{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:ba776961-f2cc-4abc-9a71-6baa1cdfa04b", "version": 1, "metadata": { "timestamp": "2026-09-21T15:24:17Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "tar-pack", "group": "", "version": "3.4.1", "description": "Package and un-package modules of some sort (in tar/gz bundles).", "purl": "pkg:npm/tar-pack@3.4.1", "bom-ref": "pkg:npm/tar-pack@3.4.1", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/tar-pack.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "debug", "version": "2.6.9", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.6.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.6.9.tgz" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 3 } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-2.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fstream", "version": "1.0.11", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "d9783c5c0ef4bafcab8aa77527a4ffe95ef859e4161c29fae614d201671980a08e0a8ee737a868aa016b60f2c9f58cdbaf2ae9fd522bb875ec0f2648a99d52bd" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fstream@1.0.11", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fstream/-/fstream-1.0.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fstream@1.0.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fstream/-/fstream-1.0.11.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package is no longer supported." }, { "name": "ImportedModules", "value": "fstream" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 8 } ] } }, { "group": "", "name": "graceful-fs", "version": "4.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f71e832d4b96f9138574c4c823d79cf6dfc52bcbdaea461c0bcfcb820ba6b2c2ccf2436fec874597756b354aa08abdad26e055c4181ad5006847389969c3b966" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.1.11", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-4.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-4.1.11.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c74d0844d5cdcbade3c069099b33e2828c921db6aaa4dbb329b04e9b32be83639d66943dc3eb3108df95481de36bb20081ed8e3f6aa97f14e378d7328e65b5bb" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4a49c90b9da86cf7c640f9e32245db980ebee47d7913e7d1f84e22476a10df3cc22db77bfce36e6baf51fc6c3b0209132ec446fabe5fce4b18c167b50204f258" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/mkdirp" }, { "name": "cdx:npm:bin", "value": "mkdirp" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rimraf", "version": "2.6.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "96b79ec0b2bf0658219b1b5f1f7e986158358bc20071ee1323ba1aa3be48d60db8e7ee8172da935508813f761427d0ba0d039726691847d5fd7c22ed08e25ce7" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.6.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/rimraf/-/rimraf-2.6.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.6.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/rimraf/-/rimraf-2.6.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/rimraf" }, { "name": "cdx:npm:bin", "value": "rimraf" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Rimraf versions prior to v4 are no longer supported" }, { "name": "ImportedModules", "value": "rimraf" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 5 } ] } }, { "group": "", "name": "glob", "version": "7.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-7.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-7.1.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fs.realpath/-/fs.realpath-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.4.0.tgz" }, { "name": "ImportedModules", "value": "once" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 7 } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-3.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0e77dcf513803eb92478b214c1e11b87b2c54fd31ce77b4efdb6ccd38e2b2a3860004c8818abca5e0f7b3ccfe4462cd921f5076913992287846966a8f949f37f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brace-expansion/-/brace-expansion-1.1.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brace-expansion/-/brace-expansion-1.1.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f58d20d10f2b992b7e1f7dc37cabfb14e737bfe89123ea3595bcedf2319c228b185b7ec8216ff65d562ae4d3dd99a0f9350e7d364dba2a5fef65bc16f45afcbe" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/balanced-match/-/balanced-match-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/concat-map/-/concat-map-0.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/path-is-absolute/-/path-is-absolute-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fstream-ignore", "version": "1.0.5", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "55546e3ace35554aa9b441a247437966858471f1af6c646a2c83726408474671770c7e70aea8cd918af755b468667238d416603bbcc855d8a86dcd774d5235a3" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fstream-ignore@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fstream-ignore/-/fstream-ignore-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fstream-ignore@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fstream-ignore/-/fstream-ignore-1.0.5.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package is no longer supported." }, { "name": "ImportedModules", "value": "fstream-ignore" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 9 } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "9beab3cdc9fb294c4499dd6031b72117e63678851b89e51ac645ada6dc87cb0ad7d2b13c40462a3c2d3b56ecb85a6df6ff1135e8d71d05cb5bf12d177bfe4879" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/readable-stream/-/readable-stream-2.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/readable-stream/-/readable-stream-2.3.3.tgz" }, { "name": "ImportedModules", "value": "readable-stream" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 11 } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/core-util-is/-/core-util-is-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/isarray/-/isarray-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/isarray/-/isarray-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "1.