{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d694c0d7-41a3-4077-929f-73958f7225cd", "version": 1, "metadata": { "timestamp": "2026-08-11T21:29:09Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "micromatch", "group": "", "version": "4.0.8", "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", "purl": "pkg:npm/micromatch@4.0.8", "bom-ref": "pkg:npm/micromatch@4.0.8", "author": "Jon Schlinkert (https://github.com/jonschlinkert)", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/micromatch" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@ungap" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@ungap/promise-all-settled/package.json\\nnode_modules/ansi-colors/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/anymatch/package.json\\nnode_modules/argparse/package.json\\nnode_modules/autolinker/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/binary-extensions/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/braces/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chalk/node_modules/supports-color/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-with-sourcemaps/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/debug/node_modules/ms/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/diff/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/extend-shallow/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/gfm-code-block-regex/package.json\\nnode_modules/gfm-code-blocks/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/glob/node_modules/brace-expansion/package.json\\nnode_modules/glob/node_modules/minimatch/package.json\\nnode_modules/glob/package.json\\nnode_modules/growl/package.json\\nnode_modules/gulp-format-md/package.json\\nnode_modules/gulp-header/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/he/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/is-binary-path/package.json\\nnode_modules/is-extendable/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-number/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/isobject/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/list-item/node_modules/fill-range/package.json\\nnode_modules/list-item/node_modules/to-regex-range/package.json\\nnode_modules/list-item/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash._reinterpolate/package.json\\nnode_modules/lodash.template/package.json\\nnode_modules/lodash.templatesettings/package.json\\nnode_modules/log-symbols/package.json\\nnode_modules/markdown-utils/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mocha/node_modules/brace-expansion/package.json\\nnode_modules/mocha/node_modules/minimatch/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/nanoid/package.json\\nnode_modules/normalize-path/package.json\\nnode_modules/once/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pretty-remarkable/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/remarkable/node_modules/argparse/package.json\\nnode_modules/remarkable/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/sections/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/sort-by-value/package.json\\nnode_modules/source-map/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/text-table/package.json\\nnode_modules/through2/package.json\\nnode_modules/time-require/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/which/package.json\\nnode_modules/workerpool/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/xtend/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs-unparser/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "yargs-unparser", "version": "2.0.0", "description": "Converts back a yargs argv object to its original array form", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-unparser@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-unparser" } ], "type": "library", "bom-ref": "pkg:npm/yargs-unparser@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-unparser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-unparser/package.json" } ], "concludedValue": "node_modules/yargs-unparser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "20.2.4", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@20.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@20.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "16.2.0", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@16.2.0", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@16.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "7.0.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jos de Jong (https://github.com/josdejong)" } ], "group": "", "name": "workerpool", "version": "6.2.0", "description": "Offload tasks to a pool of workers on node.js and in the browser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/workerpool@6.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/josdejong/workerpool" }, { "type": "vcs", "url": "git://github.com/josdejong/workerpool.git" } ], "type": "library", "bom-ref": "pkg:npm/workerpool@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/workerpool/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/workerpool/package.json" } ], "concludedValue": "node_modules/workerpool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "to-regex-range", "version": "5.0.1", "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/to-regex-range" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-regex-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-regex-range/package.json" } ], "concludedValue": "node_modules/to-regex-range/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "time-require", "version": "2.0.1", "description": "Displays the execution time for Node.js modules loading by hooking require() calls", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/time-require@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/time-require" } ], "type": "library", "bom-ref": "pkg:npm/time-require@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/time-require/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/time-require/package.json" } ], "concludedValue": "node_modules/time-require/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "2.0.5", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "text-table", "version": "0.2.0", "description": "borderless text tables with alignment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-table@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/text-table" }, { "type": "vcs", "url": "git://github.com/substack/text-table.git" } ], "type": "library", "bom-ref": "pkg:npm/text-table@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/text-table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/text-table/package.json" } ], "concludedValue": "node_modules/text-table/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "8.1.1", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@8.1.1", "type": "library", "bom-ref": "pkg:npm/supports-color@8.