{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:8e344df1-f329-42b2-8dc4-697a17407ebe", "version": 1, "metadata": { "timestamp": "2026-09-03T20:12:30Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "async-disk-cache", "group": "", "version": "1.3.4", "description": "Async disk cache", "purl": "pkg:npm/async-disk-cache@1.3.4", "bom-ref": "pkg:npm/async-disk-cache@1.3.4", "author": "Stefan Penner ", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test:debug, test:dot, coverage" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "yarn.lock" } ] }, "components": [ { "group": "", "name": "abbrev", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "91b4792588a7738c25f35dd6f63752a2f8776135" } ], "purl": "pkg:npm/abbrev@1.0.9", "type": "library", "bom-ref": "pkg:npm/abbrev@1.0.9", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "align-text", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0cd90a561093f35d0a99256c22b7069433fad117" } ], "purl": "pkg:npm/align-text@0.1.4", "type": "library", "bom-ref": "pkg:npm/align-text@0.1.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "amdefine", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5" } ], "purl": "pkg:npm/amdefine@1.0.1", "type": "library", "bom-ref": "pkg:npm/amdefine@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "argparse", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86" } ], "purl": "pkg:npm/argparse@1.0.9", "type": "library", "bom-ref": "pkg:npm/argparse@1.0.9", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "assertion-error", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "13ca515d86206da0bac66e834dd397d87581094c" } ], "purl": "pkg:npm/assertion-error@1.0.2", "type": "library", "bom-ref": "pkg:npm/assertion-error@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "async", "version": "1.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a" } ], "purl": "pkg:npm/async@1.5.2", "type": "library", "bom-ref": "pkg:npm/async@1.5.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "balanced-match", "version": "0.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "cb3f3e3c732dc0f01ee70b403f302e61d7709838" } ], "purl": "pkg:npm/balanced-match@0.4.2", "type": "library", "bom-ref": "pkg:npm/balanced-match@0.4.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "binaryextensions", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "e597d1a7a6a3558a2d1c7241a16c99965e6aa40f" } ], "purl": "pkg:npm/binaryextensions@2.0.0", "type": "library", "bom-ref": "pkg:npm/binaryextensions@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "7197d7eaa9b87e648390ea61fc66c84427420df9" } ], "purl": "pkg:npm/brace-expansion@1.1.6", "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "browser-stdout", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f" } ], "purl": "pkg:npm/browser-stdout@1.3.0", "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "camelcase", "version": "1.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39" } ], "purl": "pkg:npm/camelcase@1.2.1", "type": "library", "bom-ref": "pkg:npm/camelcase@1.2.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "center-align", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "aa0d32629b6ee972200411cbd4461c907bc2b7ad" } ], "purl": "pkg:npm/center-align@0.1.3", "type": "library", "bom-ref": "pkg:npm/center-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "chai", "version": "3.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4d02637b067fe958bdbfdd3a40ec56fef7373247" } ], "purl": "pkg:npm/chai@3.5.0", "type": "library", "bom-ref": "pkg:npm/chai@3.5.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "test" ] }, { "group": "", "name": "cliui", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4b475760ff80264c762c3a1719032e91c7fea0d1" } ], "purl": "pkg:npm/cliui@2.1.0", "type": "library", "bom-ref": "pkg:npm/cliui@2.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "commander", "version": "2.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9c99094176e12240cb22d6c5146098400fe0f7d4" } ], "purl": "pkg:npm/commander@2.9.0", "type": "library", "bom-ref": "pkg:npm/commander@2.