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c8dd16426b825fadcb3ff4ccbc0837d67bd3ea6e2f0ea2448a2bf608066a58e18d5aeb5cf437c393534f61898a50599a54cd94c03a301f8bb90075983ff8f12b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@1.0.7", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/process-nextick-args/-/process-nextick-args-1.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@1.0.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/process-nextick-args/-/process-nextick-args-1.0.7.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "safe-buffer", "version": "5.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/safe-buffer/-/safe-buffer-5.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/safe-buffer/-/safe-buffer-5.1.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e001fa6797f334d05c1fee970cc7c0fc14edf3bb24c6a2653b49408770e47abe734e1700c46ea62b3fa21aedf4f142a83cf43c0dcab1ff8261ba3ce5b516be85" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/string_decoder/-/string_decoder-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/string_decoder/-/string_decoder-1.0.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "util-deprecate", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/util-deprecate/-/util-deprecate-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/util-deprecate/-/util-deprecate-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tar", "version": "2.2.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "d93c36b8db59a904d21d320c6ca1ca15e00f98a7258eb34aa8a88837ba6edd5fc2c58a91812f032d7bcc90546b6ed5e583a99339072e4d7ec3323d7c5e2d1db6" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@2.2.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tar/-/tar-2.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tar@2.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tar/-/tar-2.2.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "ImportedModules", "value": "tar" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 6 } ] } }, { "group": "", "name": "block-stream", "version": "0.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3a8adb9c954f208e03b9429b8c04407bcbbc11fa8e9a4104692148ca843b3a34c79fa91a7f15a5d302e0a19dab5da61deccc8b703694e139a17f1b7081c71c31" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/block-stream@0.0.9", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/block-stream/-/block-stream-0.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/block-stream@0.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/block-stream/-/block-stream-0.0.9.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uid-number", "version": "0.0.6", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "738eb51572258ecc02bac7199faef1abd3e9b3390f4fa46385e585413802c9a6c9ad3528cc495a9dbd1812abf6506824db8ed8a5c264141b9218dbc19695ccf7" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uid-number@0.0.6", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uid-number/-/uid-number-0.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uid-number@0.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uid-number/-/uid-number-0.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package is no longer supported." }, { "name": "ImportedModules", "value": "uid-number" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 4 } ] } }, { "group": "", "name": "mocha", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7af0e6864a00f9c04d8904107522996b66fdf96da6a4ba23e74dfaee5872f8a967c7d395f179422218a05279f581a4c52d009ad2474d844183af48425ce4050f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-4.0.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha" }, { "name": "cdx:npm:bin", "value": "_mocha, mocha" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "browser-stdout", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ed17e4dfbeeda5233d4d6044787b341650d91a80087a2d95ff831d649a053011402ba06a2e9c402147a91911c674f1601ac2dbd363d7a2f0b8a9d7721ef42a4e" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-stdout@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/browser-stdout/-/browser-stdout-1.3.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "2.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6f4e79dee600e580041a0c982066113b3290ed7e5102a79d91f8e2671c22d242f58376ce68134d65f624cedfc22f4ba6803e7073d25e73615b07df028e4311bd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.11.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.11.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.11.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.11.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "3.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@3.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-3.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-3.1.0.tgz" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js", "line": 3 } ] } }, { "group": "", "name": "diff", "version": "3.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "30a3c7643301d28eb21f20ebc9439272a6626e9f75e24b17c003183131e3e8a3bc51e2ac4583490f7a0d08a8d3a99a27f95e3cf0fecdfc7cd717cb7b651f79c3" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@3.3.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-3.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-3.3.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.10.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "84a96c6c0e55bb7c6c8750a0dc9ee34a65ff59a5ba039a017aacccf3ca0d6c2450173fb351a5e6eb2c52e11572b69d6c701a09cd2625e1800439022de8ef15d5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/growl@1.10.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.10.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.10.