{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:b75c176e-45f0-49d7-a595-6b2814fadb7d", "version": 1, "metadata": { "timestamp": "2026-09-10T05:41:48Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "edge-bundler", "group": "@netlify", "version": "12.3.1", "description": "Intelligently prepare Netlify Edge Functions for deployment", "purl": "pkg:npm/%40netlify/edge-bundler@12.3.1", "bom-ref": "pkg:npm/@netlify/edge-bundler@12.3.1", "author": "Netlify Inc.", "properties": [ { "name": "cdx:npm:scripts", "value": "build, build:dev, prepack, test, test:dev, test:ci, test:dev:vitest, test:dev:vitest:watch, test:dev:deno, test:ci:vitest, test:ci:deno, test:integration, vendor" }, { "name": "cdx:npm:buildScripts", "value": "build, build:dev, test:dev:vitest:watch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/netlify/build.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@pt-committee\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/ansi-styles/package.json\\nnode_modules/archiver-utils/node_modules/readable-stream/package.json\\nnode_modules/archiver-utils/package.json\\nnode_modules/archiver/package.json\\nnode_modules/chalk/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/compress-commons/package.json\\nnode_modules/crc32-stream/package.json\\nnode_modules/execa/package.json\\nnode_modules/human-signals/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/isarray/package.json\\nnode_modules/npm-run-path/package.json\\nnode_modules/onetime/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-final-newline/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/tar-stream/package.json\\nnode_modules/zip-stream/node_modules/archiver-utils/package.json\\nnode_modules/zip-stream/package.json\\ntest/fixtures/imports_npm_module/node_modules/child-1/package.json\\ntest/fixtures/imports_npm_module/node_modules/child-2/package.json\\ntest/fixtures/imports_npm_module/node_modules/grandchild-1/package.json\\ntest/fixtures/imports_npm_module/node_modules/parent-1/package.json\\ntest/fixtures/imports_npm_module/node_modules/parent-2/package.json\\ntest/fixtures/imports_npm_module/node_modules/parent-3/package.json\\ntest/fixtures/monorepo_npm_module/node_modules/child-1/package.json\\ntest/fixtures/monorepo_npm_module/node_modules/child-2/package.json\\ntest/fixtures/monorepo_npm_module/node_modules/grandchild-1/package.json\\ntest/fixtures/monorepo_npm_module/node_modules/parent-1/package.json\\ntest/fixtures/monorepo_npm_module/node_modules/parent-2/package.json\\ntest/fixtures/monorepo_npm_module/node_modules/parent-3/package.json\\ntest/fixtures/serve_test/node_modules/@pt-committee/identidade/package.json\\ntest/fixtures/serve_test/node_modules/@types/pt-committee__identidade/package.json\\ntest/fixtures/serve_test/node_modules/dictionary/package.json\\ntest/fixtures/serve_test/node_modules/id/package.json\\ntest/fixtures/tsx/node_modules/react/package.json" } ] }, "components": [ { "group": "", "name": "react", "version": "", "scope": "optional", "purl": "pkg:npm/react", "type": "framework", "bom-ref": "pkg:npm/react", "properties": [ { "name": "SrcFile", "value": "test/fixtures/tsx/node_modules/react/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/tsx/node_modules/react/package.json" } ], "concludedValue": "test/fixtures/tsx/node_modules/react/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "id", "version": "", "scope": "optional", "purl": "pkg:npm/id", "type": "library", "bom-ref": "pkg:npm/id", "properties": [ { "name": "SrcFile", "value": "test/fixtures/serve_test/node_modules/id/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/serve_test/node_modules/id/package.json" } ], "concludedValue": "test/fixtures/serve_test/node_modules/id/package.json" } ] } }, { "group": "", "name": "dictionary", "version": "", "scope": "optional", "purl": "pkg:npm/dictionary", "type": "library", "bom-ref": "pkg:npm/dictionary", "properties": [ { "name": "SrcFile", "value": "test/fixtures/serve_test/node_modules/dictionary/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/serve_test/node_modules/dictionary/package.json" } ], "concludedValue": "test/fixtures/serve_test/node_modules/dictionary/package.json" } ] } }, { "group": "@types", "name": "pt-committee__identidade", "version": "", "scope": "excluded", "purl": "pkg:npm/%40types/pt-committee__identidade", "type": "library", "bom-ref": "pkg:npm/@types/pt-committee__identidade", "properties": [ { "name": "SrcFile", "value": "test/fixtures/serve_test/node_modules/@types/pt-committee__identidade/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/serve_test/node_modules/@types/pt-committee__identidade/package.json" } ], "concludedValue": "test/fixtures/serve_test/node_modules/@types/pt-committee__identidade/package.json" } ] } }, { "group": "@pt-committee", "name": "identidade", "version": "", "scope": "optional", "purl": "pkg:npm/%40pt-committee/identidade", "type": "library", "bom-ref": "pkg:npm/@pt-committee/identidade", "properties": [ { "name": "SrcFile", "value": "test/fixtures/serve_test/node_modules/@pt-committee/identidade/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/serve_test/node_modules/@pt-committee/identidade/package.json" } ], "concludedValue": "test/fixtures/serve_test/node_modules/@pt-committee/identidade/package.json" } ] } }, { "group": "", "name": "parent-3", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/parent-3@1.0.0", "type": "library", "bom-ref": "pkg:npm/parent-3@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/monorepo_npm_module/node_modules/parent-3/package.json" }, { "name": "SrcFile", "value": "test/fixtures/imports_npm_module/node_modules/parent-3/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/imports_npm_module/node_modules/parent-3/package.json" } ], "concludedValue": "test/fixtures/imports_npm_module/node_modules/parent-3/package.json" } ] } }, { "group": "", "name": "parent-2", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/parent-2@1.0.0", "type": "library", "bom-ref": "pkg:npm/parent-2@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/monorepo_npm_module/node_modules/parent-2/package.json" }, { "name": "SrcFile", "value": "test/fixtures/imports_npm_module/node_modules/parent-2/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/imports_npm_module/node_modules/parent-2/package.json" } ], "concludedValue": "test/fixtures/imports_npm_module/node_modules/parent-2/package.json" } ] } }, { "group": "", "name": "parent-1", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/parent-1@1.0.0", "type": "library", "bom-ref": "pkg:npm/parent-1@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/monorepo_npm_module/node_modules/parent-1/package.json" }, { "name": "SrcFile", "value": "test/fixtures/imports_npm_module/node_modules/parent-1/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/imports_npm_module/node_modules/parent-1/package.json" } ], "concludedValue": "test/fixtures/imports_npm_module/node_modules/parent-1/package.json" } ] } }, { "group": "", "name": "grandchild-1", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/grandchild-1@1.0.0", "type": "library", "bom-ref": "pkg:npm/grandchild-1@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/monorepo_npm_module/node_modules/grandchild-1/package.json" }, { "name": "SrcFile", "value": "test/fixtures/imports_npm_module/node_modules/grandchild-1/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/imports_npm_module/node_modules/grandchild-1/package.json" } ], "concludedValue": "test/fixtures/imports_npm_module/node_modules/grandchild-1/package.json" } ] } }, { "group": "", "name": "child-2", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/child-2@1.0.0", "type": "framework", "bom-ref": "pkg:npm/child-2@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/monorepo_npm_module/node_modules/child-2/package.json" }, { "name": "SrcFile", "value": "test/fixtures/imports_npm_module/node_modules/child-2/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/imports_npm_module/node_modules/child-2/package.json" } ], "concludedValue": "test/fixtures/imports_npm_module/node_modules/child-2/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "child-1", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/child-1@1.0.0", "type": "framework", "bom-ref": "pkg:npm/child-1@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/monorepo_npm_module/node_modules/child-1/package.json" }, { "name": "SrcFile", "value": "test/fixtures/imports_npm_module/node_modules/child-1/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/imports_npm_module/node_modules/child-1/package.json" } ], "concludedValue": "test/fixtures/imports_npm_module/node_modules/child-1/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Chris Talkington (http://christalkington.com/)" } ], "group": "", "name": "zip-stream", "version": "4.1.1", "description": "a streaming zip archive generator.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zip-stream@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/archiverjs/node-zip-stream" }, { "type": "vcs", "url": "https://github.com/archiverjs/node-zip-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/zip-stream@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/zip-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zip-stream/package.json" } ], "concludedValue": "node_modules/zip-stream/package.json" } ] } }, { "authors": [ { "name": "Chris Talkington (http://christalkington.com/)" } ], "group": "", "name": "archiver-utils", "version": "3.0.4", "description": "utility functions for archiver", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archiver-utils@3.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/archiverjs/archiver-utils#readme" }, { "type": "vcs", "url": "https://github.com/archiverjs/archiver-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/archiver-utils@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/zip-stream/node_modules/archiver-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zip-stream/node_modules/archiver-utils/package.json" } ], "concludedValue": "node_modules/zip-stream/node_modules/archiver-utils/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "tar-stream", "version": "2.2.0", "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar-stream@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/tar-stream" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/tar-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/tar-stream@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-stream/package.json" } ], "concludedValue": "node_modules/tar-stream/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-final-newline", "version": "3.0.0", "description": "Strip the final newline character from a string/buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-final-newline@3.0.0", "type": "library", "bom-ref": "pkg:npm/strip-final-newline@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-final-newline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-final-newline/package.json" } ], "concludedValue": "node_modules/strip-final-newline/package.