{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:c0bf6f3e-e749-4cae-8822-0bf031097e33", "version": 1, "metadata": { "timestamp": "2026-09-10T00:12:32Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "wire-format", "group": "@glimmer", "version": "0.88.1", "description": "", "purl": "pkg:npm/%40glimmer/wire-format@0.88.1", "bom-ref": "pkg:npm/@glimmer/wire-format@0.88.1", "properties": [ { "name": "cdx:npm:scripts", "value": "build, test:lint, test:publint, test:types" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@glimmer\\n@glimmer-workspace" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@glimmer-workspace/build-support/package.json\\nnode_modules/@glimmer/interfaces/package.json\\nnode_modules/@glimmer/util/package.json\\nnode_modules/eslint/package.json\\nnode_modules/publint/package.json\\nnode_modules/rollup/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.0.4", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.0.4", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "rollup", "version": "4.5.1", "description": "Next-generation ES module bundler", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rollup@4.5.1", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" } ], "type": "library", "bom-ref": "pkg:npm/rollup@4.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup/package.json" } ], "concludedValue": "node_modules/rollup/package.json" } ] } }, { "authors": [ { "name": "Bjorn Lu" } ], "group": "", "name": "publint", "version": "0.2.5", "description": "Lint packaging errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/publint@0.2.5", "externalReferences": [ { "type": "website", "url": "https://publint.dev" }, { "type": "vcs", "url": "git+https://github.com/bluwy/publint.git" } ], "type": "library", "bom-ref": "pkg:npm/publint@0.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/publint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/publint/package.json" } ], "concludedValue": "node_modules/publint/package.json" } ] } }, { "authors": [ { "name": "Nicholas C. Zakas " } ], "group": "", "name": "eslint", "version": "8.54.0", "description": "An AST-based pattern checker for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint@8.54.0", "externalReferences": [ { "type": "website", "url": "https://eslint.org" } ], "type": "library", "bom-ref": "pkg:npm/eslint@8.54.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint/package.json" } ], "concludedValue": "node_modules/eslint/package.json" } ] } }, { "group": "@glimmer-workspace", "name": "build-support", "version": "1.0.0", "scope": "required", "purl": "pkg:npm/%40glimmer-workspace/build-support@1.0.0", "type": "library", "bom-ref": "pkg:npm/@glimmer-workspace/build-support@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@glimmer-workspace/build-support/package.json" }, { "name": "ImportedModules", "value": "@glimmer-workspace/build-support,Package,@glimmer-workspace/build-support/Package" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@glimmer-workspace/build-support/package.json" } ], "concludedValue": "node_modules/@glimmer-workspace/build-support/package.json" } ], "occurrences": [ { "location": "rollup.config.mjs", "line": 1 }, { "location": "rollup.config.mjs", "line": 3 } ] } }, { "group": "@glimmer", "name": "util", "version": "0.88.1", "description": "Common utilities used in Glimmer", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40glimmer/util@0.88.1", "type": "library", "bom-ref": "pkg:npm/@glimmer/util@0.88.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@glimmer/util/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@glimmer/util/package.json" } ], "concludedValue": "node_modules/@glimmer/util/package.json" } ] } }, { "group": "@glimmer", "name": "interfaces", "version": "0.88.1", "scope": "required", "purl": "pkg:npm/%40glimmer/interfaces@0.88.1", "type": "library", "bom-ref": "pkg:npm/@glimmer/interfaces@0.88.