{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:c776808b-4ec4-4543-95a5-a5e03000fcbb", "version": 1, "metadata": { "timestamp": "2026-09-09T18:14:55Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "libnpmversion", "group": "", "version": "8.0.4", "description": "library to do the things that 'npm version' does", "purl": "pkg:npm/libnpmversion@8.0.4", "bom-ref": "pkg:npm/libnpmversion@8.0.4", "author": "GitHub Inc.", "properties": [ { "name": "cdx:npm:scripts", "value": "lint, test, posttest, snap, postlint, lintfix, template-oss-apply, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@gar\\n@isaacs\\n@npmcli" }, { "name": "cdx:bom:componentSrcFiles", "value": "pnpm-lock.yaml" } ] }, "components": [ { "group": "@gar", "name": "promise-retry", "version": "1.0.3", "description": "Retries a function that returns a promise, leveraging the power of the retry module.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1a6cc0f5c90da243f2a53835d298297873507bba61fa220a2a684abb739bf40364b30ade0b1ed1ddc2a663bf352bc40adc0a952f7c5587d038d89bc801b92448" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40gar/promise-retry@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/wraithgar/node-promise-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/@gar/promise-retry@1.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "lint, lint:fix, test, typelint, posttest, postlint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@isaacs", "name": "fs-minipass", "version": "4.0.1", "description": "fs read and write streams based on minipass", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c209bd1219768e97aa3f7cf0ffb9a8de4447169e4c10386a01dc32d5f4c69070309e418e56c829bd084bf01e67d6a95bd358d5de7fdb23465f669e65580d64e3" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "prepare, pretest, test, preversion, postversion, prepublishOnly, format, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "git", "version": "7.0.2", "description": "a util for spawning git from npm CLI contexts", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a1ea251c38c4c4d0090279583f6ab3363317fd78bd6e6bbbf02f5d206af8c63a1bad229bb8c602a61f254f39f8be75b736322a566c3f7fc0427e8baac895e546" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/git@7.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/git.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/git@7.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "lint, snap, test, posttest, postlint, lintfix, template-oss-apply, eslint" }, { "name": "ImportedModules", "value": "@npmcli/git" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ], "occurrences": [ { "location": "lib/commit.js", "line": 1 }, { "location": "lib/enforce-clean.js", "line": 1 }, { "location": "lib/retrieve-tag.js", "line": 1 }, { "location": "lib/tag.js", "line": 1 }, { "location": "lib/version.js", "line": 8 } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "node-gyp", "version": "5.0.0", "description": "Tools for dealing with node-gyp packages", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "bae1b91d91572dfc852aa83c432a6c9a02d05bbb268918d5738e5ba83fe87d965c47fbb112381053ca833efd2cf5311e314880014fc60b96d1ebef947538ab21" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/node-gyp@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/node-gyp@5.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, lint, postlint, template-oss-apply, lintfix, snap, posttest, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "package-json", "version": "7.0.5", "description": "Programmatic API to update package.json", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "895b93946dce46ada26956b521653100efe3229efbb54281868323bb3616da42f830b3756e2fe87ea919ec3ece3b087c728031d7f4b681ed2b31d1aff2c2d239" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/package-json@7.0.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/package-json.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/package-json@7.0.5", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "snap, test, lint, lintfix, posttest, postsnap, postlint, template-oss-apply, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "promise-spawn", "version": "9.0.1", "description": "spawn processes the way the npm cli likes to do", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "38b51aa2a06ecb1793a94be30371591625d47d80b56a5a7749af7d816dc4503cf7b59dc26d70dd719eea58a07389cac995e220b9ca166a6587d6c680987fe5d9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/promise-spawn@9.