{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:f40c58a3-acb3-4b26-8b85-5b293b4ad63b", "version": 1, "metadata": { "timestamp": "2026-10-28T11:00:01Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "effect", "group": "", "version": "4.0.0-beta.59", "description": "The missing standard library for TypeScript, for writing production-grade software.", "purl": "pkg:npm/effect@4.0.0-beta.59", "bom-ref": "pkg:npm/effect@4.0.0-beta.59", "properties": [ { "name": "cdx:npm:scripts", "value": "codegen, build, build:tsgo, babel, check, test, coverage" }, { "name": "cdx:npm:buildScripts", "value": "build, build:tsgo" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://effect.website" }, { "type": "vcs", "url": "https://github.com/Effect-TS/effect-smol.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@standard-schema\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@standard-schema/spec/package.json\\nnode_modules/@types/ini/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/ajv/package.json\\nnode_modules/arktype/package.json\\nnode_modules/ast-types/package.json\\nnode_modules/fast-check/package.json\\nnode_modules/find-my-way-ts/package.json\\nnode_modules/immer/package.json\\nnode_modules/ini/package.json\\nnode_modules/kubernetes-types/package.json\\nnode_modules/msgpackr/package.json\\nnode_modules/multipasta/package.json\\nnode_modules/tinybench/package.json\\nnode_modules/toml/package.json\\nnode_modules/uuid/package.json\\nnode_modules/valibot/package.json\\nnode_modules/yaml/package.json" } ] }, "components": [ { "authors": [ { "name": "Eemeli Aro " } ], "group": "", "name": "yaml", "version": "2.8.3", "description": "JavaScript parser and stringifier for YAML", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@2.8.3", "externalReferences": [ { "type": "website", "url": "https://eemeli.org/yaml/" } ], "type": "library", "bom-ref": "pkg:npm/yaml@2.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yaml/package.json" }, { "name": "ImportedModules", "value": "yaml" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yaml/package.json" } ], "concludedValue": "node_modules/yaml/package.json" } ], "occurrences": [ { "location": "dist/unstable/cli/Primitive.js", "line": 16 }, { "location": "dist/unstable/cli/Primitive.js", "line": 329 }, { "location": "dist/unstable/cli/Primitive.js", "line": 330 }, { "location": "src/unstable/cli/Primitive.ts", "line": 16 }, { "location": "src/unstable/cli/Primitive.ts", "line": 494 }, { "location": "src/unstable/cli/Primitive.ts", "line": 495 } ] } }, { "authors": [ { "name": "Fabian Hiller" } ], "group": "", "name": "valibot", "version": "1.3.1", "description": "The modular and type safe schema library for validating structural data", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/valibot@1.3.1", "externalReferences": [ { "type": "website", "url": "https://valibot.dev" }, { "type": "vcs", "url": "https://github.com/open-circle/valibot" } ], "type": "library", "bom-ref": "pkg:npm/valibot@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/valibot/package.json" }, { "name": "ImportedModules", "value": "valibot" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/valibot/package.json" } ], "concludedValue": "node_modules/valibot/package.json" } ], "occurrences": [ { "location": "benchmark/schema/array.ts", "line": 4 }, { "location": "benchmark/schema/array.ts", "line": 26 }, { "location": "benchmark/schema/array.ts", "line": 54 }, { "location": "benchmark/schema/array.ts", "line": 57 }, { "location": "benchmark/schema/filter.ts", "line": 4 }, { "location": "benchmark/schema/filter.ts", "line": 26 }, { "location": "benchmark/schema/filter.ts", "line": 54 }, { "location": "benchmark/schema/filter.ts", "line": 57 }, { "location": "benchmark/schema/object.ts", "line": 4 }, { "location": "benchmark/schema/object.ts", "line": 28 }, { "location": "benchmark/schema/object.ts", "line": 29 }, { "location": "benchmark/schema/object.ts", "line": 62 }, { "location": "benchmark/schema/object.ts", "line": 65 } ] } }, { "group": "", "name": "uuid", "version": "13.0.0", "description": "RFC9562 UUIDs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@13.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@13.