{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:cbcfeb47-48fd-4f4a-ae53-d762645e5f81", "version": 1, "metadata": { "timestamp": "2026-07-30T19:51:24Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "chevrotain", "group": "", "version": "12.0.0", "description": "Chevrotain is a high performance fault tolerant javascript parsing DSL for building recursive decent parsers", "purl": "pkg:npm/chevrotain@12.0.0", "bom-ref": "pkg:npm/chevrotain@12.0.0", "author": "Shahar Soel", "properties": [ { "name": "cdx:npm:scripts", "value": "---------- CI FLOWS --------, ci, build, test, version, ---------- DEV FLOWS --------, watch, unit-tests, quick-build, ---------- BUILD STEPS --------, clean, compile, compile:watch, coverage, ---------- BUNDLING --------, bundle, bundle:esm:regular, bundle:esm:min" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "externalReferences": [ { "type": "website", "url": "https://chevrotain.io/docs/" }, { "type": "vcs", "url": "git://github.com/Chevrotain/chevrotain.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@chevrotain\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@chevrotain/cst-dts-gen/package.json\\nnode_modules/@chevrotain/gast/package.json\\nnode_modules/@chevrotain/regexp-to-ast/package.json\\nnode_modules/@chevrotain/types/package.json\\nnode_modules/@chevrotain/utils/package.json\\nnode_modules/@types/jsdom/package.json\\nnode_modules/@types/sinon-chai/package.json\\nnode_modules/@types/sinon/package.json\\nnode_modules/error-stack-parser/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/gen-esm-wrapper/package.json\\nnode_modules/gitty/package.json\\nnode_modules/jsdom/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/require-from-string/package.json\\nnode_modules/sinon-chai/package.json\\nnode_modules/sinon/package.json\\nnode_modules/xregexp/package.json" } ] }, "components": [ { "authors": [ { "name": "Steven Levithan " } ], "group": "", "name": "xregexp", "version": "5.1.2", "description": "Extended regular expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/xregexp@5.1.2", "externalReferences": [ { "type": "website", "url": "http://xregexp.com/" }, { "type": "vcs", "url": "https://github.com/slevithan/xregexp.git" } ], "type": "library", "bom-ref": "pkg:npm/xregexp@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xregexp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xregexp/package.json" } ], "concludedValue": "node_modules/xregexp/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "sinon-chai", "version": "4.0.1", "description": "Extends Chai with assertions for the Sinon.JS mocking framework.", "scope": "optional", "licenses": [ { "expression": "(BSD-2-Clause OR WTFPL)" } ], "purl": "pkg:npm/sinon-chai@4.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/chaijs/sinon-chai.git" } ], "type": "framework", "bom-ref": "pkg:npm/sinon-chai@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sinon-chai/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sinon-chai/package.json" } ], "concludedValue": "node_modules/sinon-chai/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Christian Johansen" } ], "group": "", "name": "sinon", "version": "21.0.2", "description": "JavaScript test spies, stubs and mocks.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/sinon@21.0.2", "externalReferences": [ { "type": "website", "url": "https://sinonjs.org/" }, { "type": "vcs", "url": "http://github.com/sinonjs/sinon.git" } ], "type": "library", "bom-ref": "pkg:npm/sinon@21.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sinon/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sinon/package.json" } ], "concludedValue": "node_modules/sinon/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Vsevolod Strukchinsky (github.com/floatdrop)" } ], "group": "", "name": "require-from-string", "version": "2.0.2", "description": "Require module from string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/require-from-string@2.0.2", "type": "library", "bom-ref": "pkg:npm/require-from-string@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/require-from-string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-from-string/package.json" } ], "concludedValue": "node_modules/require-from-string/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "jsonfile", "version": "6.2.0", "description": "Easily read/write JSON files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/jsonfile@6.2.0", "type": "library", "bom-ref": "pkg:npm/jsonfile@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonfile/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonfile/package.json" } ], "concludedValue": "node_modules/jsonfile/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "jsdom", "version": "28.1.0", "description": "A JavaScript implementation of many web standards", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/jsdom@28.