{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:43f956dc-9e40-4ecc-b83e-64b8791b3364", "version": 1, "metadata": { "timestamp": "2026-09-09T11:47:27Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "prettyhtml-hastscript", "group": "@starptech", "version": "0.10.0", "description": "Hyperscript compatible DSL for creating virtual HAST trees", "purl": "pkg:npm/%40starptech/prettyhtml-hastscript@0.10.0", "bom-ref": "pkg:npm/@starptech/prettyhtml-hastscript@0.10.0", "author": "Dustin Deus (http://www.starptech.de)", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test-coverage" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/StarpTech/prettyhtml.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@ava\\n@babel" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@ava/babel-preset-stage-4/package.json\\nnode_modules/@babel/helper-module-transforms/package.json\\nnode_modules/@babel/helper-regex/package.json\\nnode_modules/@babel/plugin-transform-dotall-regex/package.json\\nnode_modules/@babel/plugin-transform-modules-commonjs/package.json\\nnode_modules/ansi-align/package.json\\nnode_modules/array-differ/package.json\\nnode_modules/array-uniq/package.json\\nnode_modules/async-each/package.json\\nnode_modules/ava/package.json\\nnode_modules/binary-extensions/package.json\\nnode_modules/boxen/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/ci-info/package.json\\nnode_modules/clean-stack/package.json\\nnode_modules/cli-boxes/package.json\\nnode_modules/comma-separated-tokens/package.json\\nnode_modules/configstore/node_modules/make-dir/package.json\\nnode_modules/configstore/package.json\\nnode_modules/del/node_modules/globby/node_modules/pify/package.json\\nnode_modules/del/node_modules/globby/package.json\\nnode_modules/del/node_modules/pify/package.json\\nnode_modules/del/package.json\\nnode_modules/esm/package.json\\nnode_modules/get-port/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/globby/node_modules/slash/package.json\\nnode_modules/globby/package.json\\nnode_modules/got/package.json\\nnode_modules/is-binary-path/package.json\\nnode_modules/is-error/package.json\\nnode_modules/is-npm/package.json\\nnode_modules/is-observable/package.json\\nnode_modules/latest-version/package.json\\nnode_modules/make-dir/node_modules/pify/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/matcher/package.json\\nnode_modules/meow/package.json\\nnode_modules/multimatch/package.json\\nnode_modules/observable-to-promise/node_modules/is-observable/node_modules/symbol-observable/package.json\\nnode_modules/observable-to-promise/node_modules/is-observable/package.json\\nnode_modules/observable-to-promise/package.json\\nnode_modules/p-map/package.json\\nnode_modules/package-json/package.json\\nnode_modules/parse-ms/package.json\\nnode_modules/plur/package.json\\nnode_modules/prepend-http/package.json\\nnode_modules/pretty-ms/package.json\\nnode_modules/property-information/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/regenerate-unicode-properties/package.json\\nnode_modules/regexpu-core/package.json\\nnode_modules/registry-auth-token/package.json\\nnode_modules/registry-url/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/space-separated-tokens/package.json\\nnode_modules/strip-bom-buf/package.json\\nnode_modules/unicode-match-property-value-ecmascript/package.json\\nnode_modules/update-notifier/node_modules/is-ci/package.json\\nnode_modules/update-notifier/package.json\\nnode_modules/url-parse-lax/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "url-parse-lax", "version": "1.0.0", "description": "url.parse() with support for protocol-less URLs & IPs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url-parse-lax@1.0.0", "type": "library", "bom-ref": "pkg:npm/url-parse-lax@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/url-parse-lax/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url-parse-lax/package.json" } ], "concludedValue": "node_modules/url-parse-lax/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "update-notifier", "version": "2.5.0", "description": "Update notifications for your CLI app", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/update-notifier@2.5.0", "type": "library", "bom-ref": "pkg:npm/update-notifier@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/update-notifier/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/update-notifier/package.json" } ], "concludedValue": "node_modules/update-notifier/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Thomas Watson Steen (https://twitter.com/wa7son)" } ], "group": "", "name": "is-ci", "version": "1.2.1", "description": "Detect if the current environment is a CI server", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-ci@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/watson/is-ci" }, { "type": "vcs", "url": "https://github.com/watson/is-ci.git" } ], "type": "library", "bom-ref": "pkg:npm/is-ci@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/update-notifier/node_modules/is-ci/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/update-notifier/node_modules/is-ci/package.json" } ], "concludedValue": "node_modules/update-notifier/node_modules/is-ci/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "unicode-match-property-value-ecmascript", "version": "1.0.2", "description": "Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicode-match-property-value-ecmascript@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mathiasbynens/unicode-match-property-value-ecmascript" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/unicode-match-property-value-ecmascript.git" } ], "type": "library", "bom-ref": "pkg:npm/unicode-match-property-value-ecmascript@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-match-property-value-ecmascript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-match-property-value-ecmascript/package.json" } ], "concludedValue": "node_modules/unicode-match-property-value-ecmascript/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-bom-buf", "version": "1.0.0", "description": "Strip