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "ImportedModules", "value": "uuid" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ], "occurrences": [ { "location": "dist/unstable/eventlog/EventJournal.js", "line": 4 }, { "location": "dist/unstable/eventlog/EventJournal.js", "line": 45 }, { "location": "dist/unstable/eventlog/EventJournal.js", "line": 72 }, { "location": "dist/unstable/eventlog/EventJournal.js", "line": 112 }, { "location": "dist/unstable/eventlog/EventJournal.js", "line": 154 }, { "location": "dist/unstable/eventlog/EventLogServerEncrypted.js", "line": 4 }, { "location": "dist/unstable/eventlog/EventLogServerEncrypted.js", "line": 76 }, { "location": "dist/unstable/eventlog/SqlEventJournal.js", "line": 4 }, { "location": "dist/unstable/eventlog/SqlEventJournal.js", "line": 113 }, { "location": "dist/unstable/schema/Model.js", "line": 4 }, { "location": "dist/unstable/schema/Model.js", "line": 352 }, { "location": "src/unstable/eventlog/EventJournal.ts", "line": 4 }, { "location": "src/unstable/eventlog/EventJournal.ts", "line": 134 }, { "location": "src/unstable/eventlog/EventJournal.ts", "line": 180 }, { "location": "src/unstable/eventlog/EventJournal.ts", "line": 226 }, { "location": "src/unstable/eventlog/EventJournal.ts", "line": 273 }, { "location": "src/unstable/eventlog/EventLogServerEncrypted.ts", "line": 4 }, { "location": "src/unstable/eventlog/EventLogServerEncrypted.ts", "line": 95 }, { "location": "src/unstable/eventlog/SqlEventJournal.ts", "line": 4 }, { "location": "src/unstable/eventlog/SqlEventJournal.ts", "line": 153 }, { "location": "src/unstable/schema/Model.ts", "line": 4 }, { "location": "src/unstable/schema/Model.ts", "line": 623 } ] } }, { "authors": [ { "name": "Michelle Tilley " } ], "group": "", "name": "toml", "version": "4.1.1", "description": "TOML parser for Node.js (TOML v1.1.0 compliant)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/toml@4.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/BinaryMuse/toml-node.git" } ], "type": "library", "bom-ref": "pkg:npm/toml@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/toml/package.json" }, { "name": "ImportedModules", "value": "toml" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/toml/package.json" } ], "concludedValue": "node_modules/toml/package.json" } ], "occurrences": [ { "location": "dist/unstable/cli/Primitive.js", "line": 15 }, { "location": "dist/unstable/cli/Primitive.js", "line": 328 }, { "location": "src/unstable/cli/Primitive.ts", "line": 15 }, { "location": "src/unstable/cli/Primitive.ts", "line": 493 } ] } }, { "group": "", "name": "tinybench", "version": "6.0.0", "description": "🔎 A simple, tiny and lightweight benchmarking library!", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinybench@6.0.0", "type": "library", "bom-ref": "pkg:npm/tinybench@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tinybench/package.json" }, { "name": "ImportedModules", "value": "tinybench,Bench,tinybench/Bench" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinybench/package.json" } ], "concludedValue": "node_modules/tinybench/package.json" } ], "occurrences": [ { "location": "benchmark/schema/Enums.ts", "line": 2 }, { "location": "benchmark/schema/Optic.ts", "line": 2 }, { "location": "benchmark/schema/array.ts", "line": 3 }, { "location": "benchmark/schema/filter.ts", "line": 3 }, { "location": "benchmark/schema/object.ts", "line": 3 }, { "location": "benchmark/schema/tagged-union.ts", "line": 2 }, { "location": "benchmark/schema/transformation.ts", "line": 2 }, { "location": "benchmark/stream/splitLines.ts", "line": 2 } ] } }, { "authors": [ { "name": "Tim Smart " } ], "group": "", "name": "multipasta", "version": "0.2.7", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/multipasta@0.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tim-smart/multipasta.git" } ], "type": "library", "bom-ref": "pkg:npm/multipasta@0.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/multipasta/package.json" }, { "name": "ImportedModules", "value": "multipasta/HeadersParser,multipasta/node,multipasta/Search,multipasta/web,multipasta" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multipasta/package.json" } ], "concludedValue": "node_modules/multipasta/package.json" } ], "occurrences": [ { "location": "dist/unstable/http/Multipasta/HeadersParser.js", "line": 8 }, { "location": "src/unstable/http/Multipasta/HeadersParser.ts", "line": 9 }, { "location": "dist/unstable/http/Multipasta/Node.js", "line": 8 }, { "location": "dist/unstable/http/Multipasta/Search.js", "line": 8 }, { "location": "dist/unstable/http/Multipasta/Web.js", "line": 8 }, { "location": "dist/unstable/http/Multipasta.js", "line": 8 }, { "location": "src/unstable/http/Multipasta/Node.ts", "line": 9 }, { "location": "src/unstable/http/Multipasta/Search.ts", "line": 9 }, { "location": "src/unstable/http/Multipasta/Web.ts", "line": 9 }, { "location": "src/unstable/http/Multipasta.ts", "line": 9 } ] } }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "msgpackr", "version": "1.11.9", "description": "Ultra-fast