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/promise-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/promise-spawn@9.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, snap, lint, lintfix, posttest, postsnap, postlint, template-oss-apply, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "run-script", "version": "10.0.4", "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "986516af5b8c9dfd257b64f07ce658e121716465c67e6e09b5acbf9f001ad852cd00a5d4a14c1a1b004c347dfa5073ed8a759f4d22779ea150af4d3dd42c551a" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/run-script@10.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/run-script.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/run-script@10.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, eslint, lint, lintfix, postlint, snap, posttest, template-oss-apply" }, { "name": "ImportedModules", "value": "@npmcli/run-script" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ], "occurrences": [ { "location": "lib/version.js", "line": 13 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "abbrev", "version": "4.0.0", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6b5c1f97268bd2d1ed25298b48e5726d8872db6bd18a1e1e76e861ae472382b5869d17eb66da2f2761518f1b93b64923e3b3bf6da7f447ce905393ae629cfc7c" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@4.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, lint, postlint, template-oss-apply, lintfix, snap, posttest, eslint, test:cover" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "balanced-match", "version": "4.0.4", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "04bae011c453c17da8ea01b118e08dc8cbc64a9df96287ee633c3d87520c4d198aaadb40659554ebb6dd6fd3ebdaf50703cfa3de2dad25f8cee82ebee26c864c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, benchmark, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.9", "description": "Brace expansion as known from sh/bash", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "49c43822ebc8105d533253fb66dfaf8c9ffff7394f6f64837315b13376e4f2ceade8619d27b28ed5d09c4e274e3c929e3d6df42c4ff6713ef00b23e1a3dfd6c6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@5.0.9", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.9", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, benchmark, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "3.0.0", "description": "like `chown -R`", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f88c7363d05939077f5ee60f466aef1158c5fe7aa3e64813e2412aed5a1fac3a0cd4cc6846311692b082dc4b4b8b9f5355ac314c09fea2b27015072ba84375fa" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@3.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@3.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "prepare, pretest, test, preversion, postversion, prepublishOnly, format, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "env-paths", "version": "2.2.1", "description": "Get paths for storing things like data, config, cache, etc", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fa1d6590b2a164c4d88e8835544a49346ecd64959cb9cd830e4feab2a49345108e5e22e3790d5dd7fb9dad41a1a8cc5480097028d67471fdaea9a9f918bb92d8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-paths@2.2.1", "type": "library", "bom-ref": "pkg:npm/env-paths@2.2.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Sami Sayegh" } ], "group": "", "name": "exponential-backoff", "version": "3.1.3", "description": "A utility that allows retrying a function with an exponential delay between attempts.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "66011e6578f7d2af88d0437e09b492a48c8f689e475500f5f19d66faed455db01e4fde26af5cf0e74ab8aba8e2882e38ecd97f61370861201fb621aa7adc1708" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/exponential-backoff@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/coveooss/exponential-backoff#readme" }, { "type": "vcs", "url": "git+https://github.com/coveooss/exponential-backoff.git" } ], "type": "library", "bom-ref": "pkg:npm/exponential-backoff@3.1.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "build, test, test:watch" }, { "name": "cdx:npm:buildScripts", "value": "build, test:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "fdir", "version": "6.