{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:8f7b201f-d8a7-4797-8512-2c686c100463",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-21T13:34:33Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "devframe",
      "group": "",
      "version": "0.2.2",
      "description": "Framework for building generic DevTools",
      "purl": "pkg:npm/devframe@0.2.2",
      "bom-ref": "pkg:npm/devframe@0.2.2",
      "author": "Anthony Fu <anthonyfu117@hotmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, watch, prepack"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/devframes/devframe#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/devframes/devframe.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@modelcontextprotocol\\n@valibot"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@modelcontextprotocol/sdk/package.json\\nnode_modules/@valibot/to-json-schema/package.json\\nnode_modules/birpc/package.json\\nnode_modules/cac/package.json\\nnode_modules/get-port-please/package.json\\nnode_modules/h3/package.json\\nnode_modules/immer/package.json\\nnode_modules/launch-editor/package.json\\nnode_modules/logs-sdk/package.json\\nnode_modules/mlly/package.json\\nnode_modules/mrmime/package.json\\nnode_modules/obug/package.json\\nnode_modules/ohash/package.json\\nnode_modules/open/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/pathe/package.json\\nnode_modules/perfect-debounce/package.json\\nnode_modules/structured-clone-es/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/ua-parser-modern/package.json\\nnode_modules/valibot/package.json\\nnode_modules/whenexpr/package.json\\nnode_modules/ws/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)"
        }
      ],
      "group": "",
      "name": "ws",
      "version": "8.20.0",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ws@8.20.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/websockets/ws"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/websockets/ws.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ws/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "ws,WebSocketServer,ws/WebSocketServer,WebSocket,ws/WebSocket"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ws/package.json"
              }
            ],
            "concludedValue": "node_modules/ws/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/rpc/transports/ws-server.mjs",
            "line": 4
          },
          {
            "location": "dist/server-BO8IDVsJ.mjs",
            "line": 3
          },
          {
            "location": "src/node/server.ts",
            "line": 3
          },
          {
            "location": "src/node/server.ts",
            "line": 10
          },
          {
            "location": "src/rpc/transports/ws-server.ts",
            "line": 4
          },
          {
            "location": "src/rpc/transports/ws-server.ts",
            "line": 8
          },
          {
            "location": "dist/server-BGSrxsQb.d.mts",
            "line": 3
          },
          {
            "location": "dist/ws-server-DKlqI8XP.d.mts",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Anthony Fu <anthonyfu117@hotmail.com>"
        }
      ],
      "group": "",
      "name": "whenexpr",
      "version": "0.1.2",
      "description": "Tiny when-clause expression evaluator, inspired by VS Code's when clauses",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whenexpr@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/antfu/whenexpr#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/antfu/whenexpr.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whenexpr@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/whenexpr/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "whenexpr,WhenExpression,whenexpr/WhenExpression,evaluateWhen,whenexpr/evaluateWhen,resolveContextValue,whenexpr/resolveContextValue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/whenexpr/package.json"
              }
            ],
            "concludedValue": "node_modules/whenexpr/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/when.ts",
            "line": 1
          },
          {
            "location": "src/utils/when.ts",
            "line": 2
          },
          {
            "location": "src/utils/when.ts",
            "line": 57
          },
          {
            "location": "src/utils/when.ts",
            "line": 68
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fabian Hiller"
        }
      ],
      "group": "",
      "name": "valibot",
      "version": "1.4.0",
      "description": "The modular and type safe schema library for validating structural data",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/valibot@1.4.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://valibot.dev"
        },
        {
          "type": "vcs",
          "url": "https://github.com/open-circle/valibot"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valibot@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/valibot/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "valibot,safeParse,valibot/safeParse,GenericSchema,valibot/GenericSchema,InferOutput,valibot/InferOutput,InferInput,valibot/InferInput"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/valibot/package.json"
              }
            ],
            "concludedValue": "node_modules/valibot/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/adapters/cli.mjs",
            "line": 6
          },
          {
            "location": "dist/adapters/cli.mjs",
            "line": 62
          },
          {
            "location": "dist/recipes/open-helpers.mjs",
            "line": 4
          },
          {
            "location": "dist/recipes/open-helpers.mjs",
            "line": 27
          },
          {
            "location": "dist/recipes/open-helpers.mjs",
            "line": 28
          },
          {
            "location": "dist/recipes/open-helpers.mjs",
            "line": 48
          },
