{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d56ea549-1cc4-464b-beb4-3f5a47859089", "version": 1, "metadata": { "timestamp": "2026-09-21T15:26:14Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "codesmith-utils", "group": "@modern-js", "version": "2.6.7", "description": "codesmith core implement", "purl": "pkg:npm/%40modern-js/codesmith-utils@2.6.7", "bom-ref": "pkg:npm/@modern-js/codesmith-utils@2.6.7", "properties": [ { "name": "cdx:npm:scripts", "value": "prepare, prepublishOnly, new, build, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://modernjs.dev" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@swc\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@swc/helpers/package.json\\nnode_modules/@types/fs-extra/package.json\\nnode_modules/@types/glob/package.json\\nnode_modules/@types/lodash.flattendeep/package.json\\nnode_modules/@types/lodash.get/package.json\\nnode_modules/@types/lodash.isfunction/package.json\\nnode_modules/@types/lodash.isobject/package.json\\nnode_modules/@types/lodash.isstring/package.json\\nnode_modules/@types/lodash.merge/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/semver/package.json\\nnode_modules/chalk/package.json\\nnode_modules/execa/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/glob/package.json\\nnode_modules/lodash.flattendeep/package.json\\nnode_modules/lodash.get/package.json\\nnode_modules/lodash.isfunction/package.json\\nnode_modules/lodash.isobject/package.json\\nnode_modules/lodash.isstring/package.json\\nnode_modules/lodash.merge/package.json\\nnode_modules/ora/package.json\\nnode_modules/semver/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.6.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.6.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.6.0", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "dist/cjs/semver.js", "line": 34 }, { "location": "dist/esm/semver.js", "line": 1 }, { "location": "dist/esm-node/semver.js", "line": 1 }, { "location": "src/semver.ts", "line": 1 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ora", "version": "5.4.1", "description": "Elegant terminal spinner", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ora@5.4.1", "type": "library", "bom-ref": "pkg:npm/ora@5.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ora/package.json" }, { "name": "ImportedModules", "value": "ora" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ora/package.json" } ], "concludedValue": "node_modules/ora/package.json" } ], "occurrences": [ { "location": "dist/cjs/ora.js", "line": 34 }, { "location": "dist/esm/ora.js", "line": 1 }, { "location": "dist/esm-node/ora.js", "line": 1 }, { "location": "src/ora.ts", "line": 1 } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash.merge", "version": "4.6.2", "description": "The Lodash method `_.merge` exported as a module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.merge@4.6.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.merge@4.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.merge/package.json" }, { "name": "ImportedModules", "value": "lodash.merge" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.merge/package.json" } ], "concludedValue": "node_modules/lodash.merge/package.json" } ], "occurrences": [ { "location": "dist/cjs/lodash.js", "line": 44 }, { "location": "dist/esm/lodash.js", "line": 6 }, { "location": "dist/esm-node/lodash.js", "line": 6 }, { "location": "src/lodash.ts", "line": 6 } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.isstring", "version": "4.0.1", "description": "The lodash method `_.isString` exported as a module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.isstring@4.0.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isstring@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.isstring/package.json" }, { "name": "ImportedModules", "value": "lodash.isstring" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.isstring/package.json" } ], "concludedValue": "node_modules/lodash.isstring/package.json" } ], "occurrences": [ { "location": "dist/cjs/lodash.js", "line": 43 }, { "location": "dist/esm/lodash.js", "line": 5 }, { "location": "dist/esm-node/lodash.js", "line": 5 }, { "location": "src/lodash.ts", "line": 5 } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.isobject", "version": "3.0.2", "description": "The modern build of lodash’s `_.isObject` as a module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.isobject@3.0.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isobject@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.isobject/package.json" }, { "name": "ImportedModules", "value": "lodash.isobject" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.isobject/package.json" } ], "concludedValue": "node_modules/lodash.isobject/package.json" } ], "occurrences": [ { "location": "dist/cjs/lodash.js", "line": 42 }, { "location": "dist/esm/lodash.js", "line": 4 }, { "location": "dist/esm-node/lodash.js", "line": 4 }, { "location": "src/lodash.ts", "line": 4 } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.isfunction", "version": "3.0.9", "description": "The Lodash method `_.isFunction` exported as a module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.isfunction@3.0.9", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isfunction@3.