{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:eab2edff-76d5-43de-bd18-6cc9ae6646f7", "version": 1, "metadata": { "timestamp": "2026-09-08T18:48:18Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "vue-compiler-sfc", "group": "", "version": "2.7.16-tuxcare.1", "description": "compiler-sfc for Vue 2", "purl": "pkg:npm/vue-compiler-sfc@2.7.16-tuxcare.1", "bom-ref": "pkg:npm/vue-compiler-sfc@2.7.16-tuxcare.1", "properties": [], "type": "application" }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@types\\n@vue" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/parser/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/hash-sum/package.json\\nnode_modules/@types/lru-cache/package.json\\nnode_modules/@vue/consolidate/package.json\\nnode_modules/de-indent/package.json\\nnode_modules/estree-walker/package.json\\nnode_modules/hash-sum/package.json\\nnode_modules/less/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/magic-string/package.json\\nnode_modules/merge-source-map/package.json\\nnode_modules/postcss-modules/package.json\\nnode_modules/postcss-selector-parser/package.json\\nnode_modules/postcss/package.json\\nnode_modules/prettier/package.json\\nnode_modules/pug/package.json\\nnode_modules/sass/package.json\\nnode_modules/source-map/package.json\\nnode_modules/stylus/package.json" } ] }, "components": [ { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "stylus", "version": "0.58.1", "description": "Robust, expressive, and feature-rich CSS superset", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stylus@0.58.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stylus/stylus" }, { "type": "vcs", "url": "git://github.com/stylus/stylus" } ], "type": "library", "bom-ref": "pkg:npm/stylus@0.58.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stylus/package.json" }, { "name": "ImportedModules", "value": "stylus" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stylus/package.json" } ], "concludedValue": "node_modules/stylus/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 17038 }, { "location": "src/stylePreprocessors.ts", "line": 92 } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map,RawSourceMap,source-map/RawSourceMap,SourceMapGenerator,source-map/SourceMapGenerator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 5 }, { "location": "src/compileScript.ts", "line": 39 }, { "location": "src/parse.ts", "line": 1 }, { "location": "src/stylePreprocessors.ts", "line": 2 } ] } }, { "authors": [ { "name": "Natalie Weizenbaum (https://github.com/nex3)" } ], "group": "", "name": "sass", "version": "1.69.5", "description": "A pure JavaScript implementation of Sass.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sass@1.69.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sass/dart-sass" }, { "type": "vcs", "url": "https://github.com/sass/dart-sass" } ], "type": "library", "bom-ref": "pkg:npm/sass@1.69.5", "properties": [ { "name": "SrcFile", "value": "node_modules/sass/package.json" }, { "name": "ImportedModules", "value": "sass" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sass/package.json" } ], "concludedValue": "node_modules/sass/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 16990 }, { "location": "src/stylePreprocessors.ts", "line": 24 } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "pug", "version": "3.0.2", "description": "A clean, whitespace-sensitive template language for writing HTML", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pug@3.0.2", "externalReferences": [ { "type": "website", "url": "https://pugjs.org" }, { "type": "vcs", "url": "https://github.com/pugjs/pug/tree/master/packages/pug" } ], "type": "library", "bom-ref": "pkg:npm/pug@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pug/package.json" }, { "name": "ImportedModules", "value": "pug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pug/package.json" } ], "concludedValue": "node_modules/pug/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 10912 }, { "location": "dist/compiler-sfc.js", "line": 10940 } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "James Long" } ], "group": "", "name": "prettier", "version": "2.8.8", "description": "Prettier is an opinionated code formatter", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prettier@2.8.8", "externalReferences": [ { "type": "website", "url": "https://prettier.io" } ], "type": "library", "bom-ref": "pkg:npm/prettier@2.8.8", "properties": [ { "name": "SrcFile", "value": "node_modules/prettier/package.json" }, { "name": "ImportedModules", "value": "prettier" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prettier/package.json" } ], "concludedValue": "node_modules/prettier/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 13333 }, { "location": "src/compileTemplate.ts", "line": 179 } ] } }, { "group": "", "name": "postcss-selector-parser", "version": "6.0.13", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss-selector-parser@6.0.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/postcss/postcss-selector-parser" } ], "type": "library", "bom-ref": "pkg:npm/postcss-selector-parser@6.0.13", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-selector-parser/package.json" }, { "name": "ImportedModules", "value": "postcss-selector-parser" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-selector-parser/package.json" } ], "concludedValue": "node_modules/postcss-selector-parser/package.json" } ], "occurrences": [ { "location": "src/stylePlugins/scoped.ts", "line": 2 }, { "location": "src/stylePlugins/scoped.ts", "line": 73 }, { "location": "src/stylePlugins/scoped.ts", "line": 121 }, { "location": "src/stylePlugins/scoped.ts", "line": 188 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Alexander Madyankin " } ], "group": "", "name": "postcss-modules", "version": "4.3.1", "description": "PostCSS plugin to use CSS Modules everywhere", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss-modules@4.