{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:4269074e-8335-4c29-9f76-ef33747ebace", "version": 1, "metadata": { "timestamp": "2026-09-09T18:03:44Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "isnumeric", "group": "", "version": "0.2.0", "description": "Determine if a JavaScript object is numeric", "purl": "pkg:npm/isnumeric@0.2.0", "bom-ref": "pkg:npm/isnumeric@0.2.0", "author": "Lee Crossley (http://ilee.co.uk/)", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "externalReferences": [ { "type": "website", "url": "http://ilee.co.uk" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@my-scope" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/abbrev/package.json\\nnode_modules/align-text/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/node_modules/underscore.string/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-find-index/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/async/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/bl/package.json\\nnode_modules/boom/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/camelcase-keys/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/caseless/package.json\\nnode_modules/center-align/package.json\\nnode_modules/chalk/package.json\\nnode_modules/cli/node_modules/glob/package.json\\nnode_modules/cli/node_modules/minimatch/package.json\\nnode_modules/cli/package.json\\nnode_modules/cliui/package.json\\nnode_modules/coffee-script/package.json\\nnode_modules/colors/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cryptiles/package.json\\nnode_modules/currently-unhandled/package.json\\nnode_modules/dashdash/node_modules/assert-plus/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/date-now/package.json\\nnode_modules/dateformat/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/dom-serializer/node_modules/domelementtype/package.json\\nnode_modules/dom-serializer/node_modules/entities/package.json\\nnode_modules/dom-serializer/package.json\\nnode_modules/domelementtype/package.json\\nnode_modules/domhandler/package.json\\nnode_modules/domutils/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/entities/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es5-shim/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/esprima/package.json\\nnode_modules/eventemitter2/package.json\\nnode_modules/exit/package.json\\nnode_modules/extend/package.json\\nnode_modules/extract-zip/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/faye-websocket/package.json\\nnode_modules/fd-slicer/package.json\\nnode_modules/figures/package.json\\nnode_modules/find-up/package.json\\nnode_modules/findup-sync/node_modules/glob/package.json\\nnode_modules/findup-sync/node_modules/lodash/package.json\\nnode_modules/findup-sync/node_modules/minimatch/package.json\\nnode_modules/findup-sync/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/node_modules/async/package.json\\nnode_modules/form-data/node_modules/lodash/package.json\\nnode_modules/form-data/package.json\\nnode_modules/fs-extra/node_modules/graceful-fs/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/gaze/package.json\\nnode_modules/generate-function/package.json\\nnode_modules/generate-object-property/package.json\\nnode_modules/get-stdin/package.json\\nnode_modules/getobject/package.json\\nnode_modules/getpass/node_modules/assert-plus/package.json\\nnode_modules/getpass/package.json\\nnode_modules/glob/node_modules/inherits/package.json\\nnode_modules/glob/package.json\\nnode_modules/globule/node_modules/lodash/package.json\\nnode_modules/globule/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/grunt-cli/package.json\\nnode_modules/grunt-contrib-jasmine/node_modules/lodash/package.json\\nnode_modules/grunt-contrib-jasmine/node_modules/rimraf/package.json\\nnode_modules/grunt-contrib-jasmine/package.json\\nnode_modules/grunt-contrib-jshint/package.json\\nnode_modules/grunt-contrib-uglify/node_modules/ansi-styles/package.json\\nnode_modules/grunt-contrib-uglify/node_modules/chalk/package.json\\nnode_modules/grunt-contrib-uglify/node_modules/lodash/package.json\\nnode_modules/grunt-contrib-uglify/node_modules/strip-ansi/package.json\\nnode_modules/grunt-contrib-uglify/package.json\\nnode_modules/grunt-contrib-watch/node_modules/async/package.json\\nnode_modules/grunt-contrib-watch/node_modules/lodash/package.json\\nnode_modules/grunt-contrib-watch/package.json\\nnode_modules/grunt-legacy-log-utils/node_modules/lodash/package.json\\nnode_modules/grunt-legacy-log-utils/node_modules/underscore.string/package.json\\nnode_modules/grunt-legacy-log-utils/package.json\\nnode_modules/grunt-legacy-log/node_modules/lodash/package.json\\nnode_modules/grunt-legacy-log/node_modules/underscore.string/package.json\\nnode_modules/grunt-legacy-log/package.json\\nnode_modules/grunt-legacy-util/package.json\\nnode_modules/grunt-lib-phantomjs/package.json\\nnode_modules/grunt/package.json\\nnode_modules/gzip-size/package.json\\nnode_modules/har-validator/node_modules/ansi-styles/package.json\\nnode_modules/har-validator/node_modules/chalk/package.json\\nnode_modules/har-validator/node_modules/strip-ansi/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/has-ansi/package.json\\nnode_modules/has-color/package.json\\nnode_modules/hasha/package.json\\nnode_modules/hasown/package.json\\nnode_modules/hawk/package.json\\nnode_modules/hoek/package.json\\nnode_modules/hooker/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/htmlparser2/node_modules/isarray/package.json\\nnode_modules/htmlparser2/node_modules/readable-stream/package.json\\nnode_modules/htmlparser2/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/inherits/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/is-finite/package.json\\nnode_modules/is-my-ip-valid/package.json\\nnode_modules/is-my-json-valid/package.json\\nnode_modules/is-property/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/is-utf8/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/isstream/package.json\\nnode_modules/jasmine-core/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/jshint/node_modules/lodash/package.json\\nnode_modules/jshint/node_modules/minimatch/package.json\\nnode_modules/jshint/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsonfile/node_modules/graceful-fs/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/jsonpointer/package.json\\nnode_modules/jsprim/node_modules/assert-plus/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/kew/package.json\\nnode_modules/kind-of/package.json\\nnode_modules/klaw/node_modules/graceful-fs/package.json\\nnode_modules/klaw/package.json\\nnode_modules/lazy-cache/package.json\\nnode_modules/load-json-file/node_modules/graceful-fs/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/lodash/package.json\\nnode_modules/longest/package.json\\nnode_modules/loud-rejection/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/map-obj/package.json\\nnode_modules/maxmin/node_modules/ansi-styles/package.json\\nnode_modules/maxmin/node_modules/chalk/package.json\\nnode_modules/maxmin/node_modules/strip-ansi/package.json\\nnode_modules/maxmin/package.json\\nnode_modules/meow/node_modules/minimist/package.json\\nnode_modules/meow/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/node-uuid/package.json\\nnode_modules/nopt/package.json\\nnode_modules/noptify/node_modules/nopt/package.json\\nnode_modules/noptify/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/normalize-package-data/node_modules/semver/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/package/package.json\\nnode_modules/package/test/package.json\\nnode_modules/package/test/support/package.json\\nnode_modules/pako/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-type/node_modules/graceful-fs/package.json\\nnode_modules/path-type/package.json\\nnode_modules/pend/package.json\\nnode_modules/phantomjs/node_modules/which/package.json\\nnode_modules/phantomjs/package.json\\nnode_modules/pify/package.json\\nnode_modules/pinkie-promise/package.json\\nnode_modules/pinkie/package.json\\nnode_modules/pretty-bytes/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/progress/package.json\\nnode_modules/qs/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/redent/package.json\\nnode_modules/repeat-string/package.json\\nnode_modules/repeating/package.json\\nnode_modules/request-progress/package.json\\nnode_modules/request/package.json\\nnode_modules/resolve/package.json\\nnode_modules/right-align/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/shelljs/package.json\\nnode_modules/sigmund/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/sntp/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/sshpk/node_modules/assert-plus/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/stringstream/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/strip-indent/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json\\nnode_modules/temporary/package.json\\nnode_modules/throttleit/package.json\\nnode_modules/tiny-lr-fork/node_modules/qs/package.json\\nnode_modules/tiny-lr-fork/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/trim-newlines/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/uglify-to-browserify/package.json\\nnode_modules/underscore.string/package.json\\nnode_modules/underscore/package.json\\nnode_modules/uri-path/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/verror/node_modules/assert-plus/package.json\\nnode_modules/verror/node_modules/core-util-is/package.json\\nnode_modules/verror/package.json\\nnode_modules/which/package.json\\nnode_modules/window-size/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/xtend/package.json\\nnode_modules/yargs/node_modules/camelcase/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yauzl/package.json" } ] }, "components": [ { "authors": [ { "name": "Josh Wolfe " } ], "group": "", "name": "yauzl", "version": "2.4.1", "description": "yet another unzip library for node", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yauzl@2.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thejoshwolfe/yauzl" }, { "type": "vcs", "url": "git+https://github.com/thejoshwolfe/yauzl.git" } ], "type": "library", "bom-ref": "pkg:npm/yauzl@2.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yauzl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yauzl/package.json" } ], "concludedValue": "node_modules/yauzl/package.json" } ] } }, { "authors": [ { "name": "Alex Ford (http://CodeTunnel.com)" } ], "group": "", "name": "yargs", "version": "3.10.0", "description": "Light-weight option parsing with an argv hash. No optstrings attached.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@3.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bcoe/yargs#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/bcoe/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@3.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "1.2.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/camelcase" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/camelcase.git" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/yargs/node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" }, { "type": "vcs", "url": "git://github.com/Raynos/xtend.git" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "0.0.2", "description": "Wrap those words. Show them at what columns to start and stop.", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-wordwrap#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "window-size", "version": "0.1.0", "description": "Reliable way to to get the height and width of the terminal/console in a node.js environment.", "purl": "pkg:npm/window-size@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/window-size" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/window-size.git" } ], "type": "library", "bom-ref": "pkg:npm/window-size@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/window-size/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/window-size/package.json" } ], "concludedValue": "node_modules/window-size/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.0.9", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-which" }, { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "description": "richer JavaScript errors", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davepacheco/node-verror" }, { "type": "vcs", "url": "git://github.com/davepacheco/node-verror.git" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/package.json" } ], "concludedValue": "node_modules/verror/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/core-util-is#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/core-util-is.git" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/verror/node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "assert-plus", "version": "1.0.0", "description": "Extra assertions on top of node's assert module", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcavage/node-assert-plus#readme" }, { "type": "vcs", "url": "git+https://github.com/mcavage/node-assert-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/node_modules/assert-plus/package.json" }, { "name": "SrcFile", "value": "node_modules/sshpk/node_modules/assert-plus/package.json" }, { "name": "SrcFile", "value": "node_modules/jsprim/node_modules/assert-plus/package.json" }, { "name": "SrcFile", "value": "node_modules/getpass/node_modules/assert-plus/package.json" }, { "name": "SrcFile", "value": "node_modules/dashdash/node_modules/assert-plus/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dashdash/node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/dashdash/node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "validate-npm-package-license", "version": "3.0.4", "description": "Give me a string and I'll tell you if it's a valid npm package license string", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-license@3.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme" }, { "type": "vcs", "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git" } ], "type": "library", "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-license/package.json" } ], "concludedValue": "node_modules/validate-npm-package-license/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Ult Combo " } ], "group": "", "name": "uri-path", "version": "0.0.2", "description": "Convert relative file system paths into safe URI paths", "licenses": [ { "license": { "id": "WTFPL", "url": "https://opensource.org/licenses/WTFPL", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-path@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/UltCombo/uri-path" }, { "type": "vcs", "url": "git+https://github.com/UltCombo/uri-path.git" } ], "type": "library", "bom-ref": "pkg:npm/uri-path@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-path/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-path/package.json" } ], "concludedValue": "node_modules/uri-path/package.json" } ] } }, { "group": "", "name": "underscore.string", "version": "2.2.1", "description": "String manipulation extensions for Underscore.js javascript library.", "purl": "pkg:npm/underscore.string@2.2.1", "externalReferences": [ { "type": "vcs", "url": "http://epeli.github.com/underscore.string/" }, { "type": "vcs", "url": "git+https://github.com/epeli/underscore.string.