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jsdom/jsdom.git" } ], "type": "library", "bom-ref": "pkg:npm/jsdom@28.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsdom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsdom/package.json" } ], "concludedValue": "node_modules/jsdom/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Emery Rose Hall (https://emeryrose.me)" } ], "group": "", "name": "gitty", "version": "3.7.2", "description": "A Node.js wrapper for the Git CLI", "scope": "required", "licenses": [ { "license": { "id": "LGPL-3.0", "url": "https://opensource.org/licenses/LGPL-3.0" } } ], "purl": "pkg:npm/gitty@3.7.2", "externalReferences": [ { "type": "vcs", "url": "https://gitlab.com/emrose/gitty.git" } ], "type": "library", "bom-ref": "pkg:npm/gitty@3.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/gitty/package.json" }, { "name": "ImportedModules", "value": "gitty" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gitty/package.json" } ], "concludedValue": "node_modules/gitty/package.json" } ], "occurrences": [ { "location": "scripts/version-update.js#1" } ] } }, { "authors": [ { "name": "Anna Henningsen " } ], "group": "", "name": "gen-esm-wrapper", "version": "1.1.3", "description": "Generate ESM wrapper files for CommonJS modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/gen-esm-wrapper@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/addaleax/gen-esm-wrapper" }, { "type": "vcs", "url": "https://github.com/addaleax/gen-esm-wrapper.git" } ], "type": "library", "bom-ref": "pkg:npm/gen-esm-wrapper@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/gen-esm-wrapper/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gen-esm-wrapper/package.json" } ], "concludedValue": "node_modules/gen-esm-wrapper/package.json" } ] } }, { "group": "", "name": "esbuild", "version": "0.27.3", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/esbuild@0.27.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/esbuild@0.27.3", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ] } }, { "group": "", "name": "error-stack-parser", "version": "2.1.4", "description": "Extract meaning from JS Errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/error-stack-parser@2.1.4", "externalReferences": [ { "type": "website", "url": "https://www.stacktracejs.com" }, { "type": "vcs", "url": "git://github.com/stacktracejs/error-stack-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/error-stack-parser@2.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/error-stack-parser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-stack-parser/package.json" } ], "concludedValue": "node_modules/error-stack-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "@types", "name": "sinon-chai", "version": "4.0.0", "description": "TypeScript definitions for sinon-chai", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/sinon-chai@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinon-chai" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/sinon-chai@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/sinon-chai/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/sinon-chai/package.json" } ], "concludedValue": "node_modules/@types/sinon-chai/package.json" } ] } }, { "group": "@types", "name": "sinon", "version": "21.0.0", "description": "TypeScript definitions for sinon", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/sinon@21.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinon" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/sinon@21.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/sinon/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/sinon/package.json" } ], "concludedValue": "node_modules/@types/sinon/package.json" } ] } }, { "group": "@types", "name": "jsdom", "version": "28.0.0", "description": "TypeScript definitions for jsdom", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/jsdom@28.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/jsdom" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/jsdom@28.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/jsdom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/jsdom/package.json" } ], "concludedValue": "node_modules/@types/jsdom/package.json" } ] } }, { "authors": [ { "name": "Shahar Soel" } ], "group": "@chevrotain", "name": "utils", "version": "12.0.0", "description": "common utilities", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40chevrotain/utils@12.