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "3.1.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@3.1.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Alexandru Marasteanu (http://alexei.ro/)" } ], "group": "", "name": "sprintf-js", "version": "1.0.3", "description": "JavaScript sprintf implementation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexei/sprintf.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/sprintf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sprintf-js/package.json" } ], "concludedValue": "node_modules/sprintf-js/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "sort-by-value", "version": "0.1.0", "description": "Re-order the objects in an array so that values of a specified property match the order of a provided array of values.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sort-by-value@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/sort-by-value" } ], "type": "library", "bom-ref": "pkg:npm/sort-by-value@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sort-by-value/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sort-by-value/package.json" } ], "concludedValue": "node_modules/sort-by-value/package.json" } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "6.0.0", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serialize-javascript@6.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "sections", "version": "1.0.0", "description": "Manipulate sections in a markdown string. A 'section' is a block of content preceded by a valid markdown ATX heading.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sections@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/sections" } ], "type": "library", "bom-ref": "pkg:npm/sections@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sections/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sections/package.json" } ], "concludedValue": "node_modules/sections/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "group": "", "name": "remarkable", "version": "1.7.4", "description": "Markdown parser, done right. 100% Commonmark support, extensions, syntax plugins, high speed - all in one.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/remarkable@1.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/remarkable" } ], "type": "library", "bom-ref": "pkg:npm/remarkable@1.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/remarkable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/remarkable/package.json" } ], "concludedValue": "node_modules/remarkable/package.json" } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@1.0.10", "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/remarkable/node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/remarkable/node_modules/argparse/package.json" } ], "concludedValue": "node_modules/remarkable/node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "3.6.0", "description": "Recursive version of fs.readdir with streaming API.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readdirp@3.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@3.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] }, "tags": [ "api" ] }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "pretty-remarkable", "version": "1.0.0", "description": "Plugin for prettifying markdown with Remarkable using custom renderer rules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-remarkable@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/pretty-remarkable" } ], "type": "library", "bom-ref": "pkg:npm/pretty-remarkable@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-remarkable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-remarkable/package.json" } ], "concludedValue": "node_modules/pretty-remarkable/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "2.3.2", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@2.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "ImportedModules", "value": "picomatch,picomatch/lib/utils" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ], "occurrences": [ { "location": "index.js", "line": 5 }, { "location": "index.js", "line": 6 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "normalize-path", "version": "3.0.0", "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-path@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/normalize-path" } ], "type": "library", "bom-ref": "pkg:npm/normalize-path@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-path/package.json" } ], "concludedValue": "node_modules/normalize-path/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "nanoid", "version": "3.3.1", "description": "A tiny (130 bytes), secure URL-friendly unique string ID generator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nanoid@3.3.1", "type": "library", "bom-ref": "pkg:npm/nanoid@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nanoid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nanoid/package.json" } ], "concludedValue": "node_modules/nanoid/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "9.2.2", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@9.2.2", "externalReferences": [ { "type": "website", "url": "https://mochajs.org/" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@9.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "4.2.1", "description": "a glob matcher in javascript", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@4.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/minimatch/package.json" }, { "name": "ImportedModules", "value": "minimatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/minimatch/package.json" } ], "occurrences": [ { "location": "bench/first-match-minimatch.js", "line": 2 }, { "location": "bench/index.js", "line": 6 }, { "location": "bench/load-time.js", "line": 3 } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.18", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.18", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/brace-expansion/package.json" }, { "name": "SrcFile", "value": "node_modules/glob/node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/glob/node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "ImportedModules", "value": "minimist" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ], "occurrences": [ { "location": "bench/index.js", "line": 5 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "5.1.9", "description": "a glob matcher in javascript", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@5.1.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@5.