{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:593864d8-1ddf-48ef-8e07-816f120424a5", "version": 1, "metadata": { "timestamp": "2026-08-04T12:01:33Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "wide-align", "group": "", "version": "1.1.5", "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", "purl": "pkg:npm/wide-align@1.1.5", "bom-ref": "pkg:npm/wide-align@1.1.5", "author": "Rebecca Turner (http://re-becca.org/)", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/wide-align" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@alcalzone\\n@base2\\n@bcoe\\n@cspotcode\\n@gar\\n@isaacs\\n@istanbuljs\\n@jridgewell\\n@npmcli\\n@sigstore\\n@tapjs\\n@tsconfig\\n@tufjs\\n@types\\n@typescript" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@alcalzone/ansi-tokenize/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/@alcalzone/ansi-tokenize/package.json\\nnode_modules/@base2/pretty-print-object/package.json\\nnode_modules/@bcoe/v8-coverage/package.json\\nnode_modules/@cspotcode/source-map-support/package.json\\nnode_modules/@gar/promise-retry/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@isaacs/fs-minipass/package.json\\nnode_modules/@isaacs/ts-node-temp-fork-for-pr-2009/node_modules/diff/package.json\\nnode_modules/@isaacs/ts-node-temp-fork-for-pr-2009/package.json\\nnode_modules/@isaacs/which/package.json\\nnode_modules/@istanbuljs/schema/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@npmcli/agent/package.json\\nnode_modules/@npmcli/fs/package.json\\nnode_modules/@npmcli/git/package.json\\nnode_modules/@npmcli/installed-package-contents/package.json\\nnode_modules/@npmcli/node-gyp/package.json\\nnode_modules/@npmcli/package-json/package.json\\nnode_modules/@npmcli/promise-spawn/package.json\\nnode_modules/@npmcli/redact/package.json\\nnode_modules/@npmcli/run-script/package.json\\nnode_modules/@sigstore/bundle/package.json\\nnode_modules/@sigstore/core/package.json\\nnode_modules/@sigstore/protobuf-specs/package.json\\nnode_modules/@sigstore/sign/package.json\\nnode_modules/@sigstore/tuf/package.json\\nnode_modules/@sigstore/verify/package.json\\nnode_modules/@tapjs/after-each/package.json\\nnode_modules/@tapjs/after/package.json\\nnode_modules/@tapjs/asserts/package.json\\nnode_modules/@tapjs/before-each/package.json\\nnode_modules/@tapjs/before/package.json\\nnode_modules/@tapjs/chdir/package.json\\nnode_modules/@tapjs/config/package.json\\nnode_modules/@tapjs/core/package.json\\nnode_modules/@tapjs/error-serdes/package.json\\nnode_modules/@tapjs/filter/package.json\\nnode_modules/@tapjs/fixture/package.json\\nnode_modules/@tapjs/intercept/package.json\\nnode_modules/@tapjs/mock/package.json\\nnode_modules/@tapjs/node-serialize/package.json\\nnode_modules/@tapjs/processinfo/package.json\\nnode_modules/@tapjs/reporter/package.json\\nnode_modules/@tapjs/run/package.json\\nnode_modules/@tapjs/snapshot/package.json\\nnode_modules/@tapjs/spawn/package.json\\nnode_modules/@tapjs/stack/package.json\\nnode_modules/@tapjs/stdin/package.json\\nnode_modules/@tapjs/test/package.json\\nnode_modules/@tapjs/test/test-built/package.json\\nnode_modules/@tapjs/typescript/package.json\\nnode_modules/@tapjs/worker/package.json\\nnode_modules/@tsconfig/node14/package.json\\nnode_modules/@tsconfig/node16/package.json\\nnode_modules/@tsconfig/node18/package.json\\nnode_modules/@tsconfig/node20/package.json\\nnode_modules/@tufjs/canonical-json/package.json\\nnode_modules/@tufjs/models/package.json\\nnode_modules/@types/istanbul-lib-coverage/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@typescript/native-preview-linux-x64/package.json\\nnode_modules/@typescript/native-preview/package.json\\nnode_modules/@typescript/native-preview/vendor/vscode-jsonrpc/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/ansi-escapes/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/arg/package.json\\nnode_modules/async-hook-domain/package.json\\nnode_modules/auto-bind/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/c8/node_modules/foreground-child/package.json\\nnode_modules/c8/package.json\\nnode_modules/cacache/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/chownr/package.json\\nnode_modules/cli-boxes/package.json\\nnode_modules/cli-cursor/package.json\\nnode_modules/cli-truncate/node_modules/ansi-regex/package.json\\nnode_modules/cli-truncate/node_modules/emoji-regex/package.json\\nnode_modules/cli-truncate/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/cli-truncate/node_modules/slice-ansi/package.json\\nnode_modules/cli-truncate/node_modules/string-width/package.json\\nnode_modules/cli-truncate/node_modules/strip-ansi/package.json\\nnode_modules/cli-truncate/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/code-excerpt/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/convert-to-spaces/package.json\\nnode_modules/cross-spawn/node_modules/isexe/package.json\\nnode_modules/cross-spawn/node_modules/which/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/diff/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/env-paths/package.json\\nnode_modules/environment/package.json\\nnode_modules/es-toolkit/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/events-to-array/package.json\\nnode_modules/exponential-backoff/package.json\\nnode_modules/fdir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/fromentries/package.json\\nnode_modules/fs-minipass/package.json\\nnode_modules/function-loop/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-east-asian-width/package.json\\nnode_modules/glob/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/html-escaper/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http-proxy-agent/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ignore-walk/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/ini/package.json\\nnode_modules/ink/node_modules/ansi-regex/package.json\\nnode_modules/ink/node_modules/emoji-regex/package.json\\nnode_modules/ink/node_modules/signal-exit/package