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.10.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "he", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cff1833e395130d39ad972620787a6f30269bae05fac53a560a4d9c6da6476bd6e3dd89b1c8f2b600dcc63428339ba55c9a7acd1efdaba789dfedf3c648d8428" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/he/-/he-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/he/-/he-1.1.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/he" }, { "name": "cdx:npm:bin", "value": "he" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "4.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aca0b7f83c975a02b464b2b0991b2b9321d56408cd91fcde7a1b8559d18672a1834d9147ef7f911fa4bf443000c65f46bac4a365251660b993f4de69cd714e5d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@4.4.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/supports-color/-/supports-color-4.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@4.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/supports-color/-/supports-color-4.4.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3fed67dcc9f08d1fc4a60f41068d4a4fca9bc9eda0d8ebb8b05ba68a1c2de88e2db145fb8e72dc5f80533922a0fc1d59ac860c37d15c1271b8c796bb341f049e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/has-flag/-/has-flag-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/has-flag/-/has-flag-2.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rfile", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "68d793a58f20e83626a8fbda91abb6d81d128a9413b243bc16d617ce7f2a8385f86cdf44c481fc54086afcbf70ecdf07bc44987924b09377b81a65beacb2c0c5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rfile@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/rfile/-/rfile-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rfile@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/rfile/-/rfile-1.0.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "callsite", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d2f74d4455e7e6af9db4eaa37c5b66b6523d37679567b2ccc8457688a0b9984105bd283febd325e9bfd6536a85f16d672d16b4c224ab0d3dd8e63387642c0a3d" } ], "purl": "pkg:npm/callsite@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/callsite/-/callsite-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/callsite@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/callsite/-/callsite-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "0.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9b1c7f23fc0b8f1b6bc8306daeb6f464dcda60445559a1e92745b402b9bc37897c6fe8e25ff539c8a72c8f4cd0a45f54b8a375bb3f341144ceb9d38de8e3ee69" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.3.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve/-/resolve-0.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve/-/resolve-0.3.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.6.9", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/graceful-fs@4.1.11", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.8", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.8" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.2", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/rimraf@2.6.2", "dependsOn": [ "pkg:npm/glob@7.1.2" ] }, { "ref": "pkg:npm/fstream@1.0.11", "dependsOn": [ "pkg:npm/graceful-fs@4.1.11", "pkg:npm/inherits@2.0.3", "pkg:npm/mkdirp@0.5.1", "pkg:npm/rimraf@2.6.2" ] }, { "ref": "pkg:npm/fstream-ignore@1.0.5", "dependsOn": [ "pkg:npm/fstream@1.0.11", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4" ] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/process-nextick-args@1.0.7", "dependsOn": [] }, { "ref": "pkg:npm/safe-buffer@5.1.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@1.0.3", "dependsOn": [ "pkg:npm/safe-buffer@5.1.1" ] }, { "ref": "pkg:npm/util-deprecate@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@2.3.3", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.3", "pkg:npm/isarray@1.0.0", "pkg:npm/process-nextick-args@1.0.7", "pkg:npm/safe-buffer@5.1.1", "pkg:npm/string_decoder@1.0.3", "pkg:npm/util-deprecate@1.0.2" ] }, { "ref": "pkg:npm/block-stream@0.0.9", "dependsOn": [ "pkg:npm/inherits@2.0.3" ] }, { "ref": "pkg:npm/tar@2.2.1", "dependsOn": [ "pkg:npm/block-stream@0.0.9", "pkg:npm/fstream@1.0.11", "pkg:npm/inherits@2.0.3" ] }, { "ref": "pkg:npm/uid-number@0.0.6", "dependsOn": [] }, { "ref": "pkg:npm/browser-stdout@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.11.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@3.1.0", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/diff@3.3.1", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/growl@1.10.3", "dependsOn": [] }, { "ref": "pkg:npm/he@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@4.4.0", "dependsOn": [ "pkg:npm/has-flag@2.0.0" ] }, { "ref": "pkg:npm/mocha@4.0.1", "dependsOn": [ "pkg:npm/browser-stdout@1.3.0", "pkg:npm/commander@2.11.0", "pkg:npm/debug@3.1.0", "pkg:npm/diff@3.3.1", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.1.2", "pkg:npm/growl@1.10.3", "pkg:npm/he@1.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@4.4.0" ] }, { "ref": "pkg:npm/callsite@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/resolve@0.3.1", "dependsOn": [] }, { "ref": "pkg:npm/rfile@1.0.0", "dependsOn": [ "pkg:npm/callsite@1.0.0", "pkg:npm/resolve@0.3.1" ] }, { "ref": "pkg:npm/tar-pack@3.4.1", "dependsOn": [ "pkg:npm/debug@2.6.9", "pkg:npm/fstream-ignore@1.0.5", "pkg:npm/fstream@1.0.11", "pkg:npm/mkdirp@0.5.1", "pkg:npm/mocha@4.0.1", "pkg:npm/once@1.4.0", "pkg:npm/readable-stream@2.3.3", "pkg:npm/rfile@1.0.0", "pkg:npm/rimraf@2.6.2", "pkg:npm/tar@2.2.1", "pkg:npm/uid-number@0.0.6" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/tar-pack@3.4.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-21T15:24:17Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'tar-pack' with version '3.4.1'." } ] }