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "ImportedModules", "value": "minimatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ], "occurrences": [ { "location": "bench/first-match-minimatch.js", "line": 2 }, { "location": "bench/index.js", "line": 6 }, { "location": "bench/load-time.js", "line": 3 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "markdown-utils", "version": "1.0.0", "description": "Tiny helpers for creating consistenly-formatted markdown snippets.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/markdown-utils@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/markdown-utils" } ], "type": "library", "bom-ref": "pkg:npm/markdown-utils@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/markdown-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/markdown-utils/package.json" } ], "concludedValue": "node_modules/markdown-utils/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "log-symbols", "version": "4.1.0", "description": "Colored symbols for various log levels. Example: `✔︎ Success`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/log-symbols@4.1.0", "type": "library", "bom-ref": "pkg:npm/log-symbols@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/log-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/log-symbols/package.json" } ], "concludedValue": "node_modules/log-symbols/package.json" } ] }, "tags": [ "log" ] }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash.templatesettings", "version": "4.2.0", "description": "The Lodash method `_.templateSettings` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.templatesettings@4.2.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.templatesettings@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.templatesettings/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.templatesettings/package.json" } ], "concludedValue": "node_modules/lodash.templatesettings/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash.template", "version": "4.18.1", "description": "The Lodash method `_.template` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.template@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.template@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.template/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.template/package.json" } ], "concludedValue": "node_modules/lodash.template/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash._reinterpolate", "version": "3.0.0", "description": "The modern build of lodash’s internal `reInterpolate` as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash._reinterpolate@3.0.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash._reinterpolate@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash._reinterpolate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash._reinterpolate/package.json" } ], "concludedValue": "node_modules/lodash._reinterpolate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "list-item", "version": "2.0.0", "description": "Generate a single formatted list item, allowing you to easily generate lists with proper indentation, bullets, numbers or other leading characters.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/list-item@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/list-item" } ], "type": "library", "bom-ref": "pkg:npm/list-item@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/list-item/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/list-item/package.json" } ], "concludedValue": "node_modules/list-item/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "to-regex-range", "version": "4.0.3", "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/to-regex-range" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/list-item/node_modules/to-regex-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/list-item/node_modules/to-regex-range/package.json" } ], "concludedValue": "node_modules/list-item/node_modules/to-regex-range/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "fill-range", "version": "6.0.0", "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@6.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/fill-range" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/list-item/node_modules/fill-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/list-item/node_modules/fill-range/package.json" } ], "concludedValue": "node_modules/list-item/node_modules/fill-range/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "4.1.0", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@4.1.0", "type": "library", "bom-ref": "pkg:npm/js-yaml@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "isobject", "version": "3.0.1", "description": "Returns true if the value is an object and not an array or null.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isobject@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/isobject" } ], "type": "library", "bom-ref": "pkg:npm/isobject@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/isobject/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isobject/package.json" } ], "concludedValue": "node_modules/isobject/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "0.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-unicode-supported@0.1.0", "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "2.1.0", "description": "Check if a value is a plain object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-obj@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-number", "version": "7.0.0", "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-number" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number/package.json" } ], "concludedValue": "node_modules/is-number/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-glob", "version": "4.0.3", "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-glob@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/is-glob" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-glob/package.json" } ], "concludedValue": "node_modules/is-glob/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-extglob", "version": "2.1.1", "description": "Returns true if a string has an extglob.