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b486d8b596ee70eb340511aa3c992c84951874bf920c7edd54cf208f2f84469dd60148cb105244fb4da46a7c87b708d63a7c2b298062c0098cd29e242c90275e" } ], "purl": "pkg:npm/fdir@6.5.0", "type": "library", "bom-ref": "pkg:npm/fdir@6.5.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5a3972ae89669bcb83a66fe8806c976576f567e09ad81f0d6c9c2a0558346b12bd19b05ea12ef2195eaf8d79d87469ba5f9de27a112ec716f288aa7c42637857" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, typedoc, profclean, test-regen, prebench, bench, preprof, prof, benchclean" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "45b279fe398570d342703579a3d7939c12c9fc7b33595d0fef76dcf857f89d2feb263f98692e881b288e2f45680585fe9755ab97793ade1fcaac7fa7849d17bd" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, postpublish, test, posttest" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "hosted-git-info", "version": "9.0.3", "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1dcfa084ba12b7a41a61952fd1606222f98c0d9b9967ba1a0ef747f0c6df38ee253acc5d5cb12fb82e9e3e81acf47d57f6808bcaaebe35537430aa83fb2771ca" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@9.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@9.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "posttest, snap, test, test:coverage, lint, postlint, lintfix, template-oss-apply, eslint, test:node20, test:cover" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ini", "version": "6.0.0", "description": "An ini encoder/decoder for node", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2014dd224cd934ea6a9bbab7751a89bcc6a57578c31d69040dfaf0184413b3979a40c595f9d8c0851fb06a1c8d34c01afaaa5b0d4841315b7864a370a4f9bbc5" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@6.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@6.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "eslint, lint, lintfix, test, snap, posttest, postlint, template-oss-apply" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "4.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14552d64ca6867c46a1d2dd77971261d62c0e2d847f99c42bf694e88f227d5773b0b1aea856ccd483cc3fbf7214bfcdb61ece68b058b7500b4f497502a6b613b" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@4.0.0", "type": "library", "bom-ref": "pkg:npm/isexe@4.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "json-parse-even-better-errors", "version": "5.0.0", "description": "JSON.parse with context information on error", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "645d67c59dbc561428b915a151c565508377ab04a03eeb302b4e6cfc721aa1eb40a04ffdb678159821e34b199240f6afd6777e94fb532f4619ff6005751fe261" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-even-better-errors@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/json-parse-even-better-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/json-parse-even-better-errors@5.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, snap, lint, postlint, template-oss-apply, lintfix, posttest, eslint" }, { "name": "ImportedModules", "value": "json-parse-even-better-errors" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ], "occurrences": [ { "location": "lib/read-json.js", "line": 4 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "11.5.2", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e297ccd457f4c79d28d2d4306f9b9cc3f4733720f4fd824c13a215712b5a959b8c5b176ddec47786e4ad4edc73e0f526bd97d182ebc37a36acbd0da489f475d6" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@11.5.2", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.5.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "build, prepare, pretest, presnap, test, snap, preversion, postversion, prepublishOnly, format, typedoc, benchmark-results-typedoc, prebenchmark, benchmark, preprofile, profile, lint, postsnap, postlint" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.6", "description": "a glob matcher in javascript", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "be92d012cf952c2af59d4d015d2d3b99a628170943007d209e042ebadb71230bad0c510c1ead9b957fbcbe98310dd2b72753f08c22627a9efb3a2b536782e5d4" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.6", "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.6", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, benchmark, typedoc, lint, postsnap, postlint" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b44047a839c8a0cff5ad7304d738246bd83a43695ca029311cbb9cece0c9e41c5b3f977873667970682d5c092ee7ddb4d02c7b762b874ce61f4810fc9fa9a6f0" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "3.1.0", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "299c58a350549160f64d514baf4310a0cf2f5148a0583dcb943f376bfef906a0bee2a1341dbd55a39bf516071f68d5ef7d7cebfb912143a8a783f09a0628d397" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@3.