{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:44a2f051-91f2-4502-9350-3f1be01fe5e9", "version": 1, "metadata": { "timestamp": "2026-08-24T20:16:38Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "schematics", "group": "@angular-devkit", "version": "19.2.19", "description": "Angular Schematics - Library", "purl": "pkg:npm/%40angular-devkit/schematics@19.2.19", "bom-ref": "pkg:npm/@angular-devkit/schematics@19.2.19", "properties": [], "type": "application" }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@angular-devkit" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@angular-devkit/core/package.json" } ] }, "components": [ { "group": "@angular-devkit", "name": "core", "version": "19.2.19", "description": "Angular DevKit - Core Utility Library", "scope": "required", "purl": "pkg:npm/%40angular-devkit/core@19.2.19", "type": "framework", "bom-ref": "pkg:npm/@angular-devkit/core@19.2.19", "properties": [ { "name": "SrcFile", "value": "node_modules/@angular-devkit/core/package.json" }, { "name": "ImportedModules", "value": "@angular-devkit/core,BaseException,@angular-devkit/core/BaseException,PriorityQueue,@angular-devkit/core/PriorityQueue,logging,@angular-devkit/core/logging,JsonObject,@angular-devkit/core/JsonObject,JsonValue,@angular-devkit/core/JsonValue,schema,@angular-devkit/core/schema,normalize,@angular-devkit/core/normalize,strings,@angular-devkit/core/strings,join,@angular-devkit/core/join,template,@angular-devkit/core/template,virtualFs,@angular-devkit/core/virtualFs,Path,@angular-devkit/core/Path,PathFragment,@angular-devkit/core/PathFragment,PathIsDirectoryException,@angular-devkit/core/PathIsDirectoryException,PathIsFileException,@angular-devkit/core/PathIsFileException,dirname,@angular-devkit/core/dirname,NormalizedRoot,@angular-devkit/core/NormalizedRoot,relative,@angular-devkit/core/relative,tags,@angular-devkit/core/tags,deepCopy,@angular-devkit/core/deepCopy,getSystemPath,@angular-devkit/core/getSystemPath,@angular-devkit/core/node,NodeJsSyncHost,@angular-devkit/core/node/NodeJsSyncHost" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@angular-devkit/core/package.json" } ], "concludedValue": "node_modules/@angular-devkit/core/package.json" } ], "occurrences": [ { "location": "src/engine/engine.ts", "line": 9 }, { "location": "src/engine/interface.ts", "line": 9 }, { "location": "src/engine/schematic.ts", "line": 9 }, { "location": "src/exception/exception.ts", "line": 9 }, { "location": "src/formats/format-validator.ts", "line": 9 }, { "location": "src/formats/html-selector.ts", "line": 9 }, { "location": "src/formats/index.ts", "line": 9 }, { "location": "src/formats/path.ts", "line": 9 }, { "location": "src/formats/path.ts", "line": 17 }, { "location": "src/index.ts", "line": 9 }, { "location": "src/rules/call.ts", "line": 9 }, { "location": "src/rules/move.ts", "line": 9 }, { "location": "src/rules/move.ts", "line": 19 }, { "location": "src/rules/move.ts", "line": 20 }, { "location": "src/rules/move.ts", "line": 33 }, { "location": "src/rules/template.ts", "line": 9 }, { "location": "src/rules/template.ts", "line": 62 }, { "location": "src/rules/template.ts", "line": 153 }, { "location": "src/rules/template.ts", "line": 169 }, { "location": "src/sink/dryrun.ts", "line": 9 }, { "location": "src/sink/dryrun.ts", "line": 62 }, { "location": "src/sink/host.ts", "line": 9 }, { "location": "src/tree/action.ts", "line": 9 }, { "location": "src/tree/delegate.ts", "line": 9 }, { "location": "src/tree/entry.ts", "line": 9 }, { "location": "src/tree/host-tree.ts", "line": 19 }, { "location": "src/tree/host-tree.ts", "line": 65 }, { "location": "src/tree/host-tree.ts", "line": 70 }, { "location": "src/tree/host-tree.ts", "line": 74 }, { "location": "src/tree/host-tree.ts", "line": 77 }, { "location": "src/tree/host-tree.ts", "line": 132 }, { "location": "src/tree/host-tree.ts", "line": 357 }, { "location": "src/tree/host-tree.ts", "line": 510 }, { "location": "src/tree/interface.ts", "line": 9 }, { "location": "src/tree/null.ts", "line": 17 }, { "location": "src/tree/null.ts", "line": 31 }, { "location": "src/tree/null.ts", "line": 40 }, { "location": "src/tree/null.ts", "line": 59 }, { "location": "src/tree/null.ts", "line": 78 }, { "location": "src/tree/recorder.ts", "line": 9 }, { "location": "src/tree/scoped.ts", "line": 17 }, { "location": "src/tree/scoped.ts", "line": 37 }, { "location": "src/tree/scoped.ts", "line": 60 }, { "location": "src/tree/scoped.ts", "line": 85 }, { "location": "src/tree/scoped.ts", "line": 99 }, { "location": "src/tree/scoped.ts", "line": 186 }, { "location": "src/tree/scoped.ts", "line": 191 }, { "location": "src/tree/scoped.ts", "line": 192 }, { "location": "src/tree/scoped.ts", "line": 205 }, { "location": "src/workflow/base.ts", "line": 9 }, { "location": "src/workflow/interface.ts", "line": 9 }, { "location": "tasks/package-manager/executor.ts", "line": 9 }, { "location": "tasks/repo-init/executor.ts", "line": 9 }, { "location": "testing/schematic-test-runner.ts", "line": 9 }, { "location": "tools/description.ts", "line": 9 }, { "location": "tools/file-system-engine-host-base.ts", "line": 9 }, { "location": "tools/file-system-engine-host-base.ts", "line": 291 }, { "location": "tools/file-system-utility.ts", "line": 9 }, { "location": "tools/node-module-engine-host.ts", "line": 9 }, { "location": "tools/schema-option-transform.ts", "line": 9 }, { "location": "tools/schema-option-transform.ts", "line": 31 }, { "location": "tools/workflow/node-workflow.ts", "line": 9 }, { "location": "tools/workflow/node-workflow.ts", "line": 43 }, { "location": "tools/workflow/node-workflow.ts", "line": 65 }, { "location": "tools/workflow/node-workflow.ts", "line": 69 }, { "location": "src/sink/dryrun.ts", "line": 10 }, { "location": "tools/file-system-engine-host-base.ts", "line": 10 }, { "location": "tools/workflow/node-workflow.ts", "line": 10 } ] }, "tags": [ "framework" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@angular-devkit/schematics@19.2.19" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-24T20:16:38Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'schematics' with version '19.2.19'. The package type in this SBOM is npm with a single purl namespace '@angular-devkit' described under components. The components were identified from the source files: node_modules/@angular-devkit/core/package.json." } ] }