          {
            "location": "dist/recipes/open-helpers.mjs",
            "line": 49
          },
          {
            "location": "skills/devframe/templates/spa-devframe.ts",
            "line": 5
          },
          {
            "location": "skills/devframe/templates/spa-devframe.ts",
            "line": 15
          },
          {
            "location": "src/adapters/flags.ts",
            "line": 1
          },
          {
            "location": "src/adapters/flags.ts",
            "line": 2
          },
          {
            "location": "src/adapters/flags.ts",
            "line": 78
          },
          {
            "location": "src/adapters/mcp/build-server.ts",
            "line": 3
          },
          {
            "location": "src/adapters/mcp/to-json-schema.ts",
            "line": 1
          },
          {
            "location": "src/recipes/open-helpers.ts",
            "line": 3
          },
          {
            "location": "src/recipes/open-helpers.ts",
            "line": 27
          },
          {
            "location": "src/recipes/open-helpers.ts",
            "line": 28
          },
          {
            "location": "src/recipes/open-helpers.ts",
            "line": 49
          },
          {
            "location": "src/recipes/open-helpers.ts",
            "line": 50
          },
          {
            "location": "src/rpc/types.ts",
            "line": 1
          },
          {
            "location": "src/rpc/utils.ts",
            "line": 1
          },
          {
            "location": "dist/devframe-DAfZWnpI.d.mts",
            "line": 6
          },
          {
            "location": "dist/recipes/open-helpers.d.mts",
            "line": 2
          },
          {
            "location": "dist/types-DmcujDa5.d.mts",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Anthony Fu <anthonyfu117@hotmail.com>"
        }
      ],
      "group": "",
      "name": "ua-parser-modern",
      "version": "0.1.1",
      "description": "Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data. Supports browser & node.js environment",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ua-parser-modern@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/antfu-collective/ua-parser-modern"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/antfu-collective/ua-parser-modern.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ua-parser-modern@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ua-parser-modern/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "ua-parser-modern,parseUA,ua-parser-modern/parseUA"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ua-parser-modern/package.json"
              }
            ],
            "concludedValue": "node_modules/ua-parser-modern/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/client/rpc-ws.ts",
            "line": 6
          },
          {
            "location": "src/client/rpc-ws.ts",
            "line": 77
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Kevin Deng <sxzz@sxzz.moe>"
        }
      ],
      "group": "",
      "name": "tsdown",
      "version": "0.22.0",
      "description": "The Elegant Bundler for Libraries",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tsdown@0.22.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://tsdown.dev/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/rolldown/tsdown.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsdown@0.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tsdown/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tsdown/package.json"
              }
            ],
            "concludedValue": "node_modules/tsdown/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "",
      "name": "structured-clone-es",
      "version": "2.0.0",
      "description": "An env-agnostic serializer and deserializer with recursion ability and types beyond JSON, based on the HTML structured clone algorithm.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/structured-clone-es@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/antfu-collective/structured-clone-es#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/antfu-collective/structured-clone-es.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/structured-clone-es@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/structured-clone-es/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "structured-clone-es,deserialize,structured-clone-es/deserialize,parse,structured-clone-es/parse,serialize,structured-clone-es/serialize,stringify,structured-clone-es/stringify"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/structured-clone-es/package.json"
              }
            ],
            "concludedValue": "node_modules/structured-clone-es/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/structured-clone.ts",
            "line": 6
          },
          {
            "location": "src/utils/structured-clone.ts",
            "line": 13
          },
          {
            "location": "src/utils/structured-clone.ts",
            "line": 20
          },
          {
            "location": "src/utils/structured-clone.ts",
            "line": 28
          },
          {
            "location": "src/utils/structured-clone.ts",
            "line": 35
          }
        ]
      },
      "tags": [
        "html"
      ]
    },
    {
      "group": "",
      "name": "perfect-debounce",
      "version": "2.1.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/perfect-debounce@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/perfect-debounce@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/perfect-debounce/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "perfect-debounce,debounce,perfect-debounce/debounce"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/perfect-debounce/package.json"
              }
            ],
            "concludedValue": "node_modules/perfect-debounce/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/node/storage.ts",