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@3.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "prepare, pretest, test, preversion, postversion, prepublishOnly, format, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "node-gyp", "version": "12.4.0", "description": "Node.js native addon build tool", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "38c70f36fa9308552735a06599d82afa57cda98ee04e24a63510e3637b805d1cae75e299119c6edc22ed8cc42bc78cd9c425f66ff9a936a4edc2e08981784793" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-gyp@12.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp@12.4.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:bin", "value": "./bin/node-gyp.js" }, { "name": "cdx:npm:scripts", "value": "lint, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "nopt", "version": "9.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "661ab76bec852ab63048196e2f81fd5cfde6df2e6ebd0901ff4f42c03aee0a246647f5096279fd5b8478f2bcb4b860bbd1a7933ca2f29c1b6c70ff5e7c515c3f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@9.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@9.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:bin", "value": "nopt" }, { "name": "cdx:npm:scripts", "value": "test, lint, postlint, template-oss-apply, lintfix, snap, posttest, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-install-checks", "version": "8.0.0", "description": "Check the engines and platform fields in package.json", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "49c01474ca72ce46e9c6835e910ded35174523c489f3ac2029949065d5314fe6e3d30545a6c10c5a79173f4b7055ed60272345e5aa415832618486e0ac856244" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-install-checks@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-install-checks.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-install-checks@8.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, lint, postlint, template-oss-apply, lintfix, snap, posttest, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-normalize-package-bin", "version": "5.0.0", "description": "Turn any flavor of allowable package.json bin into a normalized object", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0898b7392e092ec34c9abdaed3b38996172b3f109e39e3ffe31abaeda58d6a2e9335659b4eb94d0e097c35c14a5657012a9d7c18f8fe1336cd220ac17d986c6a" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-normalize-package-bin@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-normalize-package-bin.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-normalize-package-bin@5.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, snap, lint, postlint, template-oss-apply, lintfix, posttest, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-package-arg", "version": "13.0.2", "description": "Parse the things that can be arguments to `npm install`", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "21c882137498dee13ce0b77c599536de000f3d5f6b218a1de05fab73ebc9ee1edcc0026df5593a4d5b0aeb4af2ed48f74914b76ea451206b93a7d615964e9634" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-package-arg@13.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-package-arg" }, { "type": "vcs", "url": "git+https://github.com/npm/npm-package-arg.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-package-arg@13.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, snap, npmclilint, lint, lintfix, posttest, postsnap, postlint, template-oss-apply, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-pick-manifest", "version": "11.0.3", "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6eecf209f7a8198fcfc4aaa606a9f521426b667522d555494dd49244f188eb4b49754854a1240586cd33c9c26890374ece741e9ed82ba5ff0b6b2107cb2625a9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-pick-manifest@11.