.json\\nnode_modules/ink/node_modules/string-width/package.json\\nnode_modules/ink/node_modules/strip-ansi/package.json\\nnode_modules/ink/package.json\\nnode_modules/ip-address/package.json\\nnode_modules/is-actual-promise/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-in-ci/package.json\\nnode_modules/is-plain-object/package.json\\nnode_modules/isexe/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/json-parse-even-better-errors/package.json\\nnode_modules/jsonc-simple-parser/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/loose-envify/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/make-error/package.json\\nnode_modules/make-fetch-happen/package.json\\nnode_modules/mimic-fn/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minipass-collect/package.json\\nnode_modules/minipass-fetch/package.json\\nnode_modules/minipass-flush/node_modules/minipass/package.json\\nnode_modules/minipass-flush/node_modules/yallist/package.json\\nnode_modules/minipass-flush/package.json\\nnode_modules/minipass-pipeline/node_modules/minipass/package.json\\nnode_modules/minipass-pipeline/node_modules/yallist/package.json\\nnode_modules/minipass-pipeline/package.json\\nnode_modules/minipass-sized/package.json\\nnode_modules/minipass/package.json\\nnode_modules/minizlib/package.json\\nnode_modules/mkdirp/dist/cjs/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/ms/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/node-gyp/package.json\\nnode_modules/node-options-to-argv/package.json\\nnode_modules/nopt/package.json\\nnode_modules/npm-bundled/package.json\\nnode_modules/npm-install-checks/package.json\\nnode_modules/npm-normalize-package-bin/package.json\\nnode_modules/npm-package-arg/package.json\\nnode_modules/npm-packlist/package.json\\nnode_modules/npm-pick-manifest/package.json\\nnode_modules/npm-registry-fetch/package.json\\nnode_modules/onetime/package.json\\nnode_modules/opener/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-map/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/pacote/package.json\\nnode_modules/patch-console/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pirates/package.json\\nnode_modules/polite-json/package.json\\nnode_modules/prismjs-terminal/package.json\\nnode_modules/prismjs/package.json\\nnode_modules/proc-log/package.json\\nnode_modules/process-on-spawn/package.json\\nnode_modules/react-dom/package.json\\nnode_modules/react-element-to-jsx-string/package.json\\nnode_modules/react-is/package.json\\nnode_modules/react-reconciler/package.json\\nnode_modules/react/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/reghex/package.json\\nnode_modules/resolve-import/package.json\\nnode_modules/restore-cursor/node_modules/signal-exit/package.json\\nnode_modules/restore-cursor/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/scheduler/package.json\\nnode_modules/semver/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/sigstore/package.json\\nnode_modules/slice-ansi/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/slice-ansi/package.json\\nnode_modules/smart-buffer/package.json\\nnode_modules/socks-proxy-agent/package.json\\nnode_modules/socks/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/ssri/package.json\\nnode_modules/stack-utils/package.json\\nnode_modules/string-length/node_modules/ansi-regex/package.json\\nnode_modules/string-length/node_modules/strip-ansi/package.json\\nnode_modules/string-length/package.json\\nnode_modules/string-width/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/sync-content/package.json\\nnode_modules/tap-parser/package.json\\nnode_modules/tap-yaml/package.json\\nnode_modules/tap/package.json\\nnode_modules/tar/package.json\\nnode_modules/tcompare/package.json\\nnode_modules/test-exclude/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/trivial-deferred/package.json\\nnode_modules/tshy/package.json\\nnode_modules/tuf-js/package.json\\nnode_modules/type-fest/package.json\\nnode_modules/typescript/package.json\\nnode_modules/undici-types/package.json\\nnode_modules/undici/package.json\\nnode_modules/uuid/package.json\\nnode_modules/v8-compile-cache-lib/package.json\\nnode_modules/v8-to-istanbul/node_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/v8-to-istanbul/package.json\\nnode_modules/validate-npm-package-name/package.json\\nnode_modules/walk-up-path/package.json\\nnode_modules/which/package.json\\nnode_modules/widest-line/node_modules/ansi-regex/package.json\\nnode_modules/widest-line/node_modules/emoji-regex/package.json\\nnode_modules/widest-line/node_modules/string-width/package.json\\nnode_modules/widest-line/node_modules/strip-ansi/package.json\\nnode_modules/widest-line/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi/node_modules/string-width/package.json\\nnode_modules/wrap-ansi/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/ws/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yaml-types/package.json\\nnode_modules/yaml/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/node_modules/yargs-parser/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json\\nnode_modules/yoga-layout/package.json" } ] }, "components": [ { "authors": [ { "name": "Meta Open Source" } ], "group": "", "name": "yoga-layout", "version": "3.2.1", "description": "An embeddable and performant flexbox layout engine with bindings for multiple languages", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yoga-layout@3.2.1", "externalReferences": [ { "type": "website", "url": "https://yogalayout.dev/" } ], "type": "library", "bom-ref": "pkg:npm/yoga-layout@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yoga-layout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yoga-layout/package.json" } ], "concludedValue": "node_modules/yoga-layout/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "21.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@21.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@21.