            "line": 4
          },
          {
            "location": "src/node/storage.ts",
            "line": 40
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathe",
      "version": "2.0.3",
      "description": "Universal filesystem path utils",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pathe@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/pathe@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pathe/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "pathe,dirname,pathe/dirname,resolve,pathe/resolve,join,pathe/join,extname,pathe/extname,normalize,pathe/normalize,pathe/sep"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pathe/package.json"
              }
            ],
            "concludedValue": "node_modules/pathe/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/adapters/build.mjs",
            "line": 10
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 27
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 43
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 46
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 50
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 54
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 55
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 59
          },
          {
            "location": "dist/adapters/build.mjs",
            "line": 67
          },
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 5
          },
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 198
          },
          {
            "location": "dist/dev-CZ9ZQkuO.mjs",
            "line": 9
          },
          {
            "location": "dist/dev-CZ9ZQkuO.mjs",
            "line": 122
          },
          {
            "location": "dist/dev-CZ9ZQkuO.mjs",
            "line": 130
          },
          {
            "location": "dist/dev-CZ9ZQkuO.mjs",
            "line": 291
          },
          {
            "location": "dist/helpers/vite.mjs",
            "line": 6
          },
          {
            "location": "dist/helpers/vite.mjs",
            "line": 35
          },
          {
            "location": "dist/host-h3-DEfOpa0j.mjs",
            "line": 16
          },
          {
            "location": "dist/host-h3-DEfOpa0j.mjs",
            "line": 1051
          },
          {
            "location": "dist/node/internal.mjs",
            "line": 5
          },
          {
            "location": "dist/node/internal.mjs",
            "line": 11
          },
          {
            "location": "dist/storage-D-jLaxDA.mjs",
            "line": 4
          },
          {
            "location": "dist/storage-D-jLaxDA.mjs",
            "line": 111
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 2
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 32
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 38
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 42
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 48
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 86
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 131
          },
          {
            "location": "src/adapters/build.ts",
            "line": 8
          },
          {
            "location": "src/adapters/build.ts",
            "line": 53
          },
          {
            "location": "src/adapters/build.ts",
            "line": 73
          },
          {
            "location": "src/adapters/build.ts",
            "line": 81
          },
          {
            "location": "src/adapters/build.ts",
            "line": 86
          },
          {
            "location": "src/adapters/build.ts",
            "line": 90
          },
          {
            "location": "src/adapters/build.ts",
            "line": 91
          },
          {
            "location": "src/adapters/build.ts",
            "line": 105
          },
          {
            "location": "src/adapters/build.ts",
            "line": 118
          },
          {
            "location": "src/adapters/dev.ts",
            "line": 8
          },
          {
            "location": "src/adapters/dev.ts",
            "line": 153
          },
          {
            "location": "src/adapters/mcp/build-server.ts",
            "line": 14
          },
          {
            "location": "src/adapters/mcp/build-server.ts",
            "line": 111
          },
          {
            "location": "src/adapters/mcp/build-server.ts",
            "line": 112
          },
          {
            "location": "src/helpers/vite.ts",
            "line": 3
          },
          {
            "location": "src/helpers/vite.ts",
            "line": 80
          },
          {
            "location": "src/node/host-h3.ts",
            "line": 4
          },
          {
            "location": "src/node/host-h3.ts",
            "line": 50
          },
          {
            "location": "src/node/host-h3.ts",
            "line": 51
          },
          {
            "location": "src/node/internal/context.ts",
            "line": 4
          },
          {
            "location": "src/node/internal/context.ts",
            "line": 63
          },
          {
            "location": "src/node/storage.ts",
            "line": 3
          },
          {
            "location": "src/node/storage.ts",
            "line": 41
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 8
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 56
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 69
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 82
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 92
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 148
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 205