MessagePack implementation with extensions for records and structured cloning", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/msgpackr@1.11.9", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kriszyp/msgpackr" } ], "type": "library", "bom-ref": "pkg:npm/msgpackr@1.11.9", "properties": [ { "name": "SrcFile", "value": "node_modules/msgpackr/package.json" }, { "name": "ImportedModules", "value": "msgpackr,Packr,msgpackr/Packr,Unpackr,msgpackr/Unpackr" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/msgpackr/package.json" } ], "concludedValue": "node_modules/msgpackr/package.json" } ], "occurrences": [ { "location": "dist/unstable/encoding/Msgpack.js", "line": 4 }, { "location": "dist/unstable/encoding/Msgpack.js", "line": 5 }, { "location": "dist/unstable/encoding/Msgpack.js", "line": 116 }, { "location": "dist/unstable/encoding/Msgpack.js", "line": 125 }, { "location": "dist/unstable/rpc/RpcSerialization.js", "line": 4 }, { "location": "src/unstable/encoding/Msgpack.ts", "line": 4 }, { "location": "src/unstable/encoding/Msgpack.ts", "line": 5 }, { "location": "src/unstable/encoding/Msgpack.ts", "line": 278 }, { "location": "src/unstable/encoding/Msgpack.ts", "line": 289 }, { "location": "src/unstable/rpc/RpcSerialization.ts", "line": 4 } ] } }, { "authors": [ { "name": "Lyra Naeseth " } ], "group": "", "name": "kubernetes-types", "version": "1.30.0", "description": "TypeScript definitions of Kubernetes resource types", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kubernetes-types@1.30.0", "type": "library", "bom-ref": "pkg:npm/kubernetes-types@1.30.0", "properties": [ { "name": "SrcFile", "value": "node_modules/kubernetes-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kubernetes-types/package.json" } ], "concludedValue": "node_modules/kubernetes-types/package.json" } ] }, "tags": [ "resource" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ini", "version": "6.0.0", "description": "An ini encoder/decoder for node", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@6.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ini/package.json" }, { "name": "ImportedModules", "value": "ini" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ini/package.json" } ], "concludedValue": "node_modules/ini/package.json" } ], "occurrences": [ { "location": "dist/unstable/cli/Primitive.js", "line": 14 }, { "location": "dist/unstable/cli/Primitive.js", "line": 326 }, { "location": "src/unstable/cli/Primitive.ts", "line": 14 }, { "location": "src/unstable/cli/Primitive.ts", "line": 491 } ] } }, { "authors": [ { "name": "Michel Weststrate " } ], "group": "", "name": "immer", "version": "11.1.4", "description": "Create your next immutable state by mutating the current one", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/immer@11.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/immerjs/immer#readme" }, { "type": "vcs", "url": "https://github.com/immerjs/immer.git" } ], "type": "library", "bom-ref": "pkg:npm/immer@11.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/immer/package.json" }, { "name": "ImportedModules", "value": "immer,immerable,immer/immerable,produce,immer/produce" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/immer/package.json" } ], "concludedValue": "node_modules/immer/package.json" } ], "occurrences": [ { "location": "typetest/schema/Schema.tst.ts", "line": 15 }, { "location": "typetest/schema/Schema.tst.ts", "line": 1238 } ] } }, { "authors": [ { "name": "Tomas Della Vedova - @delvedor (http://delved.org)" } ], "group": "", "name": "find-my-way-ts", "version": "0.1.6", "description": "Crazy fast http radix based router", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-my-way-ts@0.1.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tim-smart/find-my-way-ts.git" } ], "type": "library", "bom-ref": "pkg:npm/find-my-way-ts@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/find-my-way-ts/package.json" }, { "name": "ImportedModules", "value": "find-my-way-ts" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-my-way-ts/package.json" } ], "concludedValue": "node_modules/find-my-way-ts/package.json" } ], "occurrences": [ { "location": "dist/unstable/http/FindMyWay.js", "line": 8 }, { "location": "src/unstable/http/FindMyWay.ts", "line": 9 } ] } }, { "authors": [ { "name": "Nicolas DUBIEN " } ], "group": "", "name": "fast-check", "version": "4.6.0", "description": "Property based testing framework for JavaScript (like QuickCheck)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-check@4.6.0", "externalReferences": [ { "type": "website", "url": "https://fast-check.dev/" }, { "type": "vcs", "url": "git+https://github.com/dubzzz/fast-check.git" } ], "type": "framework", "bom-ref": "pkg:npm/fast-check@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-check/package.json" }, { "name": "ImportedModules", "value": "fast-check" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-check/package.json" } ], "concludedValue": "node_modules/fast-check/package.json" } ], "occurrences": [ { "location": "dist/testing/FastCheck.js", "line": 86 }, { "location": "src/testing/FastCheck.ts", "line": 87 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "ast-types", "version": "0.14.2", "description": "Esprima-compatible implementation of the Mozilla JS Parser API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ast-types@0.14.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/ast-types" }, { "type": "vcs", "url": "git://github.com/benjamn/ast-types.git" } ], "type": "library", "bom-ref": "pkg:npm/ast-types@0.14.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ast-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ast-types/package.json" } ], "concludedValue": "node_modules/ast-types/package.json" } ] } }, { "authors": [ { "name": "David Blass (https://arktype.io)" } ], "group": "", "name": "arktype", "version": "2.2.0", "description": "TypeScript's 1:1 validator, optimized from editor to runtime", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/arktype@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arktypeio/arktype.git" } ], "type": "library", "bom-ref": "pkg:npm/arktype@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/arktype/package.json" }, { "name": "ImportedModules", "value": "arktype,type,arktype/type" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/arktype/package.json" } ], "concludedValue": "node_modules/arktype/package.json" } ], "occurrences": [ { "location": "benchmark/schema/array.ts", "line": 1 }, { "location": "benchmark/schema/array.ts", "line": 28 }, { "location": "benchmark/schema/filter.ts", "line": 1 }, { "location": "benchmark/schema/filter.ts", "line": 28 }, { "location": "benchmark/schema/object.ts", "line": 1 }, { "location": "benchmark/schema/object.ts", "line": 32 } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv", "version": "8.18.0", "description": "Another JSON Schema Validator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@8.18.0", "externalReferences": [ { "type": "website", "url": "https://ajv.js.org" } ], "type": "library", "bom-ref": "pkg:npm/ajv@8.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv/package.json" } ], "concludedValue": "node_modules/ajv/package.json" } ] }, "tags": [ "json" ] }, { "group": "@types", "name": "node", "version": "25.6.0", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@25.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@25.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "ini", "version": "4.1.1", "description": "TypeScript definitions for ini", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/ini@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ini" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/ini@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/ini/package.json" } ], "concludedValue": "node_modules/@types/ini/package.json" } ] } }, { "authors": [ { "name": "Colin McDonnell" } ], "group": "@standard-schema", "name": "spec", "version": "1.1.0", "description": "A family of specs for interoperable TypeScript", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40standard-schema/spec@1.1.0", "externalReferences": [ { "type": "website", "url": "https://standardschema.dev" }, { "type": "vcs", "url": "https://github.com/standard-schema/standard-schema" } ], "type": "library", "bom-ref": "pkg:npm/@standard-schema/spec@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@standard-schema/spec/package.json" }, { "name": "ImportedModules", "value": "@standard-schema/spec,StandardJSONSchemaV1,@standard-schema/spec/StandardJSONSchemaV1,StandardSchemaV1,@standard-schema/spec/StandardSchemaV1" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@standard-schema/spec/package.json" } ], "concludedValue": "node_modules/@standard-schema/spec/package.json" } ], "occurrences": [ { "location": "src/Schema.ts", "line": 88 }, { "location": "src/SchemaIssue.ts", "line": 81 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/effect@4.0.0-beta.59" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.0", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-10-28T11:00:01Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'effect' with version '4.0.0-beta.59'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 18 source files." } ] }