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "18.1.0", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@18.1.0", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@18.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "22.0.0", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@22.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@22.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs/node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/widest-line/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/string-length/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/ink/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cli-truncate/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-truncate/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cli-truncate/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "8.2.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@8.2.2", "type": "library", "bom-ref": "pkg:npm/string-width@8.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "ImportedModules", "value": "string-width" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/yargs/node_modules/string-width/package.json" } ], "occurrences": [ { "location": "align.js", "line": 2 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.2.2", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@6.2.2", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/widest-line/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-length/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/ink/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cli-truncate/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-truncate/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cli-truncate/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Eemeli Aro " } ], "group": "", "name": "yaml-types", "version": "0.4.0", "description": "Useful JavaScript types for YAML", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml-types@0.4.0", "externalReferences": [ { "type": "website", "url": "https://eemeli.org/yaml/" } ], "type": "library", "bom-ref": "pkg:npm/yaml-types@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yaml-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yaml-types/package.json" } ], "concludedValue": "node_modules/yaml-types/package.json" } ] } }, { "authors": [ { "name": "Eemeli Aro " } ], "group": "", "name": "yaml", "version": "2.9.0", "description": "JavaScript parser and stringifier for YAML", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yaml@2.9.0", "externalReferences": [ { "type": "website", "url": "https://eemeli.org/yaml/" } ], "type": "library", "bom-ref": "pkg:npm/yaml@2.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yaml/package.json" } ], "concludedValue": "node_modules/yaml/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "5.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "8.21.2", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@8.21.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" }, { "type": "vcs", "url": "git+https://github.com/websockets/ws.git" } ], "type": "library", "bom-ref": "pkg:npm/ws@8.21.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "9.0.2", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@9.0.2", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@9.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "7.2.0", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@7.2.0", "type": "library", "bom-ref": "pkg:npm/string-width@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/string-width/package.json" }, { "name": "ImportedModules", "value": "string-width" }, { "name": "SrcFile", "value": "node_modules/widest-line/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/ink/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cli-truncate/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-truncate/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cli-truncate/node_modules/string-width/package.json" } ], "occurrences": [ { "location": "align.js", "line": 2 } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "10.6.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@10.6.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@10.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/widest-line/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/ink/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cli-truncate/node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-truncate/node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/cli-truncate/node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "widest-line", "version": "5.0.0", "description": "Get the visual width of the widest line in a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/widest-line@5.0.0", "type": "library", "bom-ref": "pkg:npm/widest-line@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/widest-line/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/widest-line/package.json" } ], "concludedValue": "node_modules/widest-line/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "which", "version": "6.0.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@6.