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "7.3.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@7.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@7.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-limit/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "p-limit"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/p-limit/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/rpc/dump/index.ts",
            "line": 11
          },
          {
            "location": "src/rpc/dump/index.ts",
            "line": 130
          },
          {
            "location": "src/rpc/dump/index.ts",
            "line": 187
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "open",
      "version": "11.0.0",
      "description": "Open stuff like URLs, files, executables. Cross-platform.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/open@11.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/open@11.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/open/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "open"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/open/package.json"
              }
            ],
            "concludedValue": "node_modules/open/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/open.ts",
            "line": 1
          },
          {
            "location": "src/utils/open.ts",
            "line": 17
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ohash",
      "version": "2.0.11",
      "description": "Simple object hashing, serialization and comparison utils.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ohash@2.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/ohash@2.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ohash/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "ohash,hash,ohash/hash"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ohash/package.json"
              }
            ],
            "concludedValue": "node_modules/ohash/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/hash.ts",
            "line": 1
          },
          {
            "location": "src/utils/hash.ts",
            "line": 7
          }
        ]
      },
      "tags": [
        "serialization"
      ]
    },
    {
      "authors": [
        {
          "name": "Kevin Deng <sxzz@sxzz.moe>"
        }
      ],
      "group": "",
      "name": "obug",
      "version": "2.1.1",
      "description": "A lightweight JavaScript debugging utility, forked from debug, featuring TypeScript and ESM support.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/obug@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sxzz/obug#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sxzz/obug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/obug@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/obug/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "obug,createDebug,obug/createDebug"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/obug/package.json"
              }
            ],
            "concludedValue": "node_modules/obug/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/node/host-functions.ts",
            "line": 5
          },
          {
            "location": "src/node/host-functions.ts",
            "line": 10
          },
          {
            "location": "src/node/rpc-shared-state.ts",
            "line": 4
          },
          {
            "location": "src/node/rpc-shared-state.ts",
            "line": 7
          },
          {
            "location": "src/node/rpc-shared-state.ts",
            "line": 8
          },
          {
            "location": "src/node/rpc-streaming.ts",
            "line": 10
          },
          {
            "location": "src/node/rpc-streaming.ts",
            "line": 13
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "mrmime",
      "version": "2.0.1",
      "description": "A tiny (2.8kB) and fast utility for getting a MIME type from an extension or filename",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mrmime@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/mrmime@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mrmime/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "mrmime,lookup,mrmime/lookup"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mrmime/package.json"
              }
            ],
            "concludedValue": "node_modules/mrmime/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 6
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 54
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 7
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 101
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mlly",
      "version": "1.8.2",
      "description": "Missing ECMAScript module utils for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mlly@1.8.2",
      "type": "library",
      "bom-ref": "pkg:npm/mlly@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mlly/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mlly/package.json"
              }
            ],
            "concludedValue": "node_modules/mlly/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Anthony Fu <anthonyfu117@hotmail.com>"
        }
      ],
      "group": "",
      "name": "logs-sdk",
      "version": "0.0.6",
      "description": "Structured diagnostic code library",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/logs-sdk@0.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/vercel-labs/logs-sdk#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vercel-labs/logs-sdk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/logs-sdk@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/logs-sdk/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "logs-sdk,consoleReporter,logs-sdk/consoleReporter,createLogger,logs-sdk/createLogger,defineDiagnostics,logs-sdk/defineDiagnostics,logs-sdk/formatters/ansi,ansiFormatter,logs-sdk/formatters/ansi/ansiFormatter,plainFormatter,logs-sdk/plainFormatter,Logger,logs-sdk/Logger"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/logs-sdk/package.json"
              }
            ],
