{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:05828c9e-981b-4cff-bbf8-23f202fa381a", "version": 1, "metadata": { "timestamp": "2026-09-21T18:08:58Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "api-extractor", "group": "@microsoft", "version": "7.58.10", "description": "Analyze the exported API for a TypeScript library and generate reviews, documentation, and .d.ts rollups", "purl": "pkg:npm/%40microsoft/api-extractor@7.58.10", "bom-ref": "pkg:npm/@microsoft/api-extractor@7.58.10", "properties": [ { "name": "cdx:npm:bin", "value": "api-extractor" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "build, _phase:build, _phase:test" }, { "name": "cdx:npm:buildScripts", "value": "build, _phase:build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://api-extractor.com" }, { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@microsoft\\n@rushstack\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@microsoft/api-extractor-model/package.json\\nnode_modules/@microsoft/tsdoc-config/package.json\\nnode_modules/@microsoft/tsdoc/package.json\\nnode_modules/@rushstack/heft/package.json\\nnode_modules/@rushstack/node-core-library/package.json\\nnode_modules/@rushstack/rig-package/package.json\\nnode_modules/@rushstack/terminal/package.json\\nnode_modules/@rushstack/ts-command-line/package.json\\nnode_modules/@types/resolve/package.json\\nnode_modules/@types/semver/package.json\\nnode_modules/decoupled-local-node-rig/package.json\\nnode_modules/diff/package.json\\nnode_modules/eslint/package.json\\nnode_modules/local-eslint-config/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/resolve/package.json\\nnode_modules/semver/package.json\\nnode_modules/source-map/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "ImportedModules", "value": "typescript" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ], "occurrences": [ { "location": "lib-commonjs/aedoc/PackageDocComment.js", "line": 39 }, { "location": "lib-commonjs/analyzer/AstDeclaration.js", "line": 39 }, { "location": "lib-commonjs/analyzer/AstReferenceResolver.js", "line": 39 }, { "location": "lib-commonjs/analyzer/AstSymbolTable.js", "line": 40 }, { "location": "lib-commonjs/analyzer/ExportAnalyzer.js", "line": 39 }, { "location": "lib-commonjs/analyzer/Span.js", "line": 39 }, { "location": "lib-commonjs/analyzer/SyntaxHelpers.js", "line": 39 }, { "location": "lib-commonjs/analyzer/TypeScriptHelpers.js", "line": 40 }, { "location": "lib-commonjs/analyzer/TypeScriptInternals.js", "line": 40 }, { "location": "lib-commonjs/api/CompilerState.js", "line": 40 }, { "location": "lib-commonjs/api/Extractor.js", "line": 41 }, { "location": "lib-commonjs/collector/Collector.js", "line": 39 }, { "location": "lib-commonjs/collector/CollectorEntity.js", "line": 39 }, { "location": "lib-commonjs/collector/MessageRouter.js", "line": 39 }, { "location": "lib-commonjs/enhancers/DocCommentEnhancer.js", "line": 39 }, { "location": "lib-commonjs/enhancers/ValidationEnhancer.js", "line": 40 }, { "location": "lib-commonjs/generators/ApiModelGenerator.js", "line": 41 }, { "location": "lib-commonjs/generators/ApiReportGenerator.js", "line": 39 }, { "location": "lib-commonjs/generators/DeclarationReferenceGenerator.js", "line": 40 }, { "location": "lib-commonjs/generators/DtsEmitHelpers.js", "line": 39 }, { "location": "lib-commonjs/generators/DtsRollupGenerator.js", "line": 39 }, { "location": "lib-commonjs/generators/ExcerptBuilder.js", "line": 39 }, { "location": "lib-esm/aedoc/PackageDocComment.js", "line": 3 }, { "location": "lib-esm/aedoc/PackageDocComment.js", "line": 23 }, { "location": "lib-esm/aedoc/PackageDocComment.js", "line": 42 }, { "location": "lib-esm/aedoc/PackageDocComment.js", "line": 43 }, { "location": "lib-esm/analyzer/AstDeclaration.js", "line": 3 }, { "location": "lib-esm/analyzer/AstDeclaration.js", "line": 37 }, { "location": "lib-esm/analyzer/AstDeclaration.js", "line": 42 }, { "location": "lib-esm/analyzer/AstDeclaration.js", "line": 44 }, { "location": "lib-esm/analyzer/AstReferenceResolver.js", "line": 3 }, { "location": "lib-esm/analyzer/AstSymbolTable.js", "line": 4 }, { "location": "lib-esm/analyzer/AstSymbolTable.js", "line": 169 }, { "location": "lib-esm/analyzer/AstSymbolTable.js", "line": 170 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 3 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 86 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 169 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 172 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 175 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 538 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 552 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 553 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 616 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 660 }, { "location": "lib-esm/analyzer/Span.js", "line": 3 }, { "location": "lib-esm/analyzer/SyntaxHelpers.js", "line": 3 }, { "location": "lib-esm/analyzer/SyntaxHelpers.js", "line": 29 }, { "location": "lib-esm/analyzer/SyntaxHelpers.js", "line": 33 }, { "location": "lib-esm/analyzer/TypeScriptHelpers.js", "line": 4 }, { "location": "lib-esm/analyzer/TypeScriptHelpers.js", "line": 110 }, { "location": "lib-esm/analyzer/TypeScriptHelpers.js", "line": 223 }, { "location": "lib-esm/analyzer/TypeScriptHelpers.js", "line": 225 }, { "location": "lib-esm/analyzer/TypeScriptHelpers.js", "line": 232 }, { "location": "lib-esm/analyzer/TypeScriptInternals.js", "line": 4 }, { "location": "lib-esm/analyzer/TypeScriptInternals.js", "line": 23 }, { "location": "lib-esm/analyzer/TypeScriptInternals.js", "line": 36 }, { "location": "lib-esm/analyzer/TypeScriptInternals.js", "line": 55 }, { "location": "lib-esm/analyzer/TypeScriptInternals.js", "line": 111 }, { "location": "lib-esm/api/CompilerState.js", "line": 4 }, { "location": "lib-esm/api/CompilerState.js", "line": 29 }, { "location": "lib-esm/api/CompilerState.js", "line": 50 }, { "location": "lib-esm/api/CompilerState.js", "line": 52 }, { "location": "lib-esm/api/CompilerState.js", "line": 92 }, { "location": "lib-esm/api/Extractor.js", "line": 5 }, { "location": "lib-esm/collector/Collector.js", "line": 3 }, { "location": "lib-esm/collector/Collector.js", "line": 708 }, { "location": "lib-esm/collector/CollectorEntity.js", "line": 3 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 3 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 114 }, { "location": "lib-esm/enhancers/DocCommentEnhancer.js", "line": 3 }, { "location": "lib-esm/enhancers/ValidationEnhancer.js", "line": 4 }, { "location": "lib-esm/enhancers/ValidationEnhancer.js", "line": 204 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 5 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 287 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 613 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 616 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 624 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 829 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 831 }, { "location": "lib-esm/generators/ApiReportGenerator.js", "line": 3 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 4 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 46 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 61 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 189 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 190 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 202 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 250 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 258 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 276 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 3 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 134 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 151 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 155 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 168 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 171 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 178 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 181 }, { "location": "lib-esm/generators/DtsRollupGenerator.js", "line": 3 }, { "location": "lib-esm/generators/ExcerptBuilder.js", "line": 3 }, { "location": "src/aedoc/PackageDocComment.ts", "line": 4 }, { "location": "src/aedoc/PackageDocComment.ts", "line": 31 }, { "location": "src/aedoc/PackageDocComment.ts", "line": 52 }, { "location": "src/aedoc/PackageDocComment.ts", "line": 53 }, { "location": "src/analyzer/AstDeclaration.ts", "line": 4 }, { "location": "src/analyzer/AstDeclaration.ts", "line": 86 }, { "location": "src/analyzer/AstDeclaration.ts", "line": 92 }, { "location": "src/analyzer/AstDeclaration.ts", "line": 94 }, { "location": "src/analyzer/AstModule.ts", "line": 4 }, { "location": "src/analyzer/AstNamespaceImport.ts", "line": 4 }, { "location": "src/analyzer/AstReferenceResolver.ts", "line": 4 }, { "location": "src/analyzer/AstSymbol.ts", "line": 4 }, { "location": "src/analyzer/AstSymbolTable.ts", "line": 6 }, { "location": "src/analyzer/AstSymbolTable.ts", "line": 249 }, { "location": "src/analyzer/AstSymbolTable.ts", "line": 250 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 4 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 159 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 268 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 271 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 275 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 744 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 758 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 759 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 856 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 914 }, { "location": "src/analyzer/SourceFileLocationFormatter.ts", "line": 6 }, { "location": "src/analyzer/Span.ts", "line": 4 }, { "location": "src/analyzer/SyntaxHelpers.ts", "line": 4 }, { "location": "src/analyzer/SyntaxHelpers.ts", "line": 32 }, { "location": "src/analyzer/SyntaxHelpers.ts", "line": 37 }, { "location": "src/analyzer/TypeScriptHelpers.ts", "line": 6 }, { "location": "src/analyzer/TypeScriptHelpers.ts", "line": 152 }, { "location": "src/analyzer/TypeScriptHelpers.ts", "line": 292 }, { "location": "src/analyzer/TypeScriptHelpers.ts", "line": 300 }, { "location": "src/analyzer/TypeScriptHelpers.ts", "line": 308 }, { "location": "src/analyzer/TypeScriptInternals.ts", "line": 6 }, { "location": "src/analyzer/TypeScriptInternals.ts", "line": 38 }, { "location": "src/api/CompilerState.ts", "line": 6 }, { "location": "src/api/CompilerState.ts", "line": 59 }, { "location": "src/api/CompilerState.ts", "line": 90 }, { "location": "src/api/CompilerState.ts", "line": 93 }, { "location": "src/api/CompilerState.ts", "line": 144 }, { "location": "src/api/Extractor.ts", "line": 7 }, { "location": "src/collector/Collector.ts", "line": 4 }, { "location": "src/collector/Collector.ts", "line": 966 }, { "location": "src/collector/CollectorEntity.ts", "line": 4 }, { "location": "src/collector/MessageRouter.ts", "line": 4 }, { "location": "src/collector/MessageRouter.ts", "line": 206 }, { "location": "src/collector/SourceMapper.ts", "line": 7 }, { "location": "src/collector/WorkingPackage.ts", "line": 4 }, { "location": "src/enhancers/DocCommentEnhancer.ts", "line": 4 }, { "location": "src/enhancers/ValidationEnhancer.ts", "line": 6 }, { "location": "src/enhancers/ValidationEnhancer.ts", "line": 291 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 8 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 441 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 913 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 