{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d2576087-ed68-4bd5-8ef0-c0ed561cc1c9", "version": 1, "metadata": { "timestamp": "2026-09-09T12:12:56Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "browsers", "group": "@puppeteer", "version": "3.0.6", "description": "Download and launch browsers", "purl": "pkg:npm/%40puppeteer/browsers@3.0.6", "bom-ref": "pkg:npm/@puppeteer/browsers@3.0.6", "author": "The Chromium Authors", "properties": [ { "name": "cdx:npm:bin", "value": "lib/main-cli.js" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build:docs, build, build:test, clean, test" }, { "name": "cdx:npm:buildScripts", "value": "build:docs, build, build:test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/puppeteer/puppeteer/tree/main/packages/browsers" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@types/yargs/node_modules/@types/yargs-parser/package.json\\nnode_modules/@types/yargs/package.json\\nnode_modules/@types/yauzl/package.json\\nnode_modules/debug/node_modules/ms/package.json\\nnode_modules/debug/package.json\\nnode_modules/modern-tar/package.json\\nnode_modules/proxy-agent/node_modules/agent-base/package.json\\nnode_modules/proxy-agent/node_modules/http-proxy-agent/package.json\\nnode_modules/proxy-agent/node_modules/https-proxy-agent/package.json\\nnode_modules/proxy-agent/node_modules/lru-cache/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/basic-ftp/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/data-uri-to-buffer/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/node_modules/tslib/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/estraverse/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/esutils/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/source-map/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/esprima/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/netmask/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/quickjs-wasi/package.json\\nnode_modules/proxy-agent/node_modules/pac-proxy-agent/package.json\\nnode_modules/proxy-agent/node_modules/proxy-from-env/package.json\\nnode_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/ip-address/package.json\\nnode_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/smart-buffer/package.json\\nnode_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/package.json\\nnode_modules/proxy-agent/node_modules/socks-proxy-agent/package.json\\nnode_modules/proxy-agent/package.json\\nnode_modules/yauzl/node_modules/pend/package.json\\nnode_modules/yauzl/package.json" } ] }, "components": [ { "authors": [ { "name": "Josh Wolfe " } ], "group": "", "name": "yauzl", "version": "3.4.0", "description": "yet another unzip library for node", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yauzl@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thejoshwolfe/yauzl" }, { "type": "vcs", "url": "git+https://github.com/thejoshwolfe/yauzl.git" } ], "type": "library", "bom-ref": "pkg:npm/yauzl@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yauzl/package.json" }, { "name": "ImportedModules", "value": "yauzl,Entry,yauzl/Entry,Options,yauzl/Options,ZipFile,yauzl/ZipFile" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yauzl/package.json" } ], "concludedValue": "node_modules/yauzl/package.json" } ], "occurrences": [ { "location": "lib/fileUtil.js", "line": 186 }, { "location": "src/fileUtil.ts", "line": 17 }, { "location": "src/fileUtil.ts", "line": 225 } ] } }, { "authors": [ { "name": "Andrew Kelley " } ], "group": "", "name": "pend", "version": "1.2.0", "description": "dead-simple optimistic async helper", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pend@1.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/andrewrk/node-pend.git" } ], "type": "library", "bom-ref": "pkg:npm/pend@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yauzl/node_modules/pend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yauzl/node_modules/pend/package.json" } ], "concludedValue": "node_modules/yauzl/node_modules/pend/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "proxy-agent", "version": "8.0.1", "description": "Maps proxy protocols to `http.Agent` implementations", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-agent@8.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-agent@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/package.json" }, { "name": "ImportedModules", "value": "proxy-agent" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/package.json" } ], "concludedValue": "node_modules/proxy-agent/package.json" } ], "occurrences": [ { "location": "lib/httpUtil.js", "line": 31 }, { "location": "src/httpUtil.ts", "line": 44 } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "socks-proxy-agent", "version": "10.0.0", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks-proxy-agent@10.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/socks-proxy-agent@10.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/socks-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "socks", "version": "2.8.7", "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks@2.8.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks.git" } ], "type": "library", "bom-ref": "pkg:npm/socks@2.8.7", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "smart-buffer", "version": "4.2.0", "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/smart-buffer@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/smart-buffer@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/smart-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/smart-buffer/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/smart-buffer/package.json" } ] } }, { "authors": [ { "name": "Beau Gunderson (https://beaugunderson.com/)" } ], "group": "", "name": "ip-address", "version": "10.2.0", "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ip-address@10.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/beaugunderson/ip-address.git" } ], "type": "library", "bom-ref": "pkg:npm/ip-address@10.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/ip-address/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/ip-address/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/socks-proxy-agent/node_modules/socks/node_modules/ip-address/package.json" } ] } }, { "authors": [ { "name": "Rob Wu (https://robwu.nl/)" } ], "group": "", "name": "proxy-from-env", "version": "2.1.0", "description": "Offers getProxyForUrl to get the proxy URL for a URL, respecting the *_PROXY (e.g. HTTP_PROXY) and NO_PROXY environment variables.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-from-env@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rob--W/proxy-from-env#readme" }, { "type": "vcs", "url": "git+https://github.com/Rob--W/proxy-from-env.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-from-env@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/proxy-from-env/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/proxy-from-env/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/proxy-from-env/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "pac-proxy-agent", "version": "9.0.1", "description": "A PAC file proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pac-proxy-agent@9.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/pac-proxy-agent@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/package.json" } ] } }, { "group": "", "name": "quickjs-wasi", "version": "2.2.0", "description": "Snapshotable JavaScript runtime via WebAssembly. QuickJS-NG compiled to WASM with snapshot/restore support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/quickjs-wasi@2.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/vercel-labs/quickjs-wasi.git" } ], "type": "library", "bom-ref": "pkg:npm/quickjs-wasi@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/quickjs-wasi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/quickjs-wasi/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/quickjs-wasi/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "pac-resolver", "version": "9.0.1", "description": "Generates an asynchronous resolver function from a PAC file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pac-resolver@9.