{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:a2de1f59-7c68-44f4-9663-09799ba897c6",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-27T07:13:16Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "event-pubsub",
      "group": "",
      "version": "4.3.0",
      "description": "Super light and fast Extensible PubSub events and EventEmitters for Node and the browser with support for ES6 by default, and ES5 versions for older verions of node and older IE/Safari versions. Easy for any developer level. No frills, just high speed pubsub events!",
      "purl": "pkg:npm/event-pubsub@4.3.0",
      "bom-ref": "pkg:npm/event-pubsub@4.3.0",
      "author": "Brandon Nozaki Miller",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/RIAEvangelist/event-pubsub"
        },
        {
          "type": "vcs",
          "url": "https://github.com/RIAEvangelist/event-pubsub.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "bower.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "event-pubsub",
      "version": "",
      "description": "Super light and fast Extensible PubSub events and EventEmitters for Node and the browser with support for ES6 by default, and ES5 versions for older verions of node and older IE/Safari versions. Easy for any developer level. No frills, just high speed pubsub events!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "DBAD"
          }
        }
      ],
      "purl": "pkg:npm/event-pubsub",
      "type": "library",
      "bom-ref": "pkg:npm/event-pubsub",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bower.json"
              }
            ],
            "concludedValue": "bower.json"
          }
        ]
      },
      "tags": [
        "developer"
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/event-pubsub@4.3.0",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/event-pubsub@4.3.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-27T07:13:16Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, July 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'event-pubsub' with version '4.3.0'."
    }
  ]
}