917 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 927 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 1206 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 1209 }, { "location": "src/generators/ApiReportGenerator.ts", "line": 4 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 5 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 78 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 101 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 252 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 253 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 267 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 332 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 347 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 368 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 4 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 182 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 207 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 211 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 227 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 231 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 239 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 243 }, { "location": "src/generators/DtsRollupGenerator.ts", "line": 4 }, { "location": "src/generators/ExcerptBuilder.ts", "line": 4 } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map,SourceMapConsumer,source-map/SourceMapConsumer,RawSourceMap,source-map/RawSourceMap,MappingItem,source-map/MappingItem,Position,source-map/Position" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "lib-commonjs/collector/SourceMapper.js", "line": 40 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 4 }, { "location": "src/collector/SourceMapper.ts", "line": 6 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.7.4", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.7.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "lib-commonjs/analyzer/PackageMetadataManager.js", "line": 10 }, { "location": "lib-commonjs/api/Extractor.js", "line": 40 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 4 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 92 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 94 }, { "location": "lib-esm/api/Extractor.js", "line": 4 }, { "location": "lib-esm/api/Extractor.js", "line": 268 }, { "location": "lib-esm/api/Extractor.js", "line": 270 }, { "location": "lib-esm/api/Extractor.js", "line": 271 }, { "location": "lib-esm/api/Extractor.js", "line": 272 }, { "location": "lib-esm/api/Extractor.js", "line": 273 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 6 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 130 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 133 }, { "location": "src/api/Extractor.ts", "line": 6 }, { "location": "src/api/Extractor.ts", "line": 549 }, { "location": "src/api/Extractor.ts", "line": 551 }, { "location": "src/api/Extractor.ts", "line": 552 }, { "location": "src/api/Extractor.ts", "line": 554 }, { "location": "src/api/Extractor.ts", "line": 555 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.11", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.11", "externalReferences": [ { "type": "vcs", "url": "ssh://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.11", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "ImportedModules", "value": "resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ], "occurrences": [ { "location": "lib-commonjs/api/Extractor.js", "line": 42 }, { "location": "lib-esm/api/Extractor.js", "line": 6 }, { "location": "lib-esm/api/Extractor.js", "line": 262 }, { "location": "src/api/Extractor.ts", "line": 8 }, { "location": "src/api/Extractor.ts", "line": 542 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.3", "description": "a glob matcher in javascript", "scope": "required", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.3", "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "ImportedModules", "value": "minimatch,minimatch/minimatch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ], "occurrences": [ { "location": "lib-commonjs/collector/Collector.js", "line": 40 }, { "location": "lib-esm/collector/Collector.js", "line": 4 }, { "location": "lib-esm/collector/Collector.js", "line": 103 }, { "location": "src/collector/Collector.ts", "line": 5 }, { "location": "src/collector/Collector.ts", "line": 201 } ] } }, { "group": "", "name": "local-eslint-config", "version": "1.0.0", "description": "An ESLint configuration consumed projects inside the rushstack repo.", "scope": "optional", "purl": "pkg:npm/local-eslint-config@1.0.0", "type": "library", "bom-ref": "pkg:npm/local-eslint-config@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/local-eslint-config/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/local-eslint-config/package.json" } ], "concludedValue": "node_modules/local-eslint-config/package.json" } ] } }, { "authors": [ { "name": "Nicholas C. Zakas " } ], "group": "", "name": "eslint", "version": "9.37.0", "description": "An AST-based pattern checker for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint@9.37.0", "externalReferences": [ { "type": "website", "url": "https://eslint.org" } ], "type": "library", "bom-ref": "pkg:npm/eslint@9.37.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint/package.json" } ], "concludedValue": "node_modules/eslint/package.json" } ] } }, { "group": "", "name": "diff", "version": "8.0.4", "description": "A JavaScript text diff implementation.", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@8.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@8.