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "purl": "pkg:npm/concat-map@0.0.1", "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "debug", "version": "2.2.0", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "f87057e995b1a1f6ae6a4960664137bc56f039da" } ], "purl": "pkg:npm/debug@2.2.0", "type": "library", "bom-ref": "pkg:npm/debug@2.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ImportedModules", "value": "debug" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 13 } ] } }, { "group": "", "name": "debug", "version": "2.6.1", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "79855090ba2c4e3115cc7d8769491d58f0491351" } ], "purl": "pkg:npm/debug@2.6.1", "type": "library", "bom-ref": "pkg:npm/debug@2.6.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "debug" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 13 } ] } }, { "group": "", "name": "decamelize", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "f6534d15148269b20352e7bee26f501f9a191290" } ], "purl": "pkg:npm/decamelize@1.2.0", "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "deep-eql", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "ef558acab8de25206cd713906d74e56930eb69f2" } ], "purl": "pkg:npm/deep-eql@0.1.3", "type": "library", "bom-ref": "pkg:npm/deep-eql@0.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "deep-is", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34" } ], "purl": "pkg:npm/deep-is@0.1.3", "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "diff", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf" } ], "purl": "pkg:npm/diff@1.4.0", "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "editions", "version": "1.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0907101bdda20fac3cbe334c27cbd0688dc99a5b" } ], "purl": "pkg:npm/editions@1.3.3", "type": "library", "bom-ref": "pkg:npm/editions@1.3.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "escodegen", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5a5b53af4693110bebb0867aa3430dd3b70a1018" } ], "purl": "pkg:npm/escodegen@1.8.1", "type": "library", "bom-ref": "pkg:npm/escodegen@1.8.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "esprima", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "96e3b70d5779f6ad49cd032673d1c312767ba581" } ], "purl": "pkg:npm/esprima@2.7.3", "type": "library", "bom-ref": "pkg:npm/esprima@2.7.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "esprima", "version": "3.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "fdca51cee6133895e3c88d535ce49dbff62a4633" } ], "purl": "pkg:npm/esprima@3.1.3", "type": "library", "bom-ref": "pkg:npm/esprima@3.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "estraverse", "version": "1.9.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "af67f2dc922582415950926091a4005d29c9bb44" } ], "purl": "pkg:npm/estraverse@1.9.3", "type": "library", "bom-ref": "pkg:npm/estraverse@1.9.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "esutils", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b" } ], "purl": "pkg:npm/esutils@2.0.2", "type": "library", "bom-ref": "pkg:npm/esutils@2.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "fast-levenshtein", "version": "2.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3d8a5c66883a16a30ca8643e851f19baa7797917" } ], "purl": "pkg:npm/fast-levenshtein@2.0.6", "type": "library", "bom-ref": "pkg:npm/fast-levenshtein@2.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "purl": "pkg:npm/fs.realpath@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "7.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b4202a69099bbb4d292a7c1b95b6682b67ebdc95" } ], "purl": "pkg:npm/glob@7.0.5", "type": "library", "bom-ref": "pkg:npm/glob@7.0.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "5.0.15", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1bc936b9e02f4a603fcc222ecf7633d30b8b93b1" } ], "purl": "pkg:npm/glob@5.0.15", "type": "library", "bom-ref": "pkg:npm/glob@5.0.15", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8" } ], "purl": "pkg:npm/glob@7.1.1", "type": "library", "bom-ref": "pkg:npm/glob@7.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "graceful-readlink", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725" } ], "purl": "pkg:npm/graceful-readlink@1.0.1", "type": "library", "bom-ref": "pkg:npm/graceful-readlink@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "purl": "pkg:npm/growl@1.9.2", "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "handlebars", "version": "4.