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/underscore.string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/underscore.string/package.json" } ], "concludedValue": "node_modules/underscore.string/package.json" } ] } }, { "authors": [ { "name": "Jeremy Ashkenas " } ], "group": "", "name": "underscore", "version": "1.7.0", "description": "JavaScript's functional programming helper library.", "purl": "pkg:npm/underscore@1.7.0", "externalReferences": [ { "type": "website", "url": "http://underscorejs.org" }, { "type": "vcs", "url": "git://github.com/jashkenas/underscore.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/underscore/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/underscore/package.json" } ], "concludedValue": "node_modules/underscore/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "uglify-to-browserify", "version": "1.0.2", "description": "A transform to make UglifyJS work in browserify.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-to-browserify@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/uglify-to-browserify" }, { "type": "vcs", "url": "git+https://github.com/ForbesLindesay/uglify-to-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-to-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-to-browserify/package.json" } ], "concludedValue": "node_modules/uglify-to-browserify/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "uglify-js", "version": "2.8.29", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@2.8.29", "externalReferences": [ { "type": "website", "url": "http://lisperator.net/uglifyjs" }, { "type": "vcs", "url": "git+https://github.com/mishoo/UglifyJS2.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@2.8.29", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "typedarray", "version": "0.0.7", "description": "TypedArray polyfill for old browsers", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedarray@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/typedarray" }, { "type": "vcs", "url": "git://github.com/es-shims/typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/typedarray@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typedarray/package.json" } ], "concludedValue": "node_modules/typedarray/package.json" } ] } }, { "authors": [ { "name": "TweetNaCl-js contributors" } ], "group": "", "name": "tweetnacl", "version": "0.14.5", "description": "Port of TweetNaCl cryptographic library to JavaScript", "licenses": [ { "license": { "id": "Unlicense", "url": "https://opensource.org/licenses/Unlicense", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "website", "url": "https://tweetnacl.js.org" }, { "type": "vcs", "url": "git+https://github.com/dchest/tweetnacl-js.git" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tweetnacl/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tweetnacl/package.json" } ], "concludedValue": "node_modules/tweetnacl/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.4.3", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel-agent@0.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/tunnel-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "trim-newlines", "version": "1.0.0", "description": "Trim newlines from the start and/or end of a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/trim-newlines@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/trim-newlines" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/trim-newlines.git" } ], "type": "library", "bom-ref": "pkg:npm/trim-newlines@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/trim-newlines/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/trim-newlines/package.json" } ], "concludedValue": "node_modules/trim-newlines/package.json" } ] } }, { "authors": [ { "name": "Jeremy Stashewsky " } ], "group": "", "name": "tough-cookie", "version": "2.2.2", "description": "RFC6265 Cookies and Cookie Jar for node.js", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tough-cookie@2.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/SalesforceEng/tough-cookie" }, { "type": "vcs", "url": "git://github.com/SalesforceEng/tough-cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/package.json" } ], "concludedValue": "node_modules/tough-cookie/package.json" } ] } }, { "authors": [ { "name": "mklabs" } ], "group": "", "name": "tiny-lr-fork", "version": "0.0.5", "description": "Tiny LiveReload server, background-friendly", "purl": "pkg:npm/tiny-lr-fork@0.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mklabs/tiny-lr" }, { "type": "vcs", "url": "git://github.com/mklabs/tiny-lr.git" } ], "type": "library", "bom-ref": "pkg:npm/tiny-lr-fork@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tiny-lr-fork/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tiny-lr-fork/package.json" } ], "concludedValue": "node_modules/tiny-lr-fork/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "qs", "version": "0.5.6", "description": "querystring parser", "purl": "pkg:npm/qs@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-querystring#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/node-querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tiny-lr-fork/node_modules/qs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tiny-lr-fork/node_modules/qs/package.json" } ], "concludedValue": "node_modules/tiny-lr-fork/node_modules/qs/package.json" } ] } }, { "group": "", "name": "throttleit", "version": "1.0.1", "description": "Throttle a function", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/throttleit@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/throttleit#readme" }, { "type": "vcs", "url": "git://github.com/sindresorhus/throttleit.git" } ], "type": "library", "bom-ref": "pkg:npm/throttleit@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/throttleit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/throttleit/package.json" } ], "concludedValue": "node_modules/throttleit/package.json" } ] } }, { "authors": [ { "name": "Veselin Todorov " } ], "group": "", "name": "temporary", "version": "0.0.8", "description": "The lord of tmp.", "purl": "pkg:npm/temporary@0.0.8", "externalReferences": [ { "type": "vcs", "url": "http://github.com/vesln/temporary" }, { "type": "vcs", "url": "git+ssh://git@github.com/vesln/temporary.git" } ], "type": "library", "bom-ref": "pkg:npm/temporary@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/temporary/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/temporary/package.json" } ], "concludedValue": "node_modules/temporary/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-preserve-symlinks-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-preserve-symlinks-flag/package.json" } ], "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "2.0.0", "description": "Detect whether a terminal supports color", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "1.0.4", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-json-comments" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-json-comments.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "strip-indent", "version": "1.0.1", "description": "Strip leading whitespace from every line in a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-indent@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-indent" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-indent.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-indent@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-indent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-indent/package.json" } ], "concludedValue": "node_modules/strip-indent/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-bom", "version": "2.0.0", "description": "Strip UTF-8 byte order mark (BOM) from a string/buffer", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-bom" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-bom.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-bom@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-bom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-bom/package.json" } ], "concludedValue": "node_modules/strip-bom/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "0.1.1", "description": "Strip ANSI escape codes (used for colorizing strings in the terminal)", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-ansi" }, { "type": "vcs", "url": "git://github.com/sindresorhus/strip-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Michael Hart (http://github.com/mhart)" } ], "group": "", "name": "stringstream", "version": "0.0.6", "description": "Encode and decode streams into string streams", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stringstream@0.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mhart/StringStream#readme" }, { "type": "vcs", "url": "git+https://github.com/mhart/StringStream.git" } ], "type": "library", "bom-ref": "pkg:npm/stringstream@0.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/stringstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stringstream/package.json" } ], "concludedValue": "node_modules/stringstream/package.json" } ] }, "tags": [ "decode" ] }, { "group": "", "name": "string_decoder", "version": "0.10.31", "description": "The string_decoder module from Node core", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "sshpk", "version": "1.18.0", "description": "A library for finding and using SSH public keys", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sshpk@1.18.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-sshpk#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-sshpk.git" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sshpk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sshpk/package.json" } ], "concludedValue": "node_modules/sshpk/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.23", "description": "A list of SPDX license identifiers", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.23", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-license-ids#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-license-ids.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.23", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "3.0.1", "description": "parse SPDX license expressions", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-expression-parse.js#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.5.0", "description": "list of SPDX standard license exceptions", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kemitchell/spdx-exceptions.json#readme" }, { "type": "vcs", "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/spdx-exceptions/package.json" } ] } }, { "group": "", "name": "spdx-correct", "version": "3.2.0", "description": "correct invalid SPDX expressions", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-correct@3.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-correct.js#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-correct.js.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-correct@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-correct/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-correct/package.json" } ], "concludedValue": "node_modules/spdx-correct/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "git+ssh://git@github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "sntp", "version": "1.0.9", "description": "SNTP Client", "purl": "pkg:npm/sntp@1.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hueniverse/sntp" }, { "type": "vcs", "url": "git://github.com/hueniverse/sntp.git" } ], "type": "library", "bom-ref": "pkg:npm/sntp@1.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/sntp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sntp/package.json" } ], "concludedValue": "node_modules/sntp/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "3.0.7", "description": "when you want to fire an event no matter how a process exits.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@3.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit" }, { "type": "vcs", "url": "git+https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sigmund", "version": "1.0.1", "description": "Quick and dirty signatures for Objects.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/sigmund#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/sigmund.git" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sigmund/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sigmund/package.json" } ], "concludedValue": "node_modules/sigmund/package.json" } ] } }, { "authors": [ { "name": "Artur Adib " } ], "group": "", "name": "shelljs", "version": "0.3.0", "description": "Portable Unix shell commands for Node.js", "licenses": [ { "license": { "name": "BSD*", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shelljs@0.3.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/arturadib/shelljs" }, { "type": "vcs", "url": "git://github.com/arturadib/shelljs.git" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shelljs/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shelljs/package.json" } ], "concludedValue": "node_modules/shelljs/package.json" } ] } }, { "group": "", "name": "semver", "version": "1.0.14", "description": "The semantic version parser used by npm.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@1.0.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-semver#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@1.0.14", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ChALkeR/safer-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.2.8", "description": "A deep deletion module for node (like `rm -rf`)", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/rimraf" }, { "type": "vcs", "url": "git://github.com/isaacs/rimraf.git" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "right-align", "version": "0.1.3", "description": "Right-align the text in a string.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/right-align@0.