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "ImportedModules", "value": "diff" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ], "occurrences": [ { "location": "lib-commonjs/api/Extractor.js", "line": 253 }, { "location": "lib-esm/api/Extractor.js", "line": 216 }, { "location": "src/api/Extractor.ts", "line": 468 } ] } }, { "group": "", "name": "decoupled-local-node-rig", "version": "1.0.0", "description": "A rig package for Node.js projects that build using Heft inside the RushStack repository, but are dependencies of @rushstack/heft-node-rig or local-node-rig.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decoupled-local-node-rig@1.0.0", "type": "library", "bom-ref": "pkg:npm/decoupled-local-node-rig@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decoupled-local-node-rig/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decoupled-local-node-rig/package.json" } ], "concludedValue": "node_modules/decoupled-local-node-rig/package.json" } ] } }, { "group": "@types", "name": "semver", "version": "7.7.1", "description": "TypeScript definitions for semver", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/semver@7.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/semver" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/semver@7.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/semver/package.json" } ], "concludedValue": "node_modules/@types/semver/package.json" } ] } }, { "group": "@types", "name": "resolve", "version": "1.20.2", "description": "TypeScript definitions for resolve", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/resolve@1.20.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/resolve" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/resolve@1.20.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/resolve/package.json" } ], "concludedValue": "node_modules/@types/resolve/package.json" } ] } }, { "group": "@rushstack", "name": "ts-command-line", "version": "5.3.11", "description": "An object-oriented command-line parser for TypeScript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rushstack/ts-command-line@5.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ], "type": "library", "bom-ref": "pkg:npm/@rushstack/ts-command-line@5.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@rushstack/ts-command-line/package.json" }, { "name": "ImportedModules", "value": "@rushstack/ts-command-line,CommandLineParser,@rushstack/ts-command-line/CommandLineParser,CommandLineAction,@rushstack/ts-command-line/CommandLineAction,CommandLineFlagParameter,@rushstack/ts-command-line/CommandLineFlagParameter,CommandLineStringParameter,@rushstack/ts-command-line/CommandLineStringParameter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rushstack/ts-command-line/package.json" } ], "concludedValue": "node_modules/@rushstack/ts-command-line/package.json" } ], "occurrences": [ { "location": "lib-commonjs/cli/ApiExtractorCommandLine.js", "line": 40 }, { "location": "lib-commonjs/cli/InitAction.js", "line": 41 }, { "location": "lib-commonjs/cli/RunAction.js", "line": 43 }, { "location": "lib-esm/cli/ApiExtractorCommandLine.js", "line": 4 }, { "location": "lib-esm/cli/InitAction.js", "line": 5 }, { "location": "lib-esm/cli/RunAction.js", "line": 7 }, { "location": "src/cli/ApiExtractorCommandLine.ts", "line": 6 }, { "location": "src/cli/InitAction.ts", "line": 7 }, { "location": "src/cli/RunAction.ts", "line": 19 } ] } }, { "group": "@rushstack", "name": "terminal", "version": "0.24.1", "description": "User interface primitives for console applications", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rushstack/terminal@0.24.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ], "type": "library", "bom-ref": "pkg:npm/@rushstack/terminal@0.24.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@rushstack/terminal/package.json" }, { "name": "ImportedModules", "value": "@rushstack/terminal,Colorize,@rushstack/terminal/Colorize" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rushstack/terminal/package.json" } ], "concludedValue": "node_modules/@rushstack/terminal/package.json" } ], "occurrences": [ { "location": "lib-commonjs/api/CompilerState.js", "line": 42 }, { "location": "lib-commonjs/cli/ApiExtractorCommandLine.js", "line": 42 }, { "location": "lib-commonjs/cli/InitAction.js", "line": 42 }, { "location": "lib-commonjs/cli/RunAction.js", "line": 42 }, { "location": "lib-commonjs/collector/MessageRouter.js", "line": 41 }, { "location": "lib-commonjs/start.js", "line": 39 }, { "location": "lib-esm/api/CompilerState.js", "line": 6 }, { "location": "lib-esm/api/CompilerState.js", "line": 32 }, { "location": "lib-esm/cli/ApiExtractorCommandLine.js", "line": 6 }, { "location": "lib-esm/cli/ApiExtractorCommandLine.js", "line": 41 }, { "location": "lib-esm/cli/InitAction.js", "line": 6 }, { "location": "lib-esm/cli/InitAction.js", "line": 22 }, { "location": "lib-esm/cli/InitAction.js", "line": 26 }, { "location": "lib-esm/cli/RunAction.js", "line": 6 }, { "location": "lib-esm/cli/RunAction.js", "line": 114 }, { "location": "lib-esm/cli/RunAction.js", "line": 117 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 5 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 419 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 422 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 429 }, { "location": "lib-esm/start.js", "line": 4 }, { "location": "lib-esm/start.js", "line": 8 }, { "location": "lib-esm/start.js", "line": 11 }, { "location": "src/api/CompilerState.ts", "line": 9 }, { "location": "src/api/CompilerState.ts", "line": 64 }, { "location": "src/cli/ApiExtractorCommandLine.ts", "line": 8 }, { "location": "src/cli/ApiExtractorCommandLine.ts", "line": 49 }, { "location": "src/cli/InitAction.ts", "line": 8 }, { "location": "src/cli/InitAction.ts", "line": 30 }, { "location": "src/cli/InitAction.ts", "line": 35 }, { "location": "src/cli/RunAction.ts", "line": 14 }, { "location": "src/cli/RunAction.ts", "line": 159 }, { "location": "src/cli/RunAction.ts", "line": 161 }, { "location": "src/collector/MessageRouter.ts", "line": 8 }, { "location": "src/collector/MessageRouter.ts", "line": 610 }, { "location": "src/collector/MessageRouter.ts", "line": 613 }, { "location": "src/collector/MessageRouter.ts", "line": 620 }, { "location": "src/start.ts", "line": 6 }, { "location": "src/start.ts", "line": 13 }, { "location": "src/start.ts", "line": 14 }, { "location": "src/start.ts", "line": 21 } ] } }, { "group": "@rushstack", "name": "rig-package", "version": "0.7.3", "description": "A system for sharing tool configurations between projects without duplicating config files.