{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:56de8e0f-0a8b-4d1b-9c28-8226474641a5", "version": 1, "metadata": { "timestamp": "2026-08-20T04:35:33Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "onnxruntime-common", "group": "", "version": "1.26.0", "description": "ONNXRuntime JavaScript API library", "purl": "pkg:npm/onnxruntime-common@1.26.0", "bom-ref": "pkg:npm/onnxruntime-common@1.26.0", "author": "fs-eire", "properties": [ { "name": "cdx:npm:scripts", "value": "build:cjs, build:esm, build:bundles, build, prepare, pretest, test, test:f16" }, { "name": "cdx:npm:buildScripts", "value": "build:cjs, build:esm, build:bundles, build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepare" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Microsoft/onnxruntime.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@nodelib\\n@sindresorhus" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "globby", "version": "15.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a01e2f9101aa94c97af36c0bd48956774dad5c26eab8658ce2fa0f108f3942634a09ac3ccc64e6d5fd6bb9b160920dc4962d8fb4a94582b9e652a6ac6d05a593" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globby@15.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/globby/-/globby-15.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/globby@15.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/globby/-/globby-15.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@sindresorhus", "name": "merge-streams", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b65a98f71ab9ba4c53519066a0ea7e9bad5cab0403e691c9b45637327f0203ca6ceb28212c7fc7c3c50f76a83838b9855b720595c5e740d9a8fdd87c1f35d821" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/merge-streams@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-glob", "version": "3.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ecca6d2fc53472a705773233c0e4c7a22957f71e41acdab27bb67f2ee0bb9023118a8d44312caa44adc1100503eec5d1ab8893e00cd356e65d8604364c2bd82e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-glob@3.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-glob@3.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@nodelib", "name": "fs.stat", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "46484f3e9db3aea0c0400ff68cd867ced70f025bfae17761229edaef8e78039a2f23b06e93182decc5fbb9dc00bb7ce0d437293d4d2bcf7555d5279aaaf638f8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@nodelib", "name": "fs.walk", "version": "1.2.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a0607e53196059c810920c28f067041b07a6a1316ddc520ef5a6da6c199a1b05c8a01299f864f2d293f5f396de1a0ecb96287f3521d25765c0b35967ce7a1c4a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@nodelib", "name": "fs.scandir", "version": "2.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "run-parallel", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e65e15c9947ce8b67f943c594d1ea3a8bf00144d92d0814b30fdba01b8ec2d5003c4776107f734194b07fb2dfd51f0a2dddcf3f0e950b8f9a768938ca031d004" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-parallel@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/run-parallel@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "queue-microtask", "version": "1.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "36e68d49ae9f94a4f925a498433268934e09cd32f5080e9a1a1bf9adf2d6dcf82a03e3360a1a59427002f21f22e19164052f17e51aa40c11c0eebe217a3dcaf4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/queue-microtask@1.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/queue-microtask@1.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fastq", "version": "1.19.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1b02d3cb19025e35dbc6a2214ec308d8dba2f21b8c3ed9f183b92b6a33c90239c41bf8a2392ee2fb30ad586651f46d0d04a6d72a1e97f66f5422c617fcdeafbd" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fastq@1.19.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fastq@1.19.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "reusify", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "83a4147dfd38a19a47b34786e69f37ac52e11de574d2e83f61ff6764ce9f2de52b3e0b814e44d039da40596b29321e794d97d54033da37735025f6d5440c5d23" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/reusify@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/reusify@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob-parent", "version": "5.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob-parent@5.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob-parent@5.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-glob", "version": "4.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-glob@4.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-extglob", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "merge2", "version": "1.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge2@1.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/merge2@1.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "micromatch", "version": "4.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d7c1f06162ed210423f0f039f413e58361beda7f77522d558a8b71c6bfce08745e13c85a02d32b3115dd06a31c3b9d2bf84ff3f3109431b18b0488508aa3604" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/micromatch@4.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "braces", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c906d780efce499543d88b222e5ae8fbb1dfe90d7c109aca484b1da0ccca78f29772dde0bc3f282dc390748cc6ba9af9163f840def203bf9717350737cca71bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fill-range", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "62c1a97b75872caf19622e2d583836272dde6d1cf6ad7a300f19e57786e4401d3471cff5670f405a70b48bdced0c98ad8afb50bda23d29a2f22ab73e8415b4ca" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@7.