parents/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/parents/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "browser-resolve", "version": "1.2.4", "description": "resolve which handles browser field support in package.json", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-resolve@1.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shtylman/node-browser-resolve" }, { "type": "vcs", "url": "git://github.com/shtylman/node-browser-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-resolve@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/browser-resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/browser-resolve/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/browser-resolve/package.json" } ] } }, { "group": "", "name": "skip", "version": "0.0.0", "scope": "optional", "purl": "pkg:npm/skip@0.0.0", "type": "library", "bom-ref": "pkg:npm/skip@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/browser-resolve/example/skip/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/browser-resolve/example/skip/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/browser-resolve/example/skip/package.json" } ] } }, { "group": "", "name": "custom", "version": "0.0.0", "scope": "optional", "purl": "pkg:npm/custom@0.0.0", "type": "library", "bom-ref": "pkg:npm/custom@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/browser-resolve/example/custom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/node_modules/browser-resolve/example/custom/package.json" } ], "concludedValue": "node_modules/module-deps/node_modules/browser-resolve/example/custom/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://bit.ly/dominictarr)" } ], "group": "", "name": "JSONStream", "version": "0.7.4", "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", "scope": "optional", "purl": "pkg:npm/JSONStream@0.7.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/JSONStream" }, { "type": "vcs", "url": "git://github.com/dominictarr/JSONStream.git" } ], "type": "library", "bom-ref": "pkg:npm/JSONStream@0.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/node_modules/JSONStream/package.json" }, { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/JSONStream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/node_modules/JSONStream/package.json" } ], "concludedValue": "node_modules/insert-module-globals/node_modules/JSONStream/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.10", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "0.3.0", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "2.7.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-lru-cache#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "lexical-scope", "version": "1.1.1", "description": "detect global and local lexical identifiers from javascript source code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lexical-scope@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/lexical-scope" }, { "type": "vcs", "url": "git://github.com/substack/lexical-scope.git" } ], "type": "library", "bom-ref": "pkg:npm/lexical-scope@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lexical-scope/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lexical-scope/package.json" } ], "concludedValue": "node_modules/lexical-scope/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "0.0.5", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@0.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/creationix/jsonparse#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "0.0.1", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "group": "", "name": "is-array", "version": "1.0.1", "description": "Check if the given value is an Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-array@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/retrofox/is-array" }, { "type": "vcs", "url": "git://github.com/retrofox/is-array.git" } ], "type": "library", "bom-ref": "pkg:npm/is-array@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-array/package.json" } ], "concludedValue": "node_modules/is-array/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "insert-module-globals", "version": "6.0.0", "description": "insert implicit module globals into a module-deps stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/insert-module-globals@6.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/insert-module-globals" }, { "type": "vcs", "url": "git://github.com/substack/insert-module-globals.git" } ], "type": "library", "bom-ref": "pkg:npm/insert-module-globals@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/package.json" } ], "concludedValue": "node_modules/insert-module-globals/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.6.0", "description": "process information for node.js and browsers", "scope": "optional", "purl": "pkg:npm/process@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shtylman/node-process" }, { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/process/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/node_modules/process/package.json" } ], "concludedValue": "node_modules/insert-module-globals/node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "inline-source-map", "version": "0.3.1", "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inline-source-map@0.