{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:1ab83369-6012-40dd-a2fe-55f7a1cacb07", "version": 1, "metadata": { "timestamp": "2026-08-11T09:14:40Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "moment", "group": "", "version": "2.0.0", "description": "Parse, manipulate, and display dates.", "purl": "pkg:npm/moment@2.0.0", "bom-ref": "pkg:npm/moment@2.0.0", "author": "Tim Wood (http://timwoodcreates.com/)", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "externalReferences": [ { "type": "website", "url": "http://momentjs.com" }, { "type": "vcs", "url": "https://github.com/timrwood/moment.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@jridgewell\\n@my-scope" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/helper-globals/package.json\\nnode_modules/@babel/helper-string-parser/package.json\\nnode_modules/@babel/helper-validator-identifier/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/template/package.json\\nnode_modules/@babel/traverse/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@jridgewell/gen-mapping/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/append-transform/package.json\\nnode_modules/archy/package.json\\nnode_modules/arg/package.json\\nnode_modules/argparse/node_modules/sprintf-js/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-each/package.json\\nnode_modules/array-slice/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/async/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/aws4/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/bind-obj-methods/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/braces/package.json\\nnode_modules/browser-process-hrtime/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/caching-transform/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/capture-stack-trace/package.json\\nnode_modules/caseless/package.json\\nnode_modules/chalk/package.json\\nnode_modules/clean-yaml-object/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/color-support/package.json\\nnode_modules/colors/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commondir/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/coveralls/package.json\\nnode_modules/cp-file/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/dateformat/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/default-require-extensions/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/detect-file/package.json\\nnode_modules/diff/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/ejs/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es6-error/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/esm/package.json\\nnode_modules/esprima/package.json\\nnode_modules/eventemitter2/package.json\\nnode_modules/events-to-array/package.json\\nnode_modules/exit-x/package.json\\nnode_modules/exit/package.json\\nnode_modules/expand-tilde/package.json\\nnode_modules/extend/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/find-cache-dir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/findup-sync/package.json\\nnode_modules/fined/package.json\\nnode_modules/flagged-respawn/package.json\\nnode_modules/for-in/package.json\\nnode_modules/for-own/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/fs-exists-cached/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/function-loop/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/getobject/package.json\\nnode_modules/getpass/package.json\\nnode_modules/glob/package.json\\nnode_modules/global-modules/package.json\\nnode_modules/global-prefix/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/grunt-known-options/package.json\\nnode_modules/grunt-legacy-log-utils/package.json\\nnode_modules/grunt-legacy-log/package.json\\nnode_modules/grunt-legacy-util/node_modules/which/package.json\\nnode_modules/grunt-legacy-util/package.json\\nnode_modules/grunt/node_modules/grunt-cli/package.json\\nnode_modules/grunt/package.json\\nnode_modules/har-schema/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/hasha/package.json\\nnode_modules/hasown/package.json\\nnode_modules/homedir-polyfill/package.json\\nnode_modules/hooker/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/html-escaper/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ini/package.json\\nnode_modules/interpret/package.json\\nnode_modules/is-absolute/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-number/package.json\\nnode_modules/is-plain-object/package.json\\nnode_modules/is-relative/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/is-unc-path/package.json\\nnode_modules/is-windows/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/isobject/package.json\\nnode_modules/isstream/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-hook/package.json\\nnode_modules/istanbul-lib-instrument/node_modules/semver/package.json\\nnode_modules/istanbul-lib-instrument/package.json\\nnode_modules/istanbul-lib-report/node_modules/has-flag/package.json\\nnode_modules/istanbul-lib-report/node_modules/supports-color/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-lib-source-maps/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json-parse-better-errors/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/kind-of/package.json\\nnode_modules/lcov-parse/package.json\\nnode_modules/liftup/node_modules/findup-sync/package.json\\nnode_modules/liftup/package.json\\nnode_modules/load-json-file/node_modules/pify/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.flattendeep/package.json\\nnode_modules/lodash/package.json\\nnode_modules/log-driver/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/make-error/package.json\\nnode_modules/make-iterator/package.json\\nnode_modules/map-cache/package.json\\nnode_modules/merge-source-map/package.json\\nnode_modules/micromatch/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/minipass/node_modules/yallist/package.json\\nnode_modules/minipass/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/ms/package.json\\nnode_modules/nested-error-stacks/package.json\\nnode_modules/nodeunit/package.json\\nnode_modules/nopt/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/nyc/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/object.defaults/package.json\\nnode_modules/object.map/package.json\\nnode_modules/object.pick/package.json\\nnode_modules/once/package.json\\nnode_modules/opener/package.json\\nnode_modules/os-homedir/package.json\\nnode_modules/own-or-env/package.json\\nnode_modules/own-or/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-try/package.json\\nnode_modules/package-hash/package.json\\nnode_modules/parse-filepath/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/parse-passwd/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-root-regex/package.json\\nnode_modules/path-root/package.json\\nnode_modules/path-type/node_modules/pify/package.json\\nnode_modules/path-type/package.json\\nnode_modules/performance-now/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pify/package.json\\nnode_modules/pkg-dir/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/pseudomap/package.json\\nnode_modules/psl/package.json\\nnode_modules/punycode/package.json\\nnode_modules/qs/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/rechoir/package.json\\nnode_modules/release-zalgo/package.json\\nnode_modules/request/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/require-main-filename/package.json\\nnode_modules/resolve-dir/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/set-blocking/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spawn-wrap/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/stack-utils/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json\\nnode_modules/tap-mocha-reporter/node_modules/debug/package.json\\nnode_modules/tap-mocha-reporter/node_modules/escape-string-regexp/package.json\\nnode_modules/tap-mocha-reporter/node_modules/ms/package.json\\nnode_modules/tap-mocha-reporter/node_modules/tap-parser/package.json\\nnode_modules/tap-mocha-reporter/package.json\\nnode_modules/tap-parser/package.json\\nnode_modules/tap/package.json\\nnode_modules/test-exclude/package.json\\nnode_modules/tmatch/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/trivial-deferred/package.json\\nnode_modules/ts-node/node_modules/diff/package.json\\nnode_modules/ts-node/package.json\\nnode_modules/tsame/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/typescript/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/unc-path-regex/package.json\\nnode_modules/underscore.string/package.json\\nnode_modules/unicode-length/node_modules/ansi-regex/package.json\\nnode_modules/unicode-length/node_modules/punycode/package.json\\nnode_modules/unicode-length/node_modules/strip-ansi/package.json\\nnode_modules/unicode-length/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/uuid/package.json\\nnode_modules/v8flags/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/verror/package.json\\nnode_modules/which-module/package.json\\nnode_modules/which/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/node_modules/color-convert/package.json\\nnode_modules/wrap-ansi/node_modules/color-name/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/write-file-atomic/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yapool/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yn/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "yn", "version": "3.1.1", "description": "Parse yes/no like values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yn@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/yn#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/yn.git" } ], "type": "library", "bom-ref": "pkg:npm/yn@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yn/package.json" } ], "concludedValue": "node_modules/yn/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "13.1.2", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@13.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@13.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "13.3.2", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@13.3.2", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "git+https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@13.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yapool", "version": "1.0.0", "description": "Yet Another object pool in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yapool@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/yapool#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/yapool.git" } ], "type": "library", "bom-ref": "pkg:npm/yapool@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yapool/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yapool/package.json" } ], "concludedValue": "node_modules/yapool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "2.1.2", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/yallist#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "4.0.3", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/y18n.git" } ], "type": "library", "bom-ref": "pkg:npm/y18n@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "write-file-atomic", "version": "2.4.3", "description": "Write files in an atomic fashion w/configurable ownership", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/write-file-atomic@2.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/write-file-atomic" }, { "type": "vcs", "url": "git+ssh://git@github.com/iarna/write-file-atomic.git" } ], "type": "library", "bom-ref": "pkg:npm/write-file-atomic@2.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/write-file-atomic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/write-file-atomic/package.json" } ], "concludedValue": "node_modules/write-file-atomic/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "git+https://github.com/npm/wrappy.git" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "5.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@5.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/wrap-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/wrap-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/wrap-ansi@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.3", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dfcreative/color-name" }, { "type": "vcs", "url": "git+ssh://git@github.com/dfcreative/color-name.git" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/color-name/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "1.9.3", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@1.9.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Qix-/color-convert#readme" }, { "type": "vcs", "url": "git+https://github.com/Qix-/color-convert.git" } ], "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "3.2.1", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@3.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-styles#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "nexdrew" } ], "group": "", "name": "which-module", "version": "2.0.1", "description": "Find the module object for something that was require()d", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-module@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nexdrew/which-module#readme" }, { "type": "vcs", "url": "git+https://github.com/nexdrew/which-module.git" } ], "type": "library", "bom-ref": "pkg:npm/which-module@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-module/package.json" } ], "concludedValue": "node_modules/which-module/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.3.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-which#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "description": "richer JavaScript errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davepacheco/node-verror" }, { "type": "vcs", "url": "git://github.com/davepacheco/node-verror.git" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/package.json" } ], "concludedValue": "node_modules/verror/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "validate-npm-package-license", "version": "3.0.4", "description": "Give me a string and I'll tell you if it's a valid npm package license string", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-license@3.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme" }, { "type": "vcs", "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git" } ], "type": "library", "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-license/package.json" } ], "concludedValue": "node_modules/validate-npm-package-license/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (https://gulpjs.com/)" } ], "group": "", "name": "v8flags", "version": "4.0.1", "description": "Get available v8 and Node.js flags.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/v8flags@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gulpjs/v8flags#readme" }, { "type": "vcs", "url": "git+https://github.com/gulpjs/v8flags.git" } ], "type": "library", "bom-ref": "pkg:npm/v8flags@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/v8flags/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/v8flags/package.json" } ], "concludedValue": "node_modules/v8flags/package.json" } ] } }, { "group": "", "name": "uuid", "version": "3.4.0", "description": "RFC4122 (v1, v4, and v5) UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid#readme" }, { "type": "vcs", "url": "git+https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Gary Court " } ], "group": "", "name": "uri-js", "version": "4.4.1", "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-js@4.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/garycourt/uri-js" }, { "type": "vcs", "url": "git+ssh://git@github.com/garycourt/uri-js.git" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-js/package.json" } ], "concludedValue": "node_modules/uri-js/package.json" } ] } }, { "authors": [ { "name": "Juan Cruz Viotti " } ], "group": "", "name": "unicode-length", "version": "1.0.3", "description": "Get the length of unicode strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicode-length@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jviotti/unicode-length" }, { "type": "vcs", "url": "git://github.com/jviotti/unicode-length.git" } ], "type": "library", "bom-ref": "pkg:npm/unicode-length@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-length/package.json" } ], "concludedValue": "node_modules/unicode-length/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "3.0.1", "description": "Strip ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/strip-ansi" }, { "type": "vcs", "url": "git+https://github.com/chalk/strip-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-length/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-length/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/unicode-length/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.4.