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2ce4484850537f9c97a8026d5399b935c4ed4ed7" } ], "purl": "pkg:npm/handlebars@4.0.6", "type": "library", "bom-ref": "pkg:npm/handlebars@4.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "has-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa" } ], "purl": "pkg:npm/has-flag@1.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "heimdalljs", "version": "0.2.3", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "35b82a6a4d73541fc4fb88d2fe2b23608fb4f779" } ], "purl": "pkg:npm/heimdalljs@0.2.3", "type": "library", "bom-ref": "pkg:npm/heimdalljs@0.2.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "heimdalljs" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 15 } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "purl": "pkg:npm/inflight@1.0.6", "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "purl": "pkg:npm/inherits@2.0.3", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-buffer", "version": "1.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "cfc86ccd5dc5a52fa80489111c6920c457e2d98b" } ], "purl": "pkg:npm/is-buffer@1.1.4", "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "isexe", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "36f3e22e60750920f5e7241a476a8c6a42275ad0" } ], "purl": "pkg:npm/isexe@1.1.2", "type": "library", "bom-ref": "pkg:npm/isexe@1.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "istanbul", "version": "0.4.5", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "65c7d73d4c4da84d4f3ac310b918fb0b8033733b" } ], "purl": "pkg:npm/istanbul@0.4.5", "type": "library", "bom-ref": "pkg:npm/istanbul@0.4.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "test" ] }, { "group": "", "name": "istextorbinary", "version": "2.1.0", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "dbed2a6f51be2f7475b68f89465811141b758874" } ], "purl": "pkg:npm/istextorbinary@2.1.0", "type": "library", "bom-ref": "pkg:npm/istextorbinary@2.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "istextorbinary" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 85 } ] } }, { "group": "", "name": "js-yaml", "version": "3.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "02d3e2c0f6beab20248d412c352203827d786721" } ], "purl": "pkg:npm/js-yaml@3.8.2", "type": "library", "bom-ref": "pkg:npm/js-yaml@3.8.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "json3", "version": "3.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1" } ], "purl": "pkg:npm/json3@3.3.2", "type": "library", "bom-ref": "pkg:npm/json3@3.3.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "kind-of", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "475d698a5e49ff5e53d14e3e732429dc8bf4cf47" } ], "purl": "pkg:npm/kind-of@3.1.0", "type": "library", "bom-ref": "pkg:npm/kind-of@3.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lazy-cache", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "a1d78fc3a50474cb80845d3b3b6e1da49a446e8e" } ], "purl": "pkg:npm/lazy-cache@1.0.4", "type": "library", "bom-ref": "pkg:npm/lazy-cache@1.0.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "levn", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee" } ], "purl": "pkg:npm/levn@0.3.0", "type": "library", "bom-ref": "pkg:npm/levn@0.3.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._baseassign", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e" } ], "purl": "pkg:npm/lodash._baseassign@3.2.0", "type": "library", "bom-ref": "pkg:npm/lodash._baseassign@3.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._basecopy", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36" } ], "purl": "pkg:npm/lodash._basecopy@3.0.1", "type": "library", "bom-ref": "pkg:npm/lodash._basecopy@3.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._basecreate", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1bc661614daa7fc311b7d03bf16806a0213cf821" } ], "purl": "pkg:npm/lodash._basecreate@3.0.3", "type": "library", "bom-ref": "pkg:npm/lodash._basecreate@3.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._getnative", "version": "3.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5" } ], "purl": "pkg:npm/lodash._getnative@3.9.1", "type": "library", "bom-ref": "pkg:npm/lodash._getnative@3.9.