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/inline-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/inline-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/inline-source-map@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inline-source-map/package.json" } ], "concludedValue": "node_modules/inline-source-map/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.3.0", "description": "Generates and consumes source maps", "scope": "optional", "purl": "pkg:npm/source-map@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "git+ssh://git@github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inline-source-map/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/inline-source-map/node_modules/source-map/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "git+https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "group": "", "name": "indexof", "version": "0.0.1", "description": "Microsoft sucks", "scope": "optional", "purl": "pkg:npm/indexof@0.0.1", "type": "library", "bom-ref": "pkg:npm/indexof@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/indexof/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indexof/package.json" } ], "concludedValue": "node_modules/indexof/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.2.1", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ieee754@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/ieee754#readme" }, { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "https-browserify", "version": "0.0.1", "description": "https module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/https-browserify" }, { "type": "vcs", "url": "git://github.com/substack/https-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/https-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/https-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-browserify/package.json" } ], "concludedValue": "node_modules/https-browserify/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "http-browserify", "version": "1.7.0", "description": "http module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-browserify@1.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/http-browserify" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/http-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/http-browserify@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-browserify/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-browserify/package.json" } ], "concludedValue": "node_modules/http-browserify/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.2.11", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili (http://jeditoolkit.com)" } ], "group": "", "name": "events", "version": "1.0.2", "description": "Node's event emitter for all engines.", "scope": "optional", "purl": "pkg:npm/events@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Gozala/events" }, { "type": "vcs", "url": "git://github.com/Gozala/events.git" } ], "type": "library", "bom-ref": "pkg:npm/events@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/events/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/events/package.json" } ], "concludedValue": "node_modules/events/package.json" } ] }, "tags": [ "event" ] }, { "group": "", "name": "esutils", "version": "1.0.0", "description": "utility box for ECMAScript language tools", "scope": "optional", "purl": "pkg:npm/esutils@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Constellation/esutils" }, { "type": "vcs", "url": "git+ssh://git@github.com/Constellation/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.5.1", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "purl": "pkg:npm/estraverse@1.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Constellation/estraverse" }, { "type": "vcs", "url": "git+ssh://git@github.com/Constellation/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ] } }, { "group": "", "name": "esrefactor", "version": "0.1.0", "description": "ECMAScript refactoring helper", "scope": "optional", "purl": "pkg:npm/esrefactor@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ariya/esrefactor#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/ariya/esrefactor.git" } ], "type": "library", "bom-ref": "pkg:npm/esrefactor@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/esrefactor/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esrefactor/package.json" } ], "concludedValue": "node_modules/esrefactor/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "0.0.4", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "purl": "pkg:npm/estraverse@0.0.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/estraverse.html" }, { "type": "vcs", "url": "git+ssh://git@github.com/Constellation/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/esrefactor/node_modules/estraverse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esrefactor/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/esrefactor/node_modules/estraverse/package.json" } ] } }, { "group": "", "name": "esprima", "version": "1.0.4", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "purl": "pkg:npm/esprima@1.0.4", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "git+ssh://git@github.com/ariya/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/esrefactor/node_modules/esprima/package.json" }, { "name": "SrcFile", "value": "node_modules/escodegen/node_modules/esprima/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escodegen/node_modules/esprima/package.json" } ], "concludedValue": "node_modules/escodegen/node_modules/esprima/package.json" } ] } }, { "group": "", "name": "esprima-fb", "version": "3001.1.0-dev-harmony-fb", "description": "Facebook-specific fork of the esprima project", "scope": "optional", "purl": "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb", "externalReferences": [ { "type": "vcs", "url": "https://github.com/facebook/esprima/tree/fb-harmony" }, { "type": "vcs", "url": "git+ssh://git@github.com/facebook/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima-fb/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima-fb/package.json" } ], "concludedValue": "node_modules/esprima-fb/package.json" } ] } }, { "group": "", "name": "escope", "version": "0.0.16", "description": "ECMAScript scope analyzer", "scope": "optional", "purl": "pkg:npm/escope@0.0.16", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/escope.html" }, { "type": "vcs", "url": "git+ssh://git@github.com/Constellation/escope.git" } ], "type": "library", "bom-ref": "pkg:npm/escope@0.0.16", "properties": [ { "name": "SrcFile", "value": "node_modules/escope/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escope/package.json" } ], "concludedValue": "node_modules/escope/package.json" } ] } }, { "group": "", "name": "escodegen", "version": "1.1.0", "description": "ECMAScript code generator", "scope": "optional", "purl": "pkg:npm/escodegen@1.