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/right-align" }, { "type": "vcs", "url": "git://github.com/jonschlinkert/right-align.git" } ], "type": "library", "bom-ref": "pkg:npm/right-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/right-align/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/right-align/package.json" } ], "concludedValue": "node_modules/right-align/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "0.3.1", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-resolve#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "request-progress", "version": "2.0.1", "description": "Tracks the download progress of a request made with mikeal/request, giving insight of various metrics including progress percent, download speed and time remaining", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request-progress@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/IndigoUnited/node-request-progress" }, { "type": "vcs", "url": "git://github.com/IndigoUnited/node-request-progress.git" } ], "type": "library", "bom-ref": "pkg:npm/request-progress@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/request-progress/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request-progress/package.json" } ], "concludedValue": "node_modules/request-progress/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.67.0", "description": "Simplified HTTP request client.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request@2.67.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request#readme" }, { "type": "vcs", "url": "git+https://github.com/request/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.67.0", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "repeating", "version": "2.0.1", "description": "Repeat a string - fast", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/repeating@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/repeating#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/repeating.git" } ], "type": "library", "bom-ref": "pkg:npm/repeating@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/repeating/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/repeating/package.json" } ], "concludedValue": "node_modules/repeating/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (http://github.com/jonschlinkert)" } ], "group": "", "name": "repeat-string", "version": "1.6.1", "description": "Repeat the given string n times. Fastest implementation for repeating a string.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/repeat-string@1.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/repeat-string" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/repeat-string.git" } ], "type": "library", "bom-ref": "pkg:npm/repeat-string@1.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/repeat-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/repeat-string/package.json" } ], "concludedValue": "node_modules/repeat-string/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "redent", "version": "1.0.0", "description": "Strip redundant indentation and indent the string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/redent@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/redent" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/redent.git" } ], "type": "library", "bom-ref": "pkg:npm/redent@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/redent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/redent/package.json" } ], "concludedValue": "node_modules/redent/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.0.6", "description": "Streams3, a user-land copy of the stream library from Node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/nodejs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg-up", "version": "1.0.1", "description": "Read the closest package.json file", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg-up@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/read-pkg-up" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/read-pkg-up.git" } ], "type": "library", "bom-ref": "pkg:npm/read-pkg-up@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg-up/package.json" } ], "concludedValue": "node_modules/read-pkg-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "1.1.0", "description": "Read a package.json file", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/read-pkg" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/read-pkg.git" } ], "type": "library", "bom-ref": "pkg:npm/read-pkg@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/read-pkg/package.json" } ] } }, { "group": "", "name": "qs", "version": "5.2.1", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hapijs/qs" }, { "type": "vcs", "url": "git+https://github.com/hapijs/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "progress", "version": "1.1.8", "description": "Flexible ascii progress bar", "purl": "pkg:npm/progress@1.1.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-progress" }, { "type": "vcs", "url": "git://github.com/visionmedia/node-progress.git" } ], "type": "library", "bom-ref": "pkg:npm/progress@1.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/progress/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/progress/package.json" } ], "concludedValue": "node_modules/progress/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "1.0.7", "description": "process.nextTick but always with args", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "pretty-bytes", "version": "1.0.4", "description": "Convert bytes to a human readable string: 1337 → 1.34 kB", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-bytes@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pretty-bytes" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pretty-bytes.git" } ], "type": "library", "bom-ref": "pkg:npm/pretty-bytes@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-bytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-bytes/package.json" } ], "concludedValue": "node_modules/pretty-bytes/package.json" } ] } }, { "authors": [ { "name": "Vsevolod Strukchinsky (github.com/floatdrop)" } ], "group": "", "name": "pinkie-promise", "version": "2.0.1", "description": "ES2015 Promise ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pinkie-promise@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/floatdrop/pinkie-promise" }, { "type": "vcs", "url": "git+https://github.com/floatdrop/pinkie-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/pinkie-promise@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pinkie-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pinkie-promise/package.json" } ], "concludedValue": "node_modules/pinkie-promise/package.json" } ] } }, { "authors": [ { "name": "Vsevolod Strukchinsky (github.com/floatdrop)" } ], "group": "", "name": "pinkie", "version": "2.0.4", "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pinkie@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/floatdrop/pinkie#readme" }, { "type": "vcs", "url": "git+https://github.com/floatdrop/pinkie.git" } ], "type": "library", "bom-ref": "pkg:npm/pinkie@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/pinkie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pinkie/package.json" } ], "concludedValue": "node_modules/pinkie/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "2.3.0", "description": "Promisify a callback-style function", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pify" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pify.git" } ], "type": "library", "bom-ref": "pkg:npm/pify@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Dan Pupius (http://pupius.co.uk)" } ], "group": "", "name": "phantomjs", "version": "1.9.20", "description": "Headless WebKit with JS API", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/phantomjs@1.9.20", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Medium/phantomjs" }, { "type": "vcs", "url": "git://github.com/Medium/phantomjs.git" } ], "type": "library", "bom-ref": "pkg:npm/phantomjs@1.9.20", "properties": [ { "name": "SrcFile", "value": "node_modules/phantomjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/phantomjs/package.json" } ], "concludedValue": "node_modules/phantomjs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.2.14", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.2.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-which#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.2.14", "properties": [ { "name": "SrcFile", "value": "node_modules/phantomjs/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/phantomjs/node_modules/which/package.json" } ], "concludedValue": "node_modules/phantomjs/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Andrew Kelley " } ], "group": "", "name": "pend", "version": "1.2.0", "description": "dead-simple optimistic async helper", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pend@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andrewrk/node-pend#readme" }, { "type": "vcs", "url": "git://github.com/andrewrk/node-pend.git" } ], "type": "library", "bom-ref": "pkg:npm/pend@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pend/package.json" } ], "concludedValue": "node_modules/pend/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-type", "version": "1.1.0", "description": "Check if a path is a file, directory, or symlink", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-type" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-type.git" } ], "type": "library", "bom-ref": "pkg:npm/path-type@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-type/package.json" } ], "concludedValue": "node_modules/path-type/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/load-json-file/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/klaw/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/jsonfile/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/fs-extra/node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/fs-extra/node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.7", "description": "Node.js path.parse() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "git+https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-is-absolute#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "2.1.0", "description": "Check if a path exists", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-exists" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-exists.git" } ], "type": "library", "bom-ref": "pkg:npm/path-exists@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "2.2.0", "description": "Parse JSON with more helpful errors", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/parse-json" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/parse-json.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-json@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "pako", "version": "0.2.9", "description": "zlib port to javascript - fast, modularized, with browser support", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pako@0.2.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/pako" }, { "type": "vcs", "url": "git+https://github.com/nodeca/pako.git" } ], "type": "library", "bom-ref": "pkg:npm/pako@0.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/pako/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pako/package.json" } ], "concludedValue": "node_modules/pako/package.json" } ] } }, { "authors": [ { "name": "Veselin Todorov " } ], "group": "", "name": "package", "version": "1.0.1", "description": "Easy package.json exports.", "purl": "pkg:npm/package@1.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/vesln/package" }, { "type": "vcs", "url": "git://github.com/vesln/package.git" } ], "type": "library", "bom-ref": "pkg:npm/package@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package/package.json" } ], "concludedValue": "node_modules/package/package.json" } ] } }, { "group": "", "name": "test-package-json-file", "version": "0.0.1", "purl": "pkg:npm/test-package-json-file@0.0.1", "type": "library", "bom-ref": "pkg:npm/test-package-json-file@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package/test/package.json" }, { "name": "SrcFile", "value": "node_modules/package/test/support/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package/test/support/package.json" } ], "concludedValue": "node_modules/package/test/support/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "object-assign", "version": "4.1.1", "description": "ES2015 `Object.assign()` ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-assign@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/object-assign#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/object-assign.git" } ], "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-assign/package.json" } ], "concludedValue": "node_modules/object-assign/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.8.2", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth-sign@0.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/oauth-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Meryn Stol " } ], "group": "", "name": "normalize-package-data", "version": "2.5.0", "description": "Normalizes data that can be found in package.json files.", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/normalize-package-data#readme" }, { "type": "vcs", "url": "git://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "5.7.2", "description": "The semantic version parser used by npm.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@5.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/semver/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.12", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/resolve#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.12", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "ljharb-monorepo-symlink-test", "version": "0.0.0", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid_main", "version": "", "purl": "pkg:npm/invalid_main", "type": "library", "bom-ref": "pkg:npm/invalid_main", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "false_main", "version": "", "purl": "pkg:npm/false_main", "type": "library", "bom-ref": "pkg:npm/false_main", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/false_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/false_main/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/false_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "group": "", "name": "baz", "version": "", "purl": "pkg:npm/baz", "type": "library", "bom-ref": "pkg:npm/baz", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/baz/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/baz/package.json" } ], "concludedValue": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/baz/package.json" } ] } }, { "authors": [ { "name": "mklabs" } ], "group": "", "name": "noptify", "version": "0.0.3", "description": "nopt wrapper with commander-like API", "purl": "pkg:npm/noptify@0.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mklabs/noptify#readme" }, { "type": "vcs", "url": "git://github.com/mklabs/noptify.git" } ], "type": "library", "bom-ref": "pkg:npm/noptify@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/noptify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/noptify/package.json" } ], "concludedValue": "node_modules/noptify/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "2.