{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:dc1422db-39db-4484-b2a4-8e1983e7b4be", "version": 1, "metadata": { "timestamp": "2026-07-31T02:40:35Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "keys", "group": "@solana", "version": "2.3.0", "description": "Helpers for generating and transforming key material", "purl": "pkg:npm/%40solana/keys@2.3.0", "bom-ref": "pkg:npm/@solana/keys@2.3.0", "author": "Solana Labs Maintainers ", "properties": [ { "name": "cdx:npm:scripts", "value": "benchmark, compile:docs, compile:js, compile:typedefs, dev, prepublishOnly, publish-impl, publish-packages, style:fix, test:lint, test:prettier, test:treeshakability:browser, test:treeshakability:native, test:treeshakability:node, test:typecheck, test:unit:browser, test:unit:node" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@solana" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@solana/assertions/package.json\\nnode_modules/@solana/codecs-core/package.json\\nnode_modules/@solana/codecs-strings/package.json\\nnode_modules/@solana/errors/package.json\\nnode_modules/@solana/nominal-types/package.json\\nnode_modules/tinybench/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.8.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@5.8.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "group": "", "name": "tinybench", "version": "4.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tinybench@4.0.1", "type": "library", "bom-ref": "pkg:npm/tinybench@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tinybench/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinybench/package.json" } ], "concludedValue": "node_modules/tinybench/package.json" } ] } }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "nominal-types", "version": "2.3.0", "description": "Type utilties for creating nominal/branded types in TypeScript", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/nominal-types@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/nominal-types@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/nominal-types/package.json" }, { "name": "ImportedModules", "value": "@solana/nominal-types,Brand,@solana/nominal-types/Brand,EncodedString,@solana/nominal-types/EncodedString" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/nominal-types/package.json" } ], "concludedValue": "node_modules/@solana/nominal-types/package.json" } ], "occurrences": [ { "location": "src/signatures.ts#9" } ] } }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "errors", "version": "2.3.0", "description": "Throw, identify, and decode Solana JavaScript errors", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/errors@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/errors@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/errors/package.json" }, { "name": "ImportedModules", "value": "@solana/errors,SolanaError,@solana/errors/SolanaError,SOLANA_ERROR__KEYS__INVALID_PRIVATE_KEY_BYTE_LENGTH,@solana/errors/SOLANA_ERROR__KEYS__INVALID_PRIVATE_KEY_BYTE_LENGTH,SOLANA_ERROR__SUBTLE_CRYPTO__CANNOT_EXPORT_NON_EXTRACTABLE_KEY,@solana/errors/SOLANA_ERROR__SUBTLE_CRYPTO__CANNOT_EXPORT_NON_EXTRACTABLE_KEY,SOLANA_ERROR__KEYS__SIGNATURE_STRING_LENGTH_OUT_OF_RANGE,@solana/errors/SOLANA_ERROR__KEYS__SIGNATURE_STRING_LENGTH_OUT_OF_RANGE,SOLANA_ERROR__KEYS__INVALID_SIGNATURE_BYTE_LENGTH,@solana/errors/SOLANA_ERROR__KEYS__INVALID_SIGNATURE_BYTE_LENGTH,SOLANA_ERROR__KEYS__INVALID_KEY_PAIR_BYTE_LENGTH,@solana/errors/SOLANA_ERROR__KEYS__INVALID_KEY_PAIR_BYTE_LENGTH,SOLANA_ERROR__KEYS__PUBLIC_KEY_MUST_MATCH_PRIVATE_KEY,@solana/errors/SOLANA_ERROR__KEYS__PUBLIC_KEY_MUST_MATCH_PRIVATE_KEY" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/errors/package.json" } ], "concludedValue": "node_modules/@solana/errors/package.json" } ], "occurrences": [ { "location": "dist/index.browser.cjs#4" }, { "location": "dist/index.node.cjs#4" }, { "location": "dist/index.browser.mjs#2" }, { "location": "dist/index.native.mjs#2" }, { "location": "dist/index.node.mjs#2" }, { "location": "src/key-pair.ts#7" }, { "location": "src/private-key.ts#2" }, { "location": "src/public-key.ts#2" }, { "location": "src/signatures.ts#8" } ] }, "tags": [ "decode" ] }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "codecs-strings", "version": "2.3.0", "description": "Codecs for strings of different sizes and encodings", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/codecs-strings@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/codecs-strings@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/codecs-strings/package.json" }, { "name": "ImportedModules", "value": "@solana/codecs-strings,getBase58Encoder,@solana/codecs-strings/getBase58Encoder" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/codecs-strings/package.json" } ], "concludedValue": "node_modules/@solana/codecs-strings/package.json" } ], "occurrences": [ { "location": "dist/index.browser.cjs#5" }, { "location": "dist/index.node.cjs#5" }, { "location": "dist/index.browser.mjs#3" }, { "location": "dist/index.native.mjs#3" }, { "location": "dist/index.node.mjs#3" }, { "location": "src/signatures.ts#3" } ] } }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "codecs-core", "version": "2.3.0", "description": "Core types and helpers for encoding and decoding byte arrays on Solana", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/codecs-core@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/codecs-core@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/codecs-core/package.json" }, { "name": "ImportedModules", "value": "@solana/codecs-core,ReadonlyUint8Array,@solana/codecs-core/ReadonlyUint8Array,Encoder,@solana/codecs-core/Encoder" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/codecs-core/package.json" } ], "concludedValue": "node_modules/@solana/codecs-core/package.json" } ], "occurrences": [ { "location": "src/key-pair.ts#2" }, { "location": "src/private-key.ts#1" }, { "location": "src/signatures.ts#2" } ] } }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "assertions", "version": "2.3.0", "description": "Helpers for asserting that a JavaScript environment supports certain features necessary for the operation of the Solana JavaScript SDK", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/assertions@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/assertions@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/assertions/package.json" }, { "name": "ImportedModules", "value": "@solana/assertions,assertKeyExporterIsAvailable,@solana/assertions/assertKeyExporterIsAvailable,assertSigningCapabilityIsAvailable,@solana/assertions/assertSigningCapabilityIsAvailable,assertVerificationCapabilityIsAvailable,@solana/assertions/assertVerificationCapabilityIsAvailable,assertKeyGenerationIsAvailable,@solana/assertions/assertKeyGenerationIsAvailable,assertPRNGIsAvailable,@solana/assertions/assertPRNGIsAvailable" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/assertions/package.json" } ], "concludedValue": "node_modules/@solana/assertions/package.json" } ], "occurrences": [ { "location": "dist/index.browser.cjs#3" }, { "location": "dist/index.node.cjs#3" }, { "location": "dist/index.browser.mjs#1" }, { "location": "dist/index.native.mjs#1" }, { "location": "dist/index.node.mjs#1" }, { "location": "src/key-pair.ts#1" }, { "location": "src/public-key.ts#1" }, { "location": "src/signatures.ts#1" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@solana/keys@2.3.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-31T02:40:35Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 31, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'keys' with version '2.3.0'. The package type in this SBOM is npm with a single purl namespace '@solana' described under components. The components were identified from 7 source files." } ] }