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/escodegen" }, { "type": "vcs", "url": "git+ssh://git@github.com/Constellation/escodegen.git" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escodegen/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escodegen/package.json" } ], "concludedValue": "node_modules/escodegen/package.json" } ] } }, { "authors": [ { "name": "Conrad Pankoff (http://www.fknsrs.biz/)" } ], "group": "", "name": "duplexer2", "version": "0.0.2", "description": "Like duplexer (http://npm.im/duplexer) but using streams2", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/duplexer2@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/deoxxa/duplexer2" }, { "type": "vcs", "url": "git://github.com/deoxxa/duplexer2.git" } ], "type": "library", "bom-ref": "pkg:npm/duplexer2@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer2/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer2/package.json" } ], "concludedValue": "node_modules/duplexer2/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "duplexer", "version": "0.1.2", "description": "Creates a duplex stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/duplexer@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/duplexer" }, { "type": "vcs", "url": "git://github.com/Raynos/duplexer.git" } ], "type": "library", "bom-ref": "pkg:npm/duplexer@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer/package.json" } ], "concludedValue": "node_modules/duplexer/package.json" } ] } }, { "authors": [ { "name": "2013+ Bevry Pty Ltd (http://bevry.me)" } ], "group": "", "name": "domain-browser", "version": "1.1.7", "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domain-browser@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bevry/domain-browser" }, { "type": "vcs", "url": "git+ssh://git@github.com/bevry/domain-browser.git" } ], "type": "library", "bom-ref": "pkg:npm/domain-browser@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/domain-browser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domain-browser/package.json" } ], "concludedValue": "node_modules/domain-browser/package.json" } ] }, "tags": [ "api", "web" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "detective", "version": "3.1.0", "description": "find all require() calls by walking the AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detective@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-detective" }, { "type": "vcs", "url": "git://github.com/substack/node-detective.git" } ], "type": "library", "bom-ref": "pkg:npm/detective@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/detective/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detective/package.json" } ], "concludedValue": "node_modules/detective/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "derequire", "version": "0.8.0", "description": "remove requires", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/derequire@0.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/derequire" }, { "type": "vcs", "url": "git+https://github.com/calvinmetcalf/derequire.git" } ], "type": "library", "bom-ref": "pkg:npm/derequire@0.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/derequire/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/derequire/package.json" } ], "concludedValue": "node_modules/derequire/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deps-sort", "version": "0.1.2", "description": "sort module-deps output for deterministic browserify bundles", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deps-sort@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/deps-sort" }, { "type": "vcs", "url": "git://github.com/substack/deps-sort.git" } ], "type": "library", "bom-ref": "pkg:npm/deps-sort@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/deps-sort/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deps-sort/package.json" } ], "concludedValue": "node_modules/deps-sort/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://bit.ly/dominictarr)" } ], "group": "", "name": "JSONStream", "version": "0.6.4", "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", "scope": "optional", "purl": "pkg:npm/JSONStream@0.6.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/JSONStream" }, { "type": "vcs", "url": "git://github.com/dominictarr/JSONStream.git" } ], "type": "library", "bom-ref": "pkg:npm/JSONStream@0.6.4", "properties": [ { "name": "SrcFile", "value": "node_modules/deps-sort/node_modules/JSONStream/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/JSONStream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/JSONStream/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/JSONStream/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.2.7", "description": "simplified stream contruction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.2.7", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/through" }, { "type": "vcs", "url": "git+https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/deps-sort/node_modules/JSONStream/node_modules/through/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-pack/node_modules/JSONStream/node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/node_modules/JSONStream/node_modules/through/package.json" } ], "concludedValue": "node_modules/browser-pack/node_modules/JSONStream/node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "defined", "version": "0.0.0", "description": "return the first argument that is `!