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/nopt#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/noptify/node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/noptify/node_modules/nopt/package.json" } ], "concludedValue": "node_modules/noptify/node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "1.0.10", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@1.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/nopt#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer " } ], "group": "", "name": "node-uuid", "version": "1.4.8", "description": "Rigorous implementation of RFC4122 (v1 and v4) UUIDs.", "purl": "pkg:npm/node-uuid@1.4.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-uuid" }, { "type": "vcs", "url": "git+https://github.com/broofa/node-uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/node-uuid@1.4.8", "properties": [ { "name": "SrcFile", "value": "node_modules/node-uuid/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-uuid/package.json" } ], "concludedValue": "node_modules/node-uuid/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.0", "description": "Recursively mkdir, like `mkdir -p`", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp" }, { "type": "vcs", "url": "git+https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.8", "description": "parse argument options", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "0.2.14", "description": "a glob matcher in javascript", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.2.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.2.14", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "description": "The ultimate javascript content-type utility.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-types#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-types.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "description": "Media Type Database", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-db#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-db.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "meow", "version": "3.7.0", "description": "CLI app helper", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/meow@3.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/meow#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/meow.git" } ], "type": "library", "bom-ref": "pkg:npm/meow@3.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/meow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/meow/package.json" } ], "concludedValue": "node_modules/meow/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/meow/node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/meow/node_modules/minimist/package.json" } ], "concludedValue": "node_modules/meow/node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "maxmin", "version": "1.1.0", "description": "Get a pretty output of the original, minified, gzipped size of a string or buffer: 130 B → 91 B → 53 B (gzip)", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/maxmin@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/maxmin" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/maxmin.git" } ], "type": "library", "bom-ref": "pkg:npm/maxmin@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/maxmin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/maxmin/package.json" } ], "concludedValue": "node_modules/maxmin/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "3.0.1", "description": "Strip ANSI escape codes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/strip-ansi" }, { "type": "vcs", "url": "git+https://github.com/chalk/strip-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/maxmin/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/har-validator/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-contrib-uglify/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-uglify/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/grunt-contrib-uglify/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "chalk", "version": "1.1.3", "description": "Terminal string styling done right. Much color.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/chalk#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/maxmin/node_modules/chalk/package.json" }, { "name": "SrcFile", "value": "node_modules/har-validator/node_modules/chalk/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-contrib-uglify/node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-uglify/node_modules/chalk/package.json" } ], "concludedValue": "node_modules/grunt-contrib-uglify/node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "2.2.1", "description": "ANSI escape codes for styling strings in the terminal", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@2.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-styles#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/maxmin/node_modules/ansi-styles/package.json" }, { "name": "SrcFile", "value": "node_modules/har-validator/node_modules/ansi-styles/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-contrib-uglify/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-uglify/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/grunt-contrib-uglify/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "map-obj", "version": "1.0.1", "description": "Map object keys and values into a new object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/map-obj@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/map-obj" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/map-obj.git" } ], "type": "library", "bom-ref": "pkg:npm/map-obj@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/map-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/map-obj/package.json" } ], "concludedValue": "node_modules/map-obj/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "2.7.3", "description": "A cache object that deletes the least-recently-used items.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-lru-cache#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "loud-rejection", "version": "1.6.0", "description": "Make unhandled promise rejections fail loudly instead of the default silent fail", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/loud-rejection@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/loud-rejection#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/loud-rejection.git" } ], "type": "library", "bom-ref": "pkg:npm/loud-rejection@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/loud-rejection/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loud-rejection/package.json" } ], "concludedValue": "node_modules/loud-rejection/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "longest", "version": "1.0.1", "description": "Get the longest item in an array.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/longest@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/longest" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/longest.git" } ], "type": "library", "bom-ref": "pkg:npm/longest@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/longest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/longest/package.json" } ], "concludedValue": "node_modules/longest/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "0.9.2", "description": "A utility library delivering consistency, customization, performance, and extras.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@0.9.2", "externalReferences": [ { "type": "website", "url": "http://lodash.com" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@0.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "load-json-file", "version": "1.1.0", "description": "Read and parse a JSON file", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/load-json-file@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/load-json-file" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/load-json-file.git" } ], "type": "library", "bom-ref": "pkg:npm/load-json-file@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/load-json-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/package.json" } ], "concludedValue": "node_modules/load-json-file/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "lazy-cache", "version": "1.0.4", "description": "Cache requires to be lazy-loaded when needed.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lazy-cache@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/lazy-cache" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/lazy-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lazy-cache@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/lazy-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lazy-cache/package.json" } ], "concludedValue": "node_modules/lazy-cache/package.json" } ] } }, { "authors": [ { "name": "JP Richardson" } ], "group": "", "name": "klaw", "version": "1.3.1", "description": "File system walker with Readable stream interface.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/klaw@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-klaw#readme" }, { "type": "vcs", "url": "git+https://github.com/jprichardson/node-klaw.git" } ], "type": "library", "bom-ref": "pkg:npm/klaw@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/klaw/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/klaw/package.json" } ], "concludedValue": "node_modules/klaw/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "kind-of", "version": "3.2.2", "description": "Get the native type of a value.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kind-of@3.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/kind-of" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/kind-of.git" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/kind-of/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kind-of/package.json" } ], "concludedValue": "node_modules/kind-of/package.json" } ] } }, { "group": "", "name": "kew", "version": "0.7.0", "description": "a lightweight promise library for node", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kew@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Medium/kew" }, { "type": "vcs", "url": "git+https://github.com/Medium/kew.git" } ], "type": "library", "bom-ref": "pkg:npm/kew@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/kew/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kew/package.json" } ], "concludedValue": "node_modules/kew/package.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.2", "description": "utilities for primitive JavaScript types", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsprim@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-jsprim#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-jsprim.git" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jsprim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsprim/package.json" } ], "concludedValue": "node_modules/jsprim/package.json" } ] } }, { "authors": [ { "name": "Jan Lehnardt " } ], "group": "", "name": "jsonpointer", "version": "5.0.1", "description": "Simple JSON Addressing.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonpointer@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/janl/node-jsonpointer#readme" }, { "type": "vcs", "url": "git+https://github.com/janl/node-jsonpointer.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonpointer@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonpointer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonpointer/package.json" } ], "concludedValue": "node_modules/jsonpointer/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "jsonfile", "version": "2.4.0", "description": "Easily read/write JSON files.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonfile@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-jsonfile#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/jprichardson/node-jsonfile.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonfile@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonfile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonfile/package.json" } ], "concludedValue": "node_modules/jsonfile/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.1", "description": "Like JSON.stringify, but doesn't blow up on circular refs.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/json-stringify-safe" }, { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "json-schema", "version": "0.4.0", "description": "JSON Schema validation and specifications", "licenses": [ { "expression": "AFL-2.1 OR BSD-3-Clause" } ], "purl": "pkg:npm/json-schema@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriszyp/json-schema#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kriszyp/json-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema/package.json" } ], "concludedValue": "node_modules/json-schema/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Anton Kovalyov (http://anton.kovalyov.net/)" } ], "group": "", "name": "jshint", "version": "2.8.0", "description": "Static analysis tool for JavaScript", "licenses": [ { "expression": "MIT AND JSON" } ], "purl": "pkg:npm/jshint@2.8.0", "externalReferences": [ { "type": "website", "url": "http://jshint.com/" }, { "type": "vcs", "url": "git+https://github.com/jshint/jshint.git" } ], "type": "library", "bom-ref": "pkg:npm/jshint@2.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jshint/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jshint/package.json" } ], "concludedValue": "node_modules/jshint/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "2.0.10", "description": "a glob matcher in javascript", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@2.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@2.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/jshint/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jshint/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/jshint/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "3.7.0", "description": "The modern build of lodash modular utilities.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@3.7.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@3.