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@1.4.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "git+https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-length/node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-length/node_modules/punycode/package.json" } ], "concludedValue": "node_modules/unicode-length/node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "2.1.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-regex#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-length/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-length/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/unicode-length/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "underscore.string", "version": "3.3.6", "description": "String manipulation extensions for Underscore.js javascript library.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/underscore.string@3.3.6", "externalReferences": [ { "type": "vcs", "url": "http://epeli.github.com/underscore.string/" }, { "type": "vcs", "url": "git+https://github.com/epeli/underscore.string.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@3.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/underscore.string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/underscore.string/package.json" } ], "concludedValue": "node_modules/underscore.string/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "unc-path-regex", "version": "0.1.2", "description": "Regular expression for testing if a file path is a windows UNC file path. Can also be used as a component of another regexp via the `.source` property.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unc-path-regex@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/regexhq/unc-path-regex" }, { "type": "vcs", "url": "git+https://github.com/regexhq/unc-path-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/unc-path-regex@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/unc-path-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unc-path-regex/package.json" } ], "concludedValue": "node_modules/unc-path-regex/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "uglify-js", "version": "3.19.3", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "required", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@3.19.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mishoo/UglifyJS#readme" }, { "type": "vcs", "url": "git+https://github.com/mishoo/UglifyJS.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@3.19.3", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" }, { "name": "ImportedModules", "value": "uglify-js" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ], "occurrences": [ { "location": "grunt.js", "line": 2 }, { "location": "tasks/minify-lang.js", "line": 4 }, { "location": "tasks/minify.js", "line": 4 } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "3.9.10", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@3.9.10", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "git+https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.9.10", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "TweetNaCl-js contributors" } ], "group": "", "name": "tweetnacl", "version": "0.14.5", "description": "Port of TweetNaCl cryptographic library to JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Unlicense", "url": "https://opensource.org/licenses/Unlicense", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "website", "url": "https://tweetnacl.js.org" }, { "type": "vcs", "url": "git+https://github.com/dchest/tweetnacl-js.git" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tweetnacl/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tweetnacl/package.json" } ], "concludedValue": "node_modules/tweetnacl/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.6.0", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel-agent@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/tunnel-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "group": "", "name": "tsame", "version": "2.0.1", "description": "the logic behind tap's t.same() and t.strictSame()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsame@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tsame#readme" }, { "type": "vcs", "url": "git+https://github.com/tapjs/tsame.git" } ], "type": "library", "bom-ref": "pkg:npm/tsame@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsame/package.json" } ], "concludedValue": "node_modules/tsame/package.json" } ] } }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "", "name": "ts-node", "version": "8.10.2", "description": "TypeScript execution environment and REPL for node.js, with source map support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ts-node@8.10.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TypeStrong/ts-node" }, { "type": "vcs", "url": "git://github.com/TypeStrong/ts-node.git" } ], "type": "library", "bom-ref": "pkg:npm/ts-node@8.10.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ts-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ts-node/package.json" } ], "concludedValue": "node_modules/ts-node/package.json" } ] } }, { "group": "", "name": "diff", "version": "4.0.4", "description": "A javascript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff#readme" }, { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/ts-node/node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ts-node/node_modules/diff/package.json" } ], "concludedValue": "node_modules/ts-node/node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "trivial-deferred", "version": "1.1.2", "description": "The most dead-simple trivial Deferred implementation", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/trivial-deferred@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/trivial-deferred#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/trivial-deferred.git" } ], "type": "library", "bom-ref": "pkg:npm/trivial-deferred@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/trivial-deferred/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/trivial-deferred/package.json" } ], "concludedValue": "node_modules/trivial-deferred/package.json" } ] } }, { "authors": [ { "name": "Jeremy Stashewsky " } ], "group": "", "name": "tough-cookie", "version": "2.5.0", "description": "RFC6265 Cookies and Cookie Jar for node.js", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tough-cookie@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/salesforce/tough-cookie" }, { "type": "vcs", "url": "git://github.com/salesforce/tough-cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/package.json" } ], "concludedValue": "node_modules/tough-cookie/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "to-regex-range", "version": "5.0.1", "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/to-regex-range" }, { "type": "vcs", "url": "git+https://github.com/micromatch/to-regex-range.git" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-regex-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-regex-range/package.json" } ], "concludedValue": "node_modules/to-regex-range/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "tmatch", "version": "4.0.0", "description": "This module exists to facilitate the `t.match()` method in [`tap`](http://npm.im/tap).", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tmatch@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/tmatch#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/tmatch.git" } ], "type": "library", "bom-ref": "pkg:npm/tmatch@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tmatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tmatch/package.json" } ], "concludedValue": "node_modules/tmatch/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "test-exclude", "version": "5.2.3", "description": "test for inclusion or exclusion of paths using pkg-conf and globs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/test-exclude@5.2.3", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/test-exclude@5.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/package.json" } ], "concludedValue": "node_modules/test-exclude/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tap-parser", "version": "7.0.0", "description": "parse the test anything protocol", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap-parser@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/tap-parser" }, { "type": "vcs", "url": "git://github.com/substack/tap-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/tap-parser@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-parser/package.json" } ], "concludedValue": "node_modules/tap-parser/package.json" } ] }, "tags": [ "parse", "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "tap-mocha-reporter", "version": "3.0.9", "description": "Format a TAP stream using Mocha's set of reporters", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap-mocha-reporter@3.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/tap-mocha-reporter" }, { "type": "vcs", "url": "git+https://github.com/isaacs/tap-mocha-reporter.git" } ], "type": "library", "bom-ref": "pkg:npm/tap-mocha-reporter@3.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-mocha-reporter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-mocha-reporter/package.json" } ], "concludedValue": "node_modules/tap-mocha-reporter/package.json" } ] }, "tags": [ "stream", "test" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tap-parser", "version": "5.4.0", "description": "parse the test anything protocol", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap-parser@5.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/tap-parser" }, { "type": "vcs", "url": "git://github.com/substack/tap-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/tap-parser@5.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-mocha-reporter/node_modules/tap-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-mocha-reporter/node_modules/tap-parser/package.json" } ], "concludedValue": "node_modules/tap-mocha-reporter/node_modules/tap-parser/package.json" } ] }, "tags": [ "parse", "test" ] }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zeit/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/zeit/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-mocha-reporter/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-mocha-reporter/node_modules/ms/package.json" } ], "concludedValue": "node_modules/tap-mocha-reporter/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/escape-string-regexp" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/escape-string-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-mocha-reporter/node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-mocha-reporter/node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/tap-mocha-reporter/node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-mocha-reporter/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-mocha-reporter/node_modules/debug/package.json" } ], "concludedValue": "node_modules/tap-mocha-reporter/node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "tap", "version": "12.7.0", "description": "A Test-Anything-Protocol library", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap@12.7.0", "externalReferences": [ { "type": "website", "url": "http://node-tap.org/" }, { "type": "vcs", "url": "git+https://github.com/tapjs/node-tap.git" } ], "type": "library", "bom-ref": "pkg:npm/tap@12.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap/package.json" } ], "concludedValue": "node_modules/tap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-preserve-symlinks-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-preserve-symlinks-flag/package.json" } ], "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-bom", "version": "3.0.0", "description": "Strip UTF-8 byte order mark (BOM) from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-bom#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-bom.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-bom@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-bom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-bom/package.json" } ], "concludedValue": "node_modules/strip-bom/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "5.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@5.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/strip-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/strip-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/node_modules/safe-buffer/package.json" }, { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "3.1.0", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/string-width#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/string-width.git" } ], "type": "library", "bom-ref": "pkg:npm/string-width@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "stack-utils", "version": "1.0.5", "description": "Captures and cleans stack traces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stack-utils@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/stack-utils#readme" }, { "type": "vcs", "url": "git+https://github.com/tapjs/stack-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/stack-utils@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/stack-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stack-utils/package.json" } ], "concludedValue": "node_modules/stack-utils/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "sshpk", "version": "1.18.0", "description": "A library for finding and using SSH public keys", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sshpk@1.18.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-sshpk#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-sshpk.git" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sshpk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sshpk/package.json" } ], "concludedValue": "node_modules/sshpk/package.json" } ] } }, { "authors": [ { "name": "Alexandru Mărășteanu " } ], "group": "", "name": "sprintf-js", "version": "1.1.3", "description": "JavaScript sprintf implementation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sprintf-js@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexei/sprintf.js#readme" }, { "type": "vcs", "url": "git+https://github.com/alexei/sprintf.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/sprintf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sprintf-js/package.json" } ], "concludedValue": "node_modules/sprintf-js/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.23", "description": "A list of SPDX license identifiers", "scope": "optional", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.23", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-license-ids#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-license-ids.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.23", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "3.0.1", "description": "parse SPDX license expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-expression-parse.js#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.5.0", "description": "list of SPDX standard license exceptions", "scope": "optional", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kemitchell/spdx-exceptions.json#readme" }, { "type": "vcs", "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/spdx-exceptions/package.json" } ] } }, { "group": "", "name": "spdx-correct", "version": "3.2.0", "description": "correct invalid SPDX expressions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-correct@3.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-correct.js#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-correct.js.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-correct@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-correct/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-correct/package.json" } ], "concludedValue": "node_modules/spdx-correct/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "spawn-wrap", "version": "1.4.3", "description": "Wrap all spawned Node.js child processes by adding environs and arguments ahead of the main JavaScript file argument.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spawn-wrap@1.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/spawn-wrap#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/spawn-wrap.git" } ], "type": "library", "bom-ref": "pkg:npm/spawn-wrap@1.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/spawn-wrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spawn-wrap/package.json" } ], "concludedValue": "node_modules/spawn-wrap/package.json" } ] } }, { "group": "", "name": "source-map-support", "version": "0.5.21", "description": "Fixes stack traces for files with source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-support@0.5.