{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:00d6c602-0b64-466b-9163-14e26218ff6c", "version": 1, "metadata": { "timestamp": "2026-09-21T14:01:52Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "negotiator", "group": "", "version": "0.4.9", "description": "HTTP content negotiation", "purl": "pkg:npm/negotiator@0.4.9", "bom-ref": "pkg:npm/negotiator@0.4.9", "author": "Federico Romero ", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test-cov" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "istanbul", "version": "0.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c8afad07c32c5dbc9f3e628c19900bedff926ae2d89eae99720703c81df865f459970762dba93d29190302c0f47c454cf0458e9ce99483186b4cef0ca7e83de4" } ], "purl": "pkg:npm/istanbul@0.3.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/istanbul/-/istanbul-0.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/istanbul@0.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/istanbul/-/istanbul-0.3.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/istanbul" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/istanbul" }, { "name": "cdx:npm:bin", "value": "istanbul" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "This module is no longer maintained, try this instead:\n npm i nyc\nVisit https://istanbul.js.org/integrations for other alternatives." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "abbrev", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4a0f822d87f85bf68bfda37a8c5eca27b53c34b2b40e57b0c7dded44b8c1d86e8c3e5ab058960dfa9ca92884abd2c6f321f489542927ead62580a04ce35458a4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/abbrev/-/abbrev-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/abbrev/-/abbrev-1.0.5.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/abbrev" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "async", "version": "0.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5d0277322a660870080413057eeda36927ad9de3ab5db4b2caa794dcda1df3aee834ea52fa2f45126b393d68233314a00726d17f621554bb6bd587eb0cefa892" } ], "purl": "pkg:npm/async@0.9.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/async/-/async-0.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@0.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/async/-/async-0.9.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/async" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escodegen", "version": "1.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cfd15680a738f308cc969cc5e7298a4b5005f0e2209ca2e9f55c8deca6ddb72acfffd967770505a82b4c9be4c026625feca24515873870525f5534c690a130b0" } ], "purl": "pkg:npm/escodegen@1.3.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escodegen/-/escodegen-1.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@1.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escodegen/-/escodegen-1.3.3.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/escodegen" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/escodegen, /app/node_modules/.bin/esgenerate" }, { "name": "cdx:npm:bin", "value": "escodegen, esgenerate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ab1c41f7de3fecdb4447181774580b1c8b3d33a6e12d773aaad526599dcbf3e81343da9aa32922dbcf3b3f622a018b2810dcabf1251b4eeb52b439e23874831e" } ], "purl": "pkg:npm/esprima@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.1.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/escodegen/node_modules/esprima" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/escodegen/node_modules/.bin/esparse, /app/node_modules/escodegen/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1690a32437e6a37bec73fd732927aa479938dad70887114896fabe87d8f47cedaafe1dae2cacb07aaeeb609fb40a856fac640ec484b9c3206b5bffaf179f0151" } ], "purl": "pkg:npm/estraverse@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/estraverse/-/estraverse-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/estraverse/-/estraverse-1.5.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/estraverse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esutils", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c7f8981f9dd7deab83c1f1d1cf8cbcae7e17704c30089796b2e97da45d7395d31b1ad80eb4c34110eb985b007511094ad8b45ad5f7afdd8020ca6fd1125a790a" } ], "purl": "pkg:npm/esutils@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esutils/-/esutils-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esutils@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esutils/-/esutils-1.0.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/esutils" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.1.40", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1ea0c825d76eaaaa76ab2d01295fb5f6951c30122e24e29351f12715602d1ef2f1a6d65ea8197a8d1c42c45621406aefabd7c91361d3202a760568ca2dd58f59" } ], "purl": "pkg:npm/source-map@0.1.40", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.40.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.1.40", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.40.