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "walk-up-path", "version": "4.0.0", "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/walk-up-path@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/walk-up-path" } ], "type": "library", "bom-ref": "pkg:npm/walk-up-path@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/walk-up-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/walk-up-path/package.json" } ], "concludedValue": "node_modules/walk-up-path/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "validate-npm-package-name", "version": "7.0.2", "description": "Give me a string and I'll tell you if it's a valid npm package name", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-name@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/validate-npm-package-name" }, { "type": "vcs", "url": "git+https://github.com/npm/validate-npm-package-name.git" } ], "type": "library", "bom-ref": "pkg:npm/validate-npm-package-name@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-name/package.json" } ], "concludedValue": "node_modules/validate-npm-package-name/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "v8-to-istanbul", "version": "9.3.0", "description": "convert from v8 coverage format to istanbul's format", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/v8-to-istanbul@9.3.0", "type": "library", "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/v8-to-istanbul/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/v8-to-istanbul/package.json" } ], "concludedValue": "node_modules/v8-to-istanbul/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "description": "Trace the original position through a source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "node_modules/v8-to-istanbul/node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/v8-to-istanbul/node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/v8-to-istanbul/node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Andrew Bradley " } ], "group": "", "name": "v8-compile-cache-lib", "version": "3.0.1", "description": "Require hook for automatic V8 compile cache persistence", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/v8-compile-cache-lib@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cspotcode/v8-compile-cache-lib.git" } ], "type": "library", "bom-ref": "pkg:npm/v8-compile-cache-lib@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/v8-compile-cache-lib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/v8-compile-cache-lib/package.json" } ], "concludedValue": "node_modules/v8-compile-cache-lib/package.json" } ] } }, { "group": "", "name": "uuid", "version": "14.0.1", "description": "RFC9562 UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@14.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@14.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "group": "", "name": "undici-types", "version": "8.3.0", "description": "A stand-alone types package for Undici", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici-types@8.3.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici-types@8.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/undici-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici-types/package.json" } ], "concludedValue": "node_modules/undici-types/package.json" } ] } }, { "group": "", "name": "undici", "version": "6.28.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@6.28.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@6.28.0", "properties": [ { "name": "SrcFile", "value": "node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici/package.json" } ], "concludedValue": "node_modules/undici/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "4.41.0", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@4.41.0", "type": "library", "bom-ref": "pkg:npm/type-fest@4.41.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "", "name": "tuf-js", "version": "4.1.0", "description": "JavaScript implementation of The Update Framework (TUF)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tuf-js@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme" }, { "type": "vcs", "url": "git+https://github.com/theupdateframework/tuf-js.git" } ], "type": "framework", "bom-ref": "pkg:npm/tuf-js@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tuf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tuf-js/package.json" } ], "concludedValue": "node_modules/tuf-js/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "tshy", "version": "3.3.2", "description": "TypeScript HYbridizer - Hybrid (CommonJS/ESM) TypeScript node package builder", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tshy@3.3.2", "type": "library", "bom-ref": "pkg:npm/tshy@3.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tshy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tshy/package.json" } ], "concludedValue": "node_modules/tshy/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "trivial-deferred", "version": "2.0.0", "description": "The most dead-simple trivial Deferred implementation", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/trivial-deferred@2.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/trivial-deferred.git" } ], "type": "library", "bom-ref": "pkg:npm/trivial-deferred@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/trivial-deferred/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/trivial-deferred/package.json" } ], "concludedValue": "node_modules/trivial-deferred/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/tinyglobby/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "test-exclude", "version": "8.0.0", "description": "test for inclusion or exclusion of paths using globs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/test-exclude@8.0.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/test-exclude.git" } ], "type": "library", "bom-ref": "pkg:npm/test-exclude@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/package.json" } ], "concludedValue": "node_modules/test-exclude/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "tcompare", "version": "9.3.2", "description": "A comprehensive comparison library, for use in test frameworks", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tcompare@9.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/tcompare#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "framework", "bom-ref": "pkg:npm/tcompare@9.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tcompare/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tcompare/package.json" } ], "concludedValue": "node_modules/tcompare/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "", "name": "tar", "version": "7.5.22", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@7.5.22", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@7.5.22", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "tap-yaml", "version": "4.4.2", "description": "Yaml handling for TAP parsers and generators", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap-yaml@4.