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support#readme" }, { "type": "vcs", "url": "git+https://github.com/evanw/node-source-map-support.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.5.21", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "git+ssh://git@github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "3.0.7", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@3.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit" }, { "type": "vcs", "url": "git+https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "set-blocking", "version": "2.0.0", "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-blocking@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/set-blocking#readme" }, { "type": "vcs", "url": "git+https://github.com/yargs/set-blocking.git" } ], "type": "library", "bom-ref": "pkg:npm/set-blocking@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-blocking/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-blocking/package.json" } ], "concludedValue": "node_modules/set-blocking/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "5.7.2", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@5.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ChALkeR/safer-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.7.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/rimraf#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/rimraf.git" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "4.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/resolve-from#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/resolve-from.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve-from@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "resolve-dir", "version": "1.0.1", "description": "Resolve a directory that is either local, global or in the user's home directory.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-dir@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/resolve-dir" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/resolve-dir.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve-dir@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-dir/package.json" } ], "concludedValue": "node_modules/resolve-dir/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.12", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/resolve#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.12", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "ljharb-monorepo-symlink-test", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid_main", "version": "", "scope": "optional", "purl": "pkg:npm/invalid_main", "type": "library", "bom-ref": "pkg:npm/invalid_main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "false_main", "version": "", "scope": "optional", "purl": "pkg:npm/false_main", "type": "library", "bom-ref": "pkg:npm/false_main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/false_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "scope": "optional", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "group": "", "name": "baz", "version": "", "scope": "optional", "purl": "pkg:npm/baz", "type": "library", "bom-ref": "pkg:npm/baz", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/baz/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "require-main-filename", "version": "2.0.0", "description": "shim for require.main.filename() that works in as many environments as possible", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-main-filename@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/require-main-filename#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/require-main-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/require-main-filename@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/require-main-filename/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-main-filename/package.json" } ], "concludedValue": "node_modules/require-main-filename/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.88.2", "description": "Simplified HTTP request client.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request@2.88.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request#readme" }, { "type": "vcs", "url": "git+https://github.com/request/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.88.2", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Mark Wubben (https://novemberborn.net/)" } ], "group": "", "name": "release-zalgo", "version": "1.0.0", "description": "Helps you write code with promise-like chains that can run both synchronously and asynchronously", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/release-zalgo@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/novemberborn/release-zalgo#readme" }, { "type": "vcs", "url": "git+https://github.com/novemberborn/release-zalgo.git" } ], "type": "library", "bom-ref": "pkg:npm/release-zalgo@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/release-zalgo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/release-zalgo/package.json" } ], "concludedValue": "node_modules/release-zalgo/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (http://gulpjs.com/)" } ], "group": "", "name": "rechoir", "version": "0.7.1", "description": "Prepare a node environment to require files with different extensions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rechoir@0.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gulpjs/rechoir#readme" }, { "type": "vcs", "url": "git+https://github.com/gulpjs/rechoir.git" } ], "type": "library", "bom-ref": "pkg:npm/rechoir@0.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rechoir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rechoir/package.json" } ], "concludedValue": "node_modules/rechoir/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/nodejs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg-up", "version": "4.0.0", "description": "Read the closest package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg-up@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/read-pkg-up#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/read-pkg-up.git" } ], "type": "library", "bom-ref": "pkg:npm/read-pkg-up@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg-up/package.json" } ], "concludedValue": "node_modules/read-pkg-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "3.0.0", "description": "Read a package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/read-pkg#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/read-pkg.git" } ], "type": "library", "bom-ref": "pkg:npm/read-pkg@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/read-pkg/package.json" } ] } }, { "group": "", "name": "qs", "version": "6.5.5", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "git+https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "2.3.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.3.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "git+https://github.com/mathiasbynens/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Lupo Montero (https://lupomontero.com/)" } ], "group": "", "name": "psl", "version": "1.15.0", "description": "Domain name parser based on the Public Suffix List", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/psl@1.15.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lupomontero/psl#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/lupomontero/psl.git" } ], "type": "library", "bom-ref": "pkg:npm/psl@1.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/psl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/psl/package.json" } ], "concludedValue": "node_modules/psl/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "pseudomap", "version": "1.0.2", "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pseudomap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/pseudomap#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/pseudomap.git" } ], "type": "library", "bom-ref": "pkg:npm/pseudomap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pseudomap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pseudomap/package.json" } ], "concludedValue": "node_modules/pseudomap/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pkg-dir", "version": "3.0.0", "description": "Find the root directory of a Node.js project or npm package", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-dir@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pkg-dir#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pkg-dir.git" } ], "type": "library", "bom-ref": "pkg:npm/pkg-dir@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-dir/package.json" } ], "concludedValue": "node_modules/pkg-dir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "4.0.1", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pify#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pify.git" } ], "type": "library", "bom-ref": "pkg:npm/pify@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "2.3.2", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@2.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" }, { "type": "vcs", "url": "git+https://github.com/micromatch/picomatch.git" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexeyraspopov/picocolors#readme" }, { "type": "vcs", "url": "git+https://github.com/alexeyraspopov/picocolors.git" } ], "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "authors": [ { "name": "Braveg1rl " } ], "group": "", "name": "performance-now", "version": "2.1.0", "description": "Implements performance.now (based on process.hrtime).", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/performance-now@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/braveg1rl/performance-now" }, { "type": "vcs", "url": "git://github.com/braveg1rl/performance-now.git" } ], "type": "library", "bom-ref": "pkg:npm/performance-now@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/performance-now/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/performance-now/package.json" } ], "concludedValue": "node_modules/performance-now/package.json" } ] }, "tags": [ "performance" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-type", "version": "3.0.0", "description": "Check if a path is a file, directory, or symlink", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-type#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-type.git" } ], "type": "library", "bom-ref": "pkg:npm/path-type@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-type/package.json" } ], "concludedValue": "node_modules/path-type/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "3.0.0", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pify#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pify.git" } ], "type": "library", "bom-ref": "pkg:npm/pify@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/node_modules/pify/package.json" }, { "name": "SrcFile", "value": "node_modules/load-json-file/node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/node_modules/pify/package.json" } ], "concludedValue": "node_modules/load-json-file/node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "path-root-regex", "version": "0.1.2", "description": "Regular expression for getting the root of a posix or windows filepath.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-root-regex@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/regexhq/path-root-regex" }, { "type": "vcs", "url": "git+https://github.com/regexhq/path-root-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/path-root-regex@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/path-root-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-root-regex/package.json" } ], "concludedValue": "node_modules/path-root-regex/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "path-root", "version": "0.1.1", "description": "Get the root of a posix or windows filepath.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-root@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/path-root" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/path-root.git" } ], "type": "library", "bom-ref": "pkg:npm/path-root@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-root/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-root/package.json" } ], "concludedValue": "node_modules/path-root/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.7", "description": "Node.js path.parse() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "git+https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-is-absolute#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "3.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-exists#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-exists.git" } ], "type": "library", "bom-ref": "pkg:npm/path-exists@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Brian Woodward (https://github.com/doowb)" } ], "group": "", "name": "parse-passwd", "version": "1.0.0", "description": "Parse a passwd file into a list of users.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-passwd@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/doowb/parse-passwd" }, { "type": "vcs", "url": "git+https://github.com/doowb/parse-passwd.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-passwd@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-passwd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-passwd/package.json" } ], "concludedValue": "node_modules/parse-passwd/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "4.0.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/parse-json#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/parse-json.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-json@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "parse-filepath", "version": "1.0.2", "description": "Pollyfill for node.js `path.parse`, parses a filepath into an object.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-filepath@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/parse-filepath" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/parse-filepath.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-filepath@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-filepath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-filepath/package.json" } ], "concludedValue": "node_modules/parse-filepath/package.json" } ] } }, { "authors": [ { "name": "Mark Wubben (https://novemberborn.net/)" } ], "group": "", "name": "package-hash", "version": "3.0.0", "description": "Generates a hash for an installed npm package, useful for salting caches", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package-hash@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/novemberborn/package-hash#readme" }, { "type": "vcs", "url": "git+https://github.com/novemberborn/package-hash.git" } ], "type": "library", "bom-ref": "pkg:npm/package-hash@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/package-hash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-hash/package.json" } ], "concludedValue": "node_modules/package-hash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "2.2.0", "description": "`Start a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-try#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-try.git" } ], "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "3.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-locate#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-locate.git" } ], "type": "library", "bom-ref": "pkg:npm/p-locate@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "2.3.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-limit#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-limit.git" } ], "type": "library", "bom-ref": "pkg:npm/p-limit@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "own-or-env", "version": "1.0.2", "description": "Use an objects own property, or an environment variable. Optionally treat as a boolean if the env should be set to 1 or 0.