            "concludedValue": "node_modules/logs-sdk/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/diagnostics-DNxVjo6X.mjs",
            "line": 2
          },
          {
            "location": "dist/diagnostics-DNxVjo6X.mjs",
            "line": 3
          },
          {
            "location": "dist/diagnostics-DNxVjo6X.mjs",
            "line": 5
          },
          {
            "location": "dist/diagnostics-DNxVjo6X.mjs",
            "line": 50
          },
          {
            "location": "dist/host-h3-DEfOpa0j.mjs",
            "line": 9
          },
          {
            "location": "dist/host-h3-DEfOpa0j.mjs",
            "line": 10
          },
          {
            "location": "dist/host-h3-DEfOpa0j.mjs",
            "line": 210
          },
          {
            "location": "dist/serialization-CwO31axa.mjs",
            "line": 1
          },
          {
            "location": "dist/serialization-CwO31axa.mjs",
            "line": 3
          },
          {
            "location": "dist/serialization-CwO31axa.mjs",
            "line": 30
          },
          {
            "location": "src/node/diagnostics.ts",
            "line": 2
          },
          {
            "location": "src/node/diagnostics.ts",
            "line": 3
          },
          {
            "location": "src/node/diagnostics.ts",
            "line": 5
          },
          {
            "location": "src/node/diagnostics.ts",
            "line": 68
          },
          {
            "location": "src/node/host-diagnostics.ts",
            "line": 3
          },
          {
            "location": "src/node/host-diagnostics.ts",
            "line": 4
          },
          {
            "location": "src/node/host-diagnostics.ts",
            "line": 31
          },
          {
            "location": "src/rpc/diagnostics.ts",
            "line": 1
          },
          {
            "location": "src/rpc/diagnostics.ts",
            "line": 3
          },
          {
            "location": "src/rpc/diagnostics.ts",
            "line": 45
          },
          {
            "location": "dist/devframe-DAfZWnpI.d.mts",
            "line": 3
          },
          {
            "location": "dist/node/index.d.mts",
            "line": 6
          },
          {
            "location": "dist/diagnostics-DNxVjo6X.mjs",
            "line": 52
          },
          {
            "location": "dist/host-h3-DEfOpa0j.mjs",
            "line": 212
          },
          {
            "location": "src/node/diagnostics.ts",
            "line": 70
          },
          {
            "location": "src/node/host-diagnostics.ts",
            "line": 33
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evan You"
        }
      ],
      "group": "",
      "name": "launch-editor",
      "version": "2.13.2",
      "description": "launch editor from node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/launch-editor@2.13.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yyx990803/launch-editor#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yyx990803/launch-editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/launch-editor@2.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/launch-editor/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "launch-editor"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/launch-editor/package.json"
              }
            ],
            "concludedValue": "node_modules/launch-editor/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/launch-editor.ts",
            "line": 1
          },
          {
            "location": "src/utils/launch-editor.ts",
            "line": 13
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Michel Weststrate <info@michel.codes>"
        }
      ],
      "group": "",
      "name": "immer",
      "version": "11.1.8",
      "description": "Create your next immutable state by mutating the current one",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/immer@11.1.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/immerjs/immer#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/immerjs/immer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immer@11.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/immer/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "immer,Objectish,immer/Objectish,Patch,immer/Patch,applyPatches,immer/applyPatches,enablePatches,immer/enablePatches,produce,immer/produce,produceWithPatches,immer/produceWithPatches"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/immer/package.json"
              }
            ],
            "concludedValue": "node_modules/immer/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/shared-state.ts",
            "line": 2
          },
          {
            "location": "src/utils/shared-state.ts",
            "line": 3
          },
          {
            "location": "src/utils/shared-state.ts",
            "line": 92
          },
          {
            "location": "src/utils/shared-state.ts",
            "line": 93
          },
          {
            "location": "src/utils/shared-state.ts",
            "line": 104
          },
          {
            "location": "src/utils/shared-state.ts",
            "line": 112
          }
        ]
      }
    },
    {
      "group": "",
      "name": "h3",
      "version": "2.0.1-rc.22",
      "description": "Minimal H(TTP) framework built for high performance and portability.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/h3@2.0.1-rc.22",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://h3.dev"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/h3@2.0.1-rc.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/h3/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "h3,h3/H3,toNodeHandler,h3/toNodeHandler,defineHandler,h3/defineHandler,withBase,h3/withBase,EventHandler,h3/EventHandler"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/h3/package.json"
              }
            ],