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rushstack/rig-package@0.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ], "type": "library", "bom-ref": "pkg:npm/@rushstack/rig-package@0.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@rushstack/rig-package/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rushstack/rig-package/package.json" } ], "concludedValue": "node_modules/@rushstack/rig-package/package.json" } ] } }, { "group": "@rushstack", "name": "node-core-library", "version": "5.23.2", "description": "Core libraries that every NodeJS toolchain project should use", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rushstack/node-core-library@5.23.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ], "type": "library", "bom-ref": "pkg:npm/@rushstack/node-core-library@5.23.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@rushstack/node-core-library/package.json" }, { "name": "ImportedModules", "value": "@rushstack/node-core-library,InternalError,@rushstack/node-core-library/InternalError,FileSystem,@rushstack/node-core-library/FileSystem,JsonFile,@rushstack/node-core-library/JsonFile,Path,@rushstack/node-core-library/Path,Text,@rushstack/node-core-library/Text,Sort,@rushstack/node-core-library/Sort,NewlineKind,@rushstack/node-core-library/NewlineKind,PackageJsonLookup,@rushstack/node-core-library/PackageJsonLookup,AlreadyReportedError,@rushstack/node-core-library/AlreadyReportedError,PackageName,@rushstack/node-core-library/PackageName,StringBuilder,@rushstack/node-core-library/StringBuilder,INodePackageJson,@rushstack/node-core-library/INodePackageJson,JsonObject,@rushstack/node-core-library/JsonObject,IPackageJsonExports,@rushstack/node-core-library/IPackageJsonExports,IPackageJson,@rushstack/node-core-library/IPackageJson,IStringBuilder,@rushstack/node-core-library/IStringBuilder" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rushstack/node-core-library/package.json" } ], "concludedValue": "node_modules/@rushstack/node-core-library/package.json" } ], "occurrences": [ { "location": "lib-commonjs/analyzer/AstDeclaration.js", "line": 40 }, { "location": "lib-commonjs/analyzer/AstImport.js", "line": 6 }, { "location": "lib-commonjs/analyzer/AstSymbol.js", "line": 6 }, { "location": "lib-commonjs/analyzer/AstSymbolTable.js", "line": 41 }, { "location": "lib-commonjs/analyzer/ExportAnalyzer.js", "line": 40 }, { "location": "lib-commonjs/analyzer/PackageMetadataManager.js", "line": 11 }, { "location": "lib-commonjs/analyzer/SourceFileLocationFormatter.js", "line": 40 }, { "location": "lib-commonjs/analyzer/Span.js", "line": 40 }, { "location": "lib-commonjs/analyzer/TypeScriptHelpers.js", "line": 41 }, { "location": "lib-commonjs/analyzer/TypeScriptInternals.js", "line": 41 }, { "location": "lib-commonjs/api/CompilerState.js", "line": 41 }, { "location": "lib-commonjs/api/Extractor.js", "line": 44 }, { "location": "lib-commonjs/cli/ApiExtractorCommandLine.js", "line": 41 }, { "location": "lib-commonjs/cli/InitAction.js", "line": 40 }, { "location": "lib-commonjs/cli/RunAction.js", "line": 41 }, { "location": "lib-commonjs/collector/Collector.js", "line": 43 }, { "location": "lib-commonjs/collector/CollectorEntity.js", "line": 40 }, { "location": "lib-commonjs/collector/MessageRouter.js", "line": 40 }, { "location": "lib-commonjs/collector/SourceMapper.js", "line": 41 }, { "location": "lib-commonjs/generators/ApiModelGenerator.js", "line": 43 }, { "location": "lib-commonjs/generators/ApiReportGenerator.js", "line": 41 }, { "location": "lib-commonjs/generators/DeclarationReferenceGenerator.js", "line": 42 }, { "location": "lib-commonjs/generators/DtsEmitHelpers.js", "line": 40 }, { "location": "lib-commonjs/generators/DtsRollupGenerator.js", "line": 41 }, { "location": "lib-commonjs/generators/IndentedWriter.js", "line": 6 }, { "location": "lib-esm/analyzer/AstDeclaration.js", "line": 4 }, { "location": "lib-esm/analyzer/AstImport.js", "line": 3 }, { "location": "lib-esm/analyzer/AstSymbol.js", "line": 3 }, { "location": "lib-esm/analyzer/AstSymbolTable.js", "line": 5 }, { "location": "lib-esm/analyzer/ExportAnalyzer.js", "line": 4 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 5 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 191 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 192 }, { "location": "lib-esm/analyzer/PackageMetadataManager.js", "line": 213 }, { "location": "lib-esm/analyzer/SourceFileLocationFormatter.js", "line": 4 }, { "location": "lib-esm/analyzer/SourceFileLocationFormatter.js", "line": 28 }, { "location": "lib-esm/analyzer/SourceFileLocationFormatter.js", "line": 33 }, { "location": "lib-esm/analyzer/Span.js", "line": 4 }, { "location": "lib-esm/analyzer/Span.js", "line": 426 }, { "location": "lib-esm/analyzer/Span.js", "line": 536 }, { "location": "lib-esm/analyzer/TypeScriptHelpers.js", "line": 5 }, { "location": "lib-esm/analyzer/TypeScriptInternals.js", "line": 5 }, { "location": "lib-esm/api/CompilerState.js", "line": 5 }, { "location": "lib-esm/api/CompilerState.js", "line": 26 }, { "location": "lib-esm/api/Extractor.js", "line": 8 }, { "location": "lib-esm/api/Extractor.js", "line": 56 }, { "location": "lib-esm/api/Extractor.js", "line": 82 }, { "location": "lib-esm/api/Extractor.js", "line": 189 }, { "location": "lib-esm/api/Extractor.js", "line": 194 }, { "location": "lib-esm/api/Extractor.js", "line": 195 }, { "location": "lib-esm/api/Extractor.js", "line": 210 }, { "location": "lib-esm/api/Extractor.js", "line": 244 }, { "location": "lib-esm/api/Extractor.js", "line": 249 }, { "location": "lib-esm/cli/ApiExtractorCommandLine.js", "line": 5 }, { "location": "lib-esm/cli/InitAction.js", "line": 4 }, { "location": "lib-esm/cli/InitAction.js", "line": 21 }, { "location": "lib-esm/cli/InitAction.js", "line": 27 }, { "location": "lib-esm/cli/RunAction.js", "line": 5 }, { "location": "lib-esm/cli/RunAction.js", "line": 63 }, { "location": "lib-esm/cli/RunAction.js", "line": 83 }, { "location": "lib-esm/cli/RunAction.js", "line": 95 }, { "location": "lib-esm/collector/Collector.js", "line": 7 }, { "location": "lib-esm/collector/Collector.js", "line": 97 }, { "location": "lib-esm/collector/Collector.js", "line": 230 }, { "location": "lib-esm/collector/Collector.js", "line": 231 }, { "location": "lib-esm/collector/Collector.js", "line": 232 }, { "location": "lib-esm/collector/CollectorEntity.js", "line": 4 }, { "location": "lib-esm/collector/CollectorEntity.js", "line": 52 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 4 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 462 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 467 }, { "location": "lib-esm/collector/MessageRouter.js", "line": 472 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 5 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 32 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 50 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 55 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 97 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 106 }, { "location": "lib-esm/collector/SourceMapper.js", "line": 108 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 7 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 848 }, { "location": "lib-esm/generators/ApiReportGenerator.js", "line": 5 }, { "location": "lib-esm/generators/ApiReportGenerator.js", "line": 513 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 6 }, { "location": "lib-esm/generators/DtsEmitHelpers.js", "line": 4 }, { "location": "lib-esm/generators/DtsRollupGenerator.js", "line": 5 }, { "location": "lib-esm/generators/DtsRollupGenerator.js", "line": 55 }, { "location": "lib-esm/generators/IndentedWriter.js", "line": 3 }, { "location": "src/analyzer/AstDeclaration.ts", "line": 6 }, { "location": "src/analyzer/AstImport.ts", "line": 4 }, { "location": "src/analyzer/AstSymbol.ts", "line": 6 }, { "location": "src/analyzer/AstSymbolTable.ts", "line": 8 }, { "location": "src/analyzer/ExportAnalyzer.ts", "line": 6 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 16 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 266 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 268 }, { "location": "src/analyzer/PackageMetadataManager.ts", "line": 300 }, { "location": "src/analyzer/SourceFileLocationFormatter.ts", "line": 8 }, { "location": "src/analyzer/SourceFileLocationFormatter.ts", "line": 44 }, { "location": "src/analyzer/SourceFileLocationFormatter.ts", "line": 50 }, { "location": "src/analyzer/Span.ts", "line": 6 }, { "location": "src/analyzer/Span.ts", "line": 517 }, { "location": "src/analyzer/Span.ts", "line": 641 }, { "location": "src/analyzer/TypeScriptHelpers.ts", "line": 8 }, { "location": "src/analyzer/TypeScriptInternals.ts", "line": 8 }, { "location": "src/api/CompilerState.ts", "line": 8 }, { "location": "src/api/CompilerState.ts", "line": 55 }, { "location": "src/api/Extractor.ts", "line": 19 }, { "location": "src/api/Extractor.ts", "line": 187 }, { "location": "src/api/Extractor.ts", "line": 248 }, { "location": "src/api/Extractor.ts", "line": 429 }, { "location": "src/api/Extractor.ts", "line": 435 }, { "location": "src/api/Extractor.ts", "line": 436 }, { "location": "src/api/Extractor.ts", "line": 461 }, { "location": "src/api/Extractor.ts", "line": 511 }, { "location": "src/api/Extractor.ts", "line": 518 }, { "location": "src/cli/ApiExtractorCommandLine.ts", "line": 7 }, { "location": "src/cli/InitAction.ts", "line": 6 }, { "location": "src/cli/InitAction.ts", "line": 29 }, { "location": "src/cli/InitAction.ts", "line": 36 }, { "location": "src/cli/RunAction.ts", "line": 13 }, { "location": "src/cli/RunAction.ts", "line": 98 }, { "location": "src/cli/RunAction.ts", "line": 124 }, { "location": "src/cli/RunAction.ts", "line": 138 }, { "location": "src/collector/Collector.ts", "line": 15 }, { "location": "src/collector/Collector.ts", "line": 196 }, { "location": "src/collector/Collector.ts", "line": 369 }, { "location": "src/collector/Collector.ts", "line": 370 }, { "location": "src/collector/Collector.ts", "line": 371 }, { "location": "src/collector/CollectorEntity.ts", "line": 6 }, { "location": "src/collector/CollectorEntity.ts", "line": 68 }, { "location": "src/collector/MessageRouter.ts", "line": 7 }, { "location": "src/collector/MessageRouter.ts", "line": 655 }, { "location": "src/collector/MessageRouter.ts", "line": 660 }, { "location": "src/collector/MessageRouter.ts", "line": 665 }, { "location": "src/collector/SourceMapper.ts", "line": 9 }, { "location": "src/collector/SourceMapper.ts", "line": 100 }, { "location": "src/collector/SourceMapper.ts", "line": 124 }, { "location": "src/collector/SourceMapper.ts", "line": 130 }, { "location": "src/collector/SourceMapper.ts", "line": 178 }, { "location": "src/collector/SourceMapper.ts", "line": 187 }, { "location": "src/collector/SourceMapper.ts", "line": 189 }, { "location": "src/collector/WorkingPackage.ts", "line": 7 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 39 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 1232 }, { "location": "src/generators/ApiReportGenerator.ts", "line": 7 }, { "location": "src/generators/ApiReportGenerator.ts", "line": 685 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 14 }, { "location": "src/generators/DtsEmitHelpers.ts", "line": 6 }, { "location": "src/generators/DtsRollupGenerator.ts", "line": 7 }, { "location": "src/generators/DtsRollupGenerator.ts", "line": 76 }, { "location": "src/generators/IndentedWriter.ts", "line": 4 } ] } }, { "group": "@rushstack", "name": "heft", "version": "1.2.19", "description": "Build all your JavaScript projects the same way: A way that works.