UTF-8 byte order mark (BOM) from a buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom-buf@1.0.0", "type": "library", "bom-ref": "pkg:npm/strip-bom-buf@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-bom-buf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-bom-buf/package.json" } ], "concludedValue": "node_modules/strip-bom-buf/package.json" } ] } }, { "authors": [ { "name": "Titus Wormer (https://wooorm.com)" } ], "group": "", "name": "space-separated-tokens", "version": "1.1.4", "description": "Parse and stringify space-separated tokens", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/space-separated-tokens@1.1.4", "type": "library", "bom-ref": "pkg:npm/space-separated-tokens@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/space-separated-tokens/package.json" }, { "name": "ImportedModules", "value": "space-separated-tokens" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/space-separated-tokens/package.json" } ], "concludedValue": "node_modules/space-separated-tokens/package.json" } ], "occurrences": [ { "location": "factory.js", "line": 5 } ] } }, { "group": "", "name": "source-map-support", "version": "0.5.11", "description": "Fixes stack traces for files with source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-support@0.5.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.5.11", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "registry-url", "version": "3.1.0", "description": "Get the set npm registry URL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/registry-url@3.1.0", "type": "library", "bom-ref": "pkg:npm/registry-url@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/registry-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/registry-url/package.json" } ], "concludedValue": "node_modules/registry-url/package.json" } ] } }, { "authors": [ { "name": "Espen Hovlandsdal " } ], "group": "", "name": "registry-auth-token", "version": "3.3.2", "description": "Get the auth token set for an npm registry (if any)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/registry-auth-token@3.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rexxars/registry-auth-token#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/rexxars/registry-auth-token.git" } ], "type": "library", "bom-ref": "pkg:npm/registry-auth-token@3.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/registry-auth-token/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/registry-auth-token/package.json" } ], "concludedValue": "node_modules/registry-auth-token/package.json" } ] }, "tags": [ "auth", "token" ] }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "regexpu-core", "version": "4.4.0", "description": "regexpu’s core functionality (i.e. `rewritePattern(pattern, flag)`), capable of translating ES6 Unicode regular expressions to ES5.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexpu-core@4.4.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/regexpu" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/regexpu-core.git" } ], "type": "library", "bom-ref": "pkg:npm/regexpu-core@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpu-core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpu-core/package.json" } ], "concludedValue": "node_modules/regexpu-core/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "regenerate-unicode-properties", "version": "7.0.0", "description": "Regenerate sets for Unicode properties and values.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regenerate-unicode-properties@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mathiasbynens/regenerate-unicode-properties" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/regenerate-unicode-properties.git" } ], "type": "library", "bom-ref": "pkg:npm/regenerate-unicode-properties@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/regenerate-unicode-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regenerate-unicode-properties/package.json" } ], "concludedValue": "node_modules/regenerate-unicode-properties/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "2.2.1", "description": "Recursive version of fs.readdir with streaming api.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readdirp@2.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Titus Wormer (https://wooorm.com)" } ], "group": "", "name": "property-information", "version": "5.1.0", "description": "Information for HTML properties", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/property-information@5.1.0", "type": "library", "bom-ref": "pkg:npm/property-information@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/property-information/package.json" }, { "name": "ImportedModules", "value": "property-information/find,property-information/html,property-information/svg" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/property-information/package.json" } ], "concludedValue": "node_modules/property-information/package.json" } ], "occurrences": [ { "location": "factory.js", "line": 3 }, { "location": "html.js", "line": 3 }, { "location": "svg.js", "line": 3 } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pretty-ms", "version": "4.0.0", "description": "Convert