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/own-or-env@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/own-or-env#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/own-or-env.git" } ], "type": "library", "bom-ref": "pkg:npm/own-or-env@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/own-or-env/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/own-or-env/package.json" } ], "concludedValue": "node_modules/own-or-env/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "own-or", "version": "1.0.0", "description": "Either use the object's own property, or a fallback", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/own-or@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/own-or#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/own-or.git" } ], "type": "library", "bom-ref": "pkg:npm/own-or@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/own-or/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/own-or/package.json" } ], "concludedValue": "node_modules/own-or/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-homedir", "version": "1.0.2", "description": "Node.js 4 `os.homedir()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-homedir@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/os-homedir#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/os-homedir.git" } ], "type": "library", "bom-ref": "pkg:npm/os-homedir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-homedir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-homedir/package.json" } ], "concludedValue": "node_modules/os-homedir/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "opener", "version": "1.5.2", "description": "Opens stuff, like webpages and files and executables, cross-platform", "scope": "optional", "licenses": [ { "expression": "WTFPL OR MIT" } ], "purl": "pkg:npm/opener@1.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/domenic/opener#readme" }, { "type": "vcs", "url": "git+https://github.com/domenic/opener.git" } ], "type": "library", "bom-ref": "pkg:npm/opener@1.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/opener/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/opener/package.json" } ], "concludedValue": "node_modules/opener/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/once#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/once.git" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "object.pick", "version": "1.3.0", "description": "Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.pick@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/object.pick" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/object.pick.git" } ], "type": "library", "bom-ref": "pkg:npm/object.pick@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/object.pick/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.pick/package.json" } ], "concludedValue": "node_modules/object.pick/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "object.map", "version": "1.0.1", "description": "Similar to map for arrays, this creates a new object by calling the callback on each property of the original object.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.map@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/object.map" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/object.map.git" } ], "type": "library", "bom-ref": "pkg:npm/object.map@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object.map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.map/package.json" } ], "concludedValue": "node_modules/object.map/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "object.defaults", "version": "1.1.0", "description": "Like `extend` but only copies missing properties/values to the target object.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.defaults@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/object.defaults" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/object.defaults.git" } ], "type": "library", "bom-ref": "pkg:npm/object.defaults@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/object.defaults/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.defaults/package.json" } ], "concludedValue": "node_modules/object.defaults/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.9.0", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth-sign@0.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/oauth-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "nyc", "version": "14.1.1", "description": "the Istanbul command line interface", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nyc@14.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/istanbuljs/nyc#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/nyc.git" } ], "type": "library", "bom-ref": "pkg:npm/nyc@14.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nyc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nyc/package.json" } ], "concludedValue": "node_modules/nyc/package.json" } ] } }, { "authors": [ { "name": "Meryn Stol " } ], "group": "", "name": "normalize-package-data", "version": "2.5.0", "description": "Normalizes data that can be found in package.json files.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/normalize-package-data#readme" }, { "type": "vcs", "url": "git://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "5.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/nopt#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "group": "", "name": "nodeunit", "version": "0.11.3", "description": "Easy unit testing for node.js and the browser.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nodeunit@0.11.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/caolan/nodeunit#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/caolan/nodeunit.git" } ], "type": "library", "bom-ref": "pkg:npm/nodeunit@0.11.3", "properties": [ { "name": "SrcFile", "value": "node_modules/nodeunit/package.json" }, { "name": "ImportedModules", "value": "nodeunit" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nodeunit/package.json" } ], "concludedValue": "node_modules/nodeunit/package.json" } ], "occurrences": [ { "location": "tasks/zone.js", "line": 2 }, { "location": "tasks/zones.js", "line": 2 } ] } }, { "authors": [ { "name": "Matt Lavin " } ], "group": "", "name": "nested-error-stacks", "version": "2.1.1", "description": "An Error subclass that will chain nested Errors and dump nested stacktraces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nested-error-stacks@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mdlavin/nested-error-stacks#readme" }, { "type": "vcs", "url": "git+https://github.com/mdlavin/nested-error-stacks.git" } ], "type": "library", "bom-ref": "pkg:npm/nested-error-stacks@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nested-error-stacks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nested-error-stacks/package.json" } ], "concludedValue": "node_modules/nested-error-stacks/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vercel/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/vercel/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.6", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp#readme" }, { "type": "vcs", "url": "git+https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "2.9.0", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@2.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minipass#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@2.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "3.1.1", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/yallist#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/minipass/node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-types#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-types.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-db#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-db.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "micromatch", "version": "4.0.8", "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/micromatch@4.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/micromatch" }, { "type": "vcs", "url": "git+https://github.com/micromatch/micromatch.git" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/micromatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/micromatch/package.json" } ], "concludedValue": "node_modules/micromatch/package.json" } ] } }, { "authors": [ { "name": "keik " } ], "group": "", "name": "merge-source-map", "version": "1.1.0", "description": "Merge old source map and new source map in multi-transform flow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-source-map@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/keik/merge-source-map#readme" }, { "type": "vcs", "url": "git+https://github.com/keik/merge-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/merge-source-map@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-source-map/package.json" } ], "concludedValue": "node_modules/merge-source-map/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "map-cache", "version": "0.2.2", "description": "Basic cache object for storing key-value pairs.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/map-cache@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/map-cache" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/map-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/map-cache@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/map-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/map-cache/package.json" } ], "concludedValue": "node_modules/map-cache/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "make-iterator", "version": "1.0.1", "description": "Convert an argument into a valid iterator. Based on the `.makeIterator()` implementation in mout https://github.com/mout/mout.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-iterator@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/make-iterator" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/make-iterator.git" } ], "type": "library", "bom-ref": "pkg:npm/make-iterator@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/make-iterator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-iterator/package.json" } ], "concludedValue": "node_modules/make-iterator/package.json" } ] } }, { "authors": [ { "name": "Julien Fontanet " } ], "group": "", "name": "make-error", "version": "1.3.6", "description": "Make your own error types!", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-error@1.3.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JsCommunity/make-error" }, { "type": "vcs", "url": "git://github.com/JsCommunity/make-error.git" } ], "type": "library", "bom-ref": "pkg:npm/make-error@1.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/make-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-error/package.json" } ], "concludedValue": "node_modules/make-error/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "2.1.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/make-dir#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/make-dir.git" } ], "type": "library", "bom-ref": "pkg:npm/make-dir@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "4.1.5", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@4.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-lru-cache#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Gregg Caines" } ], "group": "", "name": "log-driver", "version": "1.2.7", "description": "log-driver is a simple logging framework for logging to stdout", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/log-driver@1.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cainus/logdriver" }, { "type": "vcs", "url": "git://github.com/cainus/logdriver.git" } ], "type": "framework", "bom-ref": "pkg:npm/log-driver@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/log-driver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/log-driver/package.json" } ], "concludedValue": "node_modules/log-driver/package.json" } ] }, "tags": [ "framework", "logging" ] }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.flattendeep", "version": "4.4.0", "description": "The lodash method `_.flattenDeep` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.flattendeep@4.4.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.flattendeep/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.flattendeep/package.json" } ], "concludedValue": "node_modules/lodash.flattendeep/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.18.1", "description": "Lodash modular utilities.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "3.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/locate-path#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/locate-path.git" } ], "type": "library", "bom-ref": "pkg:npm/locate-path@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "load-json-file", "version": "4.0.0", "description": "Read and parse a JSON file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/load-json-file@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/load-json-file#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/load-json-file.git" } ], "type": "library", "bom-ref": "pkg:npm/load-json-file@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/load-json-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/package.json" } ], "concludedValue": "node_modules/load-json-file/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "Grunt Development Team (https://gruntjs.com/development-team)" } ], "group": "", "name": "liftup", "version": "3.0.1", "description": "Launch your command line tool with ease.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/liftup@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/js-liftup#readme" }, { "type": "vcs", "url": "git+https://github.com/gruntjs/js-liftup.git" } ], "type": "library", "bom-ref": "pkg:npm/liftup@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/liftup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/liftup/package.json" } ], "concludedValue": "node_modules/liftup/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (https://gulpjs.com/)" } ], "group": "", "name": "findup-sync", "version": "4.0.0", "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/findup-sync@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gulpjs/findup-sync#readme" }, { "type": "vcs", "url": "git+https://github.com/gulpjs/findup-sync.git" } ], "type": "library", "bom-ref": "pkg:npm/findup-sync@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/liftup/node_modules/findup-sync/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/liftup/node_modules/findup-sync/package.json" } ], "concludedValue": "node_modules/liftup/node_modules/findup-sync/package.json" } ] } }, { "authors": [ { "name": "Dav Glass " } ], "group": "", "name": "lcov-parse", "version": "1.0.0", "description": "Parse lcov results files and return JSON", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lcov-parse@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davglass/lcov-parse#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/davglass/lcov-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/lcov-parse@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lcov-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lcov-parse/package.json" } ], "concludedValue": "node_modules/lcov-parse/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "kind-of", "version": "6.0.3", "description": "Get the native type of a value.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kind-of@6.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/kind-of" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/kind-of.git" } ], "type": "library", "bom-ref": "pkg:npm/kind-of@6.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/kind-of/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kind-of/package.json" } ], "concludedValue": "node_modules/kind-of/package.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.2", "description": "utilities for primitive JavaScript types", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsprim@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-jsprim#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-jsprim.git" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jsprim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsprim/package.json" } ], "concludedValue": "node_modules/jsprim/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.1", "description": "Like JSON.stringify, but doesn't blow up on circular refs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/json-stringify-safe" }, { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "json-schema-traverse", "version": "0.4.1", "description": "Traverse JSON Schema passing each schema object to callback", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/json-schema-traverse#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-traverse/package.json" } ], "concludedValue": "node_modules/json-schema-traverse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "json-schema", "version": "0.4.0", "description": "JSON Schema validation and specifications", "scope": "optional", "licenses": [ { "expression": "AFL-2.1 OR BSD-3-Clause" } ], "purl": "pkg:npm/json-schema@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriszyp/json-schema#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kriszyp/json-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema/package.json" } ], "concludedValue": "node_modules/json-schema/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "json-parse-better-errors", "version": "1.0.2", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-better-errors@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zkat/json-parse-better-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/zkat/json-parse-better-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-better-errors/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "jsesc", "version": "3.1.0", "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsesc@3.1.