            "concludedValue": "node_modules/h3/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/dev-CZ9ZQkuO.mjs",
            "line": 10
          },
          {
            "location": "dist/server-BO8IDVsJ.mjs",
            "line": 6
          },
          {
            "location": "dist/server-BO8IDVsJ.mjs",
            "line": 17
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 3
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 88
          },
          {
            "location": "dist/utils/serve-static.mjs",
            "line": 121
          },
          {
            "location": "src/adapters/cli.ts",
            "line": 2
          },
          {
            "location": "src/adapters/dev.ts",
            "line": 7
          },
          {
            "location": "src/node/server.ts",
            "line": 9
          },
          {
            "location": "src/node/server.ts",
            "line": 60
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 1
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 6
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 150
          },
          {
            "location": "src/utils/serve-static.ts",
            "line": 191
          },
          {
            "location": "dist/adapters/cli.d.mts",
            "line": 2
          },
          {
            "location": "dist/adapters/dev.d.mts",
            "line": 3
          },
          {
            "location": "dist/server-BGSrxsQb.d.mts",
            "line": 4
          },
          {
            "location": "dist/utils/serve-static.d.mts",
            "line": 2
          }
        ]
      },
      "tags": [
        "framework",
        "performance"
      ]
    },
    {
      "group": "",
      "name": "get-port-please",
      "version": "3.2.0",
      "description": "Get an available TCP port to listen",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-port-please@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-port-please@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-port-please/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "get-port-please,getPort,get-port-please/getPort"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-port-please/package.json"
              }
            ],
            "concludedValue": "node_modules/get-port-please/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/adapters/dev.ts",
            "line": 6
          },
          {
            "location": "src/adapters/dev.ts",
            "line": 94
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "egoist <0x142857@gmail.com>"
        }
      ],
      "group": "",
      "name": "cac",
      "version": "7.0.0",
      "description": "Simple yet powerful framework for building command-line apps.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cac@7.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cacjs/cac#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/cacjs/cac.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/cac@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cac/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "cac,cac/CAC"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cac/package.json"
              }
            ],
            "concludedValue": "node_modules/cac/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/adapters/cli.mjs",
            "line": 5
          },
          {
            "location": "dist/adapters/cli.mjs",
            "line": 84
          },
          {
            "location": "src/adapters/cli.ts",
            "line": 1
          },
          {
            "location": "src/adapters/cli.ts",
            "line": 5
          },
          {
            "location": "src/adapters/cli.ts",
            "line": 44
          },
          {
            "location": "dist/adapters/cli.d.mts",
            "line": 3
          },
          {
            "location": "dist/devframe-DAfZWnpI.d.mts",
            "line": 5
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Anthony Fu <anthonyfu117@hotmail.com>"
        }
      ],
      "group": "",
      "name": "birpc",
      "version": "4.0.0",
      "description": "Message based Two-way remote procedure call",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/birpc@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/antfu-collective/birpc#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/antfu-collective/birpc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/birpc@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/birpc/package.json"
        },
        {
          "name": "ExportedModules",
          "value": "birpc,BirpcFn,birpc/BirpcFn,BirpcReturn,birpc/BirpcReturn"
        },
        {
          "name": "ImportedModules",
          "value": "birpc,createBirpc,birpc/createBirpc,createBirpcGroup,birpc/createBirpcGroup,BirpcOptions,birpc/BirpcOptions,BirpcReturn,birpc/BirpcReturn,BirpcGroup,birpc/BirpcGroup,ChannelOptions,birpc/ChannelOptions,EventOptions,birpc/EventOptions,BirpcFn,birpc/BirpcFn"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/birpc/package.json"
              }
            ],
            "concludedValue": "node_modules/birpc/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/rpc/client.mjs",
            "line": 1
          },
          {
            "location": "dist/rpc/client.mjs",
            "line": 5
          },
          {
            "location": "dist/rpc/server.mjs",
            "line": 1
          },
          {
            "location": "dist/rpc/server.mjs",
            "line": 4
          },
          {
            "location": "src/client/rpc.ts",
            "line": 1
          },
          {
            "location": "src/node/host-functions.ts",
            "line": 1
          },
          {
            "location": "src/node/server.ts",
            "line": 1
          },
          {
            "location": "src/rpc/client.ts",
            "line": 1
          },
          {
            "location": "src/rpc/client.ts",
            "line": 2