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/css-modules/postcss-modules.git" } ], "type": "library", "bom-ref": "pkg:npm/postcss-modules@4.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-modules/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-modules/package.json" } ], "concludedValue": "node_modules/postcss-modules/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "postcss", "version": "8.4.32", "description": "Tool for transforming styles with JS plugins", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss@8.4.32", "externalReferences": [ { "type": "website", "url": "https://postcss.org/" } ], "type": "library", "bom-ref": "pkg:npm/postcss@8.4.32", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/package.json" }, { "name": "ImportedModules", "value": "postcss,ProcessOptions,postcss/ProcessOptions,LazyResult,postcss/LazyResult,PluginCreator,postcss/PluginCreator,Rule,postcss/Rule,AtRule,postcss/AtRule" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/package.json" } ], "concludedValue": "node_modules/postcss/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 17076 }, { "location": "src/compileStyle.ts", "line": 1 }, { "location": "src/compileStyle.ts", "line": 2 }, { "location": "src/cssVars.ts", "line": 3 }, { "location": "src/stylePlugins/scoped.ts", "line": 1 }, { "location": "src/stylePlugins/trim.ts", "line": 1 } ] } }, { "authors": [ { "name": "keik " } ], "group": "", "name": "merge-source-map", "version": "1.1.0", "description": "Merge old source map and new source map in multi-transform flow", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-source-map@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/keik/merge-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/merge-source-map@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-source-map/package.json" }, { "name": "ImportedModules", "value": "merge-source-map" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-source-map/package.json" } ], "concludedValue": "node_modules/merge-source-map/package.json" } ], "occurrences": [ { "location": "src/stylePreprocessors.ts", "line": 1 }, { "location": "src/stylePreprocessors.ts", "line": 39 }, { "location": "src/stylePreprocessors.ts", "line": 77 }, { "location": "src/stylePreprocessors.ts", "line": 103 } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.25.9", "description": "Modify strings, generate sourcemaps", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magic-string@0.25.9", "type": "library", "bom-ref": "pkg:npm/magic-string@0.25.9", "properties": [ { "name": "SrcFile", "value": "node_modules/magic-string/package.json" }, { "name": "ImportedModules", "value": "magic-string" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magic-string/package.json" } ], "concludedValue": "node_modules/magic-string/package.json" } ], "occurrences": [ { "location": "src/compileScript.ts", "line": 1 }, { "location": "src/prefixIdentifiers.ts", "line": 1 }, { "location": "src/rewriteDefault.ts", "line": 2 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "5.1.1", "description": "A cache object that deletes the least-recently-used items.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@5.1.1", "type": "library", "bom-ref": "pkg:npm/lru-cache@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "ImportedModules", "value": "lru-cache" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ], "occurrences": [ { "location": "src/compileScript.ts", "line": 2 }, { "location": "src/parse.ts", "line": 11 } ] } }, { "authors": [ { "name": "Alexis Sellier " } ], "group": "", "name": "less", "version": "4.2.0", "description": "Leaner CSS", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/less@4.2.0", "externalReferences": [ { "type": "website", "url": "http://lesscss.org" }, { "type": "vcs", "url": "https://github.com/less/less.js.git" } ], "type": "library", "bom-ref": "pkg:npm/less@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/less/package.json" }, { "name": "ImportedModules", "value": "less" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/less/package.json" } ], "concludedValue": "node_modules/less/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 17012 }, { "location": "src/stylePreprocessors.ts", "line": 59 } ] } }, { "group": "", "name": "hash-sum", "version": "2.0.0", "description": "Blazing fast unique hash generator", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hash-sum@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bevacqua/hash-sum" }, { "type": "vcs", "url": "git://github.com/bevacqua/hash-sum.git" } ], "type": "library", "bom-ref": "pkg:npm/hash-sum@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hash-sum/package.json" }, { "name": "ImportedModules", "value": "hash-sum" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hash-sum/package.json" } ], "concludedValue": "node_modules/hash-sum/package.json" } ], "occurrences": [ { "location": "src/cssVars.ts", "line": 4 }, { "location": "src/cssVars.ts", "line": 24 }, { "location": "src/parse.ts", "line": 10 }, { "location": "src/parse.ts", "line": 43 } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "estree-walker", "version": "2.0.2", "description": "Traverse an ESTree-compliant AST", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estree-walker@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/estree-walker" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/estree-walker/package.json" }, { "name": "ImportedModules", "value": "estree-walker,walk,estree-walker/walk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estree-walker/package.json" } ], "concludedValue": "node_modules/estree-walker/package.json" } ], "occurrences": [ { "location": "src/babelUtils.ts", "line": 13 }, { "location": "src/compileScript.ts", "line": 38 } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "", "name": "de-indent", "version": "1.0.2", "description": "remove extra indent from a block of code", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/de-indent@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yyx990803/de-indent#readme" }, { "type": "vcs", "url": "git+https://github.com/yyx990803/de-indent.git" } ], "type": "library", "bom-ref": "pkg:npm/de-indent@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/de-indent/package.json" }, { "name": "ImportedModules", "value": "de-indent" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/de-indent/package.json" } ], "concludedValue": "node_modules/de-indent/package.json" } ], "occurrences": [ { "location": "src/parseComponent.ts", "line": 1 }, { "location": "src/parseComponent.ts", "line": 189 } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "@vue", "name": "consolidate", "version": "0.17.3", "description": "Template engine consolidation library (fork)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vue/consolidate@0.17.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yyx990803/consolidate.js" } ], "type": "library", "bom-ref": "pkg:npm/@vue/consolidate@0.17.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@vue/consolidate/package.json" }, { "name": "ImportedModules", "value": "@vue/consolidate" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vue/consolidate/package.json" } ], "concludedValue": "node_modules/@vue/consolidate/package.json" } ], "occurrences": [ { "location": "src/compileTemplate.ts", "line": 7 } ] } }, { "group": "@types", "name": "lru-cache", "version": "5.1.1", "description": "TypeScript definitions for lru-cache", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lru-cache@5.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lru-cache" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lru-cache@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lru-cache/package.json" } ], "concludedValue": "node_modules/@types/lru-cache/package.json" } ] } }, { "group": "@types", "name": "hash-sum", "version": "1.0.2", "description": "TypeScript definitions for hash-sum", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/hash-sum@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/hash-sum" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/hash-sum@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/hash-sum/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/hash-sum/package.json" } ], "concludedValue": "node_modules/@types/hash-sum/package.json" } ] } }, { "group": "@types", "name": "estree", "version": "0.0.48", "description": "TypeScript definitions for ESTree AST specification", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/estree@0.0.48", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@0.0.48", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/estree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/estree/package.json" } ], "concludedValue": "node_modules/@types/estree/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "types", "version": "7.23.5", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.23.5", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-types" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.23.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "ExportedModules", "value": "types/compiler,types,CompilerOptions,types/compiler/CompilerOptions,WarningMessage,types/compiler/WarningMessage" }, { "name": "ImportedModules", "value": "types/compiler,CompilerOptions,types/compiler/CompilerOptions,WarningMessage,types/compiler/WarningMessage,ASTAttr,types/compiler/ASTAttr,ASTNode,types/compiler/ASTNode,CompiledResult,types/compiler/CompiledResult" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ], "occurrences": [ { "location": "src/compileTemplate.ts", "line": 10 }, { "location": "src/index.ts", "line": 18 }, { "location": "src/parseComponent.ts", "line": 4 }, { "location": "src/templateCompilerModules/assetUrl.ts", "line": 4 }, { "location": "src/templateCompilerModules/srcset.ts", "line": 5 }, { "location": "src/types.ts", "line": 1 } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "parser", "version": "7.23.5", "description": "A JavaScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.23.5", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-parser" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.23.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "ImportedModules", "value": "@babel/parser,parse,@babel/parser/parse,parseExpression,@babel/parser/parseExpression,ParserOptions,@babel/parser/ParserOptions,ParserPlugin,@babel/parser/ParserPlugin" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ], "occurrences": [ { "location": "dist/compiler-sfc.js", "line": 6 }, { "location": "src/compileScript.ts", "line": 11 }, { "location": "src/compileScript.ts", "line": 147 }, { "location": "src/compileScript.ts", "line": 249 }, { "location": "src/compileScript.ts", "line": 1856 }, { "location": "src/prefixIdentifiers.ts", "line": 2 }, { "location": "src/prefixIdentifiers.ts", "line": 33 }, { "location": "src/rewriteDefault.ts", "line": 1 }, { "location": "src/rewriteDefault.ts", "line": 39 } ] }, "tags": [ "parse" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/vue-compiler-sfc@2.7.16-tuxcare.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-08T18:48:18Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 8, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'vue-compiler-sfc' with version '2.7.16-tuxcare.1'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 21 source files." } ] }