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "to-regex-range", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-number", "version": "7.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "picomatch", "version": "2.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "57bfaf404274e99f9ce6d4b27bc4be9c751f239d71a172178c743df5c42d294910aaa3b590efca08951f657b81e3b87f60194385a8761f785d5065e7f227b4a0" } ], "purl": "pkg:npm/picomatch@2.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ignore", "version": "7.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1ece7dc4135f508ba730581601b197e5cabaf3ddc86d68382a7ae36d8c17dedc74ceda2b5604c303a076b317fc7a31c9e30cfc06a194318967ccd05eaf936f1a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@7.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ignore@7.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-type", "version": "6.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "563eec7fefade69043eb7ecd49f931a4748c7d669e8a0e7e0ca58b85ca88631ea6590cf985d25318354c42225cc35658921b3b01acca0c6a515638b52c909951" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@6.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-type/-/path-type-6.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-type@6.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-type/-/path-type-6.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "slash", "version": "5.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "640ea84774ffa44caeab032000a4f4fe102ff28017724cdb926474524528b10f8c7384711a8264466c07807b9f69e9e5c80804d4cc60a5d72b7fbe72e977270e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@5.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/slash@5.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "unicorn-magic", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f900415c10af89f739e9fb1bbb1650e9289cdf0aaa7375966aac6ce7c82f26b70eb8df371c64c2c33de84b9a61cd4f4bb6144d13d56b2421422d480779e1677c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typedoc", "version": "0.25.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9ba03a263411837f69d9955120ddcd29782b37cbf394784e4beafdca6518b5c50ffd32103ef592abb6201396630127efe55779056e71ae2afa1a6d9734d70ea3" } ], "purl": "pkg:npm/typedoc@0.25.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typedoc/-/typedoc-0.25.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typedoc@0.25.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typedoc/-/typedoc-0.25.7.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/typedoc" }, { "name": "cdx:npm:bin", "value": "typedoc" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "5.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "988e16ae91ec6c221cc13f5c178159bebf3441478abec52c52f283a11f97ffb5c7407f7cc580fc607660ec036dcf61ad66dfc206ad90274b6190624c1dfa9cd7" } ], "purl": "pkg:npm/typescript@5.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-5.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-5.2.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/tsc, /app/js/common/node_modules/.bin/tsserver" }, { "name": "cdx:npm:bin", "value": "tsc, tsserver" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lunr", "version": "2.3.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cd35370da65a17746df6b84ddee04c1900f7743dbfbc542a9ef6420efe1d97988ecead88650a93c6ef74af813927e9cfef42778a5a950ab6e1a3679669e5bc3b" } ], "purl": "pkg:npm/lunr@2.3.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lunr/-/lunr-2.3.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lunr@2.3.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lunr/-/lunr-2.3.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "marked", "version": "4.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d1b1a886f386caf8032fc73884fe5085b2cf23b978cd696cd56cde6d5c09b85e379a4bd3401e1a29f8f8d0c73d80f61f10e0cff11a6ccff2fa8dc32e8978ad0" } ], "purl": "pkg:npm/marked@4.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/marked/-/marked-4.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/marked@4.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/marked/-/marked-4.3.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/js/common/node_modules/.bin/marked" }, { "name": "cdx:npm:bin", "value": "marked" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "9.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "381c0137d00be1daa61139694b6cdab31faf4de59c956ce46e57d993b2930398f78de38e373fed4429d9a26532bcd83cdf02f966ff52b3a1cc2570202fc47662" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@9.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@9.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "26dd2f1f233e8e6501aa88c1ec4d4d21869db74bc8d10c63c5dd9312b5bde300f3f84d8b026e6f28c5d7c20e996414c73ee5250e0407297be318175f705d590d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@2.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "shiki", "version": "0.14.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "74d3c03ebc5273ceee6b6b0a2771f9750ffa65a63c44d9da02a2beb74786ee9d12a22db2762a9b18e4da642a9a62f03fb9961f4b52c99de9addd0fa649f70f0a" } ], "purl": "pkg:npm/shiki@0.14.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/shiki/-/shiki-0.14.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/shiki@0.14.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/shiki/-/shiki-0.14.