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-extglob" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-extglob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-extglob/package.json" } ], "concludedValue": "node_modules/is-extglob/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-extendable", "version": "0.1.1", "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extendable@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-extendable" } ], "type": "library", "bom-ref": "pkg:npm/is-extendable@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-extendable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-extendable/package.json" } ], "concludedValue": "node_modules/is-extendable/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-binary-path", "version": "2.1.0", "description": "Check if a file path is a binary file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-binary-path@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-binary-path@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-binary-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-binary-path/package.json" } ], "concludedValue": "node_modules/is-binary-path/package.json" } ] }, "tags": [ "binary" ] }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.2.0", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/he@1.2.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Michael J. Ryan (http://github.com/tracker1)" } ], "group": "", "name": "gulp-header", "version": "1.8.12", "description": "Gulp extension to add header to file(s) in the pipeline.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gulp-header@1.8.12", "externalReferences": [ { "type": "vcs", "url": "git://github.com/tracker1/gulp-header.git" } ], "type": "library", "bom-ref": "pkg:npm/gulp-header@1.8.12", "properties": [ { "name": "SrcFile", "value": "node_modules/gulp-header/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gulp-header/package.json" } ], "concludedValue": "node_modules/gulp-header/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "gulp-format-md", "version": "2.0.0", "description": "Gulp plugin for beautifying markdown using pretty-remarkable.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gulp-format-md@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/gulp-format-md" } ], "type": "library", "bom-ref": "pkg:npm/gulp-format-md@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gulp-format-md/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gulp-format-md/package.json" } ], "concludedValue": "node_modules/gulp-format-md/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "growl", "version": "1.10.5", "description": "Growl unobtrusive notifications", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/growl@1.10.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/tj/node-growl.git" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.10.5", "properties": [ { "name": "SrcFile", "value": "node_modules/growl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/growl/package.json" } ], "concludedValue": "node_modules/growl/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (https://gulpjs.com/)" } ], "group": "", "name": "glob-parent", "version": "5.1.2", "description": "Extract the non-magic parent path from a glob string.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob-parent@5.1.2", "type": "library", "bom-ref": "pkg:npm/glob-parent@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/glob-parent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob-parent/package.json" } ], "concludedValue": "node_modules/glob-parent/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.2.0", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/minimatch/package.json" }, { "name": "ImportedModules", "value": "minimatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/glob/node_modules/minimatch/package.json" } ], "occurrences": [ { "location": "bench/first-match-minimatch.js", "line": 2 }, { "location": "bench/index.js", "line": 6 }, { "location": "bench/load-time.js", "line": 3 } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "gfm-code-blocks", "version": "1.0.0", "description": "Extract gfm (GitHub Flavored Markdown) fenced code blocks from a string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gfm-code-blocks@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/gfm-code-blocks" } ], "type": "library", "bom-ref": "pkg:npm/gfm-code-blocks@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gfm-code-blocks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gfm-code-blocks/package.json" } ], "concludedValue": "node_modules/gfm-code-blocks/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "gfm-code-block-regex", "version": "1.0.0", "description": "RegExp for gfm (GitHub Flavored Markdown) fenced code blocks.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gfm-code-block-regex@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/regexhq/gfm-code-block-regex" } ], "type": "library", "bom-ref": "pkg:npm/gfm-code-block-regex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/gfm-code-block-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gfm-code-block-regex/package.json" } ], "concludedValue": "node_modules/gfm-code-block-regex/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughskennedy.com)" } ], "group": "", "name": "flat", "version": "5.0.2", "description": "Take a nested Javascript object and flatten it, or unflatten an object with delimited keys", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/flat@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/flat" }, { "type": "vcs", "url": "git://github.com/hughsk/flat.git" } ], "type": "library", "bom-ref": "pkg:npm/flat@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/flat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat/package.json" } ], "concludedValue": "node_modules/flat/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "5.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@5.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "fill-range", "version": "7.1.1", "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@7.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/fill-range" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fill-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fill-range/package.json" } ], "concludedValue": "node_modules/fill-range/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "extend-shallow", "version": "2.0.1", "description": "Extend an object with the properties of additional objects. node.js/javascript util.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend-shallow@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/extend-shallow" } ], "type": "library", "bom-ref": "pkg:npm/extend-shallow@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/extend-shallow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extend-shallow/package.json" } ], "concludedValue": "node_modules/extend-shallow/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "4.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@4.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "group": "", "name": "diff", "version": "5.0.0", "description": "A javascript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "4.0.