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/yaml#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/tap-yaml@4.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-yaml/package.json" } ], "concludedValue": "node_modules/tap-yaml/package.json" } ] } }, { "group": "", "name": "tap-parser", "version": "18.3.4", "description": "parse the test anything protocol", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap-parser@18.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/parser#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/tap-parser@18.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/tap-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap-parser/package.json" } ], "concludedValue": "node_modules/tap-parser/package.json" } ] }, "tags": [ "parse", "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "tap", "version": "21.7.5", "description": "A Test-Anything-Protocol library for JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tap@21.7.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/tap#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/tap@21.7.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tap/package.json" } ], "concludedValue": "node_modules/tap/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "sync-content", "version": "2.0.4", "description": "Synchronize the contents of one folder to another location, only copying files if contents differ.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sync-content@2.0.4", "type": "library", "bom-ref": "pkg:npm/sync-content@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/sync-content/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sync-content/package.json" } ], "concludedValue": "node_modules/sync-content/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "ImportedModules", "value": "string-width" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ], "occurrences": [ { "location": "align.js", "line": 2 } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-length", "version": "6.0.0", "description": "Get the real length of a string - by correctly counting astral symbols and ignoring ansi escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-length@6.0.0", "type": "library", "bom-ref": "pkg:npm/string-length@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-length/package.json" } ], "concludedValue": "node_modules/string-length/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "James Talmage (github.com/jamestalmage)" } ], "group": "", "name": "stack-utils", "version": "2.0.6", "description": "Captures and cleans stack traces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stack-utils@2.0.6", "type": "library", "bom-ref": "pkg:npm/stack-utils@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/stack-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stack-utils/package.json" } ], "concludedValue": "node_modules/stack-utils/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ssri", "version": "13.0.1", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ssri@13.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ssri.git" } ], "type": "library", "bom-ref": "pkg:npm/ssri@13.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ssri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ssri/package.json" } ], "concludedValue": "node_modules/ssri/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.23", "description": "A list of SPDX license identifiers", "scope": "optional", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.23", "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.23", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "4.0.0", "description": "parse SPDX license expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@4.0.0", "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.5.0", "description": "list of SPDX standard license exceptions", "scope": "optional", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.5.0", "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/spdx-exceptions/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "socks-proxy-agent", "version": "8.0.5", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks-proxy-agent@8.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/socks-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/socks-proxy-agent/package.json" } ], "concludedValue": "node_modules/socks-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "socks", "version": "2.8.9", "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks@2.8.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks/" }, { "type": "vcs", "url": "git+https://github.com/JoshGlazebrook/socks.git" } ], "type": "library", "bom-ref": "pkg:npm/socks@2.8.9", "properties": [ { "name": "SrcFile", "value": "node_modules/socks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/socks/package.json" } ], "concludedValue": "node_modules/socks/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "smart-buffer", "version": "4.2.0", "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/smart-buffer@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/smart-buffer@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/smart-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/smart-buffer/package.json" } ], "concludedValue": "node_modules/smart-buffer/package.json" } ] } }, { "group": "", "name": "slice-ansi", "version": "7.1.2", "description": "Slice a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slice-ansi@7.1.2", "type": "library", "bom-ref": "pkg:npm/slice-ansi@7.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/slice-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slice-ansi/package.json" } ], "concludedValue": "node_modules/slice-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "5.1.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@5.1.