{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:0e95a923-beef-4067-9824-2b8548eacd18", "version": 1, "metadata": { "timestamp": "2026-07-31T02:40:44Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "rpc-subscriptions-channel-websocket", "group": "@solana", "version": "2.3.0", "description": "An RPC Subscriptions transport that uses WebSockets", "purl": "pkg:npm/%40solana/rpc-subscriptions-channel-websocket@2.3.0", "bom-ref": "pkg:npm/@solana/rpc-subscriptions-channel-websocket@2.3.0", "author": "Solana Labs Maintainers ", "properties": [ { "name": "cdx:npm:scripts", "value": "compile:docs, compile:js, compile:typedefs, dev, prepublishOnly, publish-impl, publish-packages, style:fix, test:lint, test:prettier, test:treeshakability:browser, test:treeshakability:native, test:treeshakability:node, test:typecheck, test:unit:browser, test:unit:node" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@solana" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@solana/errors/package.json\\nnode_modules/@solana/event-target-impl/package.json\\nnode_modules/@solana/functional/package.json\\nnode_modules/@solana/rpc-subscriptions-spec/package.json\\nnode_modules/@solana/subscribable/package.json\\nnode_modules/@solana/ws-impl/package.json\\nnode_modules/jest-websocket-mock/package.json\\nnode_modules/typescript/package.json\\nnode_modules/ws/package.json" } ] }, "components": [ { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "8.18.1", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ws@8.18.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" }, { "type": "vcs", "url": "git+https://github.com/websockets/ws.git" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "ImportedModules", "value": "ws" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ], "occurrences": [ { "location": "dist/index.node.cjs#6" }, { "location": "dist/index.node.mjs#4" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.8.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@5.8.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Romain Bertrand" } ], "group": "", "name": "jest-websocket-mock", "version": "2.5.0", "description": "Mock websockets and assert complex websocket interactions with Jest", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/jest-websocket-mock@2.5.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/romgain/jest-websocket-mock.git" } ], "type": "library", "bom-ref": "pkg:npm/jest-websocket-mock@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jest-websocket-mock/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jest-websocket-mock/package.json" } ], "concludedValue": "node_modules/jest-websocket-mock/package.json" } ] }, "tags": [ "test" ] }, { "group": "@solana", "name": "ws-impl", "version": "0.0.0", "scope": "required", "purl": "pkg:npm/%40solana/ws-impl@0.0.0", "type": "library", "bom-ref": "pkg:npm/@solana/ws-impl@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/ws-impl/package.json" }, { "name": "ImportedModules", "value": "@solana/ws-impl" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/ws-impl/package.json" } ], "concludedValue": "node_modules/@solana/ws-impl/package.json" } ], "occurrences": [ { "location": "src/websocket-channel.ts#10" } ] } }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "subscribable", "version": "2.3.0", "description": "Helpers for creating subscription-based event emitters", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/subscribable@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/subscribable@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/subscribable/package.json" }, { "name": "ImportedModules", "value": "@solana/subscribable,getDataPublisherFromEventEmitter,@solana/subscribable/getDataPublisherFromEventEmitter" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/subscribable/package.json" } ], "concludedValue": "node_modules/@solana/subscribable/package.json" } ], "occurrences": [ { "location": "dist/index.browser.cjs#4" }, { "location": "dist/index.node.cjs#5" }, { "location": "dist/index.browser.mjs#2" }, { "location": "dist/index.native.mjs#2" }, { "location": "dist/index.node.mjs#3" }, { "location": "src/websocket-channel.ts#9" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "rpc-subscriptions-spec", "version": "2.3.0", "description": "A generic implementation of JSON RPC Subscriptions using proxies", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/rpc-subscriptions-spec@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/rpc-subscriptions-spec@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/rpc-subscriptions-spec/package.json" }, { "name": "ImportedModules", "value": "@solana/rpc-subscriptions-spec,RpcSubscriptionsChannel,@solana/rpc-subscriptions-spec/RpcSubscriptionsChannel" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/rpc-subscriptions-spec/package.json" } ], "concludedValue": "node_modules/@solana/rpc-subscriptions-spec/package.json" } ], "occurrences": [ { "location": "src/websocket-channel.ts#8" } ] }, "tags": [ "json", "rpc" ] }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "functional", "version": "2.3.0", "description": "Functional JavaScript helpers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/functional@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/functional@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/functional/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/functional/package.json" } ], "concludedValue": "node_modules/@solana/functional/package.json" } ] } }, { "group": "@solana", "name": "event-target-impl", "version": "0.0.0", "scope": "required", "purl": "pkg:npm/%40solana/event-target-impl@0.0.0", "type": "library", "bom-ref": "pkg:npm/@solana/event-target-impl@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/event-target-impl/package.json" }, { "name": "ImportedModules", "value": "@solana/event-target-impl,EventTarget,@solana/event-target-impl/EventTarget" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/event-target-impl/package.json" } ], "concludedValue": "node_modules/@solana/event-target-impl/package.json" } ], "occurrences": [ { "location": "src/websocket-channel.ts#7" } ] } }, { "authors": [ { "name": "Solana Labs Maintainers " } ], "group": "@solana", "name": "errors", "version": "2.3.0", "description": "Throw, identify, and decode Solana JavaScript errors", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40solana/errors@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/anza-xyz/kit" } ], "type": "library", "bom-ref": "pkg:npm/@solana/errors@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@solana/errors/package.json" }, { "name": "ImportedModules", "value": "@solana/errors,SolanaError,@solana/errors/SolanaError,SOLANA_ERROR__RPC_SUBSCRIPTIONS__CHANNEL_CONNECTION_CLOSED,@solana/errors/SOLANA_ERROR__RPC_SUBSCRIPTIONS__CHANNEL_CONNECTION_CLOSED,SOLANA_ERROR__RPC_SUBSCRIPTIONS__CHANNEL_FAILED_TO_CONNECT,@solana/errors/SOLANA_ERROR__RPC_SUBSCRIPTIONS__CHANNEL_FAILED_TO_CONNECT,SOLANA_ERROR__RPC_SUBSCRIPTIONS__CHANNEL_CLOSED_BEFORE_MESSAGE_BUFFERED,@solana/errors/SOLANA_ERROR__RPC_SUBSCRIPTIONS__CHANNEL_CLOSED_BEFORE_MESSAGE_BUFFERED" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@solana/errors/package.json" } ], "concludedValue": "node_modules/@solana/errors/package.json" } ], "occurrences": [ { "location": "dist/index.browser.cjs#3" }, { "location": "dist/index.node.cjs#3" }, { "location": "dist/index.browser.mjs#1" }, { "location": "dist/index.native.mjs#1" }, { "location": "dist/index.node.mjs#1" }, { "location": "src/websocket-channel.ts#6" } ] }, "tags": [ "decode" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@solana/rpc-subscriptions-channel-websocket@2.3.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-31T02:40:44Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 31, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'rpc-subscriptions-channel-websocket' with version '2.3.0'. The package type in this SBOM is npm with a single purl namespace '@solana' described under components. The components were identified from 9 source files." } ] }