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.isfunction/package.json" }, { "name": "ImportedModules", "value": "lodash.isfunction" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.isfunction/package.json" } ], "concludedValue": "node_modules/lodash.isfunction/package.json" } ], "occurrences": [ { "location": "dist/cjs/lodash.js", "line": 41 }, { "location": "dist/esm/lodash.js", "line": 3 }, { "location": "dist/esm-node/lodash.js", "line": 3 }, { "location": "src/lodash.ts", "line": 3 } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.get", "version": "4.4.2", "description": "The lodash method `_.get` exported as a module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.get@4.4.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.get@4.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.get/package.json" }, { "name": "ImportedModules", "value": "lodash.get" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.get/package.json" } ], "concludedValue": "node_modules/lodash.get/package.json" } ], "occurrences": [ { "location": "dist/cjs/lodash.js", "line": 40 }, { "location": "dist/esm/lodash.js", "line": 2 }, { "location": "dist/esm-node/lodash.js", "line": 2 }, { "location": "src/lodash.ts", "line": 2 } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.flattendeep", "version": "4.4.0", "description": "The lodash method `_.flattenDeep` exported as a module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.flattendeep@4.4.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.flattendeep/package.json" }, { "name": "ImportedModules", "value": "lodash.flattendeep" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.flattendeep/package.json" } ], "concludedValue": "node_modules/lodash.flattendeep/package.json" } ], "occurrences": [ { "location": "dist/cjs/lodash.js", "line": 39 }, { "location": "dist/esm/lodash.js", "line": 1 }, { "location": "dist/esm-node/lodash.js", "line": 1 }, { "location": "src/lodash.ts", "line": 1 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.2.0", "description": "a little globber", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "ImportedModules", "value": "glob" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ], "occurrences": [ { "location": "dist/cjs/glob.js", "line": 34 }, { "location": "dist/esm/glob.js", "line": 1 }, { "location": "dist/esm-node/glob.js", "line": 1 }, { "location": "src/glob.ts", "line": 1 } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "10.0.1", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@10.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@10.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "ImportedModules", "value": "fs-extra" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ], "occurrences": [ { "location": "dist/cjs/fs-extra.js", "line": 34 }, { "location": "dist/esm/fs-extra.js", "line": 1 }, { "location": "dist/esm-node/fs-extra.js", "line": 1 }, { "location": "src/fs-extra.ts", "line": 1 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "5.1.1", "description": "Process execution for humans", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@5.1.1", "type": "library", "bom-ref": "pkg:npm/execa@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "ImportedModules", "value": "execa,ExecaReturnValue,execa/ExecaReturnValue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ], "occurrences": [ { "location": "dist/cjs/execa.js", "line": 34 }, { "location": "dist/cjs/npm.js", "line": 38 }, { "location": "dist/esm/execa.js", "line": 1 }, { "location": "dist/esm/npm.js", "line": 3 }, { "location": "dist/esm/npm.js", "line": 21 }, { "location": "dist/esm/npm.js", "line": 64 }, { "location": "dist/esm/npm.js", "line": 107 }, { "location": "dist/esm/npm.js", "line": 151 }, { "location": "dist/esm/npm.js", "line": 195 }, { "location": "dist/esm-node/execa.js", "line": 1 }, { "location": "dist/esm-node/npm.js", "line": 1 }, { "location": "dist/esm-node/npm.js", "line": 4 }, { "location": "dist/esm-node/npm.js", "line": 15 }, { "location": "dist/esm-node/npm.js", "line": 26 }, { "location": "dist/esm-node/npm.js", "line": 38 }, { "location": "dist/esm-node/npm.js", "line": 50 }, { "location": "src/execa.ts", "line": 1 }, { "location": "src/npm.ts", "line": 1 }, { "location": "src/npm.ts", "line": 5 }, { "location": "src/npm.ts", "line": 17 }, { "location": "src/npm.ts", "line": 29 }, { "location": "src/npm.ts", "line": 40 }, { "location": "src/npm.ts", "line": 51 } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "ImportedModules", "value": "chalk" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ], "occurrences": [ { "location": "dist/cjs/chalk.js", "line": 34 }, { "location": "dist/esm/chalk.js", "line": 1 }, { "location": "dist/esm-node/chalk.js", "line": 1 }, { "location": "src/chalk.ts", "line": 1 } ] } }, { "group": "@types", "name": "semver", "version": "7.5.8", "description": "TypeScript definitions for semver", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/semver@7.5.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/semver" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/semver@7.5.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/semver/package.json" } ], "concludedValue": "node_modules/@types/semver/package.json" } ] } }, { "group": "@types", "name": "node", "version": "14.18.48", "description": "TypeScript definitions for Node.js", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@14.18.48", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@14.18.48", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "lodash.merge", "version": "4.6.9", "description": "TypeScript definitions for lodash.merge", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash.merge@4.6.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash.merge" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash.merge@4.