{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:b37c542b-2f26-4edd-8a41-2b5f63ae3dac", "version": 1, "metadata": { "timestamp": "2026-09-03T16:16:47Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "vscode-languageserver-protocol", "group": "", "version": "3.18.3", "description": "VSCode Language Server Protocol implementation", "purl": "pkg:npm/vscode-languageserver-protocol@3.18.3", "bom-ref": "pkg:npm/vscode-languageserver-protocol@3.18.3", "author": "Microsoft Corporation", "properties": [ { "name": "cdx:npm:scripts", "value": "prepublishOnly, prepack, postpublish, preversion, compile, watch, clean, lint, test, test:node, test:browser, webpack:test, webpack:test:silent, compile:metaModelTool, generate:metaModel, generate:metaModelSchema, all, compile:publish, all:publish" }, { "name": "cdx:npm:buildScripts", "value": "compile, watch, compile:metaModelTool, compile:publish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Microsoft/vscode-languageserver-node.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "vscode-jsonrpc", "version": "9.0.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "49b41257dc917a6011c5e5f0e8b539b12e99ab47bdfc3802097e727a51f6eb76505ae91b4e4f0417c7e34ebaf577389ab1fe06c2525bbd3c059d3ae74055995d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vscode-jsonrpc@9.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/vscode-jsonrpc/-/vscode-jsonrpc-9.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/vscode-jsonrpc@9.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/vscode-jsonrpc/-/vscode-jsonrpc-9.0.2.tgz" }, { "name": "ImportedModules", "value": "vscode-jsonrpc/browser,createMessageConnection,vscode-jsonrpc/browser/createMessageConnection,vscode-jsonrpc,vscode-jsonrpc/node,Message,vscode-jsonrpc/Message,NotificationMessage,vscode-jsonrpc/NotificationMessage,CancellationToken,vscode-jsonrpc/CancellationToken,RequestHandler0,vscode-jsonrpc/RequestHandler0,RequestHandler,vscode-jsonrpc/RequestHandler,GenericRequestHandler,vscode-jsonrpc/GenericRequestHandler,NotificationHandler0,vscode-jsonrpc/NotificationHandler0,NotificationHandler,vscode-jsonrpc/NotificationHandler,GenericNotificationHandler,vscode-jsonrpc/GenericNotificationHandler,ProgressType,vscode-jsonrpc/ProgressType,Trace,vscode-jsonrpc/Trace,Tracer,vscode-jsonrpc/Tracer,TraceOptions,vscode-jsonrpc/TraceOptions,Disposable,vscode-jsonrpc/Disposable,Event,vscode-jsonrpc/Event,MessageReader,vscode-jsonrpc/MessageReader,MessageWriter,vscode-jsonrpc/MessageWriter,Logger,vscode-jsonrpc/Logger,ConnectionStrategy,vscode-jsonrpc/ConnectionStrategy,ConnectionOptions,vscode-jsonrpc/ConnectionOptions,vscode-jsonrpc/createMessageConnection,RequestType0,vscode-jsonrpc/RequestType0,RequestType,vscode-jsonrpc/RequestType,NotificationType0,vscode-jsonrpc/NotificationType0,NotificationType,vscode-jsonrpc/NotificationType,RequestParam,vscode-jsonrpc/RequestParam,vscode-jsonrpc/_EM,ParameterStructures,vscode-jsonrpc/ParameterStructures,LogTraceParams,vscode-jsonrpc/LogTraceParams,SetTraceParams,vscode-jsonrpc/SetTraceParams,ProgressToken,vscode-jsonrpc/ProgressToken,ErrorCodes,vscode-jsonrpc/ErrorCodes,HandlerResult,vscode-jsonrpc/HandlerResult,TraceValue,vscode-jsonrpc/TraceValue,vscode-jsonrpc/node/createMessageConnection" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/browser/main.js", "line": 22 }, { "location": "lib/browser/main.js", "line": 23 }, { "location": "src/browser/main.ts", "line": 7 }, { "location": "src/browser/main.ts", "line": 9 }, { "location": "src/browser/main.ts", "line": 13 }, { "location": "lib/common/api.js", "line": 22 }, { "location": "lib/common/connection.js", "line": 8 }, { "location": "lib/common/messages.js", "line": 8 }, { "location": "lib/common/protocol.$.js", "line": 7 }, { "location": "lib/common/protocol.diagnostic.js", "line": 41 }, { "location": "lib/common/protocol.progress.js", "line": 8 }, { "location": "lib/node/main.js", "line": 22 }, { "location": "lib/node/main.js", "line": 23 }, { "location": "src/common/api.ts", "line": 8 }, { "location": "src/common/connection.ts", "line": 11 }, { "location": "src/common/connection.ts", "line": 228 }, { "location": "src/common/connection.ts", "line": 231 }, { "location": "src/common/messages.ts", "line": 6 }, { "location": "src/common/protocol.