milliseconds to a human readable string: `1337000000` → `15d 11h 23m 20s`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-ms@4.0.0", "type": "library", "bom-ref": "pkg:npm/pretty-ms@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-ms/package.json" } ], "concludedValue": "node_modules/pretty-ms/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "prepend-http", "version": "1.0.4", "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prepend-http@1.0.4", "type": "library", "bom-ref": "pkg:npm/prepend-http@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/prepend-http/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prepend-http/package.json" } ], "concludedValue": "node_modules/prepend-http/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "plur", "version": "3.0.1", "description": "Pluralize a word", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/plur@3.0.1", "type": "library", "bom-ref": "pkg:npm/plur@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/plur/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/plur/package.json" } ], "concludedValue": "node_modules/plur/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-ms", "version": "2.0.0", "description": "Parse milliseconds into an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/parse-ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-ms/package.json" } ], "concludedValue": "node_modules/parse-ms/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "package-json", "version": "4.0.1", "description": "Get metadata of a package from the npm registry", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package-json@4.0.1", "type": "library", "bom-ref": "pkg:npm/package-json@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-json/package.json" } ], "concludedValue": "node_modules/package-json/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "2.1.0", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-map@2.1.0", "type": "library", "bom-ref": "pkg:npm/p-map@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-map/package.json" } ], "concludedValue": "node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "observable-to-promise", "version": "0.5.0", "description": "Convert an Observable to a Promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/observable-to-promise@0.5.0", "type": "library", "bom-ref": "pkg:npm/observable-to-promise@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/observable-to-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/observable-to-promise/package.json" } ], "concludedValue": "node_modules/observable-to-promise/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-observable", "version": "0.2.0", "description": "Check if a value is an Observable", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-observable@0.2.0", "type": "library", "bom-ref": "pkg:npm/is-observable@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/observable-to-promise/node_modules/is-observable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/observable-to-promise/node_modules/is-observable/package.json" } ], "concludedValue": "node_modules/observable-to-promise/node_modules/is-observable/package.json" } ] } }, { "authors": [ { "name": "Ben Lesh " } ], "group": "", "name": "symbol-observable", "version": "0.2.4", "description": "Symbol.observable ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/symbol-observable@0.2.4", "type": "library", "bom-ref": "pkg:npm/symbol-observable@0.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/observable-to-promise/node_modules/is-observable/node_modules/symbol-observable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/observable-to-promise/node_modules/is-observable/node_modules/symbol-observable/package.json" } ], "concludedValue": "node_modules/observable-to-promise/node_modules/is-observable/node_modules/symbol-observable/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "multimatch", "version": "3.0.0", "description": "Extends `minimatch.match()` with support for multiple patterns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/multimatch@3.0.0", "type": "library", "bom-ref": "pkg:npm/multimatch@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/multimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/multimatch/package.json" } ], "concludedValue": "node_modules/multimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "meow", "version": "5.0.0", "description": "CLI app helper", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/meow@5.0.0", "type": "library", "bom-ref": "pkg:npm/meow@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/meow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/meow/package.json" } ], "concludedValue": "node_modules/meow/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "matcher", "version": "1.1.1", "description": "Simple wildcard matching", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/matcher@1.1.1", "type": "library", "bom-ref": "pkg:npm/matcher@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/matcher/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/matcher/package.json" } ], "concludedValue": "node_modules/matcher/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "2.1.