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "native" ] }, { "group": "", "name": "lodash._isiterateecall", "version": "3.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5203ad7ba425fae842460e696db9cf3e6aac057c" } ], "purl": "pkg:npm/lodash._isiterateecall@3.0.9", "type": "library", "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.create", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7" } ], "purl": "pkg:npm/lodash.create@3.1.1", "type": "library", "bom-ref": "pkg:npm/lodash.create@3.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.isarguments", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2f573d85c6a24289ff00663b491c1d338ff3458a" } ], "purl": "pkg:npm/lodash.isarguments@3.1.0", "type": "library", "bom-ref": "pkg:npm/lodash.isarguments@3.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.isarray", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55" } ], "purl": "pkg:npm/lodash.isarray@3.0.4", "type": "library", "bom-ref": "pkg:npm/lodash.isarray@3.0.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.keys", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a" } ], "purl": "pkg:npm/lodash.keys@3.1.2", "type": "library", "bom-ref": "pkg:npm/lodash.keys@3.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "longest", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097" } ], "purl": "pkg:npm/longest@1.0.1", "type": "library", "bom-ref": "pkg:npm/longest@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2a4e4090b96b2db06a9d7df01055a62a77c9b774" } ], "purl": "pkg:npm/minimatch@3.0.3", "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "purl": "pkg:npm/minimist@0.0.8", "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "purl": "pkg:npm/mkdirp@0.5.1", "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "mkdirp" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 9 } ] } }, { "group": "", "name": "mocha", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "7dc4f45e5088075171a68896814e6ae9eb7a85e3" } ], "purl": "pkg:npm/mocha@3.2.0", "type": "library", "bom-ref": "pkg:npm/mocha@3.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "test" ] }, { "group": "", "name": "ms", "version": "0.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9cd13c03adbff25b65effde7ce864ee952017098" } ], "purl": "pkg:npm/ms@0.7.1", "type": "library", "bom-ref": "pkg:npm/ms@0.7.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ms", "version": "0.7.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "ae25cf2512b3885a1d95d7f037868d8431124765" } ], "purl": "pkg:npm/ms@0.7.2", "type": "library", "bom-ref": "pkg:npm/ms@0.7.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "nopt", "version": "3.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c6465dbf08abcd4db359317f79ac68a646b28ff9" } ], "purl": "pkg:npm/nopt@3.0.6", "type": "library", "bom-ref": "pkg:npm/nopt@3.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "purl": "pkg:npm/once@1.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "optimist", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "da3ea74686fa21a19a111c326e90eb15a0196686" } ], "purl": "pkg:npm/optimist@0.6.1", "type": "library", "bom-ref": "pkg:npm/optimist@0.6.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "optionator", "version": "0.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "364c5e409d3f4d6301d6c0b4c05bba50180aeb64" } ], "purl": "pkg:npm/optionator@0.8.2", "type": "library", "bom-ref": "pkg:npm/optionator@0.8.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "prelude-ls", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "21932a549f5e52ffd9a827f570e04be62a97da54" } ], "purl": "pkg:npm/prelude-ls@1.1.2", "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "repeat-string", "version": "1.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "8dcae470e1c88abc2d600fff4a776286da75e637" } ], "purl": "pkg:npm/repeat-string@1.6.1", "type": "library", "bom-ref": "pkg:npm/repeat-string@1.6.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "resolve", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" } ], "purl": "pkg:npm/resolve@1.1.7", "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "right-align", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "61339b722fe6a3515689210d24e14c96148613ef" } ], "purl": "pkg:npm/right-align@0.1.3", "type": "library", "bom-ref": "pkg:npm/right-align@0.