{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:3437a271-a1ae-480f-b56e-9f9456a4bf03", "version": 1, "metadata": { "timestamp": "2026-09-09T20:32:05Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "buffer-crc32", "group": "", "version": "0.2.3", "description": "A pure javascript CRC32 algorithm that plays nice with binary data", "purl": "pkg:npm/buffer-crc32@0.2.3", "bom-ref": "pkg:npm/buffer-crc32@0.2.3", "author": "Brian J. Brennan (http://bjb.io)", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "externalReferences": [ { "type": "vcs", "url": "https://github.com/brianloveswords/buffer-crc32" }, { "type": "vcs", "url": "git://github.com/brianloveswords/buffer-crc32.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/abbrev/package.json\\nnode_modules/buffer-equal/package.json\\nnode_modules/bunker/package.json\\nnode_modules/burrito/node_modules/traverse/package.json\\nnode_modules/burrito/package.json\\nnode_modules/charm/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/difflet/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/nopt/package.json\\nnode_modules/runforcover/package.json\\nnode_modules/slide/package.json\\nnode_modules/tap/node_modules/inherits/package.json\\nnode_modules/tap/node_modules/yamlish/package.json\\nnode_modules/tap/package.json\\nnode_modules/traverse/package.json\\nnode_modules/uglify-js/package.json" } ] }, "components": [ { "authors": [ { "name": "Mihai Bazon (http://mihai.bazon.net/blog)" } ], "group": "", "name": "uglify-js", "version": "1.1.1", "description": "JavaScript parser and compressor/beautifier toolkit", "scope": "optional", "purl": "pkg:npm/uglify-js@1.1.1", "type": "library", "bom-ref": "pkg:npm/uglify-js@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "traverse", "version": "0.6.6", "description": "traverse and transform objects by visiting every node on a recursive walk", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/traverse@0.6.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/js-traverse" }, { "type": "vcs", "url": "git://github.com/substack/js-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.6.6", "properties": [ { "name": "SrcFile", "value": "node_modules/traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/traverse/package.json" } ], "concludedValue": "node_modules/traverse/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "tap", "version": "0.2.6", "description": "A Test-Anything-Protocol library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap@0.2.6", "type": "library", "bom-ref": "pkg:npm/tap@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap/package.json" } ], "concludedValue": "node_modules/tap/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yamlish", "version": "0.0.5", "description": "Parser/encoder for the yamlish format", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yamlish@0.0.5", "type": "library", "bom-ref": "pkg:npm/yamlish@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tap/node_modules/yamlish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap/node_modules/yamlish/package.json" } ], "concludedValue": "node_modules/tap/node_modules/yamlish/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inherits", "version": "1.0.0", "description": "A tiny simple way to do classic inheritance in js", "scope": "optional", "licenses": [ { "license": { "name": "WTFPL2", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@1.0.0", "type": "library", "bom-ref": "pkg:npm/inherits@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tap/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/tap/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "slide", "version": "1.1.5", "description": "A flow control lib small enough to fit on in a slide presentation. Derived live at Oak.JS", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slide@1.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/slide-flow-control.git" } ], "type": "library", "bom-ref": "pkg:npm/slide@1.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/slide/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slide/package.json" } ], "concludedValue": "node_modules/slide/package.json" } ] } }, { "authors": [ { "name": "Chris Dickinson (http://neversaw.us)" } ], "group": "", "name": "runforcover", "version": "0.0.2", "description": "require plugin for js code coverage using bunker", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/runforcover@0.0.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/chrisdickinson/node-runforcover.git" } ], "type": "library", "bom-ref": "pkg:npm/runforcover@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/runforcover/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/runforcover/package.json" } ], "concludedValue": "node_modules/runforcover/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "2.2.1", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@2.2.1", "type": "library", "bom-ref": "pkg:npm/nopt@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.3.5", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.5", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "difflet", "version": "0.2.6", "description": "colorful diffs for javascript objects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/difflet@0.2.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/difflet.git" } ], "type": "library", "bom-ref": "pkg:npm/difflet@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/difflet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/difflet/package.json" } ], "concludedValue": "node_modules/difflet/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "deep-is", "version": "0.1.2", "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-is@0.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/thlorenz/deep-is.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-is/package.json" } ], "concludedValue": "node_modules/deep-is/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "0.0.0", "description": "node's assert.deepEqual algorithm", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@0.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/deep-equal/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "charm", "version": "0.1.2", "description": "ansi control sequences for terminal cursor hopping and colors", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/charm@0.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-charm.git" } ], "type": "library", "bom-ref": "pkg:npm/charm@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/charm/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/charm/package.json" } ], "concludedValue": "node_modules/charm/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "burrito", "version": "0.2.12", "description": "Wrap up expressions with a trace function while walking the AST with rice and beans on the side", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/burrito@0.2.12", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-burrito.git" } ], "type": "library", "bom-ref": "pkg:npm/burrito@0.2.12", "properties": [ { "name": "SrcFile", "value": "node_modules/burrito/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/burrito/package.json" } ], "concludedValue": "node_modules/burrito/package.json" } ] }, "tags": [ "beans" ] }, { "authors": [ { "name": "James Halliday" } ], "group": "", "name": "traverse", "version": "0.5.2", "description": "Traverse and transform objects by visiting every node on a recursive walk", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/traverse@0.5.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/js-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/burrito/node_modules/traverse/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/burrito/node_modules/traverse/package.json" } ], "concludedValue": "node_modules/burrito/node_modules/traverse/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "bunker", "version": "0.1.2", "description": "code coverage in native javascript", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bunker@0.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-bunker.git" } ], "type": "library", "bom-ref": "pkg:npm/bunker@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bunker/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bunker/package.json" } ], "concludedValue": "node_modules/bunker/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "buffer-equal", "version": "0.0.1", "description": "return whether two buffers are equal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer-equal@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-buffer-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer-equal@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer-equal/package.json" } ], "concludedValue": "node_modules/buffer-equal/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "abbrev", "version": "1.0.5", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.0.5", "type": "library", "bom-ref": "pkg:npm/abbrev@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/buffer-crc32@0.2.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-09T20:32:05Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'buffer-crc32' with version '0.2.3'." } ] }