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slice-ansi/node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slice-ansi/node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/slice-ansi/node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "", "name": "sigstore", "version": "4.1.1", "description": "code-signing for npm packages", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigstore@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/sigstore@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sigstore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sigstore/package.json" } ], "concludedValue": "node_modules/sigstore/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "4.1.0", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "3.0.0", "description": "Regular expression for matching a shebang line", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "2.0.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "group": "", "name": "scheduler", "version": "0.23.2", "description": "Cooperative scheduler for the browser environment.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/scheduler@0.23.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "library", "bom-ref": "pkg:npm/scheduler@0.23.2", "properties": [ { "name": "SrcFile", "value": "node_modules/scheduler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/scheduler/package.json" } ], "concludedValue": "node_modules/scheduler/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "6.1.3", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@6.1.3", "type": "library", "bom-ref": "pkg:npm/rimraf@6.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "restore-cursor", "version": "4.0.0", "description": "Gracefully restore the CLI cursor on exit", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/restore-cursor@4.0.0", "type": "library", "bom-ref": "pkg:npm/restore-cursor@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/restore-cursor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/restore-cursor/package.json" } ], "concludedValue": "node_modules/restore-cursor/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "3.0.7", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@3.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit" }, { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/restore-cursor/node_modules/signal-exit/package.json" }, { "name": "SrcFile", "value": "node_modules/ink/node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ink/node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/ink/node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "resolve-import", "version": "2.4.0", "description": "Look up the file that an `import()` statement will resolve to, possibly relative to a given parentURL", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-import@2.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/resolve-import.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve-import@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-import/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-import/package.json" } ], "concludedValue": "node_modules/resolve-import/package.json" } ] } }, { "authors": [ { "name": "Phil Pluckthun " } ], "group": "", "name": "reghex", "version": "3.0.2", "description": "The magical sticky regex-based parser generator 🧙", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/reghex@3.0.2", "type": "library", "bom-ref": "pkg:npm/reghex@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/reghex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/reghex/package.json" } ], "concludedValue": "node_modules/reghex/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "4.1.2", "description": "Recursive version of fs.readdir with small RAM & CPU footprint.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readdirp@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] } }, { "group": "", "name": "react-reconciler", "version": "0.29.2", "description": "React package for creating custom renderers.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-reconciler@0.29.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-reconciler@0.29.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react-reconciler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-reconciler/package.json" } ], "concludedValue": "node_modules/react-reconciler/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react-is", "version": "18.1.0", "description": "Brand checking of React Elements.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-is@18.1.0", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-is@18.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-is/package.json" } ], "concludedValue": "node_modules/react-is/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Algolia" }, { "name": " Inc. (https://github.com/algolia)" } ], "group": "", "name": "react-element-to-jsx-string", "version": "15.0.0", "description": "Turn a ReactElement into the corresponding JSX string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-element-to-jsx-string@15.0.0", "type": "framework", "bom-ref": "pkg:npm/react-element-to-jsx-string@15.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/react-element-to-jsx-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-element-to-jsx-string/package.json" } ], "concludedValue": "node_modules/react-element-to-jsx-string/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react-dom", "version": "18.3.1", "description": "React package for working with the DOM.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-dom@18.3.1", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-dom@18.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/react-dom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-dom/package.json" } ], "concludedValue": "node_modules/react-dom/package.json" } ] }, "tags": [ "framework" ] }, { "group": "", "name": "react", "version": "18.3.1", "description": "React is a JavaScript library for building user interfaces.