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/Chevrotain/chevrotain.git" } ], "type": "library", "bom-ref": "pkg:npm/@chevrotain/utils@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@chevrotain/utils/package.json" }, { "name": "ImportedModules", "value": "@chevrotain/utils,toFastProperties,@chevrotain/utils/toFastProperties,timer,@chevrotain/utils/timer,PRINT_ERROR,@chevrotain/utils/PRINT_ERROR,PRINT_WARNING,@chevrotain/utils/PRINT_WARNING" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chevrotain/utils/package.json" } ], "concludedValue": "node_modules/@chevrotain/utils/package.json" } ], "occurrences": [ { "location": "lib/src/parse/parser/parser.js#1" }, { "location": "lib/src/parse/parser/traits/perf_tracer.js#1" }, { "location": "lib/src/scan/lexer.js#3" }, { "location": "lib/src/scan/lexer_public.js#2" }, { "location": "lib/src/scan/reg_exp.js#2" }, { "location": "src/parse/parser/parser.ts#1" } ] } }, { "authors": [ { "name": "Shahar Soel" } ], "group": "@chevrotain", "name": "types", "version": "12.0.0", "description": "Type Signatures and API Website for Chevrotain", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40chevrotain/types@12.0.0", "externalReferences": [ { "type": "website", "url": "https://chevrotain.io/documentation/" }, { "type": "vcs", "url": "git://github.com/Chevrotain/chevrotain.git" } ], "type": "library", "bom-ref": "pkg:npm/@chevrotain/types@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@chevrotain/types/package.json" }, { "name": "ImportedModules", "value": "@chevrotain/types,ISerializedGast,@chevrotain/types/ISerializedGast,CstNode,@chevrotain/types/CstNode,CstNodeLocation,@chevrotain/types/CstNodeLocation,IToken,@chevrotain/types/IToken,IParserErrorMessageProvider,@chevrotain/types/IParserErrorMessageProvider,IProductionWithOccurrence,@chevrotain/types/IProductionWithOccurrence,TokenType,@chevrotain/types/TokenType,IRecognitionException,@chevrotain/types/IRecognitionException,IRecognizerContext,@chevrotain/types/IRecognizerContext,IProduction,@chevrotain/types/IProduction,ILookaheadStrategy,@chevrotain/types/ILookaheadStrategy,ILookaheadValidationError,@chevrotain/types/ILookaheadValidationError,IOrAlt,@chevrotain/types/IOrAlt,OptionalProductionType,@chevrotain/types/OptionalProductionType,Rule,@chevrotain/types/Rule,Alternation,@chevrotain/types/Alternation,NonTerminal,@chevrotain/types/NonTerminal,IParserConfig,@chevrotain/types/IParserConfig,IRuleConfig,@chevrotain/types/IRuleConfig,TokenVocabulary,@chevrotain/types/TokenVocabulary,AtLeastOneSepMethodOpts,@chevrotain/types/AtLeastOneSepMethodOpts,ConsumeMethodOpts,@chevrotain/types/ConsumeMethodOpts,DSLMethodOpts,@chevrotain/types/DSLMethodOpts,DSLMethodOptsWithErr,@chevrotain/types/DSLMethodOptsWithErr,GrammarAction,@chevrotain/types/GrammarAction,ManySepMethodOpts,@chevrotain/types/ManySepMethodOpts,OrMethodOpts,@chevrotain/types/OrMethodOpts,SubruleMethodOpts,@chevrotain/types/SubruleMethodOpts,ParserMethod,@chevrotain/types/ParserMethod,ILexerErrorMessageProvider,@chevrotain/types/ILexerErrorMessageProvider" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chevrotain/types/package.json" } ], "concludedValue": "node_modules/@chevrotain/types/package.json" } ], "occurrences": [ { "location": "src/diagrams/render_public.ts#2" }, { "location": "src/parse/cst/cst.ts#1" }, { "location": "src/parse/errors_public.ts#13" }, { "location": "src/parse/exceptions_public.ts#5" }, { "location": "src/parse/grammar/follow.ts#5" }, { "location": "src/parse/grammar/gast/gast_resolver_public.ts#8" }, { "location": "src/parse/grammar/llk_lookahead.ts#8" }, { "location": "src/parse/grammar/types.ts#7" }, { "location": "src/parse/parser/parser.ts#20" }, { "location": "src/parse/parser/traits/error_handler.ts#5" }, { "location": "src/parse/parser/traits/lexer_adapter.ts#2" }, { "location": "src/parse/parser/traits/recognizer_api.ts#15" }, { "location": "src/parse/parser/types.ts#6" }, { "location": "src/scan/lexer_errors_public.ts#1" } ] }, "tags": [ "api" ] }, { "group": "@chevrotain", "name": "regexp-to-ast", "version": "12.0.0", "description": "Parses a Regular Expression and outputs an AST", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40chevrotain/regexp-to-ast@12.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/Chevrotain/chevrotain.git" } ], "type": "library", "bom-ref": "pkg:npm/@chevrotain/regexp-to-ast@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@chevrotain/regexp-to-ast/package.json" }, { "name": "ImportedModules", "value": "@chevrotain/regexp-to-ast,BaseRegExpVisitor,@chevrotain/regexp-to-ast/BaseRegExpVisitor,RegExpParser,@chevrotain/regexp-to-ast/RegExpParser,Alternative,@chevrotain/regexp-to-ast/Alternative,Assertion,@chevrotain/regexp-to-ast/Assertion,Atom,@chevrotain/regexp-to-ast/Atom,Disjunction,@chevrotain/regexp-to-ast/Disjunction,RegExpPattern,@chevrotain/regexp-to-ast/RegExpPattern" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chevrotain/regexp-to-ast/package.json" } ], "concludedValue": "node_modules/@chevrotain/regexp-to-ast/package.json" } ], "occurrences": [ { "location": "lib/src/scan/lexer.js#1" }, { "location": "lib/src/scan/reg_exp.js#1" }, { "location": "lib/src/scan/reg_exp_parser.js#1" }, { "location": "src/scan/reg_exp_parser.ts#8" } ] } }, { "group": "@chevrotain", "name": "gast", "version": "12.0.0", "description": "Grammar AST structure for Chevrotain Parsers", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40chevrotain/gast@12.