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jshint/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jshint/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/jshint/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Tom Wu" } ], "group": "", "name": "jsbn", "version": "0.1.1", "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andyperlitch/jsbn#readme" }, { "type": "vcs", "url": "git+https://github.com/andyperlitch/jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsbn/package.json" } ], "concludedValue": "node_modules/jsbn/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Dervus Grim " } ], "group": "", "name": "js-yaml", "version": "2.0.5", "description": "YAML 1.2 parser and serializer", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" }, { "type": "vcs", "url": "git://github.com/nodeca/js-yaml.git" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "group": "", "name": "jasmine-core", "version": "7.0.2", "description": "Simple JavaScript testing framework for browsers and node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jasmine-core@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://jasmine.github.io" }, { "type": "vcs", "url": "git+https://github.com/jasmine/jasmine.git" } ], "type": "framework", "bom-ref": "pkg:npm/jasmine-core@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jasmine-core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jasmine-core/package.json" } ], "concludedValue": "node_modules/jasmine-core/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "isstream", "version": "0.1.2", "description": "Determine if an object is a Stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/isstream" }, { "type": "vcs", "url": "git+https://github.com/rvagg/isstream.git" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/isstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isstream/package.json" } ], "concludedValue": "node_modules/isstream/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "wayfind" } ], "group": "", "name": "is-utf8", "version": "0.2.1", "description": "Detect if a buffer is utf8 encoded.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-utf8@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/wayfind/is-utf8#readme" }, { "type": "vcs", "url": "git+https://github.com/wayfind/is-utf8.git" } ], "type": "library", "bom-ref": "pkg:npm/is-utf8@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-utf8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-utf8/package.json" } ], "concludedValue": "node_modules/is-utf8/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "is-typedarray", "version": "1.0.0", "description": "Detect whether or not an object is a Typed Array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/is-typedarray" }, { "type": "vcs", "url": "git://github.com/hughsk/is-typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typedarray/package.json" } ], "concludedValue": "node_modules/is-typedarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "1.1.0", "description": "Check if something is a Node.js stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-stream#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/is-stream@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Mikola Lysenko" } ], "group": "", "name": "is-property", "version": "1.0.2", "description": "Tests if a JSON property can be accessed using . syntax", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-property@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikolalysenko/is-property" }, { "type": "vcs", "url": "git://github.com/mikolalysenko/is-property.git" } ], "type": "library", "bom-ref": "pkg:npm/is-property@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-property/package.json" } ], "concludedValue": "node_modules/is-property/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "is-my-json-valid", "version": "2.20.6", "description": "A [JSONSchema](https://json-schema.org/) validator that uses code generation to be extremely fast.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-my-json-valid@2.20.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/is-my-json-valid#readme" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/is-my-json-valid.git" } ], "type": "library", "bom-ref": "pkg:npm/is-my-json-valid@2.20.6", "properties": [ { "name": "SrcFile", "value": "node_modules/is-my-json-valid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-my-json-valid/package.json" } ], "concludedValue": "node_modules/is-my-json-valid/package.json" } ] } }, { "group": "", "name": "is-my-ip-valid", "version": "1.0.1", "description": "A small lib to validate IP addresses.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-my-ip-valid@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/LinusU/is-my-ip-valid#readme" }, { "type": "vcs", "url": "git+https://github.com/LinusU/is-my-ip-valid.git" } ], "type": "library", "bom-ref": "pkg:npm/is-my-ip-valid@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-my-ip-valid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-my-ip-valid/package.json" } ], "concludedValue": "node_modules/is-my-ip-valid/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-finite", "version": "1.1.0", "description": "ES2015 Number.isFinite() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-finite@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-finite#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-finite.git" } ], "type": "library", "bom-ref": "pkg:npm/is-finite@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-finite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-finite/package.json" } ], "concludedValue": "node_modules/is-finite/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-core-module", "version": "2.16.2", "description": "Is this specifier a node.js core module?", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-core-module@2.16.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-core-module" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-core-module.git" } ], "type": "library", "bom-ref": "pkg:npm/is-core-module@2.16.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-core-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-core-module/package.json" } ], "concludedValue": "node_modules/is-core-module/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "is-buffer", "version": "1.1.6", "description": "Determine if an object is a Buffer", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-buffer@1.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/is-buffer#readme" }, { "type": "vcs", "url": "git://github.com/feross/is-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/is-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-buffer/package.json" } ], "concludedValue": "node_modules/is-buffer/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.2.1", "description": "Determines if an object can be used as an array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish#readme" }, { "type": "vcs", "url": "git+https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/is-arrayish/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "indent-string", "version": "2.1.0", "description": "Indent each line in a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/indent-string@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/indent-string#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/indent-string.git" } ], "type": "library", "bom-ref": "pkg:npm/indent-string@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/indent-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indent-string/package.json" } ], "concludedValue": "node_modules/indent-string/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.2.11", "description": "Convert character encodings in pure javascript.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "1.1.1", "description": "Reference implementation of Joyent's HTTP Signature scheme.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-signature@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-http-signature/" }, { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "htmlparser2", "version": "3.8.3", "description": "Fast & forgiving HTML/XML/RSS parser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/htmlparser2@3.8.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/htmlparser2#readme" }, { "type": "vcs", "url": "git://github.com/fb55/htmlparser2.git" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/htmlparser2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/htmlparser2/package.json" } ], "concludedValue": "node_modules/htmlparser2/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.1.14", "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/htmlparser2/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/htmlparser2/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/htmlparser2/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "0.0.1", "description": "Array#isArray for older browsers", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/htmlparser2/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/htmlparser2/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/htmlparser2/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "hosted-git-info", "version": "2.8.9", "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@2.8.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@2.8.9", "properties": [ { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "hooker", "version": "0.2.3", "description": "Monkey-patch (hook) functions for debugging and stuff.", "purl": "pkg:npm/hooker@0.2.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/cowboy/javascript-hooker" }, { "type": "vcs", "url": "git://github.com/cowboy/javascript-hooker.git" } ], "type": "library", "bom-ref": "pkg:npm/hooker@0.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hooker/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hooker/package.json" } ], "concludedValue": "node_modules/hooker/package.json" } ] } }, { "group": "", "name": "hoek", "version": "2.16.3", "description": "General purpose node utilities", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hoek@2.16.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hapijs/hoek#readme" }, { "type": "vcs", "url": "git://github.com/hapijs/hoek.git" } ], "type": "library", "bom-ref": "pkg:npm/hoek@2.16.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hoek/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hoek/package.json" } ], "concludedValue": "node_modules/hoek/package.json" } ] } }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "hawk", "version": "3.1.3", "description": "HTTP Hawk Authentication Scheme", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hawk@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hueniverse/hawk#readme" }, { "type": "vcs", "url": "git://github.com/hueniverse/hawk.git" } ], "type": "library", "bom-ref": "pkg:npm/hawk@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hawk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hawk/package.json" } ], "concludedValue": "node_modules/hawk/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "hasha", "version": "2.2.0", "description": "Hashing made simple. Get the hash of a buffer/string/stream/file.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasha@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/hasha" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/hasha.git" } ], "type": "library", "bom-ref": "pkg:npm/hasha@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hasha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasha/package.json" } ], "concludedValue": "node_modules/hasha/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "has-color", "version": "0.1.7", "description": "Detect whether a terminal supports color", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-color@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-color" }, { "type": "vcs", "url": "git://github.com/sindresorhus/has-color.git" } ], "type": "library", "bom-ref": "pkg:npm/has-color@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/has-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-color/package.json" } ], "concludedValue": "node_modules/has-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-ansi", "version": "2.0.0", "description": "Check if a string has ANSI escape codes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-ansi@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-ansi" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/has-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/has-ansi@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-ansi/package.json" } ], "concludedValue": "node_modules/has-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-validator", "version": "2.0.6", "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-validator@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/har-validator" }, { "type": "vcs", "url": "git+https://github.com/ahmadnassri/har-validator.git" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/har-validator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-validator/package.json" } ], "concludedValue": "node_modules/har-validator/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "gzip-size", "version": "1.0.0", "description": "Get the gzipped size of a string or buffer", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gzip-size@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/gzip-size" }, { "type": "vcs", "url": "git://github.com/sindresorhus/gzip-size.git" } ], "type": "library", "bom-ref": "pkg:npm/gzip-size@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gzip-size/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gzip-size/package.json" } ], "concludedValue": "node_modules/gzip-size/package.json" } ] } }, { "authors": [ { "name": "Grunt Team (http://gruntjs.com/)" } ], "group": "", "name": "grunt-lib-phantomjs", "version": "0.6.0", "description": "Grunt and PhantomJS, sitting in a tree.", "purl": "pkg:npm/grunt-lib-phantomjs@0.6.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/gruntjs/grunt-lib-phantomjs" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-lib-phantomjs.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-lib-phantomjs@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-lib-phantomjs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-lib-phantomjs/package.json" } ], "concludedValue": "node_modules/grunt-lib-phantomjs/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt-legacy-util", "version": "0.2.0", "description": "Some old grunt utils provided for backwards compatibility.", "purl": "pkg:npm/grunt-legacy-util@0.2.0", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-legacy-util.