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/jsesc" }, { "type": "vcs", "url": "git+https://github.com/mathiasbynens/jsesc.git" } ], "type": "library", "bom-ref": "pkg:npm/jsesc@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsesc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsesc/package.json" } ], "concludedValue": "node_modules/jsesc/package.json" } ] } }, { "authors": [ { "name": "Tom Wu" } ], "group": "", "name": "jsbn", "version": "0.1.1", "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andyperlitch/jsbn#readme" }, { "type": "vcs", "url": "git+https://github.com/andyperlitch/jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsbn/package.json" } ], "concludedValue": "node_modules/jsbn/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "3.15.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@3.15.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" }, { "type": "vcs", "url": "git+https://github.com/nodeca/js-yaml.git" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.15.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "4.0.0", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lydell/js-tokens#readme" }, { "type": "vcs", "url": "git+https://github.com/lydell/js-tokens.git" } ], "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-reports", "version": "2.2.7", "description": "istanbul reports", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-reports@2.2.7", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-reports@2.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-reports/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-reports/package.json" } ], "concludedValue": "node_modules/istanbul-reports/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-source-maps", "version": "3.0.6", "description": "Source maps support for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-source-maps@3.0.6", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-source-maps@3.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-source-maps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-source-maps/package.json" } ], "concludedValue": "node_modules/istanbul-lib-source-maps/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-report", "version": "2.0.8", "description": "Base reporting library for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-report@2.0.8", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-report@2.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "6.1.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@6.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "3.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/has-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-instrument", "version": "3.3.0", "description": "Core istanbul API for JS code coverage", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-instrument@3.3.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-instrument@3.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-instrument/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-instrument/package.json" } ], "concludedValue": "node_modules/istanbul-lib-instrument/package.json" } ] }, "tags": [ "api", "test" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "6.3.1", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@6.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@6.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json" } ], "concludedValue": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-hook", "version": "2.0.7", "description": "Hooks for require, vm and script used in istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-hook@2.0.7", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-hook@2.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-hook/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-hook/package.json" } ], "concludedValue": "node_modules/istanbul-lib-hook/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-coverage", "version": "2.0.5", "description": "Data library for istanbul coverage objects", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-coverage@2.0.5", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-coverage@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "isstream", "version": "0.1.2", "description": "Determine if an object is a Stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/isstream" }, { "type": "vcs", "url": "git+https://github.com/rvagg/isstream.git" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/isstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isstream/package.json" } ], "concludedValue": "node_modules/isstream/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "isobject", "version": "3.0.1", "description": "Returns true if the value is an object and not an array or null.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isobject@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/isobject" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/isobject.git" } ], "type": "library", "bom-ref": "pkg:npm/isobject@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/isobject/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isobject/package.json" } ], "concludedValue": "node_modules/isobject/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-windows", "version": "1.0.2", "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-windows@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-windows" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-windows.git" } ], "type": "library", "bom-ref": "pkg:npm/is-windows@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-windows/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-windows/package.json" } ], "concludedValue": "node_modules/is-windows/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-unc-path", "version": "1.0.0", "description": "Returns true if a filepath is a windows UNC file path.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-unc-path@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-unc-path" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-unc-path.git" } ], "type": "library", "bom-ref": "pkg:npm/is-unc-path@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unc-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unc-path/package.json" } ], "concludedValue": "node_modules/is-unc-path/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "is-typedarray", "version": "1.0.0", "description": "Detect whether or not an object is a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/is-typedarray" }, { "type": "vcs", "url": "git://github.com/hughsk/is-typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typedarray/package.json" } ], "concludedValue": "node_modules/is-typedarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "1.1.0", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-stream#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/is-stream@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-relative", "version": "1.0.0", "description": "Returns `true` if the path appears to be relative.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-relative@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-relative" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-relative.git" } ], "type": "library", "bom-ref": "pkg:npm/is-relative@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-relative/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-relative/package.json" } ], "concludedValue": "node_modules/is-relative/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-plain-object", "version": "2.0.4", "description": "Returns true if an object was created by the `Object` constructor.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-object@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-plain-object" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-plain-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-plain-object@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-object/package.json" } ], "concludedValue": "node_modules/is-plain-object/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-number", "version": "7.0.0", "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-number" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-number.git" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number/package.json" } ], "concludedValue": "node_modules/is-number/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-glob", "version": "4.0.3", "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a bet", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-glob@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/is-glob" }, { "type": "vcs", "url": "git+https://github.com/micromatch/is-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-glob/package.json" } ], "concludedValue": "node_modules/is-glob/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "2.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git" } ], "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-extglob", "version": "2.1.1", "description": "Returns true if a string has an extglob.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-extglob" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-extglob.git" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-extglob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-extglob/package.json" } ], "concludedValue": "node_modules/is-extglob/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-core-module", "version": "2.16.2", "description": "Is this specifier a node.js core module?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-core-module@2.16.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-core-module" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-core-module.git" } ], "type": "library", "bom-ref": "pkg:npm/is-core-module@2.16.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-core-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-core-module/package.json" } ], "concludedValue": "node_modules/is-core-module/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.2.1", "description": "Determines if an object can be used as an array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish#readme" }, { "type": "vcs", "url": "git+https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/is-arrayish/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-absolute", "version": "1.0.0", "description": "Returns true if a file path is absolute. Does not rely on the path module and can be used as a polyfill for node.js native `path.isAbolute`.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-absolute@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-absolute" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/is-absolute@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-absolute/package.json" } ], "concludedValue": "node_modules/is-absolute/package.json" } ] } }, { "authors": [ { "name": "Tyler Kellen (http://goingslowly.com/)" } ], "group": "", "name": "interpret", "version": "1.1.0", "description": "A dictionary of file extensions and associated module loaders.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/interpret@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tkellen/node-interpret" }, { "type": "vcs", "url": "git://github.com/tkellen/node-interpret.git" } ], "type": "library", "bom-ref": "pkg:npm/interpret@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/interpret/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/interpret/package.json" } ], "concludedValue": "node_modules/interpret/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "ini", "version": "1.3.8", "description": "An ini encoder/decoder for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@1.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/ini#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@1.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ini/package.json" } ], "concludedValue": "node_modules/ini/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "git+https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Jens Taylor (https://github.com/homebrewing)" } ], "group": "", "name": "imurmurhash", "version": "0.1.4", "description": "An incremental implementation of MurmurHash3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/imurmurhash@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" }, { "type": "vcs", "url": "git+https://github.com/jensyt/imurmurhash-js.git" } ], "type": "library", "bom-ref": "pkg:npm/imurmurhash@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/imurmurhash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/imurmurhash/package.json" } ], "concludedValue": "node_modules/imurmurhash/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.6.3", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "1.2.0", "description": "Reference implementation of Joyent's HTTP Signature scheme.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-signature@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-http-signature/" }, { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "html-escaper", "version": "2.0.2", "description": "fast and safe way to escape and unescape &<>'\" chars", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/html-escaper@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper" }, { "type": "vcs", "url": "git+https://github.com/WebReflection/html-escaper.git" } ], "type": "library", "bom-ref": "pkg:npm/html-escaper@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/html-escaper/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-escaper/package.json" } ], "concludedValue": "node_modules/html-escaper/package.json" } ] }, "tags": [ "escape", "unescape" ] }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "hosted-git-info", "version": "2.8.9", "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@2.8.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@2.8.9", "properties": [ { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "hooker", "version": "0.2.3", "description": "Monkey-patch (hook) functions for debugging and stuff.", "scope": "optional", "purl": "pkg:npm/hooker@0.2.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/cowboy/javascript-hooker" }, { "type": "vcs", "url": "git://github.com/cowboy/javascript-hooker.git" } ], "type": "library", "bom-ref": "pkg:npm/hooker@0.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hooker/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hooker/package.json" } ], "concludedValue": "node_modules/hooker/package.json" } ] } }, { "authors": [ { "name": "Brian Woodward (https://github.com/doowb)" } ], "group": "", "name": "homedir-polyfill", "version": "1.0.3", "description": "Node.js os.homedir polyfill for older versions of node.js.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/homedir-polyfill@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/doowb/homedir-polyfill" }, { "type": "vcs", "url": "git+https://github.com/doowb/homedir-polyfill.git" } ], "type": "library", "bom-ref": "pkg:npm/homedir-polyfill@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/homedir-polyfill/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/homedir-polyfill/package.json" } ], "concludedValue": "node_modules/homedir-polyfill/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "hasown", "version": "2.0.4", "description": "A robust, ES3 compatible, \"has own property\" predicate.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasown@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/hasOwn#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/hasOwn.git" } ], "type": "library", "bom-ref": "pkg:npm/hasown@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hasown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasown/package.json" } ], "concludedValue": "node_modules/hasown/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "hasha", "version": "3.0.0", "description": "Hashing made simple. Get the hash of a buffer/string/stream/file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hasha@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/hasha#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/hasha.git" } ], "type": "library", "bom-ref": "pkg:npm/hasha@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hasha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hasha/package.json" } ], "concludedValue": "node_modules/hasha/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/has-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-validator", "version": "5.1.5", "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-validator@5.