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rushstack/heft@1.2.19", "externalReferences": [ { "type": "website", "url": "https://rushstack.io/pages/heft/overview/" }, { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ], "type": "library", "bom-ref": "pkg:npm/@rushstack/heft@1.2.19", "properties": [ { "name": "SrcFile", "value": "node_modules/@rushstack/heft/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rushstack/heft/package.json" } ], "concludedValue": "node_modules/@rushstack/heft/package.json" } ] } }, { "group": "@microsoft", "name": "tsdoc-config", "version": "0.18.1", "description": "A loader for the tsdoc.json file", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/tsdoc-config@0.18.1", "externalReferences": [ { "type": "website", "url": "https://tsdoc.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/tsdoc" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/tsdoc-config@0.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/tsdoc-config/package.json" }, { "name": "ImportedModules", "value": "@microsoft/tsdoc-config,TSDocConfigFile,@microsoft/tsdoc-config/TSDocConfigFile" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/tsdoc-config/package.json" } ], "concludedValue": "node_modules/@microsoft/tsdoc-config/package.json" } ], "occurrences": [ { "location": "lib-commonjs/api/Extractor.js", "line": 43 }, { "location": "lib-esm/api/Extractor.js", "line": 7 }, { "location": "lib-esm/api/Extractor.js", "line": 98 }, { "location": "src/api/Extractor.ts", "line": 11 }, { "location": "src/api/Extractor.ts", "line": 273 } ] } }, { "group": "@microsoft", "name": "tsdoc", "version": "0.16.0", "description": "A parser for the TypeScript doc comment syntax", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/tsdoc@0.16.0", "externalReferences": [ { "type": "website", "url": "https://tsdoc.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/tsdoc" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/tsdoc@0.16.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/tsdoc/package.json" }, { "name": "ImportedModules", "value": "@microsoft/tsdoc,@microsoft/tsdoc/lib-commonjs/beta/DeclarationReference,DeclarationReference,@microsoft/tsdoc/lib-commonjs/beta/DeclarationReference/DeclarationReference,ModuleSource,@microsoft/tsdoc/lib-commonjs/beta/DeclarationReference/ModuleSource,GlobalSource,@microsoft/tsdoc/lib-commonjs/beta/DeclarationReference/GlobalSource,Navigation,@microsoft/tsdoc/lib-commonjs/beta/DeclarationReference/Navigation,Meaning,@microsoft/tsdoc/lib-commonjs/beta/DeclarationReference/Meaning" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/tsdoc/package.json" } ], "concludedValue": "node_modules/@microsoft/tsdoc/package.json" } ], "occurrences": [ { "location": "lib-commonjs/analyzer/AstReferenceResolver.js", "line": 40 }, { "location": "lib-commonjs/collector/Collector.js", "line": 41 }, { "location": "lib-commonjs/enhancers/DocCommentEnhancer.js", "line": 40 }, { "location": "lib-esm/analyzer/AstReferenceResolver.js", "line": 4 }, { "location": "lib-esm/collector/Collector.js", "line": 5 }, { "location": "lib-esm/enhancers/DocCommentEnhancer.js", "line": 4 }, { "location": "src/analyzer/AstReferenceResolver.ts", "line": 6 }, { "location": "src/api/ExtractorMessage.ts", "line": 4 }, { "location": "src/collector/ApiItemMetadata.ts", "line": 4 }, { "location": "src/collector/Collector.ts", "line": 7 }, { "location": "src/collector/DeclarationMetadata.ts", "line": 4 }, { "location": "src/collector/MessageRouter.ts", "line": 6 }, { "location": "src/collector/WorkingPackage.ts", "line": 6 }, { "location": "src/enhancers/DocCommentEnhancer.ts", "line": 6 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 10 }, { "location": "lib-commonjs/generators/DeclarationReferenceGenerator.js", "line": 41 }, { "location": "lib-esm/generators/DeclarationReferenceGenerator.js", "line": 5 }, { "location": "src/generators/DeclarationReferenceGenerator.ts", "line": 13 }, { "location": "src/generators/ExcerptBuilder.ts", "line": 6 } ] } }, { "group": "@microsoft", "name": "api-extractor-model", "version": "7.33.9", "description": "A helper library for loading and saving the .api.json files created by API Extractor", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40microsoft/api-extractor-model@7.33.9", "externalReferences": [ { "type": "website", "url": "https://api-extractor.com" }, { "type": "vcs", "url": "https://github.com/microsoft/rushstack.git" } ], "type": "library", "bom-ref": "pkg:npm/@microsoft/api-extractor-model@7.33.