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-legacy-util@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-util/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-util/package.json" } ], "concludedValue": "node_modules/grunt-legacy-util/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt-legacy-log-utils", "version": "0.1.1", "description": "Static methods for the Grunt 0.4.x logger.", "purl": "pkg:npm/grunt-legacy-log-utils@0.1.1", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-legacy-log-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-legacy-log-utils@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-log-utils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-log-utils/package.json" } ], "concludedValue": "node_modules/grunt-legacy-log-utils/package.json" } ] } }, { "group": "", "name": "underscore.string", "version": "2.3.3", "description": "String manipulation extensions for Underscore.js javascript library.", "purl": "pkg:npm/underscore.string@2.3.3", "externalReferences": [ { "type": "vcs", "url": "http://epeli.github.com/underscore.string/" }, { "type": "vcs", "url": "git+https://github.com/epeli/underscore.string.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-log-utils/node_modules/underscore.string/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-legacy-log/node_modules/underscore.string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-log/node_modules/underscore.string/package.json" } ], "concludedValue": "node_modules/grunt-legacy-log/node_modules/underscore.string/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "2.4.2", "description": "A utility library delivering consistency, customization, performance, & extras.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@2.4.2", "externalReferences": [ { "type": "website", "url": "http://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-log-utils/node_modules/lodash/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-legacy-log/node_modules/lodash/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-contrib-watch/node_modules/lodash/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-contrib-jasmine/node_modules/lodash/package.json" }, { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/findup-sync/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt-legacy-log", "version": "0.1.3", "description": "The Grunt 0.4.x logger.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-legacy-log@0.1.3", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-legacy-log.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-legacy-log@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-log/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-log/package.json" } ], "concludedValue": "node_modules/grunt-legacy-log/package.json" } ] } }, { "authors": [ { "name": "Grunt Team (http://gruntjs.com/)" } ], "group": "", "name": "grunt-contrib-watch", "version": "0.6.1", "description": "Run predefined tasks whenever watched file patterns are added, changed or deleted.", "purl": "pkg:npm/grunt-contrib-watch@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/grunt-contrib-watch" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-contrib-watch.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-contrib-watch@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-watch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-watch/package.json" } ], "concludedValue": "node_modules/grunt-contrib-watch/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "0.2.10", "description": "Higher-order functions and common patterns for asynchronous code", "purl": "pkg:npm/async@0.2.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/caolan/async#readme" }, { "type": "vcs", "url": "git+https://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@0.2.10", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-watch/node_modules/async/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-watch/node_modules/async/package.json" } ], "concludedValue": "node_modules/grunt-contrib-watch/node_modules/async/package.json" } ] } }, { "authors": [ { "name": "Grunt Team (http://gruntjs.com/)" } ], "group": "", "name": "grunt-contrib-uglify", "version": "0.9.2", "description": "Minify files with UglifyJS", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-contrib-uglify@0.9.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/grunt-contrib-uglify#readme" }, { "type": "vcs", "url": "git+https://github.com/gruntjs/grunt-contrib-uglify.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-contrib-uglify@0.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-uglify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-uglify/package.json" } ], "concludedValue": "node_modules/grunt-contrib-uglify/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "3.10.1", "description": "The modern build of lodash modular utilities.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@3.10.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@3.10.1", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-uglify/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-uglify/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/grunt-contrib-uglify/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Grunt Team (http://gruntjs.com/)" } ], "group": "", "name": "grunt-contrib-jshint", "version": "0.11.3", "description": "Validate files with JSHint", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-contrib-jshint@0.11.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/grunt-contrib-jshint#readme" }, { "type": "vcs", "url": "git+https://github.com/gruntjs/grunt-contrib-jshint.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-contrib-jshint@0.11.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-jshint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-jshint/package.json" } ], "concludedValue": "node_modules/grunt-contrib-jshint/package.json" } ] } }, { "authors": [ { "name": "Grunt Team (http://gruntjs.com/)" } ], "group": "", "name": "grunt-contrib-jasmine", "version": "0.8.2", "description": "Run jasmine specs headlessly through PhantomJS.", "purl": "pkg:npm/grunt-contrib-jasmine@0.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/grunt-contrib-jasmine" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-contrib-jasmine.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-contrib-jasmine@0.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-jasmine/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-jasmine/package.json" } ], "concludedValue": "node_modules/grunt-contrib-jasmine/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.1.4", "description": "A deep deletion module for node (like `rm -rf`)", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/rimraf#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/rimraf.git" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-jasmine/node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-jasmine/node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/grunt-contrib-jasmine/node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Grunt Team" } ], "group": "", "name": "grunt-cli", "version": "0.1.13", "description": "The grunt command line interface.", "purl": "pkg:npm/grunt-cli@0.1.13", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-cli.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-cli@0.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-cli/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-cli/package.json" } ], "concludedValue": "node_modules/grunt-cli/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt", "version": "0.4.5", "description": "The JavaScript Task Runner", "purl": "pkg:npm/grunt@0.4.5", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt@0.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/package.json" } ], "concludedValue": "node_modules/grunt/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "graceful-fs", "version": "1.2.3", "description": "A drop-in replacement for fs, making various improvements.", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "globule", "version": "0.1.0", "description": "An easy-to-use wildcard globbing library.", "purl": "pkg:npm/globule@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-globule" }, { "type": "vcs", "url": "git://github.com/cowboy/node-globule.git" } ], "type": "library", "bom-ref": "pkg:npm/globule@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/globule/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globule/package.json" } ], "concludedValue": "node_modules/globule/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "1.0.2", "description": "A utility library delivering consistency, customization, performance, and extras.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@1.0.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/globule/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globule/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/globule/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.1.21", "description": "a little globber", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.1.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.1.21", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inherits", "version": "1.0.2", "description": "A tiny simple way to do classic inheritance in js", "purl": "pkg:npm/inherits@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/inherits/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/glob/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Alex Wilson " } ], "group": "", "name": "getpass", "version": "0.1.7", "description": "getpass for node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-getpass#readme" }, { "type": "vcs", "url": "git+https://github.com/arekinath/node-getpass.git" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/getpass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getpass/package.json" } ], "concludedValue": "node_modules/getpass/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "getobject", "version": "0.1.0", "description": "get.and.set.deep.objects.easily = true", "purl": "pkg:npm/getobject@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-getobject" }, { "type": "vcs", "url": "git://github.com/cowboy/node-getobject.git" } ], "type": "library", "bom-ref": "pkg:npm/getobject@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/getobject/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getobject/package.json" } ], "concludedValue": "node_modules/getobject/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "get-stdin", "version": "4.0.1", "description": "Easier stdin", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stdin@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/get-stdin" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/get-stdin.git" } ], "type": "library", "bom-ref": "pkg:npm/get-stdin@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stdin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stdin/package.json" } ], "concludedValue": "node_modules/get-stdin/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "generate-object-property", "version": "1.2.0", "description": "Generate safe JS code that can used to reference a object property", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/generate-object-property@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/generate-object-property" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/generate-object-property.git" } ], "type": "library", "bom-ref": "pkg:npm/generate-object-property@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/generate-object-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/generate-object-property/package.json" } ], "concludedValue": "node_modules/generate-object-property/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus" } ], "group": "", "name": "generate-function", "version": "2.3.1", "description": "Module that helps you write generated functions in Node", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/generate-function@2.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/generate-function" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/generate-function.git" } ], "type": "library", "bom-ref": "pkg:npm/generate-function@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/generate-function/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/generate-function/package.json" } ], "concludedValue": "node_modules/generate-function/package.json" } ] } }, { "authors": [ { "name": "Kyle Robinson Young " } ], "group": "", "name": "gaze", "version": "0.5.2", "description": "A globbing fs.watch wrapper built from the best parts of other fine watch libs.", "purl": "pkg:npm/gaze@0.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shama/gaze" }, { "type": "vcs", "url": "git://github.com/shama/gaze.git" } ], "type": "library", "bom-ref": "pkg:npm/gaze@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/gaze/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gaze/package.json" } ], "concludedValue": "node_modules/gaze/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "git+https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "0.26.7", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@0.26.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "git+https://github.com/jprichardson/node-fs-extra.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@0.26.7", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "1.0.1", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/form-data@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/form-data/form-data#readme" }, { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/package.json" } ], "concludedValue": "node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.18.1", "description": "Lodash modular utilities.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/form-data/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "2.6.4", "description": "Higher-order functions and common patterns for asynchronous code", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async@2.6.4", "externalReferences": [ { "type": "vcs", "url": "https://caolan.github.io/async/" }, { "type": "vcs", "url": "git+https://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@2.6.4", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/node_modules/async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/node_modules/async/package.json" } ], "concludedValue": "node_modules/form-data/node_modules/async/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "forever-agent", "version": "0.6.1", "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/forever-agent" }, { "type": "vcs", "url": "git+https://github.com/mikeal/forever-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/forever-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forever-agent/package.json" } ], "concludedValue": "node_modules/forever-agent/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "findup-sync", "version": "0.1.3", "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.", "purl": "pkg:npm/findup-sync@0.