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-pick-manifest.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-pick-manifest@11.0.3", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "coverage, lint, test, posttest, postlint, lintfix, snap, template-oss-apply, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "2.0.2", "description": "walk paths fast and efficiently", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dcefe2555b0900fb0e9e9c1621e0fe77acffecf9aa029c9078f52d0a77636ad8fff48e4bca51efb79aa5b856814f7239877af57a37d1d39e9cf850aff8d9cd5e" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-scurry@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@2.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, typedoc, bench" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.7", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a9c26ef3c436216a89b030f9dbd24a31dc069bf76f2275b81ef427470887f49b62849bf318eb1c0ed1c4df1d6904a794393cac43c91598b9c9da426eef285c18" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.7", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:scripts", "value": "lint, mocha, test, test:ci, test:cover" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "proc-log", "version": "6.1.0", "description": "just emit 'log' events on the process object", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "886f866257517f6050d140d401de8943f470cda432ea65e6b24fc8ce56326a5e00e12345c39e0c787e3fb4b905e08e56a161bd490c2ea96cd2f7d8da1501c1b9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proc-log@6.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/proc-log.git" } ], "type": "library", "bom-ref": "pkg:npm/proc-log@6.1.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "test, snap, posttest, postsnap, lint, postlint, lintfix, template-oss-apply, eslint" }, { "name": "ImportedModules", "value": "proc-log" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ], "occurrences": [ { "location": "lib/enforce-clean.js", "line": 2 }, { "location": "lib/version.js", "line": 11 } ] }, "tags": [ "emit" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "63bfca0ec6fc2e3a28669c1aa86cae94ee8342592c8029dc7211c693eb19218e1206f52870c044147e54af57c8e1d57e26f974c3a723bee71a222e34a6e462a0" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:bin", "value": "semver" }, { "name": "cdx:npm:scripts", "value": "test, snap, lint, postlint, lintfix, posttest, template-oss-apply, eslint" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ], "occurrences": [ { "location": "lib/retrieve-tag.js", "line": 2 }, { "location": "lib/version.js", "line": 4 } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.5.0", "description": "list of SPDX standard license exceptions", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3" } ], "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.5.0", "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.5.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "build, latest" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "4.0.0", "description": "parse SPDX license expressions", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0a5c9ae492228ffec2e9b451db6fad9c65db73854a9626ca4958f6887bd5797e62316eecd5221096abbaf7d26438324922187fa54bbc2f4fd52e1f317e50fe2d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@4.0.0", "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@4.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "lint, test:readme, test:suite, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.23", "description": "A list of SPDX license identifiers", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0962dc0821fb54bbb5dd380e1feafca753bf667c21aaffdd6dbea5a96cbaec6fa94f590799e0fff95dfa0156ffbeaf10308430552849e92b25e453e1d1fb9277" } ], "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.23", "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.23", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "build, latest, pretest, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "", "name": "tar", "version": "7.5.22", "description": "tar for node", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3053bf433bed00e9896e484e6824ef6c670537d2fd6fe26e9c8b03c1a2a58d239d70b31e6b7349d64f54b33feb8dd7d25d3ab875fcdf792ed6e29e1838000778" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@7.5.22", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@7.5.22", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "genparse, snap, test, pretest, presnap, prepare, preversion, postversion, prepublishOnly, format, typedoc, lint, postsnap, postlint" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c1747f758a5ca8a99f5a911d66388a24ec023459dd0f40cc9eb5bf7188d51adb449017d581c2c51e836b963e3b9a339589cf72c8dbbae5a96c805e0d4324dada" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "bench, bench:setup, build, check, check:fix, format, lint, test, test:coverage, test:only, typecheck" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "group": "", "name": "undici", "version": "6.28.1", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cd6a5d4d50f9e07e3c088c9b2f4ad6437ba4a5bf5ddb7c0cede1f946d7dd99e3fbd1c587363b5fa3b3f8bd95fee42a0370ee772783eee6e5e9ee535f8dce8344" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@6.28.1", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@6.28.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "build:node, prebuild:wasm, build:wasm, lint, lint:fix, test, test:javascript, test:javascript:withoutintl, test:busboy, test:cache, test:cookies, test:eventsource, test:eventsource:nobuild, test:fuzzing, test:fetch, test:fetch:nobuild, test:h2, test:h2:core, test:h2:fetch, test:interceptors, test:jest, test:unit, test:node-fetch, test:node-test, test:tdd, test:tdd:node-test, test:typescript, test:webidl, test:websocket, test:websocket:autobahn, test:websocket:autobahn:report, test:wpt, test:wpt:withoutintl, coverage, coverage:ci, coverage:clean, coverage:report, coverage:report:ci, bench, serve:website, prepare" }, { "name": "cdx:npm:buildScripts", "value": "build:node, build:wasm" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "validate-npm-package-name", "version": "7.0.2", "description": "Give me a string and I'll tell you if it's a valid npm package name", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8550c8070b11aee4fbdcf6caeee3f979b52df9ecc4b429b3673dc5e7d052af617a39516727fea1f258aebdd2eb43cf179a793affec461aeabea46f56c13bb2dc" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-name@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/validate-npm-package-name" }, { "type": "vcs", "url": "git+https://github.com/npm/validate-npm-package-name.git" } ], "type": "library", "bom-ref": "pkg:npm/validate-npm-package-name@7.0.2", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "builtin-fixture, cov:test, test:code, test:style, test, lint, postlint, template-oss-apply, lintfix, snap, posttest, eslint, test:node20, test:cover" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "which", "version": "6.0.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a062dee3a308ac246a5fbcad3d47fae84018bdd78c219627dd66a872aa8a640c6b06992a1df2ffaaf4f227f6d3939f80a870a35e6aefdc2116832dfaf3385152" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@6.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@6.0.1", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:bin", "value": "node-which" }, { "name": "cdx:npm:scripts", "value": "test, lint, postlint, template-oss-apply, lintfix, snap, posttest, eslint" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "5.0.0", "description": "Yet Another Linked List", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "620bd44dfc2ac9ced45d532b07e4889ac5584a64d2f17fed4abb5d35930898cfa7efe413ae2457c978a6d2606b4d735eab3545d0a5868073de8b2562145acd0f" } ], "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@5.0.0", "properties": [ { "name": "SrcFile", "value": "pnpm-lock.yaml" }, { "name": "cdx:npm:scripts", "value": "preversion, postversion, prepublishOnly, prepare, pretest, presnap, test, snap, format, typedoc" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "pnpm-lock.yaml" } ], "concludedValue": "pnpm-lock.yaml" } ] } } ], "dependencies": [ { "ref": "pkg:npm/libnpmversion@8.0.4", "dependsOn": [ "pkg:npm/@npmcli/git@7.0.2", "pkg:npm/@npmcli/run-script@10.0.4", "pkg:npm/json-parse-even-better-errors@5.0.0", "pkg:npm/proc-log@6.1.0", "pkg:npm/semver@7.8.5" ] }, { "ref": "pkg:npm/@gar/promise-retry@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "dependsOn": [ "pkg:npm/minipass@7.1.3" ] }, { "ref": "pkg:npm/@npmcli/git@7.0.2", "dependsOn": [ "pkg:npm/@gar/promise-retry@1.0.3", "pkg:npm/@npmcli/promise-spawn@9.0.1", "pkg:npm/ini@6.0.0", "pkg:npm/lru-cache@11.5.2", "pkg:npm/npm-pick-manifest@11.0.3", "pkg:npm/proc-log@6.1.0", "pkg:npm/semver@7.8.5", "pkg:npm/which@6.0.1" ] }, { "ref": "pkg:npm/@npmcli/node-gyp@5.