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/pac-resolver@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/package.json" } ] } }, { "authors": [ { "name": "Olivier Poitrey " } ], "group": "", "name": "netmask", "version": "2.1.1", "description": "Parse and lookup IP network blocks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/netmask@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rs/node-netmask" }, { "type": "vcs", "url": "git://github.com/rs/node-netmask.git" } ], "type": "library", "bom-ref": "pkg:npm/netmask@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/netmask/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/netmask/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/netmask/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "degenerator", "version": "7.0.1", "description": "Compiles sync functions into async generator functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/degenerator@7.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/degenerator@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "4.0.1", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/esprima/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/esprima/package.json" } ] } }, { "group": "", "name": "escodegen", "version": "2.1.0", "description": "ECMAScript code generator", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escodegen@2.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/estools/escodegen" }, { "type": "vcs", "url": "http://github.com/estools/escodegen.git" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/source-map/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/source-map/package.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "description": "utility box for ECMAScript language tools", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esutils" }, { "type": "vcs", "url": "http://github.com/estools/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/esutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/esutils/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/esutils/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "5.3.0", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@5.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/escodegen/node_modules/estraverse/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "ast-types", "version": "0.13.4", "description": "Esprima-compatible implementation of the Mozilla JS Parser API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ast-types@0.13.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/ast-types" }, { "type": "vcs", "url": "git://github.com/benjamn/ast-types.git" } ], "type": "library", "bom-ref": "pkg:npm/ast-types@0.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "tslib", "version": "2.8.1", "description": "Runtime library for TypeScript helper functions", "scope": "optional", "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@2.8.1", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/tslib.git" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/node_modules/tslib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/node_modules/tslib/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/pac-resolver/node_modules/degenerator/node_modules/ast-types/node_modules/tslib/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "get-uri", "version": "8.0.0", "description": "Returns a `stream.Readable` from a URI string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-uri@8.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/get-uri@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "data-uri-to-buffer", "version": "8.0.0", "description": "Create an ArrayBuffer instance from a Data URI string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/data-uri-to-buffer@8.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/data-uri-to-buffer@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/data-uri-to-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/data-uri-to-buffer/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/data-uri-to-buffer/package.json" } ] } }, { "authors": [ { "name": "Patrick Juchli " } ], "group": "", "name": "basic-ftp", "version": "5.3.1", "description": "FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/basic-ftp@5.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/patrickjuchli/basic-ftp.git" } ], "type": "library", "bom-ref": "pkg:npm/basic-ftp@5.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/basic-ftp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/basic-ftp/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/pac-proxy-agent/node_modules/get-uri/node_modules/basic-ftp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "7.18.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@7.18.3", "type": "library", "bom-ref": "pkg:npm/lru-cache@7.18.3", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "9.0.0", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "9.0.0", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-proxy-agent@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/http-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "9.0.0", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agent-base@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent/node_modules/agent-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent/node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/proxy-agent/node_modules/agent-base/package.json" } ] } }, { "authors": [ { "name": "Ayuhito " } ], "group": "", "name": "modern-tar", "version": "0.7.6", "description": "Zero dependency streaming tar parser and writer for JavaScript.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/modern-tar@0.7.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ayuhito/modern-tar" }, { "type": "vcs", "url": "git+https://github.com/ayuhito/modern-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/modern-tar@0.7.6", "properties": [ { "name": "SrcFile", "value": "node_modules/modern-tar/package.json" }, { "name": "ImportedModules", "value": "modern-tar/fs" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/modern-tar/package.json" } ], "concludedValue": "node_modules/modern-tar/package.json" } ], "occurrences": [ { "location": "lib/fileUtil.js", "line": 104 }, { "location": "src/fileUtil.ts", "line": 123 } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/node_modules/ms/package.json" } ], "concludedValue": "node_modules/debug/node_modules/ms/package.json" } ] } }, { "group": "@types", "name": "yauzl", "version": "3.4.0", "description": "TypeScript definitions for yauzl", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/yauzl@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yauzl" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/yauzl@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/yauzl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/yauzl/package.json" } ], "concludedValue": "node_modules/@types/yauzl/package.json" } ] } }, { "group": "@types", "name": "yargs", "version": "17.0.35", "description": "TypeScript definitions for yargs", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/yargs@17.0.35", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/yargs@17.0.35", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/yargs/package.json" } ], "concludedValue": "node_modules/@types/yargs/package.json" } ] } }, { "group": "@types", "name": "yargs-parser", "version": "21.0.3", "description": "TypeScript definitions for yargs-parser", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/yargs-parser@21.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs-parser" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/yargs-parser@21.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/yargs/node_modules/@types/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/yargs/node_modules/@types/yargs-parser/package.json" } ], "concludedValue": "node_modules/@types/yargs/node_modules/@types/yargs-parser/package.json" } ] }, "tags": [ "parse" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@puppeteer/browsers@3.0.6" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-09T12:12:56Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'browsers' with version '3.0.6'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 33 source files." } ] }