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/source-map" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "amdefine", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "21248f626f06f7a8927bba6ef1f7d301b2cc7af311c7d485274313218d8e8cbf50a217fea1509f8b32aba4dec1376f6b2571bfa296f707508eed96a998cbafcc" } ], "purl": "pkg:npm/amdefine@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-0.1.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/amdefine" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f89a4f65a9bdc390ee27743aed2aac306b621ca10d48c455a31bc0adf2592b4d7f05f2c439bb59ea8ac96bf32da06351feb7cc829e7cdfb4f8d4f0264f002ffc" } ], "purl": "pkg:npm/esprima@1.2.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.2.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/esprima" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/esparse, /app/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fileset", "version": "0.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "af7a5acc9fe0e2fc7783bd14e2059d50677e8162351293336d45a038827faed41c67211e6a1400e9b0203b52971809fa0bda45125ea62761589943f5b2d9f576" } ], "purl": "pkg:npm/fileset@0.1.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fileset/-/fileset-0.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fileset@0.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fileset/-/fileset-0.1.5.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/fileset" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8556f4cf0119c02d455d22913c54de3ad37b000ac9709948e942c62edaecb5ab3028d96b4c9a8003ed65625494a29e2f8c0e36df1941cea7d54b78961a5a89fa" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.11.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/glob" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f275aada72d3030774da34ea244c54605483fdf2aae951fd63fa06d9a71c73f91d23457df016a0f1de5ae208b75c7cfbdeb0d66b63ef4edbdc598aae2aa48434" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/inherits" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5855f58c8d406b13536553872c155acf04d629a423a32912cc204d5c1ef6bc34c2ce8a501adc8ff75b4a7452b972fd7ea8cc0fca24eed47a94ae2aa9948f2970" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.3.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/glob/node_modules/minimatch" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7559909973c1953805c3bee19bad2e77ffe5d9b0ae0ca92a0b6a27d4406833bb3d52b9bd2100eb9ee8f067ddcd16702ad1d559d070574d2ecfc041be604efe11" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.5.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.5.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/lru-cache" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5edaf127805fe670e749c076d94d1fb744e90932d216990f02ea27df6dd7f66170628c335aeb016ee9f13ac8b690ee856f6f6b7876713cd1e038bfdf30da8ca1" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/sigmund" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c892892f5837b68edfe02ffd2f31d74f3361e79d3128679f88296cf514be0c376c0e92a99dd638f540d95b9b23ff7c9e69cdc79763f1df0e5b4fc6ccfdd32b59" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.4.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/minimatch" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "handlebars", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "97bb0b513a970a4735629a32f2648e5991446492b75584189cb7c85534497921dd833b7a857910d2e3c6ba0c9d3daf7d2b2c8176c8b42775af61f9bf1d7e6769" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/handlebars@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/handlebars/-/handlebars-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/handlebars/-/handlebars-1.3.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/handlebars" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/handlebars" }, { "name": "cdx:npm:bin", "value": "handlebars" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "optimist", "version": "0.3.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4c2c7475743356d4828363a063f6cef618ccf5c5785d8c74f5354afacdfe1619234fa2e8bec2defa93ccce959ffbac972bf8548b3b36814a13c378c733455a4d" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optimist@0.3.7", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.3.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/optimist@0.3.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.3.7.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/optimist" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/wordwrap" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uglify-js", "version": "2.3.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4f62d65b27717f9f81b696f44bf1a0ff22859988e75fd8ed43899d37d611abbdc184ddb51215340efc37c180cba9ddd3a2819426508a7f719fca38f2fd14dc58" } ], "purl": "pkg:npm/uglify-js@2.3.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-2.3.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@2.3.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-2.3.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/uglify-js" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/uglifyjs" }, { "name": "cdx:npm:bin", "value": "uglifyjs" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "async", "version": "0.2.