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/Chevrotain/chevrotain.git" } ], "type": "library", "bom-ref": "pkg:npm/@chevrotain/gast@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@chevrotain/gast/package.json" }, { "name": "ExportedModules", "value": "@chevrotain/gast,Alternation,@chevrotain/gast/Alternation,Alternative,@chevrotain/gast/Alternative,NonTerminal,@chevrotain/gast/NonTerminal,Option,@chevrotain/gast/Option,Repetition,@chevrotain/gast/Repetition,RepetitionMandatory,@chevrotain/gast/RepetitionMandatory,RepetitionMandatoryWithSeparator,@chevrotain/gast/RepetitionMandatoryWithSeparator,RepetitionWithSeparator,@chevrotain/gast/RepetitionWithSeparator,Rule,@chevrotain/gast/Rule,Terminal,@chevrotain/gast/Terminal,serializeGrammar,@chevrotain/gast/serializeGrammar,serializeProduction,@chevrotain/gast/serializeProduction,GAstVisitor,@chevrotain/gast/GAstVisitor" }, { "name": "ImportedModules", "value": "@chevrotain/gast,getProductionDslName,@chevrotain/gast/getProductionDslName,NonTerminal,@chevrotain/gast/NonTerminal,Rule,@chevrotain/gast/Rule,Terminal,@chevrotain/gast/Terminal,Alternation,@chevrotain/gast/Alternation,Alternative,@chevrotain/gast/Alternative,GAstVisitor,@chevrotain/gast/GAstVisitor,isOptionalProd,@chevrotain/gast/isOptionalProd,Option,@chevrotain/gast/Option,Repetition,@chevrotain/gast/Repetition,RepetitionMandatory,@chevrotain/gast/RepetitionMandatory,RepetitionMandatoryWithSeparator,@chevrotain/gast/RepetitionMandatoryWithSeparator,RepetitionWithSeparator,@chevrotain/gast/RepetitionWithSeparator,isBranchingProd,@chevrotain/gast/isBranchingProd,isSequenceProd,@chevrotain/gast/isSequenceProd,serializeGrammar,@chevrotain/gast/serializeGrammar" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chevrotain/gast/package.json" } ], "concludedValue": "node_modules/@chevrotain/gast/package.json" } ], "occurrences": [ { "location": "lib/src/api.js#16" }, { "location": "lib/src/api.js#18" }, { "location": "lib/src/parse/errors_public.js#2" }, { "location": "lib/src/parse/grammar/checks.js#2" }, { "location": "lib/src/parse/grammar/first.js#1" }, { "location": "lib/src/parse/grammar/follow.js#4" }, { "location": "lib/src/parse/grammar/interpreter.js#3" }, { "location": "lib/src/parse/grammar/lookahead.js#4" }, { "location": "lib/src/parse/grammar/resolver.js#2" }, { "location": "lib/src/parse/grammar/rest.js#1" }, { "location": "lib/src/parse/parser/traits/gast_recorder.js#1" }, { "location": "lib/src/parse/parser/traits/looksahead.js#3" }, { "location": "lib/src/parse/parser/traits/recognizer_api.js#5" }, { "location": "src/api.ts#57" }, { "location": "src/api.ts#65" }, { "location": "src/parse/errors_public.ts#8" }, { "location": "src/parse/grammar/follow.ts#4" }, { "location": "src/parse/grammar/gast/gast_resolver_public.ts#1" }, { "location": "src/parse/grammar/resolver.ts#5" }, { "location": "src/parse/parser/parser.ts#34" }, { "location": "src/parse/parser/traits/recognizer_api.ts#21" } ] } }, { "group": "@chevrotain", "name": "cst-dts-gen", "version": "12.0.0", "description": "Generates type definitions for Chevrotain CST nodes", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/%40chevrotain/cst-dts-gen@12.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/Chevrotain/chevrotain.git" } ], "type": "library", "bom-ref": "pkg:npm/@chevrotain/cst-dts-gen@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@chevrotain/cst-dts-gen/package.json" }, { "name": "ExportedModules", "value": "@chevrotain/cst-dts-gen" }, { "name": "ImportedModules", "value": "@chevrotain/cst-dts-gen" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@chevrotain/cst-dts-gen/package.json" } ], "concludedValue": "node_modules/@chevrotain/cst-dts-gen/package.json" } ], "occurrences": [ { "location": "lib/src/api.js#19" }, { "location": "src/api.ts#67" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/chevrotain@12.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-30T19:51:24Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, July 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'chevrotain' with version '12.0.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 18 source files." } ] }