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@2.1.0", "type": "library", "bom-ref": "pkg:npm/make-dir@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "4.0.1", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@4.0.1", "type": "library", "bom-ref": "pkg:npm/pify@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/node_modules/pify/package.json" }, { "name": "SrcFile", "value": "node_modules/del/node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/del/node_modules/pify/package.json" } ], "concludedValue": "node_modules/del/node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "latest-version", "version": "3.1.0", "description": "Get the latest version of an npm package", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/latest-version@3.1.0", "type": "library", "bom-ref": "pkg:npm/latest-version@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/latest-version/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/latest-version/package.json" } ], "concludedValue": "node_modules/latest-version/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-observable", "version": "1.1.0", "description": "Check if a value is an Observable", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-observable@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-observable@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-observable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-observable/package.json" } ], "concludedValue": "node_modules/is-observable/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "is-npm", "version": "1.0.0", "description": "Check if your code is running as an npm script", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-npm@1.0.0", "type": "library", "bom-ref": "pkg:npm/is-npm@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-npm/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-npm/package.json" } ], "concludedValue": "node_modules/is-npm/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "is-error", "version": "2.2.1", "description": "Detect whether a value is an error", "scope": "optional", "purl": "pkg:npm/is-error@2.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mk-pmb/is-error-js" } ], "type": "library", "bom-ref": "pkg:npm/is-error@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-error/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-error/package.json" } ], "concludedValue": "node_modules/is-error/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-binary-path", "version": "1.0.1", "description": "Check if a filepath is a binary file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-binary-path@1.0.1", "type": "library", "bom-ref": "pkg:npm/is-binary-path@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-binary-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-binary-path/package.json" } ], "concludedValue": "node_modules/is-binary-path/package.json" } ] }, "tags": [ "binary" ] }, { "group": "", "name": "got", "version": "6.7.1", "description": "Simplified HTTP requests", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/got@6.7.1", "type": "library", "bom-ref": "pkg:npm/got@6.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/got/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/got/package.json" } ], "concludedValue": "node_modules/got/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "globby", "version": "7.1.1", "description": "Extends `glob` with support for multiple patterns and exposes a Promise API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globby@7.1.1", "type": "library", "bom-ref": "pkg:npm/globby@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/globby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globby/package.json" } ], "concludedValue": "node_modules/globby/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "slash", "version": "1.0.0", "description": "Convert Windows backslash paths to slash paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@1.0.0", "type": "library", "bom-ref": "pkg:npm/slash@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/globby/node_modules/slash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globby/node_modules/slash/package.json" } ], "concludedValue": "node_modules/globby/node_modules/slash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "3.0.0", "description": "Get a stream as a string, buffer, or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@3.0.0", "type": "library", "bom-ref": "pkg:npm/get-stream@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "get-port", "version": "4.2.0", "description": "Get an available port", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-port@4.2.0", "type": "library", "bom-ref": "pkg:npm/get-port@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-port/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-port/package.json" } ], "concludedValue": "node_modules/get-port/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "esm", "version": "3.2.22", "description": "Tomorrow's ECMAScript modules today!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esm@3.2.22", "type": "library", "bom-ref": "pkg:npm/esm@3.2.22", "properties": [ { "name": "SrcFile", "value": "node_modules/esm/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esm/package.json" } ], "concludedValue": "node_modules/esm/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "del", "version": "4.1.0", "description": "Delete files and folders", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/del@4.1.0", "type": "library", "bom-ref": "pkg:npm/del@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/del/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/del/package.json" } ], "concludedValue": "node_modules/del/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "globby", "version": "6.1.0", "description": "Extends `glob` with support for multiple patterns and exposes a Promise