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "78091da0ac54ebf2e42830732e94feb7a15fe44b5f485e30c7559f2623c4115ed634b9c36915e4d28572b2210f9b6eb6ae869a72119ec7052ff785a14a03794d" } ], "purl": "pkg:npm/async@0.2.10", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/async/-/async-0.2.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@0.2.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/async/-/async-0.2.10.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/uglify-js/node_modules/async" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "js-yaml", "version": "3.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2d16c6bfd187cec0fe1ab5415cc21538320df7a544adc8e8b75325b402210ea27f3a00e7dff2a5f4421cd4cf75a3802d029c0fa9ce56866d823dff08e17ae757" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@3.2.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/js-yaml/-/js-yaml-3.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/js-yaml/-/js-yaml-3.2.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/js-yaml" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/js-yaml" }, { "name": "cdx:npm:bin", "value": "js-yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "argparse", "version": "0.1.15", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4d16bdcb4944bdc6db59ec43d5a77b1b302d74442cf4472bf03dd6b8f97f9e0f61dfa4dbad2a0c3ec19b097645a3ba43f72515444e96125bc0a84846d635ba54" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@0.1.15", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/argparse/-/argparse-0.1.15.tgz" } ], "type": "library", "bom-ref": "pkg:npm/argparse@0.1.15", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/argparse/-/argparse-0.1.15.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/argparse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "underscore", "version": "1.4.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "66a1ab0206aaa9933b2c64733632e7c397a57af59be4cf0b1280cc69dc485b73966dcbfbdb030c80a77038aa5de45ab17bc721a0b0fc1cdde24a3dd3521fe089" } ], "purl": "pkg:npm/underscore@1.4.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.4.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.4.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.4.4.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/underscore" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "underscore.string", "version": "2.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "85b0f93226ed86e0c0bb8c80e70c5eb396f3160a9ddcfa4126e0a56d1c5a35d7717ddb33faa7fed641f0ac6405ae67219831dbf62354fba1070e7f2e8f4c4326" } ], "purl": "pkg:npm/underscore.string@2.3.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore.string/-/underscore.string-2.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@2.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore.string/-/underscore.string-2.3.3.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/underscore.string" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ae9e5d30a37ccc4b3d75f8bd8345f50a52e657ffd647293f475e66a6914d202205446e4ff7654fed9d38a7ca64fbe800068f56dad63e907caee8fd661078264c" } ], "purl": "pkg:npm/esprima@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.0.4.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/js-yaml/node_modules/esprima" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/js-yaml/node_modules/.bin/esparse, /app/node_modules/js-yaml/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c638cd1b2fabcb5961b4829caf63d3ea89376acce141f82b503a783992c769c811805985e9747d5c238955c5e55464289c8a9770ad43bea80a29038f5981927f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/mkdirp" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/mkdirp" }, { "name": "cdx:npm:bin", "value": "mkdirp" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/minimist" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "nopt", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6ee7f4f78a76669dc13b0723c88f55df37d92552a46ff0693e5fb73470683aa22fd6f5ba070db8fee71bb8ed7399b3fe8cf7ddaaf9ead25281d85ba5a482de68" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nopt/-/nopt-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nopt@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nopt/-/nopt-3.0.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/nopt" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/nopt" }, { "name": "cdx:npm:bin", "value": "nopt" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3737db69aa10bf3d890bf0ff623dc6662d05246d70f62dcaf41a7df56b37a74c6b88fca70bf61f45ca68db3a15b8876ebc7e1bf3eeaea78a201b19ea6a348a84" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.3.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/once" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e36875776e675ba1bf37b975e8ecf8bea08e2c81686c504ec19ac16250b127f42e4b6a3519d9f53f34a88989dd6e72fdae0188199e909f4f40229ca1ae47a97f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/wrappy" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "0.7.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf19807227c38cac6651b93b72141d2a10d29fc9a5d3c83e318c94dfbc61117069f8df3571f6d8b26e1ed069fd8ed2db02f6d1f30f0ec74f71a9466d3ee0a878" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.7.