          },
          {
            "location": "src/rpc/client.ts",
            "line": 15
          },
          {
            "location": "src/rpc/server.ts",
            "line": 1
          },
          {
            "location": "src/rpc/server.ts",
            "line": 2
          },
          {
            "location": "src/rpc/server.ts",
            "line": 13
          },
          {
            "location": "src/rpc/transports/ws-client.ts",
            "line": 1
          },
          {
            "location": "src/rpc/transports/ws-server.ts",
            "line": 1
          },
          {
            "location": "src/rpc/types.ts",
            "line": 4
          },
          {
            "location": "dist/client/index.d.mts",
            "line": 5
          },
          {
            "location": "dist/devframe-DAfZWnpI.d.mts",
            "line": 4
          },
          {
            "location": "dist/node/index.d.mts",
            "line": 7
          },
          {
            "location": "dist/rpc/client.d.mts",
            "line": 1
          },
          {
            "location": "dist/rpc/server.d.mts",
            "line": 1
          },
          {
            "location": "dist/server-BGSrxsQb.d.mts",
            "line": 2
          },
          {
            "location": "dist/types-DmcujDa5.d.mts",
            "line": 1
          },
          {
            "location": "dist/ws-client-CrLsflnY.d.mts",
            "line": 2
          },
          {
            "location": "dist/ws-server-DKlqI8XP.d.mts",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fabian Hiller"
        }
      ],
      "group": "@valibot",
      "name": "to-json-schema",
      "version": "1.7.0",
      "description": "The official JSON schema converter for Valibot",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40valibot/to-json-schema@1.7.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://valibot.dev"
        },
        {
          "type": "vcs",
          "url": "https://github.com/open-circle/valibot"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@valibot/to-json-schema@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@valibot/to-json-schema/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@valibot/to-json-schema,toJsonSchema,@valibot/to-json-schema/toJsonSchema"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@valibot/to-json-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@valibot/to-json-schema/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 8
          },
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 85
          },
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 133
          },
          {
            "location": "src/adapters/mcp/to-json-schema.ts",
            "line": 2
          },
          {
            "location": "src/adapters/mcp/to-json-schema.ts",
            "line": 14
          },
          {
            "location": "src/adapters/mcp/to-json-schema.ts",
            "line": 68
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Anthropic"
        },
        {
          "name": " PBC (https://anthropic.com)"
        }
      ],
      "group": "@modelcontextprotocol",
      "name": "sdk",
      "version": "1.29.0",
      "description": "Model Context Protocol implementation for TypeScript",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.29.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://modelcontextprotocol.io"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/modelcontextprotocol/typescript-sdk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@modelcontextprotocol/sdk@1.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@modelcontextprotocol/sdk/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@modelcontextprotocol/sdk/server/index.js,Server,@modelcontextprotocol/sdk/server/index.js/Server,@modelcontextprotocol/sdk/types.js,CallToolRequestSchema,@modelcontextprotocol/sdk/types.js/CallToolRequestSchema,ListResourcesRequestSchema,@modelcontextprotocol/sdk/types.js/ListResourcesRequestSchema,ListToolsRequestSchema,@modelcontextprotocol/sdk/types.js/ListToolsRequestSchema,ReadResourceRequestSchema,@modelcontextprotocol/sdk/types.js/ReadResourceRequestSchema,@modelcontextprotocol/sdk/server/stdio.js,StdioServerTransport,@modelcontextprotocol/sdk/server/stdio.js/StdioServerTransport"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "true"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "official-sdk"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@modelcontextprotocol/sdk"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "tags": [
        "mcp",
        "mcp-sdk",
        "official-mcp-sdk",
        "trusted-source"
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@modelcontextprotocol/sdk/package.json"
              }
            ],
            "concludedValue": "node_modules/@modelcontextprotocol/sdk/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 6
          },
          {
            "location": "src/adapters/mcp/build-server.ts",
            "line": 6
          },
          {
            "location": "src/adapters/mcp/transports.ts",
            "line": 1
          },
          {
            "location": "dist/adapters/mcp.d.mts",
            "line": 2
          },
          {
            "location": "dist/adapters/mcp.mjs",
            "line": 7
          },
          {
            "location": "src/adapters/mcp/build-server.ts",
            "line": 12
          },
          {
            "location": "dist/transports-DTFoMUbE.mjs",
            "line": 1
          },
          {
            "location": "src/adapters/mcp/transports.ts",
            "line": 2
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/devframe@0.2.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-21T13:34:33Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'devframe' with version '0.2.2'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 23 source files."
    }
  ]
}