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@npmcli/package-json@7.0.5", "dependsOn": [ "pkg:npm/@npmcli/git@7.0.2", "pkg:npm/glob@13.0.6", "pkg:npm/hosted-git-info@9.0.3", "pkg:npm/json-parse-even-better-errors@5.0.0", "pkg:npm/proc-log@6.1.0", "pkg:npm/semver@7.8.5", "pkg:npm/spdx-expression-parse@4.0.0" ] }, { "ref": "pkg:npm/@npmcli/promise-spawn@9.0.1", "dependsOn": [ "pkg:npm/which@6.0.1" ] }, { "ref": "pkg:npm/@npmcli/run-script@10.0.4", "dependsOn": [ "pkg:npm/@npmcli/node-gyp@5.0.0", "pkg:npm/@npmcli/package-json@7.0.5", "pkg:npm/@npmcli/promise-spawn@9.0.1", "pkg:npm/node-gyp@12.4.0", "pkg:npm/proc-log@6.1.0" ] }, { "ref": "pkg:npm/abbrev@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@4.0.4", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@5.0.9", "dependsOn": [ "pkg:npm/balanced-match@4.0.4" ] }, { "ref": "pkg:npm/chownr@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/env-paths@2.2.1", "dependsOn": [] }, { "ref": "pkg:npm/exponential-backoff@3.1.3", "dependsOn": [] }, { "ref": "pkg:npm/fdir@6.5.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@13.0.6", "dependsOn": [ "pkg:npm/minimatch@10.2.6", "pkg:npm/minipass@7.1.3", "pkg:npm/path-scurry@2.0.2" ] }, { "ref": "pkg:npm/graceful-fs@4.2.11", "dependsOn": [] }, { "ref": "pkg:npm/hosted-git-info@9.0.3", "dependsOn": [ "pkg:npm/lru-cache@11.5.2" ] }, { "ref": "pkg:npm/ini@6.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isexe@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/json-parse-even-better-errors@5.0.0", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@11.5.2", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@10.2.6", "dependsOn": [ "pkg:npm/brace-expansion@5.0.9" ] }, { "ref": "pkg:npm/minipass@7.1.3", "dependsOn": [] }, { "ref": "pkg:npm/minizlib@3.1.0", "dependsOn": [ "pkg:npm/minipass@7.1.3" ] }, { "ref": "pkg:npm/node-gyp@12.4.0", "dependsOn": [ "pkg:npm/env-paths@2.2.1", "pkg:npm/exponential-backoff@3.1.3", "pkg:npm/graceful-fs@4.2.11", "pkg:npm/nopt@9.0.0", "pkg:npm/proc-log@6.1.0", "pkg:npm/semver@7.8.5", "pkg:npm/tar@7.5.22", "pkg:npm/tinyglobby@0.2.17", "pkg:npm/undici@6.28.1", "pkg:npm/which@6.0.1" ] }, { "ref": "pkg:npm/nopt@9.0.0", "dependsOn": [ "pkg:npm/abbrev@4.0.0" ] }, { "ref": "pkg:npm/npm-install-checks@8.0.0", "dependsOn": [ "pkg:npm/semver@7.8.5" ] }, { "ref": "pkg:npm/npm-normalize-package-bin@5.0.0", "dependsOn": [] }, { "ref": "pkg:npm/npm-package-arg@13.0.2", "dependsOn": [ "pkg:npm/hosted-git-info@9.0.3", "pkg:npm/proc-log@6.1.0", "pkg:npm/semver@7.8.5", "pkg:npm/validate-npm-package-name@7.0.2" ] }, { "ref": "pkg:npm/npm-pick-manifest@11.0.3", "dependsOn": [ "pkg:npm/npm-install-checks@8.0.0", "pkg:npm/npm-normalize-package-bin@5.0.0", "pkg:npm/npm-package-arg@13.0.2", "pkg:npm/semver@7.8.5" ] }, { "ref": "pkg:npm/path-scurry@2.0.2", "dependsOn": [ "pkg:npm/lru-cache@11.5.2", "pkg:npm/minipass@7.1.3" ] }, { "ref": "pkg:npm/picomatch@4.0.7", "dependsOn": [] }, { "ref": "pkg:npm/proc-log@6.1.0", "dependsOn": [] }, { "ref": "pkg:npm/semver@7.8.5", "dependsOn": [] }, { "ref": "pkg:npm/spdx-exceptions@2.5.0", "dependsOn": [] }, { "ref": "pkg:npm/spdx-expression-parse@4.0.0", "dependsOn": [ "pkg:npm/spdx-exceptions@2.5.0", "pkg:npm/spdx-license-ids@3.0.23" ] }, { "ref": "pkg:npm/spdx-license-ids@3.0.23", "dependsOn": [] }, { "ref": "pkg:npm/tar@7.5.22", "dependsOn": [ "pkg:npm/@isaacs/fs-minipass@4.0.1", "pkg:npm/chownr@3.0.0", "pkg:npm/minipass@7.1.3", "pkg:npm/minizlib@3.1.0", "pkg:npm/yallist@5.0.0" ] }, { "ref": "pkg:npm/tinyglobby@0.2.17", "dependsOn": [ "pkg:npm/fdir@6.5.0", "pkg:npm/picomatch@4.0.7" ] }, { "ref": "pkg:npm/undici@6.28.1", "dependsOn": [] }, { "ref": "pkg:npm/validate-npm-package-name@7.0.2", "dependsOn": [] }, { "ref": "pkg:npm/which@6.0.1", "dependsOn": [ "pkg:npm/isexe@4.0.0" ] }, { "ref": "pkg:npm/yallist@5.0.0", "dependsOn": [] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/libnpmversion@8.0.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-09T18:14:55Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'libnpmversion' with version '8.0.4'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: pnpm-lock.yaml." } ] }