{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:a937e4e2-e685-4290-be35-6ef101f75c0a", "version": 1, "metadata": { "timestamp": "2026-09-11T09:03:53Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "remix-run-node", "group": "", "version": "1.19.3-tuxcare.2", "description": "Node.js platform abstractions for Remix", "purl": "pkg:npm/remix-run-node@1.19.3-tuxcare.2", "bom-ref": "pkg:npm/remix-run-node@1.19.3-tuxcare.2", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/remix-run/remix" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@remix-run" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@remix-run/server-runtime/package.json\\nnode_modules/source-map/package.json" } ] }, "components": [ { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.7.3", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "group": "@remix-run", "name": "server-runtime", "version": "1.19.3", "description": "Server runtime for Remix", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40remix-run/server-runtime@1.19.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/remix-run/remix" } ], "type": "library", "bom-ref": "pkg:npm/@remix-run/server-runtime@1.19.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@remix-run/server-runtime/package.json" }, { "name": "ExportedModules", "value": "@remix-run/server-runtime,createRequestHandler,@remix-run/server-runtime/createRequestHandler,createSession,@remix-run/server-runtime/createSession,defer,@remix-run/server-runtime/defer,broadcastDevReady,@remix-run/server-runtime/broadcastDevReady,logDevReady,@remix-run/server-runtime/logDevReady,isCookie,@remix-run/server-runtime/isCookie,isSession,@remix-run/server-runtime/isSession,json,@remix-run/server-runtime/json,MaxPartSizeExceededError,@remix-run/server-runtime/MaxPartSizeExceededError,redirect,@remix-run/server-runtime/redirect,unstable_composeUploadHandlers,@remix-run/server-runtime/unstable_composeUploadHandlers,unstable_createMemoryUploadHandler,@remix-run/server-runtime/unstable_createMemoryUploadHandler,unstable_parseMultipartFormData,@remix-run/server-runtime/unstable_parseMultipartFormData,ActionArgs,@remix-run/server-runtime/ActionArgs,ActionFunction,@remix-run/server-runtime/ActionFunction,AppData,@remix-run/server-runtime/AppData,AppLoadContext,@remix-run/server-runtime/AppLoadContext,Cookie,@remix-run/server-runtime/Cookie,CookieOptions,@remix-run/server-runtime/CookieOptions,CookieParseOptions,@remix-run/server-runtime/CookieParseOptions,CookieSerializeOptions,@remix-run/server-runtime/CookieSerializeOptions,CookieSignatureOptions,@remix-run/server-runtime/CookieSignatureOptions,DataFunctionArgs,@remix-run/server-runtime/DataFunctionArgs,EntryContext,@remix-run/server-runtime/EntryContext,ErrorBoundaryComponent,@remix-run/server-runtime/ErrorBoundaryComponent,HandleDataRequestFunction,@remix-run/server-runtime/HandleDataRequestFunction,HandleDocumentRequestFunction,@remix-run/server-runtime/HandleDocumentRequestFunction,HeadersArgs,@remix-run/server-runtime/HeadersArgs,HeadersFunction,@remix-run/server-runtime/HeadersFunction,HtmlLinkDescriptor,@remix-run/server-runtime/HtmlLinkDescriptor,HtmlMetaDescriptor,@remix-run/server-runtime/HtmlMetaDescriptor,JsonFunction,@remix-run/server-runtime/JsonFunction,LinkDescriptor,@remix-run/server-runtime/LinkDescriptor,LinksFunction,@remix-run/server-runtime/LinksFunction,LoaderArgs,@remix-run/server-runtime/LoaderArgs,LoaderFunction,@remix-run/server-runtime/LoaderFunction,MemoryUploadHandlerFilterArgs,@remix-run/server-runtime/MemoryUploadHandlerFilterArgs,MemoryUploadHandlerOptions,@remix-run/server-runtime/MemoryUploadHandlerOptions,MetaDescriptor,@remix-run/server-runtime/MetaDescriptor,MetaFunction,@remix-run/server-runtime/MetaFunction,HandleErrorFunction,@remix-run/server-runtime/HandleErrorFunction,PageLinkDescriptor,@remix-run/server-runtime/PageLinkDescriptor,RequestHandler,@remix-run/server-runtime/RequestHandler,RouteComponent,@remix-run/server-runtime/RouteComponent,RouteHandle,@remix-run/server-runtime/RouteHandle,SerializeFrom,@remix-run/server-runtime/SerializeFrom,ServerBuild,@remix-run/server-runtime/ServerBuild,ServerEntryModule,@remix-run/server-runtime/ServerEntryModule,V2_MetaArgs,@remix-run/server-runtime/V2_MetaArgs,V2_MetaDescriptor,@remix-run/server-runtime/V2_MetaDescriptor,V2_HtmlMetaDescriptor,@remix-run/server-runtime/V2_HtmlMetaDescriptor,V2_MetaFunction,@remix-run/server-runtime/V2_MetaFunction,Session,@remix-run/server-runtime/Session,SessionData,@remix-run/server-runtime/SessionData,SessionIdStorageStrategy,@remix-run/server-runtime/SessionIdStorageStrategy,SessionStorage,@remix-run/server-runtime/SessionStorage,SignFunction,@remix-run/server-runtime/SignFunction,TypedDeferredData,@remix-run/server-runtime/TypedDeferredData,TypedResponse,@remix-run/server-runtime/TypedResponse,UnsignFunction,@remix-run/server-runtime/UnsignFunction,UploadHandler,@remix-run/server-runtime/UploadHandler,UploadHandlerPart,@remix-run/server-runtime/UploadHandlerPart" }, { "name": "ImportedModules", "value": "@remix-run/server-runtime,SignFunction,@remix-run/server-runtime/SignFunction,UnsignFunction,@remix-run/server-runtime/UnsignFunction,createCookieFactory,@remix-run/server-runtime/createCookieFactory,createCookieSessionStorageFactory,@remix-run/server-runtime/createCookieSessionStorageFactory,createMemorySessionStorageFactory,@remix-run/server-runtime/createMemorySessionStorageFactory,createSessionStorageFactory,@remix-run/server-runtime/createSessionStorageFactory,SessionStorage,@remix-run/server-runtime/SessionStorage,SessionIdStorageStrategy,@remix-run/server-runtime/SessionIdStorageStrategy,SessionData,@remix-run/server-runtime/SessionData,MaxPartSizeExceededError,@remix-run/server-runtime/MaxPartSizeExceededError,UploadHandler,@remix-run/server-runtime/UploadHandler" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@remix-run/server-runtime/package.json" } ], "concludedValue": "node_modules/@remix-run/server-runtime/package.json" } ], "occurrences": [ { "location": "dist/implementations.js", "line": 15 }, { "location": "dist/index.js", "line": 23 }, { "location": "dist/upload/fileUploadHandler.js", "line": 22 }, { "location": "crypto.ts", "line": 2 }, { "location": "implementations.ts", "line": 6 }, { "location": "implementations.ts", "line": 10 }, { "location": "implementations.ts", "line": 12 }, { "location": "implementations.ts", "line": 13 }, { "location": "implementations.ts", "line": 15 }, { "location": "index.ts", "line": 52 }, { "location": "index.ts", "line": 105 }, { "location": "sessions/fileStorage.ts", "line": 8 }, { "location": "upload/fileUploadHandler.ts", "line": 9 }, { "location": "upload/fileUploadHandler.ts", "line": 10 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/remix-run-node@1.19.3-tuxcare.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-11T09:03:53Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, September 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'remix-run-node' with version '1.19.3-tuxcare.2'. The package type in this SBOM is npm with a single purl namespace '@remix-run' described under components. The components were identified from the source files: node_modules/@remix-run/server-runtime/package.json, node_modules/source-map/package.json." } ] }