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/node-har-validator" }, { "type": "vcs", "url": "git+https://github.com/ahmadnassri/node-har-validator.git" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@5.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/har-validator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-validator/package.json" } ], "concludedValue": "node_modules/har-validator/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-schema", "version": "2.0.0", "description": "JSON Schema for HTTP Archive (HAR)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-schema@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/har-schema" }, { "type": "vcs", "url": "git+https://github.com/ahmadnassri/har-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/har-schema@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/har-schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-schema/package.json" } ], "concludedValue": "node_modules/har-schema/package.json" } ] } }, { "authors": [ { "name": "Grunt Development Team (https://gruntjs.com/development-team)" } ], "group": "", "name": "grunt-legacy-util", "version": "2.0.2", "description": "Some old grunt utils provided for backwards compatibility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-legacy-util@2.0.2", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-legacy-util.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-legacy-util@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-util/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-util/package.json" } ], "concludedValue": "node_modules/grunt-legacy-util/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-which#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-util/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-util/node_modules/which/package.json" } ], "concludedValue": "node_modules/grunt-legacy-util/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt-legacy-log-utils", "version": "2.1.3", "description": "Static methods for the Grunt 0.4.x logger.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-legacy-log-utils@2.1.3", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-legacy-log-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-legacy-log-utils@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-log-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-log-utils/package.json" } ], "concludedValue": "node_modules/grunt-legacy-log-utils/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt-legacy-log", "version": "3.0.1", "description": "The Grunt 0.4.x logger.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-legacy-log@3.0.1", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-legacy-log.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-legacy-log@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-legacy-log/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-legacy-log/package.json" } ], "concludedValue": "node_modules/grunt-legacy-log/package.json" } ] } }, { "authors": [ { "name": "Grunt Development Team (http://gruntjs.com/development-team)" } ], "group": "", "name": "grunt-known-options", "version": "2.0.0", "description": "The known options used in Grunt", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-known-options@2.0.0", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git+https://github.com/gruntjs/grunt-known-options.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-known-options@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-known-options/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-known-options/package.json" } ], "concludedValue": "node_modules/grunt-known-options/package.json" } ] } }, { "authors": [ { "name": "Grunt Development Team (https://gruntjs.com/development-team)" } ], "group": "", "name": "grunt", "version": "1.6.3", "description": "The JavaScript Task Runner", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt@1.6.3", "externalReferences": [ { "type": "website", "url": "https://gruntjs.com/" }, { "type": "vcs", "url": "git+https://github.com/gruntjs/grunt.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt@1.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/package.json" } ], "concludedValue": "node_modules/grunt/package.json" } ] } }, { "authors": [ { "name": "Grunt Development Team (http://gruntjs.com/development-team)" } ], "group": "", "name": "grunt-cli", "version": "1.5.0", "description": "The grunt command line interface", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/grunt-cli@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/grunt-cli#readme" }, { "type": "vcs", "url": "git+https://github.com/gruntjs/grunt-cli.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-cli@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/node_modules/grunt-cli/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/node_modules/grunt-cli/package.json" } ], "concludedValue": "node_modules/grunt/node_modules/grunt-cli/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "global-prefix", "version": "1.0.2", "description": "Get the npm global path prefix.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/global-prefix@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/global-prefix" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/global-prefix.git" } ], "type": "library", "bom-ref": "pkg:npm/global-prefix@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/global-prefix/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/global-prefix/package.json" } ], "concludedValue": "node_modules/global-prefix/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "global-modules", "version": "1.0.0", "description": "The directory used by npm for globally installed npm modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/global-modules@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/global-modules" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/global-modules.git" } ], "type": "library", "bom-ref": "pkg:npm/global-modules@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/global-modules/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/global-modules/package.json" } ], "concludedValue": "node_modules/global-modules/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.7", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Alex Wilson " } ], "group": "", "name": "getpass", "version": "0.1.7", "description": "getpass for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-getpass#readme" }, { "type": "vcs", "url": "git+https://github.com/arekinath/node-getpass.git" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/getpass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getpass/package.json" } ], "concludedValue": "node_modules/getpass/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "getobject", "version": "1.0.2", "description": "get.and.set.deep.objects.easily = true", "scope": "optional", "purl": "pkg:npm/getobject@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-getobject" }, { "type": "vcs", "url": "git://github.com/cowboy/node-getobject.git" } ], "type": "library", "bom-ref": "pkg:npm/getobject@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/getobject/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getobject/package.json" } ], "concludedValue": "node_modules/getobject/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.a", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "function-loop", "version": "1.0.2", "description": "Run a list of functions in order in a given object context. The functions can be callback-taking or promise-returning.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-loop@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/function-loop#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/function-loop.git" } ], "type": "library", "bom-ref": "pkg:npm/function-loop@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-loop/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-loop/package.json" } ], "concludedValue": "node_modules/function-loop/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.2", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "git+https://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/fs.realpath#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs-exists-cached", "version": "1.0.0", "description": "Just like `fs.exists` and `fs.existsSync`, but cached", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-exists-cached@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/fs-exists-cached#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/fs-exists-cached.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-exists-cached@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-exists-cached/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-exists-cached/package.json" } ], "concludedValue": "node_modules/fs-exists-cached/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "2.3.3", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/form-data@2.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/form-data/form-data#readme" }, { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/package.json" } ], "concludedValue": "node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "forever-agent", "version": "0.6.1", "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/forever-agent" }, { "type": "vcs", "url": "git+https://github.com/mikeal/forever-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/forever-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forever-agent/package.json" } ], "concludedValue": "node_modules/forever-agent/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "1.5.6", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@1.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/foreground-child#readme" }, { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@1.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "for-own", "version": "1.0.0", "description": "Iterate over the own enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/for-own@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/for-own" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/for-own.git" } ], "type": "library", "bom-ref": "pkg:npm/for-own@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/for-own/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/for-own/package.json" } ], "concludedValue": "node_modules/for-own/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "for-in", "version": "1.0.2", "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/for-in@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/for-in" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/for-in.git" } ], "type": "library", "bom-ref": "pkg:npm/for-in@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/for-in/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/for-in/package.json" } ], "concludedValue": "node_modules/for-in/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (http://gulpjs.com/)" } ], "group": "", "name": "flagged-respawn", "version": "1.0.1", "description": "A tool for respawning node binaries when special flags are present.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/flagged-respawn@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gulpjs/flagged-respawn#readme" }, { "type": "vcs", "url": "git+https://github.com/gulpjs/flagged-respawn.git" } ], "type": "library", "bom-ref": "pkg:npm/flagged-respawn@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/flagged-respawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flagged-respawn/package.json" } ], "concludedValue": "node_modules/flagged-respawn/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (http://gulpjs.com/)" } ], "group": "", "name": "fined", "version": "1.2.0", "description": "Find a file given a declaration of locations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fined@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gulpjs/fined#readme" }, { "type": "vcs", "url": "git+https://github.com/gulpjs/fined.git" } ], "type": "library", "bom-ref": "pkg:npm/fined@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fined/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fined/package.json" } ], "concludedValue": "node_modules/fined/package.json" } ] } }, { "authors": [ { "name": "Gulp Team (https://gulpjs.com/)" } ], "group": "", "name": "findup-sync", "version": "5.0.0", "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/findup-sync@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gulpjs/findup-sync#readme" }, { "type": "vcs", "url": "git+https://github.com/gulpjs/findup-sync.git" } ], "type": "library", "bom-ref": "pkg:npm/findup-sync@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/findup-sync/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/package.json" } ], "concludedValue": "node_modules/findup-sync/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "3.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/find-up#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/find-up.git" } ], "type": "library", "bom-ref": "pkg:npm/find-up@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "group": "", "name": "find-cache-dir", "version": "2.1.0", "description": "Finds the common standard cache directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-cache-dir@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/avajs/find-cache-dir#readme" }, { "type": "vcs", "url": "git+https://github.com/avajs/find-cache-dir.git" } ], "type": "library", "bom-ref": "pkg:npm/find-cache-dir@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-cache-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-cache-dir/package.json" } ], "concludedValue": "node_modules/find-cache-dir/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "fill-range", "version": "7.1.1", "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@7.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/fill-range" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/fill-range.git" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fill-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fill-range/package.json" } ], "concludedValue": "node_modules/fill-range/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "fast-json-stable-stringify", "version": "2.1.0", "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-json-stable-stringify/package.json" } ], "concludedValue": "node_modules/fast-json-stable-stringify/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "fast-deep-equal", "version": "3.1.3", "description": "Fast deep equal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-deep-equal@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-deep-equal#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/fast-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-deep-equal/package.json" } ], "concludedValue": "node_modules/fast-deep-equal/package.