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@4.0.0", "type": "library", "bom-ref": "pkg:npm/decamelize@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Josh Junon " } ], "group": "", "name": "debug", "version": "4.3.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.3.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.2", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.2", "type": "library", "bom-ref": "pkg:npm/ms@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/node_modules/ms/package.json" } ], "concludedValue": "node_modules/debug/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.3", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Florian Reiterer " } ], "group": "", "name": "concat-with-sourcemaps", "version": "1.1.0", "description": "Concatenate file contents with a custom separator and generate a source map", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-with-sourcemaps@1.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/floridoo/concat-with-sourcemaps" } ], "type": "library", "bom-ref": "pkg:npm/concat-with-sourcemaps@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-with-sourcemaps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-with-sourcemaps/package.json" } ], "concludedValue": "node_modules/concat-with-sourcemaps/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "7.0.4", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@7.0.4", "type": "library", "bom-ref": "pkg:npm/cliui@7.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "3.5.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@3.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@3.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/chalk/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "6.3.0", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@6.3.0", "type": "library", "bom-ref": "pkg:npm/camelcase@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "braces", "version": "3.0.3", "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/braces" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/braces/package.json" }, { "name": "ImportedModules", "value": "braces" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/braces/package.json" } ], "concludedValue": "node_modules/braces/package.json" } ], "occurrences": [ { "location": "index.js", "line": 4 } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "2.1.4", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@2.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "binary-extensions", "version": "2.3.0", "description": "List of binary file extensions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/binary-extensions@2.3.0", "type": "library", "bom-ref": "pkg:npm/binary-extensions@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/binary-extensions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/binary-extensions/package.json" } ], "concludedValue": "node_modules/binary-extensions/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Gregory Jacobs " } ], "group": "", "name": "autolinker", "version": "0.28.1", "description": "Utility to automatically link the URLs, email addresses, and Twitter handles in a given block of text/HTML", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/autolinker@0.28.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gregjacobs/Autolinker.js" }, { "type": "vcs", "url": "git://github.com/gregjacobs/Autolinker.js.git" } ], "type": "library", "bom-ref": "pkg:npm/autolinker@0.28.1", "properties": [ { "name": "SrcFile", "value": "node_modules/autolinker/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/autolinker/package.json" } ], "concludedValue": "node_modules/autolinker/package.json" } ] } }, { "group": "", "name": "argparse", "version": "2.0.1", "description": "CLI arguments parser. Native port of python's argparse.", "scope": "optional", "licenses": [ { "license": { "id": "Python-2.0", "url": "https://opensource.org/licenses/Python-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@2.0.1", "type": "library", "bom-ref": "pkg:npm/argparse@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] } }, { "authors": [ { "name": "Elan Shanker (https://github.com/es128)" } ], "group": "", "name": "anymatch", "version": "3.1.3", "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/anymatch@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/anymatch" }, { "type": "vcs", "url": "https://github.com/micromatch/anymatch" } ], "type": "library", "bom-ref": "pkg:npm/anymatch@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/anymatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/anymatch/package.json" } ], "concludedValue": "node_modules/anymatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Brian Woodward (https://github.com/doowb)" } ], "group": "", "name": "ansi-colors", "version": "4.1.1", "description": "Easily add ANSI colors to your text and symbols in the terminal. A faster drop-in replacement for chalk, kleur and turbocolor (without the dependencies and rendering bugs).", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-colors@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/doowb/ansi-colors" } ], "type": "library", "bom-ref": "pkg:npm/ansi-colors@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-colors/package.json" }, { "name": "ImportedModules", "value": "ansi-colors" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-colors/package.json" } ], "concludedValue": "node_modules/ansi-colors/package.json" } ], "occurrences": [ { "location": "bench/index.js", "line": 4 } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "@ungap", "name": "promise-all-settled", "version": "1.1.2", "description": "A cross platform Promise.allSettled polyfill", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40ungap/promise-all-settled@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ungap/promise-all-settled#readme" }, { "type": "vcs", "url": "git+https://github.com/ungap/promise-all-settled.git" } ], "type": "library", "bom-ref": "pkg:npm/@ungap/promise-all-settled@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@ungap/promise-all-settled/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@ungap/promise-all-settled/package.json" } ], "concludedValue": "node_modules/@ungap/promise-all-settled/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/micromatch@4.0.8" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-11T21:29:09Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'micromatch' with version '4.0.8'. The package type in this SBOM is npm with a single purl namespace '@ungap' described under components. The components were identified from 119 source files." } ] }