$.ts", "line": 6 }, { "location": "src/common/protocol.callHierarchy.ts", "line": 6 }, { "location": "src/common/protocol.colorProvider.ts", "line": 6 }, { "location": "src/common/protocol.configuration.ts", "line": 6 }, { "location": "src/common/protocol.declaration.ts", "line": 6 }, { "location": "src/common/protocol.diagnostic.ts", "line": 6 }, { "location": "src/common/protocol.fileOperations.ts", "line": 6 }, { "location": "src/common/protocol.foldingRange.ts", "line": 6 }, { "location": "src/common/protocol.implementation.ts", "line": 6 }, { "location": "src/common/protocol.inlayHint.ts", "line": 6 }, { "location": "src/common/protocol.inlineCompletion.ts", "line": 7 }, { "location": "src/common/protocol.inlineValue.ts", "line": 7 }, { "location": "src/common/protocol.linkedEditingRange.ts", "line": 6 }, { "location": "src/common/protocol.progress.ts", "line": 6 }, { "location": "src/common/protocol.selectionRange.ts", "line": 6 }, { "location": "src/common/protocol.semanticTokens.ts", "line": 7 }, { "location": "src/common/protocol.showDocument.ts", "line": 6 }, { "location": "src/common/protocol.textDocumentContent.ts", "line": 7 }, { "location": "src/common/protocol.ts", "line": 6 }, { "location": "src/common/protocol.typeDefinition.ts", "line": 6 }, { "location": "src/common/protocol.typeHierarchy.ts", "line": 6 }, { "location": "src/common/protocol.workspaceFolder.ts", "line": 7 }, { "location": "src/node/main.ts", "line": 7 }, { "location": "src/node/main.ts", "line": 9 }, { "location": "src/node/main.ts", "line": 15 } ] } }, { "group": "", "name": "vscode-languageserver-types", "version": "3.18.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "5c897327b429fe3cd223576ceff1703c05ab3de4d903ba40b655b885d27527ac575892fa751f506270e124e74bcdd2a1510e4c9ba9af50cc3edc370e4106ac3f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vscode-languageserver-types@3.18.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/vscode-languageserver-types/-/vscode-languageserver-types-3.18.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/vscode-languageserver-types@3.18.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/vscode-languageserver-types/-/vscode-languageserver-types-3.18.3.tgz" }, { "name": "ImportedModules", "value": "vscode-languageserver-types,integer,vscode-languageserver-types/integer,SemanticTokenTypes,vscode-languageserver-types/SemanticTokenTypes,SemanticTokenModifiers,vscode-languageserver-types/SemanticTokenModifiers,LSPAny,vscode-languageserver-types/LSPAny,CallHierarchyItem,vscode-languageserver-types/CallHierarchyItem,CallHierarchyIncomingCall,vscode-languageserver-types/CallHierarchyIncomingCall,CallHierarchyOutgoingCall,vscode-languageserver-types/CallHierarchyOutgoingCall,TextDocumentIdentifier,vscode-languageserver-types/TextDocumentIdentifier,Range,vscode-languageserver-types/Range,Color,vscode-languageserver-types/Color,ColorInformation,vscode-languageserver-types/ColorInformation,ColorPresentation,vscode-languageserver-types/ColorPresentation,vscode-languageserver-types/URI,Declaration,vscode-languageserver-types/Declaration,DeclarationLink,vscode-languageserver-types/DeclarationLink,Location,vscode-languageserver-types/Location,LocationLink,vscode-languageserver-types/LocationLink,Diagnostic,vscode-languageserver-types/Diagnostic,DocumentUri,vscode-languageserver-types/DocumentUri,WorkspaceEdit,vscode-languageserver-types/WorkspaceEdit,uinteger,vscode-languageserver-types/uinteger,FoldingRange,vscode-languageserver-types/FoldingRange,FoldingRangeKind,vscode-languageserver-types/FoldingRangeKind,Definition,vscode-languageserver-types/Definition,DefinitionLink,vscode-languageserver-types/DefinitionLink,InlayHint,vscode-languageserver-types/InlayHint,InlineCompletionItem,vscode-languageserver-types/InlineCompletionItem,InlineCompletionContext,vscode-languageserver-types/InlineCompletionContext,InlineCompletionList,vscode-languageserver-types/InlineCompletionList,InlineValue,vscode-languageserver-types/InlineValue,InlineValueContext,vscode-languageserver-types/InlineValueContext,TextDocumentItem,vscode-languageserver-types/TextDocumentItem,VersionedTextDocumentIdentifier,vscode-languageserver-types/VersionedTextDocumentIdentifier,LSPObject,vscode-languageserver-types/LSPObject,Position,vscode-languageserver-types/Position,SelectionRange,vscode-languageserver-types/SelectionRange,SemanticTokensEdit,vscode-languageserver-types/SemanticTokensEdit,SemanticTokensLegend,vscode-languageserver-types/SemanticTokensLegend,SemanticTokens,vscode-languageserver-types