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "description": "extended POSIX-style sprintf", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davepacheco/node-extsprintf" }, { "type": "vcs", "url": "git://github.com/davepacheco/node-extsprintf.git" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/extsprintf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extsprintf/package.json" } ], "concludedValue": "node_modules/extsprintf/package.json" } ] } }, { "authors": [ { "name": "Stefan Thomas (http://www.justmoon.net)" } ], "group": "", "name": "extend", "version": "3.0.2", "description": "Port of jQuery.extend for node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/justmoon/node-extend#readme" }, { "type": "vcs", "url": "git+https://github.com/justmoon/node-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extend/package.json" } ], "concludedValue": "node_modules/extend/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "expand-tilde", "version": "2.0.2", "description": "Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/expand-tilde@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/expand-tilde" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/expand-tilde.git" } ], "type": "library", "bom-ref": "pkg:npm/expand-tilde@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/expand-tilde/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/expand-tilde/package.json" } ], "concludedValue": "node_modules/expand-tilde/package.json" } ] } }, { "authors": [ { "name": "Grunt Development Team (https://gruntjs.com/development-team)" } ], "group": "", "name": "exit-x", "version": "0.2.2", "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/exit-x@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/node-exit-x" }, { "type": "vcs", "url": "git://github.com/gruntjs/node-exit-x.git" } ], "type": "library", "bom-ref": "pkg:npm/exit-x@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/exit-x/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exit-x/package.json" } ], "concludedValue": "node_modules/exit-x/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "exit", "version": "0.1.2", "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", "scope": "optional", "purl": "pkg:npm/exit@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-exit" }, { "type": "vcs", "url": "git://github.com/cowboy/node-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/exit@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/exit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exit/package.json" } ], "concludedValue": "node_modules/exit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "events-to-array", "version": "1.1.2", "description": "Put a bunch of emitted events in an array, for testing.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/events-to-array@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/events-to-array" }, { "type": "vcs", "url": "git+https://github.com/isaacs/events-to-array.git" } ], "type": "library", "bom-ref": "pkg:npm/events-to-array@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/events-to-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/events-to-array/package.json" } ], "concludedValue": "node_modules/events-to-array/package.json" } ] } }, { "authors": [ { "name": "hij1nx " } ], "group": "", "name": "eventemitter2", "version": "0.4.14", "description": "A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eventemitter2@0.4.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hij1nx/EventEmitter2" }, { "type": "vcs", "url": "git://github.com/hij1nx/EventEmitter2.git" } ], "type": "library", "bom-ref": "pkg:npm/eventemitter2@0.4.14", "properties": [ { "name": "SrcFile", "value": "node_modules/eventemitter2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eventemitter2/package.json" } ], "concludedValue": "node_modules/eventemitter2/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "4.0.1", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "git+https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "esm", "version": "3.2.25", "description": "Tomorrow's ECMAScript modules today!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esm@3.2.25", "externalReferences": [ { "type": "vcs", "url": "https://github.com/standard-things/esm#readme" }, { "type": "vcs", "url": "git+https://github.com/standard-things/esm.git" } ], "type": "library", "bom-ref": "pkg:npm/esm@3.2.25", "properties": [ { "name": "SrcFile", "value": "node_modules/esm/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esm/package.json" } ], "concludedValue": "node_modules/esm/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "2.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/escape-string-regexp#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/escape-string-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Ben Youngblood" } ], "group": "", "name": "es6-error", "version": "4.1.1", "description": "Easily-extendable error for use with ES6 classes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es6-error@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bjyoungblood/es6-error" }, { "type": "vcs", "url": "git+https://github.com/bjyoungblood/es6-error.git" } ], "type": "library", "bom-ref": "pkg:npm/es6-error@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es6-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es6-error/package.json" } ], "concludedValue": "node_modules/es6-error/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "es-errors", "version": "1.3.0", "description": "A simple cache for a few of the JS Error constructors.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-errors@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/es-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/es-errors@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-errors/package.json" } ], "concludedValue": "node_modules/es-errors/package.json" } ] } }, { "group": "", "name": "error-ex", "version": "1.3.4", "description": "Easy error subclassing and stack customization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-ex@1.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-error-ex#readme" }, { "type": "vcs", "url": "git+https://github.com/qix-/node-error-ex.git" } ], "type": "library", "bom-ref": "pkg:npm/error-ex@1.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/error-ex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-ex/package.json" } ], "concludedValue": "node_modules/error-ex/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "7.0.3", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@7.0.3", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "git+https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@7.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Matthew Eernisse (http://fleegix.org)" } ], "group": "", "name": "ejs", "version": "2.7.4", "description": "Embedded JavaScript templates", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ejs@2.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mde/ejs" }, { "type": "vcs", "url": "git://github.com/mde/ejs.git" } ], "type": "library", "bom-ref": "pkg:npm/ejs@2.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/ejs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ejs/package.json" } ], "concludedValue": "node_modules/ejs/package.json" } ] } }, { "authors": [ { "name": "Jeremie Miller (http://jeremie.com/)" } ], "group": "", "name": "ecc-jsbn", "version": "0.1.2", "description": "ECC JS code based on JSBN", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn" }, { "type": "vcs", "url": "git+https://github.com/quartzjer/ecc-jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ecc-jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ecc-jsbn/package.json" } ], "concludedValue": "node_modules/ecc-jsbn/package.json" } ] } }, { "authors": [ { "name": "2013+ Bevry Pty Ltd (http://bevry.me)" } ], "group": "", "name": "domain-browser", "version": "1.2.0", "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domain-browser@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bevry/domain-browser" }, { "type": "vcs", "url": "git+https://github.com/bevry/domain-browser.git" } ], "type": "library", "bom-ref": "pkg:npm/domain-browser@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/domain-browser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domain-browser/package.json" } ], "concludedValue": "node_modules/domain-browser/package.json" } ] }, "tags": [ "api", "web" ] }, { "group": "", "name": "diff", "version": "1.4.0", "description": "A javascript text diff implementation.", "scope": "optional", "purl": "pkg:npm/diff@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff" }, { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Brian Woodward (https://github.com/doowb)" } ], "group": "", "name": "detect-file", "version": "1.0.0", "description": "Detects if a file exists and returns the resolved filepath.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-file@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/doowb/detect-file" }, { "type": "vcs", "url": "git+https://github.com/doowb/detect-file.git" } ], "type": "library", "bom-ref": "pkg:npm/detect-file@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-file/package.json" } ], "concludedValue": "node_modules/detect-file/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "delayed-stream", "version": "1.0.0", "description": "Buffers events from a stream until you are ready to handle them.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-delayed-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-delayed-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delayed-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delayed-stream/package.json" } ], "concludedValue": "node_modules/delayed-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "default-require-extensions", "version": "2.0.0", "description": "Node's default require extensions as a separate module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/default-require-extensions@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/avajs/default-require-extensions#readme" }, { "type": "vcs", "url": "git+https://github.com/avajs/default-require-extensions.git" } ], "type": "library", "bom-ref": "pkg:npm/default-require-extensions@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/default-require-extensions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/default-require-extensions/package.json" } ], "concludedValue": "node_modules/default-require-extensions/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/decamelize#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/decamelize.git" } ], "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/debug-js/debug#readme" }, { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Steven Levithan" } ], "group": "", "name": "dateformat", "version": "4.6.3", "description": "A node.js package for Steven Levithan's excellent dateFormat() function.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dateformat@4.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-dateformat" }, { "type": "vcs", "url": "git+https://github.com/felixge/node-dateformat.git" } ], "type": "library", "bom-ref": "pkg:npm/dateformat@4.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/dateformat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dateformat/package.json" } ], "concludedValue": "node_modules/dateformat/package.json" } ] } }, { "authors": [ { "name": "Trent Mick (http://trentm.com)" } ], "group": "", "name": "dashdash", "version": "1.14.1", "description": "A light, featureful and explicit option parsing library.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/trentm/node-dashdash#readme" }, { "type": "vcs", "url": "git://github.com/trentm/node-dashdash.git" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dashdash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dashdash/package.json" } ], "concludedValue": "node_modules/dashdash/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "cross-spawn", "version": "4.0.2", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/IndigoUnited/node-cross-spawn#readme" }, { "type": "vcs", "url": "git://github.com/IndigoUnited/node-cross-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "cp-file", "version": "6.2.0", "description": "Copy a file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cp-file@6.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/cp-file#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/cp-file.git" } ], "type": "library", "bom-ref": "pkg:npm/cp-file@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cp-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cp-file/package.json" } ], "concludedValue": "node_modules/cp-file/package.json" } ] } }, { "authors": [ { "name": "Gregg Caines" } ], "group": "", "name": "coveralls", "version": "3.1.1", "description": "takes json-cov output into stdin and POSTs to coveralls.io", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/coveralls@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nickmerwin/node-coveralls#readme" }, { "type": "vcs", "url": "git://github.com/nickmerwin/node-coveralls.git" } ], "type": "library", "bom-ref": "pkg:npm/coveralls@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/coveralls/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coveralls/package.json" } ], "concludedValue": "node_modules/coveralls/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/core-util-is#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/core-util-is.git" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.9.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-concat-map" }, { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "commondir", "version": "1.0.1", "description": "compute the closest common parent for file paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commondir@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-commondir" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-commondir.git" } ], "type": "library", "bom-ref": "pkg:npm/commondir@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commondir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commondir/package.json" } ], "concludedValue": "node_modules/commondir/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "combined-stream", "version": "1.0.8", "description": "A stream that emits multiple other streams one after another.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-combined-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-combined-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/combined-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combined-stream/package.json" } ], "concludedValue": "node_modules/combined-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Marak Squires" } ], "group": "", "name": "colors", "version": "1.1.2", "description": "get colors in your node.js console", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/colors@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Marak/colors.js" }, { "type": "vcs", "url": "git+ssh://git@github.com/Marak/colors.js.git" } ], "type": "library", "bom-ref": "pkg:npm/colors@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/colors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colors/package.json" } ], "concludedValue": "node_modules/colors/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "color-support", "version": "1.1.3", "description": "A module which will endeavor to guess your terminal's level of color support.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-support@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/color-support#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/color-support.git" } ], "type": "library", "bom-ref": "pkg:npm/color-support@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-support/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-support/package.json" } ], "concludedValue": "node_modules/color-support/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" }, { "type": "vcs", "url": "git+ssh://git@github.com/colorjs/color-name.git" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Qix-/color-convert#readme" }, { "type": "vcs", "url": "git+https://github.com/Qix-/color-convert.git" } ], "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "5.0.0", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/cliui#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/cliui.git" } ], "type": "library", "bom-ref": "pkg:npm/cliui@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "clean-yaml-object", "version": "0.1.0", "description": "Clean up an object prior to serialization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clean-yaml-object@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/clean-yaml-object#readme" }, { "type": "vcs", "url": "git+https://github.com/tapjs/clean-yaml-object.git" } ], "type": "library", "bom-ref": "pkg:npm/clean-yaml-object@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/clean-yaml-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clean-yaml-object/package.json" } ], "concludedValue": "node_modules/clean-yaml-object/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/chalk#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "caseless", "version": "0.12.0", "description": "Caseless object set/get/has, very useful when working with HTTP headers.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caseless@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/caseless#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/caseless.git" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/caseless/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caseless/package.json" } ], "concludedValue": "node_modules/caseless/package.json" } ] } }, { "authors": [ { "name": "Vsevolod Strukchinsky (https://github.com/floatdrop)" } ], "group": "", "name": "capture-stack-trace", "version": "1.0.2", "description": "Error.captureStackTrace ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/capture-stack-trace@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/capture-stack-trace#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/capture-stack-trace.git" } ], "type": "library", "bom-ref": "pkg:npm/capture-stack-trace@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/capture-stack-trace/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/capture-stack-trace/package.json" } ], "concludedValue": "node_modules/capture-stack-trace/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "5.3.