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@glimmer/interfaces/package.json" }, { "name": "ImportedModules", "value": "@glimmer/interfaces,Expression,@glimmer/interfaces/Expression,Expressions,@glimmer/interfaces/Expressions,Statement,@glimmer/interfaces/Statement,Statements,@glimmer/interfaces/Statements,AppendOpcode,@glimmer/interfaces/AppendOpcode,AttrSplatOpcode,@glimmer/interfaces/AttrSplatOpcode,BlockOpcode,@glimmer/interfaces/BlockOpcode,CallOpcode,@glimmer/interfaces/CallOpcode,CloseElementOpcode,@glimmer/interfaces/CloseElementOpcode,CommentOpcode,@glimmer/interfaces/CommentOpcode,ComponentAttrOpcode,@glimmer/interfaces/ComponentAttrOpcode,ComponentOpcode,@glimmer/interfaces/ComponentOpcode,ConcatOpcode,@glimmer/interfaces/ConcatOpcode,CurryOpcode,@glimmer/interfaces/CurryOpcode,DebuggerOpcode,@glimmer/interfaces/DebuggerOpcode,DynamicArgOpcode,@glimmer/interfaces/DynamicArgOpcode,DynamicAttrOpcode,@glimmer/interfaces/DynamicAttrOpcode,EachOpcode,@glimmer/interfaces/EachOpcode,FlushElementOpcode,@glimmer/interfaces/FlushElementOpcode,GetDynamicVarOpcode,@glimmer/interfaces/GetDynamicVarOpcode,GetFreeAsComponentHeadOpcode,@glimmer/interfaces/GetFreeAsComponentHeadOpcode,GetFreeAsComponentOrHelperHeadOpcode,@glimmer/interfaces/GetFreeAsComponentOrHelperHeadOpcode,GetFreeAsComponentOrHelperHeadOrThisFallbackOpcode,@glimmer/interfaces/GetFreeAsComponentOrHelperHeadOrThisFallbackOpcode,GetFreeAsDeprecatedHelperHeadOrThisFallbackOpcode,@glimmer/interfaces/GetFreeAsDeprecatedHelperHeadOrThisFallbackOpcode,GetFreeAsHelperHeadOpcode,@glimmer/interfaces/GetFreeAsHelperHeadOpcode,GetFreeAsHelperHeadOrThisFallbackOpcode,@glimmer/interfaces/GetFreeAsHelperHeadOrThisFallbackOpcode,GetFreeAsModifierHeadOpcode,@glimmer/interfaces/GetFreeAsModifierHeadOpcode,GetLexicalSymbolOpcode,@glimmer/interfaces/GetLexicalSymbolOpcode,GetStrictKeywordOpcode,@glimmer/interfaces/GetStrictKeywordOpcode,GetSymbolOpcode,@glimmer/interfaces/GetSymbolOpcode,HasBlockOpcode,@glimmer/interfaces/HasBlockOpcode,HasBlockParamsOpcode,@glimmer/interfaces/HasBlockParamsOpcode,IfInlineOpcode,@glimmer/interfaces/IfInlineOpcode,IfOpcode,@glimmer/interfaces/IfOpcode,InElementOpcode,@glimmer/interfaces/InElementOpcode,InvokeComponentOpcode,@glimmer/interfaces/InvokeComponentOpcode,LetOpcode,@glimmer/interfaces/LetOpcode,LogOpcode,@glimmer/interfaces/LogOpcode,ModifierOpcode,@glimmer/interfaces/ModifierOpcode,NotOpcode,@glimmer/interfaces/NotOpcode,OpenElementOpcode,@glimmer/interfaces/OpenElementOpcode,OpenElementWithSplatOpcode,@glimmer/interfaces/OpenElementWithSplatOpcode,StaticArgOpcode,@glimmer/interfaces/StaticArgOpcode,StaticAttrOpcode,@glimmer/interfaces/StaticAttrOpcode,StaticComponentAttrOpcode,@glimmer/interfaces/StaticComponentAttrOpcode,StrictBlockOpcode,@glimmer/interfaces/StrictBlockOpcode,StrictModifierOpcode,@glimmer/interfaces/StrictModifierOpcode,TrustingAppendOpcode,@glimmer/interfaces/TrustingAppendOpcode,TrustingComponentAttrOpcode,@glimmer/interfaces/TrustingComponentAttrOpcode,TrustingDynamicAttrOpcode,@glimmer/interfaces/TrustingDynamicAttrOpcode,UndefinedOpcode,@glimmer/interfaces/UndefinedOpcode,WithDynamicVarsOpcode,@glimmer/interfaces/WithDynamicVarsOpcode,WithOpcode,@glimmer/interfaces/WithOpcode,YieldOpcode,@glimmer/interfaces/YieldOpcode,AmbiguousAppendInvokeResolution,@glimmer/interfaces/AmbiguousAppendInvokeResolution,AmbiguousAppendResolution,@glimmer/interfaces/AmbiguousAppendResolution,AmbiguousInvokeResolution,@glimmer/interfaces/AmbiguousInvokeResolution,ResolveAsCallHeadResolution,@glimmer/interfaces/ResolveAsCallHeadResolution,ResolveAsComponentHeadResolution,@glimmer/interfaces/ResolveAsComponentHeadResolution,ResolveAsModifierHeadResolution,@glimmer/interfaces/ResolveAsModifierHeadResolution,StrictResolution,@glimmer/interfaces/StrictResolution,ATag,@glimmer/interfaces/ATag,ClassAttr,@glimmer/interfaces/ClassAttr,DivTag,@glimmer/interfaces/DivTag,HrefAttr,@glimmer/interfaces/HrefAttr,IdAttr,@glimmer/interfaces/IdAttr,NameAttr,@glimmer/interfaces/NameAttr,PTag,@glimmer/interfaces/PTag,SpanTag,@glimmer/interfaces/SpanTag,StyleAttr,@glimmer/interfaces/StyleAttr,TypeAttr,@glimmer/interfaces/TypeAttr,ValueAttr,@glimmer/interfaces/ValueAttr" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@glimmer/interfaces/package.json" } ], "concludedValue": "node_modules/@glimmer/interfaces/package.json" } ], "occurrences": [ { "location": "index.ts", "line": 1 }, { "location": "lib/opcodes.ts", "line": 52 }, { "location": "lib/resolution.ts", "line": 9 }, { "location": "lib/well-known.ts", "line": 13 }, { "location": "dist/dev/index.d.cts", "line": 1 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@glimmer/wire-format@0.88.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-10T00:12:32Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'wire-format' with version '0.88.1'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 7 source files." } ] }