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react@18.3.1", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react@18.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react/package.json" } ], "concludedValue": "node_modules/react/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Corey Farrell" } ], "group": "", "name": "process-on-spawn", "version": "1.1.0", "description": "Execute callbacks when child processes are spawned", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-on-spawn@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cfware/process-on-spawn#readme" }, { "type": "vcs", "url": "git+https://github.com/cfware/process-on-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/process-on-spawn@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/process-on-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-on-spawn/package.json" } ], "concludedValue": "node_modules/process-on-spawn/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "proc-log", "version": "6.1.0", "description": "just emit 'log' events on the process object", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proc-log@6.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/proc-log.git" } ], "type": "library", "bom-ref": "pkg:npm/proc-log@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proc-log/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proc-log/package.json" } ], "concludedValue": "node_modules/proc-log/package.json" } ] }, "tags": [ "emit" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "prismjs-terminal", "version": "1.2.4", "description": "PrismJS syntax highlighting for the terminal", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prismjs-terminal@1.2.4", "type": "library", "bom-ref": "pkg:npm/prismjs-terminal@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/prismjs-terminal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prismjs-terminal/package.json" } ], "concludedValue": "node_modules/prismjs-terminal/package.json" } ] } }, { "authors": [ { "name": "Lea Verou" } ], "group": "", "name": "prismjs", "version": "1.30.0", "description": "Lightweight, robust, elegant syntax highlighting. A spin-off project from Dabblet.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prismjs@1.30.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/PrismJS/prism.git" } ], "type": "library", "bom-ref": "pkg:npm/prismjs@1.30.0", "properties": [ { "name": "SrcFile", "value": "node_modules/prismjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prismjs/package.json" } ], "concludedValue": "node_modules/prismjs/package.json" } ] } }, { "group": "", "name": "polite-json", "version": "5.0.0", "description": "JSON.parse and stringify with better errors that respects formatting", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/polite-json@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/polite-json" } ], "type": "library", "bom-ref": "pkg:npm/polite-json@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/polite-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/polite-json/package.json" } ], "concludedValue": "node_modules/polite-json/package.json" } ] } }, { "authors": [ { "name": "Ari Porad (http://ariporad.com)" } ], "group": "", "name": "pirates", "version": "4.0.7", "description": "Properly hijack require, i.e., properly define require hooks and customizations", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pirates@4.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/danez/pirates#readme" }, { "type": "vcs", "url": "https://github.com/danez/pirates.git" } ], "type": "library", "bom-ref": "pkg:npm/pirates@4.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/pirates/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pirates/package.json" } ], "concludedValue": "node_modules/pirates/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.5", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "2.0.2", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-scurry@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "3.1.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "vdemedes (https://github.com/vadimdemedes)" } ], "group": "", "name": "patch-console", "version": "2.0.0", "description": "Patch console methods to intercept output", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/patch-console@2.0.0", "type": "library", "bom-ref": "pkg:npm/patch-console@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/patch-console/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/patch-console/package.json" } ], "concludedValue": "node_modules/patch-console/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "pacote", "version": "21.5.1", "description": "JavaScript package downloader", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pacote@21.5.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/pacote.git" } ], "type": "library", "bom-ref": "pkg:npm/pacote@21.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pacote/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pacote/package.json" } ], "concludedValue": "node_modules/pacote/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "package-json-from-dist", "version": "1.0.1", "description": "Load the local package.json from either src or dist folder", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/package-json-from-dist@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/package-json-from-dist.git" } ], "type": "library", "bom-ref": "pkg:npm/package-json-from-dist@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package-json-from-dist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-json-from-dist/package.json" } ], "concludedValue": "node_modules/package-json-from-dist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "7.0.6", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-map@7.0.6", "type": "library", "bom-ref": "pkg:npm/p-map@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/p-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-map/package.json" } ], "concludedValue": "node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "opener", "version": "1.5.2", "description": "Opens stuff, like webpages and files and executables, cross-platform", "scope": "optional", "licenses": [ { "expression": "WTFPL OR MIT" } ], "purl": "pkg:npm/opener@1.5.2", "type": "library", "bom-ref": "pkg:npm/opener@1.