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-sequence-parser", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bc95eddf289a50be14539e3ab37acf5e5b2bcbf46733bdf41b5f87929284d35d80374b31d5e3abc52bbde682832289ec91e2d38a3320a96677b8311edcd16fca" } ], "purl": "pkg:npm/ansi-sequence-parser@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-sequence-parser/-/ansi-sequence-parser-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-sequence-parser@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-sequence-parser/-/ansi-sequence-parser-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "jsonc-parser", "version": "3.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "02297103214e01c2b9c00d7e2de6b249506b1ec190bd41420d65caa598f368bd0fa96fb17c13adb67f0636d58a156aa77b23198f8d4c585f4a97a88f58bc2038" } ], "purl": "pkg:npm/jsonc-parser@3.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsonc-parser@3.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "vscode-oniguruma", "version": "1.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2fd58c1917eb8ce8601d274e6200adff244cb17ccb0c948bec13eb399b7bde05348963b89a9ab3a90ccecf9b2bc6a4ef301691d176534ab556a388f9e5173a70" } ], "purl": "pkg:npm/vscode-oniguruma@1.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/vscode-oniguruma/-/vscode-oniguruma-1.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/vscode-oniguruma@1.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/vscode-oniguruma/-/vscode-oniguruma-1.7.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "vscode-textmate", "version": "8.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0056e27a82fb6b92cca9c9ce174e238beae95da7603979d9b3142bfffafcde42cfafb6e23fb6a6de0f736da6486811b005159e4afa0c0f89a03dd5f77b835606" } ], "purl": "pkg:npm/vscode-textmate@8.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/vscode-textmate/-/vscode-textmate-8.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/vscode-textmate@8.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/vscode-textmate/-/vscode-textmate-8.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@nodelib/fs.stat@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/queue-microtask@1.2.3", "dependsOn": [] }, { "ref": "pkg:npm/run-parallel@1.2.0", "dependsOn": [ "pkg:npm/queue-microtask@1.2.3" ] }, { "ref": "pkg:npm/@nodelib/fs.scandir@2.1.5", "dependsOn": [ "pkg:npm/@nodelib/fs.stat@2.0.5", "pkg:npm/run-parallel@1.2.0" ] }, { "ref": "pkg:npm/reusify@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/fastq@1.19.1", "dependsOn": [ "pkg:npm/reusify@1.1.0" ] }, { "ref": "pkg:npm/@nodelib/fs.walk@1.2.8", "dependsOn": [ "pkg:npm/@nodelib/fs.scandir@2.1.5", "pkg:npm/fastq@1.19.1" ] }, { "ref": "pkg:npm/is-extglob@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/is-glob@4.0.3", "dependsOn": [ "pkg:npm/is-extglob@2.1.1" ] }, { "ref": "pkg:npm/glob-parent@5.1.2", "dependsOn": [ "pkg:npm/is-glob@4.0.3" ] }, { "ref": "pkg:npm/merge2@1.4.1", "dependsOn": [] }, { "ref": "pkg:npm/is-number@7.0.0", "dependsOn": [] }, { "ref": "pkg:npm/to-regex-range@5.0.1", "dependsOn": [ "pkg:npm/is-number@7.0.0" ] }, { "ref": "pkg:npm/fill-range@7.1.1", "dependsOn": [ "pkg:npm/to-regex-range@5.0.1" ] }, { "ref": "pkg:npm/braces@3.0.3", "dependsOn": [ "pkg:npm/fill-range@7.1.1" ] }, { "ref": "pkg:npm/picomatch@2.3.2", "dependsOn": [] }, { "ref": "pkg:npm/micromatch@4.0.8", "dependsOn": [ "pkg:npm/braces@3.0.3", "pkg:npm/picomatch@2.3.2" ] }, { "ref": "pkg:npm/fast-glob@3.3.3", "dependsOn": [ "pkg:npm/@nodelib/fs.stat@2.0.5", "pkg:npm/@nodelib/fs.walk@1.2.8", "pkg:npm/glob-parent@5.1.2", "pkg:npm/merge2@1.4.1", "pkg:npm/micromatch@4.0.8" ] }, { "ref": "pkg:npm/ignore@7.0.5", "dependsOn": [] }, { "ref": "pkg:npm/path-type@6.0.0", "dependsOn": [] }, { "ref": "pkg:npm/slash@5.1.0", "dependsOn": [] }, { "ref": "pkg:npm/unicorn-magic@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/globby@15.0.0", "dependsOn": [ "pkg:npm/@sindresorhus/merge-streams@4.0.0", "pkg:npm/fast-glob@3.3.3", "pkg:npm/ignore@7.0.5", "pkg:npm/path-type@6.0.0", "pkg:npm/slash@5.1.0", "pkg:npm/unicorn-magic@0.3.0" ] }, { "ref": "pkg:npm/typescript@5.2.2", "dependsOn": [] }, { "ref": "pkg:npm/lunr@2.3.9", "dependsOn": [] }, { "ref": "pkg:npm/marked@4.3.0", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@2.0.2", "dependsOn": [ "pkg:npm/balanced-match@1.0.2" ] }, { "ref": "pkg:npm/minimatch@9.0.9", "dependsOn": [ "pkg:npm/brace-expansion@2.0.2" ] }, { "ref": "pkg:npm/ansi-sequence-parser@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/jsonc-parser@3.2.1", "dependsOn": [] }, { "ref": "pkg:npm/vscode-oniguruma@1.7.0", "dependsOn": [] }, { "ref": "pkg:npm/vscode-textmate@8.0.0", "dependsOn": [] }, { "ref": "pkg:npm/shiki@0.14.7", "dependsOn": [ "pkg:npm/ansi-sequence-parser@1.1.1", "pkg:npm/jsonc-parser@3.2.1", "pkg:npm/vscode-oniguruma@1.7.0", "pkg:npm/vscode-textmate@8.0.0" ] }, { "ref": "pkg:npm/typedoc@0.25.7", "dependsOn": [ "pkg:npm/lunr@2.3.9", "pkg:npm/marked@4.3.0", "pkg:npm/minimatch@9.0.9", "pkg:npm/shiki@0.14.7", "pkg:npm/typescript@5.2.2" ] }, { "ref": "pkg:npm/onnxruntime-common@1.26.0", "dependsOn": [ "pkg:npm/globby@15.0.0", "pkg:npm/typedoc@0.25.7" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/onnxruntime-common@1.26.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-20T04:35:33Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, August 20, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'onnxruntime-common' with version '1.26.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json." } ] }