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rimraf", "version": "2.6.1", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "c2338ec643df7a1b7fe5c54fa86f57428a55f33d" } ], "purl": "pkg:npm/rimraf@2.6.1", "type": "library", "bom-ref": "pkg:npm/rimraf@2.6.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "rimraf" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 10 } ] } }, { "group": "", "name": "rsvp", "version": "3.4.0", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "96f397d9c7e294351b3c1456a74b3d0e7542988d" } ], "purl": "pkg:npm/rsvp@3.4.0", "type": "library", "bom-ref": "pkg:npm/rsvp@3.4.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "rsvp" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 4 } ] } }, { "group": "", "name": "rsvp", "version": "3.2.1", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "07cb4a5df25add9e826ebc67dcc9fd89db27d84a" } ], "purl": "pkg:npm/rsvp@3.2.1", "type": "library", "bom-ref": "pkg:npm/rsvp@3.2.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "rsvp" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 4 } ] } }, { "group": "", "name": "source-map", "version": "0.4.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "eba4f5da9c0dc999de68032d8b4f76173652036b" } ], "purl": "pkg:npm/source-map@0.4.4", "type": "library", "bom-ref": "pkg:npm/source-map@0.4.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "source-map", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d" } ], "purl": "pkg:npm/source-map@0.2.0", "type": "library", "bom-ref": "pkg:npm/source-map@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "source-map", "version": "0.5.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "75ce38f52bf0733c5a7f0c118d81334a2bb5f412" } ], "purl": "pkg:npm/source-map@0.5.6", "type": "library", "bom-ref": "pkg:npm/source-map@0.5.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "sprintf-js", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "04e6926f662895354f3dd015203633b857297e2c" } ], "purl": "pkg:npm/sprintf-js@1.0.3", "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "stat-mode", "version": "0.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "e6c80b623123d7d80cf132ce538f346289072502" } ], "purl": "pkg:npm/stat-mode@0.2.2", "type": "library", "bom-ref": "pkg:npm/stat-mode@0.2.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "supports-color", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5" } ], "purl": "pkg:npm/supports-color@3.1.2", "type": "library", "bom-ref": "pkg:npm/supports-color@3.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "supports-color", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "65ac0504b3954171d8a64946b2ae3cbb8a5f54f6" } ], "purl": "pkg:npm/supports-color@3.2.3", "type": "library", "bom-ref": "pkg:npm/supports-color@3.2.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "textextensions", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "be8cf22d65379c151319f88f0335ad8f667abdca" } ], "purl": "pkg:npm/textextensions@2.0.1", "type": "library", "bom-ref": "pkg:npm/textextensions@2.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "type-check", "version": "0.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5884cab512cf1d355e3fb784f30804b2b520db72" } ], "purl": "pkg:npm/type-check@0.3.2", "type": "library", "bom-ref": "pkg:npm/type-check@0.3.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "type-detect", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0ba5ec2a885640e470ea4e8505971900dac58822" } ], "purl": "pkg:npm/type-detect@0.1.1", "type": "library", "bom-ref": "pkg:npm/type-detect@0.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "type-detect", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "762217cc06db258ec48908a1298e8b95121e8ea2" } ], "purl": "pkg:npm/type-detect@1.0.0", "type": "library", "bom-ref": "pkg:npm/type-detect@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "uglify-js", "version": "2.8.11", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "11a51c43d810b47bc00aee4d512cb3947ddd1ac4" } ], "purl": "pkg:npm/uglify-js@2.8.11", "type": "library", "bom-ref": "pkg:npm/uglify-js@2.8.11", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "uglify-to-browserify", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "6e0924d6bda6b5afe349e39a6d632850a0f882b7" } ], "purl": "pkg:npm/uglify-to-browserify@1.0.2", "type": "library", "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "username-sync", "version": "1.0.