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-findup-sync" }, { "type": "vcs", "url": "git://github.com/cowboy/node-findup-sync.git" } ], "type": "library", "bom-ref": "pkg:npm/findup-sync@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/findup-sync/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/package.json" } ], "concludedValue": "node_modules/findup-sync/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "0.3.0", "description": "a glob matcher in javascript", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/minimatch/package.json" }, { "name": "SrcFile", "value": "node_modules/cli/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/cli/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.2.11", "description": "a little globber", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/glob/package.json" }, { "name": "SrcFile", "value": "node_modules/cli/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli/node_modules/glob/package.json" } ], "concludedValue": "node_modules/cli/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "1.1.2", "description": "Find a file by walking up parent directories", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/find-up" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/find-up.git" } ], "type": "library", "bom-ref": "pkg:npm/find-up@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "figures", "version": "1.7.0", "description": "Unicode symbols with Windows CMD fallbacks", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/figures@1.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/figures#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/figures.git" } ], "type": "library", "bom-ref": "pkg:npm/figures@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/figures/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/figures/package.json" } ], "concludedValue": "node_modules/figures/package.json" } ] } }, { "authors": [ { "name": "Andrew Kelley " } ], "group": "", "name": "fd-slicer", "version": "1.0.1", "description": "safely create multiple ReadStream or WriteStream objects from the same file descriptor", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fd-slicer@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andrewrk/node-fd-slicer#readme" }, { "type": "vcs", "url": "git://github.com/andrewrk/node-fd-slicer.git" } ], "type": "library", "bom-ref": "pkg:npm/fd-slicer@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fd-slicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fd-slicer/package.json" } ], "concludedValue": "node_modules/fd-slicer/package.json" } ] } }, { "authors": [ { "name": "James Coglan (http://jcoglan.com/)" } ], "group": "", "name": "faye-websocket", "version": "0.4.4", "description": "Standards-compliant WebSocket server and client", "purl": "pkg:npm/faye-websocket@0.4.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/faye/faye-websocket-node" }, { "type": "vcs", "url": "git://github.com/faye/faye-websocket-node.git" } ], "type": "library", "bom-ref": "pkg:npm/faye-websocket@0.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/faye-websocket/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/faye-websocket/package.json" } ], "concludedValue": "node_modules/faye-websocket/package.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "description": "extended POSIX-style sprintf", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davepacheco/node-extsprintf" }, { "type": "vcs", "url": "git://github.com/davepacheco/node-extsprintf.git" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/extsprintf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extsprintf/package.json" } ], "concludedValue": "node_modules/extsprintf/package.json" } ] } }, { "authors": [ { "name": "max ogden" } ], "group": "", "name": "extract-zip", "version": "1.5.0", "description": "unzip a zip file into a directory using 100% pure gluten-free organic javascript", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extract-zip@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/maxogden/extract-zip" }, { "type": "vcs", "url": "git+ssh://git@github.com/maxogden/extract-zip.git" } ], "type": "library", "bom-ref": "pkg:npm/extract-zip@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/extract-zip/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extract-zip/package.json" } ], "concludedValue": "node_modules/extract-zip/package.json" } ] } }, { "authors": [ { "name": "Stefan Thomas (http://www.justmoon.net)" } ], "group": "", "name": "extend", "version": "3.0.2", "description": "Port of jQuery.extend for node.js and the browser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/justmoon/node-extend#readme" }, { "type": "vcs", "url": "git+https://github.com/justmoon/node-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extend/package.json" } ], "concludedValue": "node_modules/extend/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "exit", "version": "0.1.2", "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", "purl": "pkg:npm/exit@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-exit" }, { "type": "vcs", "url": "git://github.com/cowboy/node-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/exit@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/exit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exit/package.json" } ], "concludedValue": "node_modules/exit/package.json" } ] } }, { "authors": [ { "name": "hij1nx " } ], "group": "", "name": "eventemitter2", "version": "0.4.14", "description": "A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eventemitter2@0.4.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hij1nx/EventEmitter2" }, { "type": "vcs", "url": "git://github.com/hij1nx/EventEmitter2.git" } ], "type": "library", "bom-ref": "pkg:npm/eventemitter2@0.4.14", "properties": [ { "name": "SrcFile", "value": "node_modules/eventemitter2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eventemitter2/package.json" } ], "concludedValue": "node_modules/eventemitter2/package.json" } ] }, "tags": [ "event" ] }, { "group": "", "name": "esprima", "version": "1.0.4", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "purl": "pkg:npm/esprima@1.0.4", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "git+ssh://git@github.com/ariya/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/escape-string-regexp" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/escape-string-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "group": "", "name": "es5-shim", "version": "4.0.6", "description": "ECMAScript 5 compatibility shims for legacy JavaScript engines", "purl": "pkg:npm/es5-shim@4.0.6", "externalReferences": [ { "type": "vcs", "url": "http://github.com/es-shims/es5-shim/" }, { "type": "vcs", "url": "git+ssh://git@github.com/es-shims/es5-shim.git" } ], "type": "library", "bom-ref": "pkg:npm/es5-shim@4.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/es5-shim/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es5-shim/package.json" } ], "concludedValue": "node_modules/es5-shim/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "group": "", "name": "error-ex", "version": "1.3.4", "description": "Easy error subclassing and stack customization", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-ex@1.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-error-ex#readme" }, { "type": "vcs", "url": "git+https://github.com/qix-/node-error-ex.git" } ], "type": "library", "bom-ref": "pkg:npm/error-ex@1.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/error-ex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-ex/package.json" } ], "concludedValue": "node_modules/error-ex/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "entities", "version": "1.0.0", "description": "Encode & decode XML/HTML entities with ease", "licenses": [ { "license": { "name": "BSD-like", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/node-entities" }, { "type": "vcs", "url": "git://github.com/fb55/node-entities.git" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/entities/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/entities/package.json" } ], "concludedValue": "node_modules/entities/package.json" } ] }, "tags": [ "decode" ] }, { "authors": [ { "name": "Jeremie Miller (http://jeremie.com/)" } ], "group": "", "name": "ecc-jsbn", "version": "0.1.2", "description": "ECC JS code based on JSBN", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn" }, { "type": "vcs", "url": "git+https://github.com/quartzjer/ecc-jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ecc-jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ecc-jsbn/package.json" } ], "concludedValue": "node_modules/ecc-jsbn/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domutils", "version": "1.5.1", "description": "utilities for working with htmlparser2's dom", "purl": "pkg:npm/domutils@1.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/FB55/domutils" }, { "type": "vcs", "url": "git://github.com/FB55/domutils.git" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/domutils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domutils/package.json" } ], "concludedValue": "node_modules/domutils/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domhandler", "version": "2.3.0", "description": "handler for htmlparser2 that turns pages into a dom", "purl": "pkg:npm/domhandler@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/DomHandler" }, { "type": "vcs", "url": "git://github.com/fb55/DomHandler.git" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/domhandler/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domhandler/package.json" } ], "concludedValue": "node_modules/domhandler/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domelementtype", "version": "1.3.1", "description": "all the types of nodes in htmlparser2's dom", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domelementtype@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/domelementtype#readme" }, { "type": "vcs", "url": "git://github.com/fb55/domelementtype.git" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/domelementtype/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domelementtype/package.json" } ], "concludedValue": "node_modules/domelementtype/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "dom-serializer", "version": "0.2.2", "description": "render dom nodes to string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dom-serializer@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cheeriojs/dom-renderer#readme" }, { "type": "vcs", "url": "git://github.com/cheeriojs/dom-renderer.git" } ], "type": "library", "bom-ref": "pkg:npm/dom-serializer@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/dom-serializer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dom-serializer/package.json" } ], "concludedValue": "node_modules/dom-serializer/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "entities", "version": "2.2.0", "description": "Encode & decode XML and HTML entities with ease", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/entities#readme" }, { "type": "vcs", "url": "git://github.com/fb55/entities.git" } ], "type": "library", "bom-ref": "pkg:npm/entities@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/dom-serializer/node_modules/entities/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dom-serializer/node_modules/entities/package.json" } ], "concludedValue": "node_modules/dom-serializer/node_modules/entities/package.json" } ] }, "tags": [ "decode", "html", "xml" ] }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domelementtype", "version": "2.3.0", "description": "all the types of nodes in htmlparser2's dom", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domelementtype@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/domelementtype#readme" }, { "type": "vcs", "url": "git://github.com/fb55/domelementtype.git" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/dom-serializer/node_modules/domelementtype/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dom-serializer/node_modules/domelementtype/package.json" } ], "concludedValue": "node_modules/dom-serializer/node_modules/domelementtype/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "delayed-stream", "version": "1.0.0", "description": "Buffers events from a stream until you are ready to handle them.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-delayed-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-delayed-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delayed-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delayed-stream/package.json" } ], "concludedValue": "node_modules/delayed-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/decamelize#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/decamelize.git" } ], "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "0.7.4", "description": "small debugging utility", "purl": "pkg:npm/debug@0.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@0.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Steven Levithan" } ], "group": "", "name": "dateformat", "version": "1.0.2-1.2.3", "description": "A node.js package for Steven Levithan's excellent dateFormat() function.", "purl": "pkg:npm/dateformat@1.0.2-1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-dateformat" } ], "type": "library", "bom-ref": "pkg:npm/dateformat@1.0.2-1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/dateformat/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dateformat/package.json" } ], "concludedValue": "node_modules/dateformat/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "date-now", "version": "0.1.4", "description": "A requirable version of Date.now()", "purl": "pkg:npm/date-now@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Colingo/date-now" }, { "type": "vcs", "url": "git://github.com/Colingo/date-now.git" } ], "type": "library", "bom-ref": "pkg:npm/date-now@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/date-now/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/date-now/package.json" } ], "concludedValue": "node_modules/date-now/package.json" } ] } }, { "authors": [ { "name": "Trent Mick (http://trentm.com)" } ], "group": "", "name": "dashdash", "version": "1.14.1", "description": "A light, featureful and explicit option parsing library.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/trentm/node-dashdash#readme" }, { "type": "vcs", "url": "git://github.com/trentm/node-dashdash.git" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dashdash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dashdash/package.json" } ], "concludedValue": "node_modules/dashdash/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "currently-unhandled", "version": "0.4.1", "description": "Track the list of currently unhandled promise rejections.