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@microsoft/api-extractor-model/package.json" }, { "name": "ImportedModules", "value": "@microsoft/api-extractor-model,ReleaseTag,@microsoft/api-extractor-model/ReleaseTag,ApiModel,@microsoft/api-extractor-model/ApiModel,ApiClass,@microsoft/api-extractor-model/ApiClass,ApiPackage,@microsoft/api-extractor-model/ApiPackage,ApiEntryPoint,@microsoft/api-extractor-model/ApiEntryPoint,ApiMethod,@microsoft/api-extractor-model/ApiMethod,ApiNamespace,@microsoft/api-extractor-model/ApiNamespace,ApiInterface,@microsoft/api-extractor-model/ApiInterface,ApiPropertySignature,@microsoft/api-extractor-model/ApiPropertySignature,ApiProperty,@microsoft/api-extractor-model/ApiProperty,ApiMethodSignature,@microsoft/api-extractor-model/ApiMethodSignature,ApiEnum,@microsoft/api-extractor-model/ApiEnum,ApiEnumMember,@microsoft/api-extractor-model/ApiEnumMember,ApiConstructor,@microsoft/api-extractor-model/ApiConstructor,ApiConstructSignature,@microsoft/api-extractor-model/ApiConstructSignature,ApiFunction,@microsoft/api-extractor-model/ApiFunction,ApiIndexSignature,@microsoft/api-extractor-model/ApiIndexSignature,ApiVariable,@microsoft/api-extractor-model/ApiVariable,ApiTypeAlias,@microsoft/api-extractor-model/ApiTypeAlias,ApiCallSignature,@microsoft/api-extractor-model/ApiCallSignature,EnumMemberOrder,@microsoft/api-extractor-model/EnumMemberOrder,ExcerptTokenKind,@microsoft/api-extractor-model/ExcerptTokenKind,ApiItemContainerMixin,@microsoft/api-extractor-model/ApiItemContainerMixin,IApiParameterOptions,@microsoft/api-extractor-model/IApiParameterOptions,IExcerptTokenRange,@microsoft/api-extractor-model/IExcerptTokenRange,IExcerptToken,@microsoft/api-extractor-model/IExcerptToken,IApiTypeParameterOptions,@microsoft/api-extractor-model/IApiTypeParameterOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@microsoft/api-extractor-model/package.json" } ], "concludedValue": "node_modules/@microsoft/api-extractor-model/package.json" } ], "occurrences": [ { "location": "lib-commonjs/collector/Collector.js", "line": 42 }, { "location": "lib-commonjs/enhancers/DocCommentEnhancer.js", "line": 41 }, { "location": "lib-commonjs/enhancers/ValidationEnhancer.js", "line": 41 }, { "location": "lib-commonjs/generators/ApiModelGenerator.js", "line": 42 }, { "location": "lib-commonjs/generators/ApiReportGenerator.js", "line": 40 }, { "location": "lib-commonjs/generators/DtsRollupGenerator.js", "line": 40 }, { "location": "lib-commonjs/generators/ExcerptBuilder.js", "line": 40 }, { "location": "lib-esm/collector/Collector.js", "line": 6 }, { "location": "lib-esm/enhancers/DocCommentEnhancer.js", "line": 5 }, { "location": "lib-esm/enhancers/ValidationEnhancer.js", "line": 5 }, { "location": "lib-esm/enhancers/ValidationEnhancer.js", "line": 165 }, { "location": "lib-esm/enhancers/ValidationEnhancer.js", "line": 167 }, { "location": "lib-esm/enhancers/ValidationEnhancer.js", "line": 169 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 6 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 89 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 202 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 234 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 260 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 311 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 342 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 369 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 398 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 432 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 461 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 503 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 546 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 580 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 606 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 660 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 695 }, { "location": "lib-esm/generators/ApiModelGenerator.js", "line": 723 }, { "location": "lib-esm/generators/ApiReportGenerator.js", "line": 4 }, { "location": "lib-esm/generators/ApiReportGenerator.js", "line": 462 }, { "location": "lib-esm/generators/DtsRollupGenerator.js", "line": 4 }, { "location": "lib-esm/generators/ExcerptBuilder.js", "line": 4 }, { "location": "src/api/Extractor.ts", "line": 10 }, { "location": "src/api/IConfigFile.ts", "line": 4 }, { "location": "src/collector/ApiItemMetadata.ts", "line": 5 }, { "location": "src/collector/Collector.ts", "line": 8 }, { "location": "src/collector/SymbolMetadata.ts", "line": 4 }, { "location": "src/enhancers/DocCommentEnhancer.ts", "line": 7 }, { "location": "src/enhancers/ValidationEnhancer.ts", "line": 8 }, { "location": "src/enhancers/ValidationEnhancer.ts", "line": 238 }, { "location": "src/enhancers/ValidationEnhancer.ts", "line": 242 }, { "location": "src/enhancers/ValidationEnhancer.ts", "line": 244 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 38 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 168 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 313 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 364 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 404 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 472 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 522 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 555 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 599 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 650 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 694 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 753 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 816 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 869 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 902 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 969 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 1015 }, { "location": "src/generators/ApiModelGenerator.ts", "line": 1059 }, { "location": "src/generators/ApiReportGenerator.ts", "line": 6 }, { "location": "src/generators/ApiReportGenerator.ts", "line": 615 }, { "location": "src/generators/DtsRollupGenerator.ts", "line": 6 }, { "location": "src/generators/ExcerptBuilder.ts", "line": 11 } ] }, "tags": [ "api" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@microsoft/api-extractor@7.58.10" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-21T18:08:58Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'api-extractor' with version '7.58.10'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 19 source files." } ] }