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash.merge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash.merge/package.json" } ], "concludedValue": "node_modules/@types/lodash.merge/package.json" } ] } }, { "group": "@types", "name": "lodash.isstring", "version": "4.0.9", "description": "TypeScript definitions for lodash.isstring", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash.isstring@4.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash.isstring" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash.isstring@4.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash.isstring/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash.isstring/package.json" } ], "concludedValue": "node_modules/@types/lodash.isstring/package.json" } ] } }, { "group": "@types", "name": "lodash.isobject", "version": "3.0.9", "description": "TypeScript definitions for lodash.isobject", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash.isobject@3.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash.isobject" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash.isobject@3.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash.isobject/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash.isobject/package.json" } ], "concludedValue": "node_modules/@types/lodash.isobject/package.json" } ] } }, { "group": "@types", "name": "lodash.isfunction", "version": "3.0.9", "description": "TypeScript definitions for lodash.isfunction", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash.isfunction@3.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash.isfunction" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash.isfunction@3.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash.isfunction/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash.isfunction/package.json" } ], "concludedValue": "node_modules/@types/lodash.isfunction/package.json" } ] } }, { "group": "@types", "name": "lodash.get", "version": "4.4.9", "description": "TypeScript definitions for lodash.get", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash.get@4.4.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash.get" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash.get@4.4.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash.get/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash.get/package.json" } ], "concludedValue": "node_modules/@types/lodash.get/package.json" } ] } }, { "group": "@types", "name": "lodash.flattendeep", "version": "4.4.9", "description": "TypeScript definitions for lodash.flattendeep", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash.flattendeep@4.4.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/lodash.flattendeep" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash.flattendeep@4.4.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash.flattendeep/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash.flattendeep/package.json" } ], "concludedValue": "node_modules/@types/lodash.flattendeep/package.json" } ] } }, { "group": "@types", "name": "glob", "version": "7.2.0", "description": "TypeScript definitions for Glob", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/glob@7.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/glob" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/glob@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/glob/package.json" } ], "concludedValue": "node_modules/@types/glob/package.json" } ] } }, { "group": "@types", "name": "fs-extra", "version": "9.0.13", "description": "TypeScript definitions for fs-extra", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/fs-extra@9.0.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/fs-extra" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/fs-extra@9.0.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/fs-extra/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/fs-extra/package.json" } ], "concludedValue": "node_modules/@types/fs-extra/package.json" } ] } }, { "authors": [ { "name": "강동윤 " } ], "group": "@swc", "name": "helpers", "version": "0.5.1", "description": "External helpers for the swc project.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40swc/helpers@0.5.1", "externalReferences": [ { "type": "website", "url": "https://swc.rs" }, { "type": "vcs", "url": "git+https://github.com/swc-project/swc.git" } ], "type": "library", "bom-ref": "pkg:npm/@swc/helpers@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@swc/helpers/package.json" }, { "name": "ImportedModules", "value": "@swc/helpers/_/_async_to_generator,@swc/helpers/_/_async_to_generator/_,@swc/helpers/_/_ts_generator,@swc/helpers/_/_ts_generator/_" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@swc/helpers/package.json" } ], "concludedValue": "node_modules/@swc/helpers/package.json" } ], "occurrences": [ { "location": "dist/esm/npm.js", "line": 1 }, { "location": "dist/esm/npm.js", "line": 8 }, { "location": "dist/esm/npm.js", "line": 51 }, { "location": "dist/esm/npm.js", "line": 94 }, { "location": "dist/esm/npm.js", "line": 138 }, { "location": "dist/esm/npm.js", "line": 182 }, { "location": "dist/esm/npm.js", "line": 2 }, { "location": "dist/esm/npm.js", "line": 10 }, { "location": "dist/esm/npm.js", "line": 53 }, { "location": "dist/esm/npm.js", "line": 96 }, { "location": "dist/esm/npm.js", "line": 140 }, { "location": "dist/esm/npm.js", "line": 184 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@modern-js/codesmith-utils@2.6.7" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-21T15:26:14Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'codesmith-utils' with version '2.6.7'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 24 source files." } ] }