== undefined`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defined@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/defined" }, { "type": "vcs", "url": "git://github.com/substack/defined.git" } ], "type": "library", "bom-ref": "pkg:npm/defined@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/defined/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defined/package.json" } ], "concludedValue": "node_modules/defined/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "0.2.2", "description": "node's assert.deepEqual algorithm", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-deep-equal" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/deep-equal/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/decamelize#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/decamelize.git" } ], "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "crypto-browserify", "version": "2.1.10", "description": "partial implementation of crypto for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crypto-browserify@2.1.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/crypto-browserify" }, { "type": "vcs", "url": "git://github.com/dominictarr/crypto-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/crypto-browserify@2.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/crypto-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypto-browserify/package.json" } ], "concludedValue": "node_modules/crypto-browserify/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.3", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/core-util-is#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/core-util-is.git" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "0.3.5", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@0.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "constants-browserify", "version": "0.0.1", "description": "node's constants module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/constants-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/constants-browserify" }, { "type": "vcs", "url": "git://github.com/juliangruber/constants-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/constants-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/constants-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/constants-browserify/package.json" } ], "concludedValue": "node_modules/constants-browserify/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "console-browserify", "version": "1.2.0", "description": "Emulate console for all the browsers", "scope": "optional", "purl": "pkg:npm/console-browserify@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/console-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/console-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/console-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/console-browserify/package.json" } ], "concludedValue": "node_modules/console-browserify/package.json" } ] } }, { "authors": [ { "name": "Max Ogden " } ], "group": "", "name": "concat-stream", "version": "1.4.11", "description": "writable stream that concatenates strings or binary data and calls a callback with the result", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-stream@1.4.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/maxogden/concat-stream#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/maxogden/concat-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-stream@1.4.11", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-stream/package.json" } ], "concludedValue": "node_modules/concat-stream/package.json" } ] }, "tags": [ "binary", "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-concat-map" }, { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "commondir", "version": "0.0.1", "description": "Compute the closest common parent for file paths", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commondir@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-commondir#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-commondir.git" } ], "type": "library", "bom-ref": "pkg:npm/commondir@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commondir/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commondir/package.json" } ], "concludedValue": "node_modules/commondir/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "combine-source-map", "version": "0.3.0", "description": "Add source maps of multiple files, offset them and then combine them into one source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combine-source-map@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/combine-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/combine-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/combine-source-map@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/combine-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combine-source-map/package.json" } ], "concludedValue": "node_modules/combine-source-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "1.2.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/camelcase" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/camelcase.git" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "callsite", "version": "1.0.0", "description": "access to v8's CallSites", "scope": "optional", "purl": "pkg:npm/callsite@1.0.0", "type": "library", "bom-ref": "pkg:npm/callsite@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/callsite/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/callsite/package.json" } ], "concludedValue": "node_modules/callsite/package.json" } ] } }, { "group": "", "name": "builtins", "version": "0.0.7", "description": "List of node.js builtin modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/builtins@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/builtins" }, { "type": "vcs", "url": "git://github.com/juliangruber/builtins.git" } ], "type": "library", "bom-ref": "pkg:npm/builtins@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/builtins/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/builtins/package.json" } ], "concludedValue": "node_modules/builtins/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "buffer", "version": "2.8.3", "description": "Node.js Buffer API, for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer@2.8.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/buffer" }, { "type": "vcs", "url": "git://github.com/feross/buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer@2.