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve/-/resolve-0.7.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.7.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve/-/resolve-0.7.4.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "which", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a7cdb0f5edfadbc635b02238d4f6f365be506da72cb7662dfe01389adaab357bfae529b035b01c42f4b85647a1b6a99c94070e877ead8108b0860e9f2af9320c" } ], "purl": "pkg:npm/which@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which/-/which-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/which@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which/-/which-1.0.5.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/which" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/which" }, { "name": "cdx:npm:bin", "value": "which" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "nodeunit", "version": "0.8.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c87be438e161b83a468c0a79058ebd5b43b9c40b1d5aeb890c5e6a3d7de6648bc7eb9a6e30d401801af9bdbaef380f5943bc9de65955b92f8f6070334bf2a428" } ], "purl": "pkg:npm/nodeunit@0.8.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nodeunit/-/nodeunit-0.8.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nodeunit@0.8.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nodeunit/-/nodeunit-0.8.8.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/nodeunit" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/nodeunit" }, { "name": "cdx:npm:bin", "value": "nodeunit" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "you are strongly encouraged to use other testing options" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tap", "version": "0.4.13", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0d13d3f53daaa9e510f670bc9f09d93d0427280f9b561cda36b203a0511316a58b5c63af8a5fc9321b968f9b8ee9778dcc876fbcf28ba8f1d0cc89099e33670d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap@0.4.13", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tap/-/tap-0.4.13.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tap@0.4.13", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tap/-/tap-0.4.13.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/tap" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/tap" }, { "name": "cdx:npm:bin", "value": "tap" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Versions of tap before v18 are no longer maintained. Please upgrade." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "buffer-equal", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "460495e889d543d3833dd2d6279500a81a8904e837ef4373e9942d473a6dea752373cbf44adf7bb89e0f602e8dceda8849cac05da7ca3379993ccca049ed6080" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer-equal@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/buffer-equal/-/buffer-equal-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/buffer-equal@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/buffer-equal/-/buffer-equal-0.0.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/buffer-equal" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "deep-equal", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a756c8fe49033d3e9ab9423453e58bb8822bce60c80e8f34238d3a27cb53e32e88e191ad06e31e4ee76b283b4174c24501cc6aad0771dbb828b2a3d5c98dc8bd" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/deep-equal/-/deep-equal-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/deep-equal/-/deep-equal-0.0.0.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/deep-equal" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "difflet", "version": "0.2.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aee95d0c3466635b7aefc50e00906783ab0befb7fad92aa31e3d38f7c602d04261c487b6c8a92a267daa11c8701b7794fdda89fd1c4f66402762378f4b8a430b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/difflet@0.2.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/difflet/-/difflet-0.2.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/difflet@0.2.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/difflet/-/difflet-0.2.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/difflet" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "charm", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b3279d699f5c3deeebde1a1003db705982aee402320acc0de7eb339263c17bd71c74bae3e1b61a0a72d53d32ddda481545cefece85f8b723e046714a0a3e588d" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/charm@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/charm/-/charm-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/charm@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/charm/-/charm-0.1.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/charm" }, { "name": "cdx:npm:deprecated", "value": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info." }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "deep-is", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1adc403781ef05a7216739b83a75aa738e444a950233091872c8e7b0fb36dc5c096ec3be938b7493d6d00a03a6cc89691cedbcf963cafca45b464d030c7bae0f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-is@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/deep-is/-/deep-is-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/deep-is/-/deep-is-0.1.3.