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/currently-unhandled@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jamestalmage/currently-unhandled#readme" }, { "type": "vcs", "url": "git+https://github.com/jamestalmage/currently-unhandled.git" } ], "type": "library", "bom-ref": "pkg:npm/currently-unhandled@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/currently-unhandled/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/currently-unhandled/package.json" } ], "concludedValue": "node_modules/currently-unhandled/package.json" } ] } }, { "group": "", "name": "cryptiles", "version": "2.0.5", "description": "General purpose crypto utilities", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cryptiles@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hapijs/cryptiles#readme" }, { "type": "vcs", "url": "git://github.com/hapijs/cryptiles.git" } ], "type": "library", "bom-ref": "pkg:npm/cryptiles@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/cryptiles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cryptiles/package.json" } ], "concludedValue": "node_modules/cryptiles/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.3", "description": "The `util.is*` functions introduced in Node v0.12.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/core-util-is#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/core-util-is.git" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "console-browserify", "version": "1.1.0", "description": "Emulate console for all the browsers", "purl": "pkg:npm/console-browserify@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/console-browserify" }, { "type": "vcs", "url": "git://github.com/Raynos/console-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/console-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/console-browserify/package.json" } ], "concludedValue": "node_modules/console-browserify/package.json" } ] } }, { "authors": [ { "name": "Max Ogden " } ], "group": "", "name": "concat-stream", "version": "1.5.0", "description": "writable stream that concatenates strings or binary data and calls a callback with the result", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-stream@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/maxogden/concat-stream#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/maxogden/concat-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-stream@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-stream/package.json" } ], "concludedValue": "node_modules/concat-stream/package.json" } ] }, "tags": [ "binary", "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-concat-map" }, { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.3", "description": "the complete solution for node.js command-line programs", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js#readme" }, { "type": "vcs", "url": "git+https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "combined-stream", "version": "1.0.8", "description": "A stream that emits multiple other streams one after another.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-combined-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-combined-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/combined-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combined-stream/package.json" } ], "concludedValue": "node_modules/combined-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Marak Squires" } ], "group": "", "name": "colors", "version": "0.6.2", "description": "get colors in your node.js console like what", "purl": "pkg:npm/colors@0.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Marak/colors.js" }, { "type": "vcs", "url": "git+ssh://git@github.com/Marak/colors.js.git" } ], "type": "library", "bom-ref": "pkg:npm/colors@0.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/colors/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colors/package.json" } ], "concludedValue": "node_modules/colors/package.json" } ] } }, { "authors": [ { "name": "Jeremy Ashkenas" } ], "group": "", "name": "coffee-script", "version": "1.3.3", "description": "Unfancy JavaScript", "purl": "pkg:npm/coffee-script@1.3.3", "externalReferences": [ { "type": "website", "url": "http://coffeescript.org" }, { "type": "vcs", "url": "git://github.com/jashkenas/coffee-script.git" } ], "type": "library", "bom-ref": "pkg:npm/coffee-script@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/coffee-script/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coffee-script/package.json" } ], "concludedValue": "node_modules/coffee-script/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "2.1.0", "description": "easily create complex multi-column command-line-interfaces", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bcoe/cliui" }, { "type": "vcs", "url": "git+ssh://git@github.com/bcoe/cliui.git" } ], "type": "library", "bom-ref": "pkg:npm/cliui@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Chris O'Hara " } ], "group": "", "name": "cli", "version": "0.6.6", "description": "A tool for rapidly building command line apps", "purl": "pkg:npm/cli@0.6.6", "externalReferences": [ { "type": "vcs", "url": "http://github.com/chriso/cli" }, { "type": "vcs", "url": "git+ssh://git@github.com/chriso/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/cli@0.6.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cli/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli/package.json" } ], "concludedValue": "node_modules/cli/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "chalk", "version": "0.4.0", "description": "Terminal string styling done right. Created because the `colors` module does some really horrible things.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/chalk" }, { "type": "vcs", "url": "git://github.com/sindresorhus/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "center-align", "version": "0.1.3", "description": "Center-align the text in a string.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/center-align@0.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/center-align" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/center-align.git" } ], "type": "library", "bom-ref": "pkg:npm/center-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/center-align/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/center-align/package.json" } ], "concludedValue": "node_modules/center-align/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "caseless", "version": "0.11.0", "description": "Caseless object set/get/has, very useful when working with HTTP headers.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caseless@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/caseless#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/caseless.git" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/caseless/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caseless/package.json" } ], "concludedValue": "node_modules/caseless/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "camelcase-keys", "version": "2.1.0", "description": "Convert object keys to camelCase", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase-keys@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/camelcase-keys" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/camelcase-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/camelcase-keys@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase-keys/package.json" } ], "concludedValue": "node_modules/camelcase-keys/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "2.1.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/camelcase" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/camelcase.git" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Devon Govett " } ], "group": "", "name": "browserify-zlib", "version": "0.1.4", "description": "Full zlib module for browserify", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browserify-zlib@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/devongovett/browserify-zlib" }, { "type": "vcs", "url": "git://github.com/devongovett/browserify-zlib.git" } ], "type": "library", "bom-ref": "pkg:npm/browserify-zlib@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/browserify-zlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browserify-zlib/package.json" } ], "concludedValue": "node_modules/browserify-zlib/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.18", "description": "Brace expansion as known from sh/bash", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.18", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "boom", "version": "2.10.1", "description": "HTTP-friendly error objects", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/boom@2.10.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hapijs/boom#readme" }, { "type": "vcs", "url": "git://github.com/hapijs/boom.git" } ], "type": "library", "bom-ref": "pkg:npm/boom@2.10.1", "properties": [ { "name": "SrcFile", "value": "node_modules/boom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/boom/package.json" } ], "concludedValue": "node_modules/boom/package.json" } ] } }, { "group": "", "name": "bl", "version": "1.0.3", "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bl@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/bl" }, { "type": "vcs", "url": "git+https://github.com/rvagg/bl.git" } ], "type": "library", "bom-ref": "pkg:npm/bl@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/bl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bl/package.json" } ], "concludedValue": "node_modules/bl/package.json" } ] } }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-bcrypt-pbkdf.git" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bcrypt-pbkdf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bcrypt-pbkdf/package.json" } ], "concludedValue": "node_modules/bcrypt-pbkdf/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "aws-sign2", "version": "0.6.0", "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-sign2@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/aws-sign#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/aws-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws-sign2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws-sign2/package.json" } ], "concludedValue": "node_modules/aws-sign2/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "0.1.22", "description": "Higher-order functions and common patterns for asynchronous code", "purl": "pkg:npm/async@0.1.22", "externalReferences": [ { "type": "vcs", "url": "https://github.com/caolan/async#readme" }, { "type": "vcs", "url": "git://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@0.1.22", "properties": [ { "name": "SrcFile", "value": "node_modules/async/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async/package.json" } ], "concludedValue": "node_modules/async/package.json" } ] } }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "assert-plus", "version": "0.2.0", "description": "Extra assertions on top of node's assert module", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-plus@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcavage/node-assert-plus#readme" }, { "type": "vcs", "url": "git+https://github.com/mcavage/node-assert-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-plus/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Joyent (joyent.com)" } ], "group": "", "name": "asn1", "version": "0.2.6", "description": "Contains parsers and serializers for ASN.1 (currently BER only)", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asn1@0.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-asn1#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1/package.json" } ], "concludedValue": "node_modules/asn1/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "array-find-index", "version": "1.0.2", "description": "ES2015 `Array#findIndex()` ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-find-index@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/array-find-index#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/array-find-index.git" } ], "type": "library", "bom-ref": "pkg:npm/array-find-index@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/array-find-index/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-find-index/package.json" } ], "concludedValue": "node_modules/array-find-index/package.json" } ] } }, { "group": "", "name": "argparse", "version": "0.1.16", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@0.1.16", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/argparse" }, { "type": "vcs", "url": "git://github.com/nodeca/argparse.git" } ], "type": "library", "bom-ref": "pkg:npm/argparse@0.1.16", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "group": "", "name": "underscore.string", "version": "2.4.0", "description": "String manipulation extensions for Underscore.js javascript library.", "purl": "pkg:npm/underscore.string@2.4.0", "externalReferences": [ { "type": "vcs", "url": "http://epeli.github.com/underscore.string/" }, { "type": "vcs", "url": "git+https://github.com/epeli/underscore.string.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/node_modules/underscore.string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/node_modules/underscore.string/package.json" } ], "concludedValue": "node_modules/argparse/node_modules/underscore.string/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "1.0.0", "description": "ANSI escape codes for colorizing strings in the terminal", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/ansi-styles" }, { "type": "vcs", "url": "git://github.com/sindresorhus/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "2.1.1", "description": "Regular expression for matching ANSI escape codes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-regex#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "align-text", "version": "0.1.4", "description": "Align the text in a string.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/align-text@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/align-text" }, { "type": "vcs", "url": "git://github.com/jonschlinkert/align-text.git" } ], "type": "library", "bom-ref": "pkg:npm/align-text@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/align-text/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/align-text/package.json" } ], "concludedValue": "node_modules/align-text/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "abbrev", "version": "1.1.1", "description": "Like ruby's abbrev module, but in js", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/abbrev-js#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/isnumeric@0.2.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-09T18:03:44Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'isnumeric' with version '0.2.0'. The package type in this SBOM is npm with a single purl namespace '@my-scope' described under components. The components were identified from 274 source files." } ] }