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "onetime", "version": "6.0.0", "description": "Ensure a function is only called once", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/onetime@6.0.0", "type": "library", "bom-ref": "pkg:npm/onetime@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/onetime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/onetime/package.json" } ], "concludedValue": "node_modules/onetime/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "npm-run-path", "version": "5.3.0", "description": "Get your PATH prepended with locally installed binaries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-path@5.3.0", "type": "library", "bom-ref": "pkg:npm/npm-run-path@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/package.json" } ], "concludedValue": "node_modules/npm-run-path/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "3.0.0", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-stream@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "ehmicky (https://github.com/ehmicky)" } ], "group": "", "name": "human-signals", "version": "3.0.1", "description": "Human-friendly process signals", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/human-signals@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://git.io/JeluP" } ], "type": "library", "bom-ref": "pkg:npm/human-signals@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/human-signals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/human-signals/package.json" } ], "concludedValue": "node_modules/human-signals/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "6.1.0", "description": "Process execution for humans", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@6.1.0", "type": "library", "bom-ref": "pkg:npm/execa@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "ImportedModules", "value": "execa,execa/execa,ExecaChildProcess,execa/ExecaChildProcess,Options,execa/Options,ExecaError,execa/ExecaError" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ], "occurrences": [ { "location": "dist/node/bridge.js", "line": 4 }, { "location": "dist/node/bridge.js", "line": 50 }, { "location": "dist/node/bridge.js", "line": 99 }, { "location": "node/bridge.ts", "line": 5 }, { "location": "node/bridge.ts", "line": 104 }, { "location": "node/bridge.ts", "line": 176 }, { "location": "node/bundle_error.ts", "line": 1 }, { "location": "node/server/util.ts", "line": 3 } ] } }, { "authors": [ { "name": "Chris Talkington (http://christalkington.com/)" } ], "group": "", "name": "crc32-stream", "version": "4.0.3", "description": "a streaming CRC32 checksumer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crc32-stream@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/archiverjs/node-crc32-stream" }, { "type": "vcs", "url": "https://github.com/archiverjs/node-crc32-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/crc32-stream@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/crc32-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crc32-stream/package.json" } ], "concludedValue": "node_modules/crc32-stream/package.json" } ] } }, { "authors": [ { "name": "Chris Talkington (http://christalkington.com/)" } ], "group": "", "name": "compress-commons", "version": "4.1.2", "description": "a library that defines a common interface for working with archive formats within node", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/compress-commons@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/archiverjs/node-compress-commons" }, { "type": "vcs", "url": "https://github.com/archiverjs/node-compress-commons.git" } ], "type": "library", "bom-ref": "pkg:npm/compress-commons@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/compress-commons/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/compress-commons/package.json" } ], "concludedValue": "node_modules/compress-commons/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Chris Talkington (http://christalkington.com/)" } ], "group": "", "name": "archiver-utils", "version": "2.1.0", "description": "utility functions for archiver", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archiver-utils@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/archiverjs/archiver-utils#readme" }, { "type": "vcs", "url": "https://github.com/archiverjs/archiver-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/archiver-utils@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/archiver-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/archiver-utils/package.json" } ], "concludedValue": "node_modules/archiver-utils/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/archiver-utils/node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/archiver-utils/node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/archiver-utils/node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Chris Talkington (http://christalkington.com/)" } ], "group": "", "name": "archiver", "version": "5.3.2", "description": "a streaming interface for archive generation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archiver@5.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/archiverjs/node-archiver" }, { "type": "vcs", "url": "https://github.com/archiverjs/node-archiver.git" } ], "type": "library", "bom-ref": "pkg:npm/archiver@5.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/archiver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/archiver/package.json" } ], "concludedValue": "node_modules/archiver/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@netlify/edge-bundler@12.3.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-10T05:41:48Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'edge-bundler' with version '12.3.1'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 38 source files." } ] }