API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globby@6.1.0", "type": "library", "bom-ref": "pkg:npm/globby@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/del/node_modules/globby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/del/node_modules/globby/package.json" } ], "concludedValue": "node_modules/del/node_modules/globby/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "2.3.0", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@2.3.0", "type": "library", "bom-ref": "pkg:npm/pify@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/del/node_modules/globby/node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/del/node_modules/globby/node_modules/pify/package.json" } ], "concludedValue": "node_modules/del/node_modules/globby/node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "configstore", "version": "3.1.2", "description": "Easily load and save config without having to think about where and how", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/configstore@3.1.2", "type": "library", "bom-ref": "pkg:npm/configstore@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/configstore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/configstore/package.json" } ], "concludedValue": "node_modules/configstore/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "1.3.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@1.3.0", "type": "library", "bom-ref": "pkg:npm/make-dir@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/configstore/node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/configstore/node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/configstore/node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Titus Wormer (https://wooorm.com)" } ], "group": "", "name": "comma-separated-tokens", "version": "1.0.7", "description": "Parse and stringify comma-separated tokens", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/comma-separated-tokens@1.0.7", "type": "library", "bom-ref": "pkg:npm/comma-separated-tokens@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/comma-separated-tokens/package.json" }, { "name": "ImportedModules", "value": "comma-separated-tokens" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/comma-separated-tokens/package.json" } ], "concludedValue": "node_modules/comma-separated-tokens/package.json" } ], "occurrences": [ { "location": "factory.js", "line": 6 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "cli-boxes", "version": "1.0.0", "description": "Boxes for use in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-boxes@1.0.0", "type": "library", "bom-ref": "pkg:npm/cli-boxes@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-boxes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-boxes/package.json" } ], "concludedValue": "node_modules/cli-boxes/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "clean-stack", "version": "2.0.0", "description": "Clean up error stack traces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clean-stack@2.0.0", "type": "library", "bom-ref": "pkg:npm/clean-stack@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/clean-stack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clean-stack/package.json" } ], "concludedValue": "node_modules/clean-stack/package.json" } ] } }, { "authors": [ { "name": "Thomas Watson Steen (https://twitter.com/wa7son)" } ], "group": "", "name": "ci-info", "version": "1.6.0", "description": "Get details about the current Continuous Integration environment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ci-info@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/watson/ci-info" }, { "type": "vcs", "url": "https://github.com/watson/ci-info.git" } ], "type": "library", "bom-ref": "pkg:npm/ci-info@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ci-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ci-info/package.json" } ], "concludedValue": "node_modules/ci-info/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" }, { "name": " Elan Shanker" } ], "group": "", "name": "chokidar", "version": "2.1.5", "description": "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@2.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@2.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "4.1.0", "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@4.1.0", "type": "library", "bom-ref": "pkg:npm/camelcase@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "boxen", "version": "1.3.0", "description": "Create boxes in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/boxen@1.3.0", "type": "library", "bom-ref": "pkg:npm/boxen@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/boxen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/boxen/package.json" } ], "concludedValue": "node_modules/boxen/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "binary-extensions", "version": "1.13.0", "description": "List of binary file extensions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/binary-extensions@1.13.0", "type": "library", "bom-ref": "pkg:npm/binary-extensions@1.13.0", "properties": [ { "name": "SrcFile", "value": "node_modules/binary-extensions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/binary-extensions/package.json" } ], "concludedValue": "node_modules/binary-extensions/package.json" } ] }, "tags": [ "binary" ] }, { "group": "", "name": "ava", "version": "1.4.1", "description": "Testing can be a drag. AVA helps you get it done.