/SemanticTokens,SemanticTokensDelta,vscode-languageserver-types/SemanticTokensDelta,Command,vscode-languageserver-types/Command,TextEdit,vscode-languageserver-types/TextEdit,WorkspaceEditMetadata,vscode-languageserver-types/WorkspaceEditMetadata,CompletionItem,vscode-languageserver-types/CompletionItem,CompletionList,vscode-languageserver-types/CompletionList,Hover,vscode-languageserver-types/Hover,SignatureHelp,vscode-languageserver-types/SignatureHelp,ReferenceContext,vscode-languageserver-types/ReferenceContext,DocumentHighlight,vscode-languageserver-types/DocumentHighlight,SymbolInformation,vscode-languageserver-types/SymbolInformation,CodeLens,vscode-languageserver-types/CodeLens,CodeActionContext,vscode-languageserver-types/CodeActionContext,FormattingOptions,vscode-languageserver-types/FormattingOptions,DocumentLink,vscode-languageserver-types/DocumentLink,MarkupKind,vscode-languageserver-types/MarkupKind,SymbolKind,vscode-languageserver-types/SymbolKind,CompletionItemKind,vscode-languageserver-types/CompletionItemKind,CodeAction,vscode-languageserver-types/CodeAction,CodeActionKind,vscode-languageserver-types/CodeActionKind,DocumentSymbol,vscode-languageserver-types/DocumentSymbol,CompletionItemTag,vscode-languageserver-types/CompletionItemTag,DiagnosticTag,vscode-languageserver-types/DiagnosticTag,SymbolTag,vscode-languageserver-types/SymbolTag,InsertTextMode,vscode-languageserver-types/InsertTextMode,WorkspaceSymbol,vscode-languageserver-types/WorkspaceSymbol,WorkspaceFolder,vscode-languageserver-types/WorkspaceFolder,CodeActionTag,vscode-languageserver-types/CodeActionTag,TypeHierarchyItem,vscode-languageserver-types/TypeHierarchyItem" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/common/api.js", "line": 23 }, { "location": "lib/common/protocol.js", "line": 44 }, { "location": "lib/common/protocol.notebook.js", "line": 41 }, { "location": "src/common/api.ts", "line": 6 }, { "location": "src/common/api.ts", "line": 9 }, { "location": "src/common/protocol.$.ts", "line": 7 }, { "location": "src/common/protocol.callHierarchy.ts", "line": 7 }, { "location": "src/common/protocol.colorProvider.ts", "line": 7 }, { "location": "src/common/protocol.configuration.ts", "line": 7 }, { "location": "src/common/protocol.declaration.ts", "line": 7 }, { "location": "src/common/protocol.diagnostic.ts", "line": 7 }, { "location": "src/common/protocol.fileOperations.ts", "line": 7 }, { "location": "src/common/protocol.foldingRange.ts", "line": 7 }, { "location": "src/common/protocol.implementation.ts", "line": 7 }, { "location": "src/common/protocol.inlayHint.ts", "line": 7 }, { "location": "src/common/protocol.inlineCompletion.ts", "line": 6 }, { "location": "src/common/protocol.inlineValue.ts", "line": 6 }, { "location": "src/common/protocol.linkedEditingRange.ts", "line": 7 }, { "location": "src/common/protocol.notebook.ts", "line": 9 }, { "location": "src/common/protocol.notebook.ts", "line": 85 }, { "location": "src/common/protocol.notebook.ts", "line": 142 }, { "location": "src/common/protocol.notebook.ts", "line": 263 }, { "location": "src/common/protocol.notebook.ts", "line": 437 }, { "location": "src/common/protocol.progress.ts", "line": 7 }, { "location": "src/common/protocol.selectionRange.ts", "line": 7 }, { "location": "src/common/protocol.semanticTokens.ts", "line": 6 }, { "location": "src/common/protocol.showDocument.ts", "line": 7 }, { "location": "src/common/protocol.textDocumentContent.ts", "line": 6 }, { "location": "src/common/protocol.ts", "line": 18 }, { "location": "src/common/protocol.ts", "line": 2316 }, { "location": "src/common/protocol.typeDefinition.ts", "line": 7 }, { "location": "src/common/protocol.typeHierarchy.ts", "line": 7 }, { "location": "src/common/protocol.workspaceFolder.ts", "line": 6 } ] } } ], "dependencies": [ { "ref": "pkg:npm/vscode-jsonrpc@9.0.2", "dependsOn": [] }, { "ref": "pkg:npm/vscode-languageserver-types@3.18.3", "dependsOn": [] }, { "ref": "pkg:npm/vscode-languageserver-protocol@3.18.3", "dependsOn": [ "pkg:npm/vscode-jsonrpc@9.0.2", "pkg:npm/vscode-languageserver-types@3.18.3" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/vscode-languageserver-protocol@3.18.3" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-03T16:16:47Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 3, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'vscode-languageserver-protocol' with version '3.18.3'." } ] }