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer/package.json" } ], "concludedValue": "node_modules/buffer/package.json" } ] } }, { "authors": [ { "name": "Devon Govett " } ], "group": "", "name": "browserify-zlib", "version": "0.1.4", "description": "Full zlib module for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-zlib@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devongovett/browserify-zlib" }, { "type": "vcs", "url": "git://github.com/devongovett/browserify-zlib.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-zlib@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-zlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-zlib/package.json" } ], "concludedValue": "node_modules/browserify-zlib/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "browserify", "version": "4.2.3", "description": "browser-side require() the node way", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify@4.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-browserify" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify/package.json" }, { "name": "ImportedModules", "value": "browserify" }, { "name": "SrcFile", "value": "example/node_modules/browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "example/node_modules/browserify/package.json" } ], "concludedValue": "example/node_modules/browserify/package.json" } ], "occurrences": [ { "location": "example/build.js", "line": 2 } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "browser-resolve", "version": "1.11.3", "description": "resolve which handles browser field support in package.json", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-resolve@1.11.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shtylman/node-browser-resolve#readme" }, { "type": "vcs", "url": "git://github.com/shtylman/node-browser-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-resolve@1.11.3", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/package.json" } ], "concludedValue": "node_modules/browser-resolve/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.1.7", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-resolve#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-resolve/node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/node_modules/resolve/package.json" } ], "concludedValue": "node_modules/browser-resolve/node_modules/resolve/package.json" } ] } }, { "group": "", "name": "deep", "version": "1.2.3", "scope": "optional", "purl": "pkg:npm/deep@1.2.3", "type": "library", "bom-ref": "pkg:npm/deep@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ], "concludedValue": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "browser-pack", "version": "2.0.1", "description": "pack node-style source files from a json stream into a browser bundle", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-pack@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/browser-pack" }, { "type": "vcs", "url": "git://github.com/substack/browser-pack.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-pack@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-pack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-pack/package.json" } ], "concludedValue": "node_modules/browser-pack/package.json" } ] }, "tags": [ "json", "stream" ] }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.18", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.18", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "T. Jameson Little " } ], "group": "", "name": "base64-js", "version": "0.0.7", "description": "Base64 encoding/decoding in pure JS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/base64-js@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/beatgammit/base64-js" }, { "type": "vcs", "url": "git://github.com/beatgammit/base64-js.git" } ], "type": "library", "bom-ref": "pkg:npm/base64-js@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/base64-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/base64-js/package.json" } ], "concludedValue": "node_modules/base64-js/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "0.2.10", "description": "Higher-order functions and common patterns for asynchronous code", "scope": "optional", "purl": "pkg:npm/async@0.2.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/caolan/async#readme" }, { "type": "vcs", "url": "git+https://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@0.2.10", "properties": [ { "name": "SrcFile", "value": "node_modules/async/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async/package.json" } ], "concludedValue": "node_modules/async/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "astw", "version": "2.2.0", "description": "walk the ast with references to parent nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/astw@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/astw" }, { "type": "vcs", "url": "git://github.com/substack/astw.git" } ], "type": "library", "bom-ref": "pkg:npm/astw@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/astw/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/astw/package.json" } ], "concludedValue": "node_modules/astw/package.json" } ] } }, { "group": "", "name": "assert", "version": "1.1.2", "description": "commonjs assert - node.js api compatible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/commonjs-assert" }, { "type": "vcs", "url": "git://github.com/defunctzombie/commonjs-assert.git" } ], "type": "library", "bom-ref": "pkg:npm/assert@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/assert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert/package.json" } ], "concludedValue": "node_modules/assert/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Joyent (http://www.joyent.com)" } ], "group": "", "name": "util", "version": "0.10.3", "description": "Node.JS util module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.10.