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ava@1.4.1", "externalReferences": [ { "type": "website", "url": "https://ava.li" } ], "type": "library", "bom-ref": "pkg:npm/ava@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ava/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ava/package.json" } ], "concludedValue": "node_modules/ava/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (http://paulmillr.com/)" } ], "group": "", "name": "async-each", "version": "1.0.1", "description": "No-bullshit, ultra-simple, 35-lines-of-code async parallel forEach / map function for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async-each@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/async-each/" } ], "type": "library", "bom-ref": "pkg:npm/async-each@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/async-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async-each/package.json" } ], "concludedValue": "node_modules/async-each/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "array-uniq", "version": "2.0.0", "description": "Create an array without duplicates", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-uniq@2.0.0", "type": "library", "bom-ref": "pkg:npm/array-uniq@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/array-uniq/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-uniq/package.json" } ], "concludedValue": "node_modules/array-uniq/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "array-differ", "version": "2.0.3", "description": "Create an array with values that are present in the first input array but not additional ones", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-differ@2.0.3", "type": "library", "bom-ref": "pkg:npm/array-differ@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/array-differ/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-differ/package.json" } ], "concludedValue": "node_modules/array-differ/package.json" } ] } }, { "authors": [ { "name": "nexdrew" } ], "group": "", "name": "ansi-align", "version": "2.0.0", "description": "align-text with ANSI support for CLIs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-align@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nexdrew/ansi-align#readme" }, { "type": "vcs", "url": "git+https://github.com/nexdrew/ansi-align.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-align@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-align/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-align/package.json" } ], "concludedValue": "node_modules/ansi-align/package.json" } ] } }, { "group": "@babel", "name": "plugin-transform-modules-commonjs", "version": "7.2.0", "description": "This plugin transforms ES2015 modules to CommonJS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.2.0", "type": "library", "bom-ref": "pkg:npm/@babel/plugin-transform-modules-commonjs@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/plugin-transform-modules-commonjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/plugin-transform-modules-commonjs/package.json" } ], "concludedValue": "node_modules/@babel/plugin-transform-modules-commonjs/package.json" } ] } }, { "group": "@babel", "name": "plugin-transform-dotall-regex", "version": "7.2.0", "description": "Compile regular expressions using the `s` (`dotAll`) flag to ES5.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.2.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" }, { "type": "vcs", "url": "https://github.com/babel/babel/tree/master/packages/babel-plugin-transform-dotall-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/plugin-transform-dotall-regex@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/plugin-transform-dotall-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/plugin-transform-dotall-regex/package.json" } ], "concludedValue": "node_modules/@babel/plugin-transform-dotall-regex/package.json" } ] } }, { "group": "@babel", "name": "helper-regex", "version": "7.0.0", "description": "Helper function to check for literal RegEx", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-regex@7.0.0", "type": "library", "bom-ref": "pkg:npm/@babel/helper-regex@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-regex/package.json" } ], "concludedValue": "node_modules/@babel/helper-regex/package.json" } ] } }, { "authors": [ { "name": "Logan Smyth " } ], "group": "@babel", "name": "helper-module-transforms", "version": "7.2.2", "description": "Babel helper functions for implementing ES6 module transformations", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-module-transforms@7.2.2", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-module-transforms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-module-transforms/package.json" } ], "concludedValue": "node_modules/@babel/helper-module-transforms/package.json" } ] } }, { "authors": [ { "name": "Mark Wubben (https://novemberborn.net)" } ], "group": "@ava", "name": "babel-preset-stage-4", "version": "2.0.0", "description": "Efficiently applies the minimum of transforms to run stage 4 code on Node.js 6, 8 and 10", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40ava/babel-preset-stage-4@2.0.0", "type": "library", "bom-ref": "pkg:npm/@ava/babel-preset-stage-4@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@ava/babel-preset-stage-4/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@ava/babel-preset-stage-4/package.json" } ], "concludedValue": "node_modules/@ava/babel-preset-stage-4/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@starptech/prettyhtml-hastscript@0.10.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-09T11:47:27Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'prettyhtml-hastscript' with version '0.10.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 62 source files." } ] }