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@5.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/camelcase#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/camelcase.git" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@5.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "group": "", "name": "caching-transform", "version": "3.0.2", "description": "Wraps a transform and provides caching", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caching-transform@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/istanbuljs/caching-transform#readme" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/caching-transform.git" } ], "type": "library", "bom-ref": "pkg:npm/caching-transform@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/caching-transform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caching-transform/package.json" } ], "concludedValue": "node_modules/caching-transform/package.json" } ] }, "tags": [ "transform" ] }, { "group": "", "name": "buffer-from", "version": "1.1.2", "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer-from@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/LinusU/buffer-from#readme" }, { "type": "vcs", "url": "git+https://github.com/LinusU/buffer-from.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer-from@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer-from/package.json" } ], "concludedValue": "node_modules/buffer-from/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-process-hrtime", "version": "1.0.0", "description": "Shim for process.hrtime in the browser", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-process-hrtime@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kumavis/browser-process-hrtime#readme" }, { "type": "vcs", "url": "git://github.com/kumavis/browser-process-hrtime.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-process-hrtime@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-process-hrtime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-process-hrtime/package.json" } ], "concludedValue": "node_modules/browser-process-hrtime/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "braces", "version": "3.0.3", "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/braces" }, { "type": "vcs", "url": "git+https://github.com/micromatch/braces.git" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/braces/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/braces/package.json" } ], "concludedValue": "node_modules/braces/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.18", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.18", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "bind-obj-methods", "version": "2.0.2", "description": "Bind methods to an object from that object or some other source. Optionally specify a set of methods to skip over.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bind-obj-methods@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/bind-obj-methods#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/bind-obj-methods.git" } ], "type": "library", "bom-ref": "pkg:npm/bind-obj-methods@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bind-obj-methods/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bind-obj-methods/package.json" } ], "concludedValue": "node_modules/bind-obj-methods/package.json" } ] } }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-bcrypt-pbkdf.git" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bcrypt-pbkdf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bcrypt-pbkdf/package.json" } ], "concludedValue": "node_modules/bcrypt-pbkdf/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Michael Hart (https://github.com/mhart)" } ], "group": "", "name": "aws4", "version": "1.13.2", "description": "Signs and prepares requests using AWS Signature Version 4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws4@1.13.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mhart/aws4#readme" }, { "type": "vcs", "url": "git+https://github.com/mhart/aws4.git" } ], "type": "library", "bom-ref": "pkg:npm/aws4@1.13.2", "properties": [ { "name": "SrcFile", "value": "node_modules/aws4/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws4/package.json" } ], "concludedValue": "node_modules/aws4/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "aws-sign2", "version": "0.7.0", "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-sign2@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/aws-sign#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/aws-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws-sign2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws-sign2/package.json" } ], "concludedValue": "node_modules/aws-sign2/package.json" } ] } }, { "authors": [ { "name": "Alex Indigo " } ], "group": "", "name": "asynckit", "version": "0.4.0", "description": "Minimal async jobs utility library, with streams support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asynckit@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexindigo/asynckit#readme" }, { "type": "vcs", "url": "git+https://github.com/alexindigo/asynckit.git" } ], "type": "library", "bom-ref": "pkg:npm/asynckit@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/asynckit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asynckit/package.json" } ], "concludedValue": "node_modules/asynckit/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "3.2.6", "description": "Higher-order functions and common patterns for asynchronous code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async@3.2.6", "externalReferences": [ { "type": "vcs", "url": "https://caolan.github.io/async/" }, { "type": "vcs", "url": "git+https://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@3.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async/package.json" } ], "concludedValue": "node_modules/async/package.json" } ] } }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "assert-plus", "version": "1.0.0", "description": "Extra assertions on top of node's assert module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcavage/node-assert-plus#readme" }, { "type": "vcs", "url": "git+https://github.com/mcavage/node-assert-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-plus/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Joyent (joyent.com)" } ], "group": "", "name": "asn1", "version": "0.2.6", "description": "Contains parsers and serializers for ASN.1 (currently BER only)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asn1@0.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-asn1#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1/package.json" } ], "concludedValue": "node_modules/asn1/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "array-slice", "version": "1.1.0", "description": "Array-slice method. Slices `array` from the `start` index up to, but not including, the `end` index.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-slice@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/array-slice" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/array-slice.git" } ], "type": "library", "bom-ref": "pkg:npm/array-slice@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/array-slice/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-slice/package.json" } ], "concludedValue": "node_modules/array-slice/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "array-each", "version": "1.0.1", "description": "Loop over each item in an array and call the given function on every element.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-each@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/array-each" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/array-each.git" } ], "type": "library", "bom-ref": "pkg:npm/array-each@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/array-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-each/package.json" } ], "concludedValue": "node_modules/array-each/package.json" } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@1.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/argparse#readme" }, { "type": "vcs", "url": "git+https://github.com/nodeca/argparse.git" } ], "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Alexandru Marasteanu (http://alexei.ro/)" } ], "group": "", "name": "sprintf-js", "version": "1.0.3", "description": "JavaScript sprintf implementation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexei/sprintf.js#readme" }, { "type": "vcs", "url": "git+https://github.com/alexei/sprintf.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/node_modules/sprintf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/node_modules/sprintf-js/package.json" } ], "concludedValue": "node_modules/argparse/node_modules/sprintf-js/package.json" } ] } }, { "authors": [ { "name": "Josh Junon " } ], "group": "", "name": "arg", "version": "4.1.3", "description": "Another simple argument parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/arg@4.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zeit/arg#readme" }, { "type": "vcs", "url": "git+https://github.com/zeit/arg.git" } ], "type": "library", "bom-ref": "pkg:npm/arg@4.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/arg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/arg/package.json" } ], "concludedValue": "node_modules/arg/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "archy", "version": "1.0.0", "description": "render nested hierarchies `npm ls` style with unicode pipes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archy@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-archy" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-archy.git" } ], "type": "library", "bom-ref": "pkg:npm/archy@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/archy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/archy/package.json" } ], "concludedValue": "node_modules/archy/package.json" } ] } }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "append-transform", "version": "1.0.0", "description": "Install a transform to `require.extensions` that always runs last, even if additional extensions are added later.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/append-transform@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/istanbuljs/append-transform#readme" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/append-transform.git" } ], "type": "library", "bom-ref": "pkg:npm/append-transform@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/append-transform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/append-transform/package.json" } ], "concludedValue": "node_modules/append-transform/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-styles#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "4.1.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-regex#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv", "version": "6.15.0", "description": "Another JSON Schema Validator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@6.15.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ajv-validator/ajv" }, { "type": "vcs", "url": "git+https://github.com/ajv-validator/ajv.git" } ], "type": "library", "bom-ref": "pkg:npm/ajv@6.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv/package.json" } ], "concludedValue": "node_modules/ajv/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "abbrev", "version": "1.1.1", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/abbrev-js#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "description": "Trace the original position through a source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.5", "description": "Encode/decode sourcemap mappings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/resolve-uri#readme" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/resolve-uri.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/resolve-uri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/resolve-uri/package.json" } ], "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "gen-mapping", "version": "0.3.13", "description": "Generate source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/gen-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/gen-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/gen-mapping/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "types", "version": "7.29.8", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.29.8", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-types" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.29.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "traverse", "version": "7.29.8", "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/traverse@7.29.8", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-traverse" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/traverse@7.29.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/traverse/package.json" } ], "concludedValue": "node_modules/@babel/traverse/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "template", "version": "7.29.7", "description": "Generate an AST from a string template.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/template@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-template" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/template@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/template/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/template/package.json" } ], "concludedValue": "node_modules/@babel/template/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "parser", "version": "7.29.8", "description": "A JavaScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.29.8", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-parser" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.29.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "helper-validator-identifier", "version": "7.29.7", "description": "Validate identifier/keywords name", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/babel/babel#readme" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-validator-identifier/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-validator-identifier/package.json" } ], "concludedValue": "node_modules/@babel/helper-validator-identifier/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "helper-string-parser", "version": "7.29.7", "description": "A utility package to parse strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-helper-string-parser" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-string-parser@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-string-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-string-parser/package.json" } ], "concludedValue": "node_modules/@babel/helper-string-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "helper-globals", "version": "7.29.7", "description": "A collection of JavaScript globals for Babel internal usage", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-globals@7.29.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/babel/babel#readme" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-globals@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-globals/package.json" } ], "concludedValue": "node_modules/@babel/helper-globals/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "generator", "version": "7.29.8", "description": "Turns an AST into code.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/generator@7.29.8", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-generator" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/generator@7.29.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/generator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/generator/package.json" } ], "concludedValue": "node_modules/@babel/generator/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "code-frame", "version": "7.29.7", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-code-frame" }, { "type": "vcs", "url": "git+https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/moment@2.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-11T09:14:40Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'moment' with version '2.0.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 314 source files." } ] }