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6b236438976835218d0c1138e8d91cfa5e885e67ae81bcda8592d2324c2f8115afe72e59a8d63622bcdc826911e33df6b23d56ded3374ee4d432a92a0733be44" } ], "purl": "pkg:npm/username-sync@1.0.2", "type": "library", "bom-ref": "pkg:npm/username-sync@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "username-sync" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 25 } ] } }, { "group": "", "name": "which", "version": "1.2.12", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "de67b5e450269f194909ef23ece4ebe416fa1192" } ], "purl": "pkg:npm/which@1.2.12", "type": "library", "bom-ref": "pkg:npm/which@1.2.12", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "window-size", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d" } ], "purl": "pkg:npm/window-size@0.1.0", "type": "library", "bom-ref": "pkg:npm/window-size@0.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f" } ], "purl": "pkg:npm/wordwrap@0.0.2", "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wordwrap", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "27584810891456a4171c8d0226441ade90cbcaeb" } ], "purl": "pkg:npm/wordwrap@1.0.0", "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107" } ], "purl": "pkg:npm/wordwrap@0.0.3", "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "purl": "pkg:npm/wrappy@1.0.2", "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "yargs", "version": "3.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1" } ], "purl": "pkg:npm/yargs@3.10.0", "type": "library", "bom-ref": "pkg:npm/yargs@3.10.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/abbrev@1.0.9", "dependsOn": [] }, { "ref": "pkg:npm/align-text@0.1.4", "dependsOn": [ "pkg:npm/kind-of@3.1.0", "pkg:npm/longest@1.0.1", "pkg:npm/repeat-string@1.6.1" ] }, { "ref": "pkg:npm/amdefine@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/argparse@1.0.9", "dependsOn": [ "pkg:npm/sprintf-js@1.0.3" ] }, { "ref": "pkg:npm/assertion-error@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/async@1.5.2", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@0.4.2", "dependsOn": [] }, { "ref": "pkg:npm/binaryextensions@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.6", "dependsOn": [ "pkg:npm/balanced-match@0.4.2", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/browser-stdout@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/camelcase@1.2.1", "dependsOn": [] }, { "ref": "pkg:npm/center-align@0.1.3", "dependsOn": [ "pkg:npm/align-text@0.1.4", "pkg:npm/lazy-cache@1.0.4" ] }, { "ref": "pkg:npm/chai@3.5.0", "dependsOn": [ "pkg:npm/assertion-error@1.0.2", "pkg:npm/deep-eql@0.1.3", "pkg:npm/type-detect@1.0.0" ] }, { "ref": "pkg:npm/cliui@2.1.0", "dependsOn": [ "pkg:npm/center-align@0.1.3", "pkg:npm/right-align@0.1.3", "pkg:npm/wordwrap@0.0.2" ] }, { "ref": "pkg:npm/commander@2.9.0", "dependsOn": [ "pkg:npm/graceful-readlink@1.0.1" ] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.2.0", "dependsOn": [ "pkg:npm/ms@0.7.1" ] }, { "ref": "pkg:npm/debug@2.6.1", "dependsOn": [ "pkg:npm/ms@0.7.2" ] }, { "ref": "pkg:npm/decamelize@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/deep-eql@0.1.3", "dependsOn": [ "pkg:npm/type-detect@0.1.1" ] }, { "ref": "pkg:npm/deep-is@0.1.3", "dependsOn": [] }, { "ref": "pkg:npm/diff@1.4.0", "dependsOn": [] }, { "ref": "pkg:npm/editions@1.3.3", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/escodegen@1.8.1", "dependsOn": [ "pkg:npm/esprima@2.7.3", "pkg:npm/estraverse@1.9.3", "pkg:npm/esutils@2.0.2", "pkg:npm/optionator@0.8.2", "pkg:npm/source-map@0.2.0" ] }, { "ref": "pkg:npm/esprima@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/esprima@3.1.3", "dependsOn": [] }, { "ref": "pkg:npm/estraverse@1.9.3", "dependsOn": [] }, { "ref": "pkg:npm/esutils@2.0.2", "dependsOn": [] }, { "ref": "pkg:npm/fast-levenshtein@2.0.6", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.0.5", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.3", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/glob@5.0.15", "dependsOn": [ "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.3", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/glob@7.1.1", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.3", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/graceful-readlink@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/handlebars@4.0.6", "dependsOn": [ "pkg:npm/async@1.5.2", "pkg:npm/optimist@0.6.1", "pkg:npm/source-map@0.4.4", "pkg:npm/uglify-js@2.8.11" ] }, { "ref": "pkg:npm/has-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/heimdalljs@0.2.3", "dependsOn": [ "pkg:npm/rsvp@3.2.1" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/is-buffer@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/isexe@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/istanbul@0.4.5", "dependsOn": [ "pkg:npm/abbrev@1.0.9", "pkg:npm/async@1.5.2", "pkg:npm/escodegen@1.8.1", "pkg:npm/esprima@2.7.3", "pkg:npm/glob@5.0.15", "pkg:npm/handlebars@4.0.6", "pkg:npm/js-yaml@3.8.2", "pkg:npm/mkdirp@0.5.1", "pkg:npm/nopt@3.0.6", "pkg:npm/once@1.4.0", "pkg:npm/resolve@1.1.7", "pkg:npm/supports-color@3.2.3", "pkg:npm/which@1.2.12", "pkg:npm/wordwrap@1.0.0" ] }, { "ref": "pkg:npm/istextorbinary@2.1.0", "dependsOn": [ "pkg:npm/binaryextensions@2.0.0", "pkg:npm/editions@1.3.3", "pkg:npm/textextensions@2.0.1" ] }, { "ref": "pkg:npm/js-yaml@3.8.2", "dependsOn": [ "pkg:npm/argparse@1.0.9", "pkg:npm/esprima@3.1.3" ] }, { "ref": "pkg:npm/json3@3.3.2", "dependsOn": [] }, { "ref": "pkg:npm/kind-of@3.1.0", "dependsOn": [ "pkg:npm/is-buffer@1.1.4" ] }, { "ref": "pkg:npm/lazy-cache@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/levn@0.3.0", "dependsOn": [ "pkg:npm/prelude-ls@1.1.2", "pkg:npm/type-check@0.3.2" ] }, { "ref": "pkg:npm/lodash._baseassign@3.2.0", "dependsOn": [ "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash.keys@3.1.2" ] }, { "ref": "pkg:npm/lodash._basecopy@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._basecreate@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lodash._getnative@3.9.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._isiterateecall@3.0.9", "dependsOn": [] }, { "ref": "pkg:npm/lodash.create@3.1.1", "dependsOn": [ "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._isiterateecall@3.0.9" ] }, { "ref": "pkg:npm/lodash.isarguments@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarray@3.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lodash.keys@3.1.2", "dependsOn": [ "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4" ] }, { "ref": "pkg:npm/longest@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@3.0.3", "dependsOn": [ "pkg:npm/brace-expansion@1.1.6" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/mocha@3.2.0", "dependsOn": [ "pkg:npm/browser-stdout@1.3.0", "pkg:npm/commander@2.9.0", "pkg:npm/debug@2.2.0", "pkg:npm/diff@1.4.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.0.5", "pkg:npm/growl@1.9.2", "pkg:npm/json3@3.3.2", "pkg:npm/lodash.create@3.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@3.1.2" ] }, { "ref": "pkg:npm/ms@0.7.1", "dependsOn": [] }, { "ref": "pkg:npm/ms@0.7.2", "dependsOn": [] }, { "ref": "pkg:npm/nopt@3.0.6", "dependsOn": [ "pkg:npm/abbrev@1.0.9" ] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/optimist@0.6.1", "dependsOn": [ "pkg:npm/minimist@0.0.8", "pkg:npm/wordwrap@0.0.3" ] }, { "ref": "pkg:npm/optionator@0.8.2", "dependsOn": [ "pkg:npm/deep-is@0.1.3", "pkg:npm/fast-levenshtein@2.0.6", "pkg:npm/levn@0.3.0", "pkg:npm/prelude-ls@1.1.2", "pkg:npm/type-check@0.3.2", "pkg:npm/wordwrap@1.0.0" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/prelude-ls@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/repeat-string@1.6.1", "dependsOn": [] }, { "ref": "pkg:npm/resolve@1.1.7", "dependsOn": [] }, { "ref": "pkg:npm/right-align@0.1.3", "dependsOn": [ "pkg:npm/align-text@0.1.4" ] }, { "ref": "pkg:npm/rimraf@2.6.1", "dependsOn": [ "pkg:npm/glob@7.1.1" ] }, { "ref": "pkg:npm/rsvp@3.4.0", "dependsOn": [] }, { "ref": "pkg:npm/rsvp@3.2.1", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.4.4", "dependsOn": [ "pkg:npm/amdefine@1.0.1" ] }, { "ref": "pkg:npm/source-map@0.2.0", "dependsOn": [ "pkg:npm/amdefine@1.0.1" ] }, { "ref": "pkg:npm/source-map@0.5.6", "dependsOn": [] }, { "ref": "pkg:npm/sprintf-js@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/stat-mode@0.2.2", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@3.1.2", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/supports-color@3.2.3", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/textextensions@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/type-check@0.3.2", "dependsOn": [ "pkg:npm/prelude-ls@1.1.2" ] }, { "ref": "pkg:npm/type-detect@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/type-detect@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/uglify-js@2.8.11", "dependsOn": [ "pkg:npm/source-map@0.5.6", "pkg:npm/uglify-to-browserify@1.0.2", "pkg:npm/yargs@3.10.0" ] }, { "ref": "pkg:npm/uglify-to-browserify@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/username-sync@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/which@1.2.12", "dependsOn": [ "pkg:npm/isexe@1.1.2" ] }, { "ref": "pkg:npm/window-size@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/wordwrap@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/wordwrap@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wordwrap@0.0.3", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/yargs@3.10.0", "dependsOn": [ "pkg:npm/camelcase@1.2.1", "pkg:npm/cliui@2.1.0", "pkg:npm/decamelize@1.2.0", "pkg:npm/window-size@0.1.0" ] }, { "ref": "pkg:npm/async-disk-cache@1.3.4", "dependsOn": [ "pkg:npm/abbrev@1.0.9", "pkg:npm/align-text@0.1.4", "pkg:npm/amdefine@1.0.1", "pkg:npm/argparse@1.0.9", "pkg:npm/assertion-error@1.0.2", "pkg:npm/async@1.5.2", "pkg:npm/balanced-match@0.4.2", "pkg:npm/binaryextensions@2.0.0", "pkg:npm/brace-expansion@1.1.6", "pkg:npm/browser-stdout@1.3.0", "pkg:npm/camelcase@1.2.1", "pkg:npm/center-align@0.1.3", "pkg:npm/chai@3.5.0", "pkg:npm/cliui@2.1.0", "pkg:npm/commander@2.9.0", "pkg:npm/concat-map@0.0.1", "pkg:npm/debug@2.2.0", "pkg:npm/debug@2.6.1", "pkg:npm/decamelize@1.2.0", "pkg:npm/deep-eql@0.1.3", "pkg:npm/deep-is@0.1.3", "pkg:npm/diff@1.4.0", "pkg:npm/editions@1.3.3", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/escodegen@1.8.1", "pkg:npm/esprima@2.7.3", "pkg:npm/esprima@3.1.3", "pkg:npm/estraverse@1.9.3", "pkg:npm/esutils@2.0.2", "pkg:npm/fast-levenshtein@2.0.6", "pkg:npm/fs.realpath@1.0.0", "pkg:npm/glob@5.0.15", "pkg:npm/glob@7.0.5", "pkg:npm/glob@7.1.1", "pkg:npm/graceful-readlink@1.0.1", "pkg:npm/growl@1.9.2", "pkg:npm/handlebars@4.0.6", "pkg:npm/has-flag@1.0.0", "pkg:npm/heimdalljs@0.2.3", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/is-buffer@1.1.4", "pkg:npm/isexe@1.1.2", "pkg:npm/istanbul@0.4.5", "pkg:npm/istextorbinary@2.1.0", "pkg:npm/js-yaml@3.8.2", "pkg:npm/json3@3.3.2", "pkg:npm/kind-of@3.1.0", "pkg:npm/lazy-cache@1.0.4", "pkg:npm/levn@0.3.0", "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash._isiterateecall@3.0.9", "pkg:npm/lodash.create@3.1.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4", "pkg:npm/lodash.keys@3.1.2", "pkg:npm/longest@1.0.1", "pkg:npm/minimatch@3.0.3", "pkg:npm/minimist@0.0.8", "pkg:npm/mkdirp@0.5.1", "pkg:npm/mocha@3.2.0", "pkg:npm/ms@0.7.1", "pkg:npm/ms@0.7.2", "pkg:npm/nopt@3.0.6", "pkg:npm/once@1.4.0", "pkg:npm/optimist@0.6.1", "pkg:npm/optionator@0.8.2", "pkg:npm/path-is-absolute@1.0.1", "pkg:npm/prelude-ls@1.1.2", "pkg:npm/repeat-string@1.6.1", "pkg:npm/resolve@1.1.7", "pkg:npm/right-align@0.1.3", "pkg:npm/rimraf@2.6.1", "pkg:npm/rsvp@3.2.1", "pkg:npm/rsvp@3.4.0", "pkg:npm/source-map@0.2.0", "pkg:npm/source-map@0.4.4", "pkg:npm/source-map@0.5.6", "pkg:npm/sprintf-js@1.0.3", "pkg:npm/stat-mode@0.2.2", "pkg:npm/supports-color@3.1.2", "pkg:npm/supports-color@3.2.3", "pkg:npm/textextensions@2.0.1", "pkg:npm/type-check@0.3.2", "pkg:npm/type-detect@0.1.1", "pkg:npm/type-detect@1.0.0", "pkg:npm/uglify-js@2.8.11", "pkg:npm/uglify-to-browserify@1.0.2", "pkg:npm/username-sync@1.0.2", "pkg:npm/which@1.2.12", "pkg:npm/window-size@0.1.0", "pkg:npm/wordwrap@0.0.2", "pkg:npm/wordwrap@0.0.3", "pkg:npm/wordwrap@1.0.0", "pkg:npm/wrappy@1.0.2", "pkg:npm/yargs@3.10.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/async-disk-cache@1.3.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-03T20:12:30Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 3, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'async-disk-cache' with version '1.3.4'." } ] }