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/deep-is" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "traverse", "version": "0.6.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "91d7f824ab3c95b011c56769ed129d373a090611947086a549889bb86c8725b9a4e34a4ecac434f903ef96408e2023a2bc3594d88268dab92bc724cad801f87f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/traverse@0.6.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverse/-/traverse-0.6.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.6.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverse/-/traverse-0.6.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/traverse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "nopt", "version": "2.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "80839303fb89ba13f016aa7eb2963b550d6c6ad6e71a50fe890559c48d7c2ba86cf04beae2c5fcd4c97b041e5bc8ffcbb1b476c8156d9af7449a18bb7af27a03" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@2.2.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nopt/-/nopt-2.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nopt@2.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nopt/-/nopt-2.2.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/tap/node_modules/nopt" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/tap/node_modules/.bin/nopt" }, { "name": "cdx:npm:bin", "value": "nopt" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "runforcover", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c9aac220ad8770039a76a9ca5b8d7df85037f2aa560c229c3abe51654fa39f22cbfe19f7368f411d963e6090c4cef43493c3b297b7df2e366ff59531bf22a82d" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/runforcover@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/runforcover/-/runforcover-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/runforcover@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/runforcover/-/runforcover-0.0.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/runforcover" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "bunker", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6276a191c5c1353e76d92e3a9392d403d3f5f25cef824ba76cc974a88250f28791310f9d020dd8237937daae539cef8001412b1473ba47bebc4e8ea3b2581899" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bunker@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bunker/-/bunker-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bunker@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bunker/-/bunker-0.1.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/bunker" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "burrito", "version": "0.2.12", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "661853e62553020cd0facf2b8a5cbb9b8e52c317bf714ddd5421d3cea9875560ff71cd03b375b8438304c5b91ebd8f9f9b431ede5130a5e848cba4c7ee9f9e87" } ], "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/burrito@0.2.12", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/burrito/-/burrito-0.2.12.tgz" } ], "type": "library", "bom-ref": "pkg:npm/burrito@0.2.12", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/burrito/-/burrito-0.2.12.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/burrito" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "traverse", "version": "0.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d405571f07746a80ba73813446362a8ae1dbaaac36e019ad5ba1b6d4b735302e204d02367bbdde5e08e741c6a67f1607b36a0afda3af48c4fd9f669e3544614" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/traverse@0.5.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverse/-/traverse-0.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverse/-/traverse-0.5.2.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/burrito/node_modules/traverse" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uglify-js", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "61863d0e57b595e0be6ed82b1e7011d397aad1a45d70f26c5e56180fe498c3696a7391c5b85347837c16116e12344d225d71149747f3e37813437af560aefaae" } ], "purl": "pkg:npm/uglify-js@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-1.1.1.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/burrito/node_modules/uglify-js" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/burrito/node_modules/.bin/uglifyjs" }, { "name": "cdx:npm:bin", "value": "uglifyjs" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "slide", "version": "1.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "370aed8c283e959a2a84553c7cec25e1acb67a2f0f6aa081394577fde92d3d8f6daced72435a1711f987021280ad4554aff84e1efcb97fa01d3f5edd08cd3333" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slide@1.1.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/slide/-/slide-1.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/slide@1.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/slide/-/slide-1.1.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/slide" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yamlish", "version": "0.