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-util" }, { "type": "vcs", "url": "git://github.com/defunctzombie/node-util.git" } ], "type": "library", "bom-ref": "pkg:npm/util@0.10.3", "properties": [ { "name": "SrcFile", "value": "node_modules/assert/node_modules/util/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert/node_modules/util/package.json" } ], "concludedValue": "node_modules/assert/node_modules/util/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/assert/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/assert/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "James Burke (http://github.com/jrburke)" } ], "group": "", "name": "amdefine", "version": "1.0.1", "description": "Provide AMD's define() API for declaring modules in the AMD format", "scope": "optional", "licenses": [ { "expression": "BSD-3-Clause OR MIT" } ], "purl": "pkg:npm/amdefine@1.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/jrburke/amdefine" }, { "type": "vcs", "url": "git+https://github.com/jrburke/amdefine.git" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/amdefine/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/amdefine/package.json" } ], "concludedValue": "node_modules/amdefine/package.json" } ] }, "tags": [ "api" ] }, { "group": "", "name": "acorn-walk", "version": "7.2.0", "description": "ECMAScript (ESTree) AST walker", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-walk@7.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "git+https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-walk/package.json" } ], "concludedValue": "node_modules/acorn-walk/package.json" } ] } }, { "authors": [ { "name": "Renée Kooi " } ], "group": "", "name": "acorn-node", "version": "1.8.2", "description": "the acorn javascript parser, preloaded with plugins for syntax parity with recent node versions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-node@1.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/acorn-node" }, { "type": "vcs", "url": "git+https://github.com/browserify/acorn-node.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-node@1.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-node/package.json" } ], "concludedValue": "node_modules/acorn-node/package.json" } ] }, "tags": [ "plugins" ] }, { "group": "", "name": "acorn", "version": "7.4.1", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@7.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "git+https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@7.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-node/node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-node/node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn-node/node_modules/acorn/package.json" } ] } }, { "group": "", "name": "acorn", "version": "4.0.13", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@4.0.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ternjs/acorn" }, { "type": "vcs", "url": "git+https://github.com/ternjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@4.0.13", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://bit.ly/dominictarr)" } ], "group": "", "name": "JSONStream", "version": "0.8.4", "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", "scope": "optional", "purl": "pkg:npm/JSONStream@0.8.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/JSONStream" }, { "type": "vcs", "url": "git://github.com/dominictarr/JSONStream.git" } ], "type": "library", "bom-ref": "pkg:npm/JSONStream@0.8.4", "properties": [ { "name": "SrcFile", "value": "node_modules/JSONStream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/JSONStream/package.json" } ], "concludedValue": "node_modules/JSONStream/package.json" } ] } }, { "authors": [ { "name": "David Chambers " } ], "group": "", "name": "Base64", "version": "0.2.1", "description": "Base64 encoding and decoding", "scope": "optional", "purl": "pkg:npm/Base64@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davidchambers/Base64.js" }, { "type": "vcs", "url": "git://github.com/davidchambers/Base64.js.git" } ], "type": "library", "bom-ref": "pkg:npm/Base64@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/Base64/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/Base64/package.json" } ], "concludedValue": "node_modules/Base64/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "brace", "version": "0.11.0", "description": "browserify compatible version of the ace editor.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/brace" }, { "type": "vcs", "url": "git://github.com/thlorenz/brace.git" } ], "type": "library", "bom-ref": "pkg:npm/brace@0.11.0", "properties": [ { "name": "SrcFile", "value": "example/node_modules/brace/package.json" }, { "name": "ImportedModules", "value": "brace,brace/mode/coffee,brace/theme/vibrant_ink,brace/keybinding/vim,brace/mode/css,brace/theme/solarized_light,brace/mode/javascript,brace/theme/monokai,brace/mode/json,brace/mode/lua,brace/theme/solarized_dark" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "example/node_modules/brace/package.json" } ], "concludedValue": "example/node_modules/brace/package.json" } ], "occurrences": [ { "location": "example/coffee-editor.js", "line": 1 }, { "location": "example/coffee-editor.js", "line": 2 }, { "location": "example/coffee-editor.js", "line": 3 }, { "location": "example/coffee-editor.js", "line": 4 }, { "location": "example/css-editor.js", "line": 1 }, { "location": "example/css-editor.js", "line": 2 }, { "location": "example/css-editor.js", "line": 3 }, { "location": "example/javascript-editor.js", "line": 1 }, { "location": "example/javascript-editor.js", "line": 2 }, { "location": "example/javascript-editor.js", "line": 3 }, { "location": "example/javascript-editor.js", "line": 4 }, { "location": "example/json-editor.js", "line": 1 }, { "location": "example/json-editor.js", "line": 2 }, { "location": "example/json-editor.js", "line": 3 }, { "location": "example/lua-editor.js", "line": 1 }, { "location": "example/lua-editor.js", "line": 2 }, { "location": "example/lua-editor.js", "line": 3 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/brace@0.11.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-09T12:05:52Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'brace' with version '0.11.0'." } ] }