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c24acfb902b5635878575d20748844250dd1b37da932ee821944f3bc7e0d386701f8d61a1ca39c27a25ceaba8c9695c616bbe28791093fb1304deb79a64cc0b1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yamlish@0.0.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yamlish/-/yamlish-0.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yamlish@0.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yamlish/-/yamlish-0.0.6.tgz" }, { "name": "LocalNodeModulesPath", "value": "node_modules/yamlish" }, { "name": "cdx:npm:deprecated", "value": "Please use js-yaml instead, it is much better" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/abbrev@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/async@0.9.0", "dependsOn": [] }, { "ref": "pkg:npm/esprima@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/estraverse@1.5.1", "dependsOn": [] }, { "ref": "pkg:npm/esutils@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/amdefine@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.1.40", "dependsOn": [ "pkg:npm/amdefine@0.1.0" ] }, { "ref": "pkg:npm/escodegen@1.3.3", "dependsOn": [ "pkg:npm/esprima@1.1.1", "pkg:npm/estraverse@1.5.1", "pkg:npm/esutils@1.0.0", "pkg:npm/source-map@0.1.40" ] }, { "ref": "pkg:npm/esprima@1.2.2", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.5.0", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.3.0", "dependsOn": [ "pkg:npm/lru-cache@2.5.0", "pkg:npm/sigmund@1.0.0" ] }, { "ref": "pkg:npm/glob@3.2.11", "dependsOn": [ "pkg:npm/inherits@2.0.1", "pkg:npm/minimatch@0.3.0" ] }, { "ref": "pkg:npm/minimatch@0.4.0", "dependsOn": [ "pkg:npm/lru-cache@2.5.0", "pkg:npm/sigmund@1.0.0" ] }, { "ref": "pkg:npm/fileset@0.1.5", "dependsOn": [ "pkg:npm/glob@3.2.11", "pkg:npm/minimatch@0.4.0" ] }, { "ref": "pkg:npm/wordwrap@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/optimist@0.3.7", "dependsOn": [ "pkg:npm/wordwrap@0.0.2" ] }, { "ref": "pkg:npm/async@0.2.10", "dependsOn": [] }, { "ref": "pkg:npm/uglify-js@2.3.6", "dependsOn": [ "pkg:npm/async@0.2.10", "pkg:npm/optimist@0.3.7", "pkg:npm/source-map@0.1.40" ] }, { "ref": "pkg:npm/handlebars@1.3.0", "dependsOn": [ "pkg:npm/optimist@0.3.7", "pkg:npm/uglify-js@2.3.6" ] }, { "ref": "pkg:npm/underscore@1.4.4", "dependsOn": [] }, { "ref": "pkg:npm/underscore.string@2.3.3", "dependsOn": [] }, { "ref": "pkg:npm/argparse@0.1.15", "dependsOn": [ "pkg:npm/underscore.string@2.3.3", "pkg:npm/underscore@1.4.4" ] }, { "ref": "pkg:npm/esprima@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/js-yaml@3.2.2", "dependsOn": [ "pkg:npm/argparse@0.1.15", "pkg:npm/esprima@1.0.4" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.0", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/nopt@3.0.1", "dependsOn": [ "pkg:npm/abbrev@1.0.5" ] }, { "ref": "pkg:npm/wrappy@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/once@1.3.1", "dependsOn": [ "pkg:npm/wrappy@1.0.1" ] }, { "ref": "pkg:npm/resolve@0.7.4", "dependsOn": [] }, { "ref": "pkg:npm/which@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/istanbul@0.3.2", "dependsOn": [ "pkg:npm/abbrev@1.0.5", "pkg:npm/async@0.9.0", "pkg:npm/escodegen@1.3.3", "pkg:npm/esprima@1.2.2", "pkg:npm/fileset@0.1.5", "pkg:npm/handlebars@1.3.0", "pkg:npm/js-yaml@3.2.2", "pkg:npm/mkdirp@0.5.0", "pkg:npm/nopt@3.0.1", "pkg:npm/once@1.3.1", "pkg:npm/resolve@0.7.4", "pkg:npm/which@1.0.5", "pkg:npm/wordwrap@0.0.2" ] }, { "ref": "pkg:npm/buffer-equal@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/deep-equal@0.0.0", "dependsOn": [] }, { "ref": "pkg:npm/charm@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/deep-is@0.1.3", "dependsOn": [] }, { "ref": "pkg:npm/traverse@0.6.6", "dependsOn": [] }, { "ref": "pkg:npm/difflet@0.2.6", "dependsOn": [ "pkg:npm/charm@0.1.2", "pkg:npm/deep-is@0.1.3", "pkg:npm/traverse@0.6.6" ] }, { "ref": "pkg:npm/nopt@2.2.1", "dependsOn": [ "pkg:npm/abbrev@1.0.5" ] }, { "ref": "pkg:npm/traverse@0.5.2", "dependsOn": [] }, { "ref": "pkg:npm/uglify-js@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/burrito@0.2.12", "dependsOn": [ "pkg:npm/traverse@0.5.2", "pkg:npm/uglify-js@1.1.1" ] }, { "ref": "pkg:npm/bunker@0.1.2", "dependsOn": [ "pkg:npm/burrito@0.2.12" ] }, { "ref": "pkg:npm/runforcover@0.0.2", "dependsOn": [ "pkg:npm/bunker@0.1.2" ] }, { "ref": "pkg:npm/slide@1.1.6", "dependsOn": [] }, { "ref": "pkg:npm/yamlish@0.0.6", "dependsOn": [] }, { "ref": "pkg:npm/tap@0.4.13", "dependsOn": [ "pkg:npm/buffer-equal@0.0.1", "pkg:npm/deep-equal@0.0.0", "pkg:npm/difflet@0.2.6", "pkg:npm/glob@3.2.11", "pkg:npm/inherits@2.0.1", "pkg:npm/mkdirp@0.5.0", "pkg:npm/nopt@2.2.1", "pkg:npm/runforcover@0.0.2", "pkg:npm/slide@1.1.6", "pkg:npm/yamlish@0.0.6" ] }, { "ref": "pkg:npm/nodeunit@0.8.8", "dependsOn": [ "pkg:npm/tap@0.4.13" ] }, { "ref": "pkg:npm/negotiator@0.4.9", "dependsOn": [ "pkg:npm/istanbul@0.3.2", "pkg:npm/nodeunit@0.8.8" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/negotiator@0.4.9" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-21T14:01:52Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'negotiator' with version '0.4.9'." } ] }