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/opener/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/opener/package.json" } ], "concludedValue": "node_modules/opener/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "onetime", "version": "5.1.2", "description": "Ensure a function is only called once", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/onetime@5.1.2", "type": "library", "bom-ref": "pkg:npm/onetime@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/onetime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/onetime/package.json" } ], "concludedValue": "node_modules/onetime/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-registry-fetch", "version": "19.1.1", "description": "Fetch-based http client for use with npm registry APIs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-registry-fetch@19.1.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-registry-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-registry-fetch@19.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-registry-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-registry-fetch/package.json" } ], "concludedValue": "node_modules/npm-registry-fetch/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-pick-manifest", "version": "11.0.3", "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-pick-manifest@11.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-pick-manifest.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-pick-manifest@11.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-pick-manifest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-pick-manifest/package.json" } ], "concludedValue": "node_modules/npm-pick-manifest/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-packlist", "version": "10.0.4", "description": "Get a list of the files to add from a folder into an npm package", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-packlist@10.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-packlist.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-packlist@10.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-packlist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-packlist/package.json" } ], "concludedValue": "node_modules/npm-packlist/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-package-arg", "version": "13.0.2", "description": "Parse the things that can be arguments to `npm install`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-package-arg@13.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-package-arg" }, { "type": "vcs", "url": "git+https://github.com/npm/npm-package-arg.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-package-arg@13.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-package-arg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-package-arg/package.json" } ], "concludedValue": "node_modules/npm-package-arg/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-normalize-package-bin", "version": "5.0.0", "description": "Turn any flavor of allowable package.json bin into a normalized object", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-normalize-package-bin@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-normalize-package-bin.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-normalize-package-bin@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-normalize-package-bin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-normalize-package-bin/package.json" } ], "concludedValue": "node_modules/npm-normalize-package-bin/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-install-checks", "version": "8.0.0", "description": "Check the engines and platform fields in package.json", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-install-checks@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-install-checks.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-install-checks@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-install-checks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-install-checks/package.json" } ], "concludedValue": "node_modules/npm-install-checks/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-bundled", "version": "5.0.0", "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-bundled@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-bundled.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-bundled@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-bundled/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-bundled/package.json" } ], "concludedValue": "node_modules/npm-bundled/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "nopt", "version": "9.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@9.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "group": "", "name": "node-options-to-argv", "version": "1.0.0", "description": "Convert a NODE_OPTIONS environment variable to an argv list, or vice versa", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-options-to-argv@1.0.0", "type": "library", "bom-ref": "pkg:npm/node-options-to-argv@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-options-to-argv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-options-to-argv/package.json" } ], "concludedValue": "node_modules/node-options-to-argv/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "node-gyp", "version": "12.4.0", "description": "Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-gyp@12.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp@12.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/package.json" } ], "concludedValue": "node_modules/node-gyp/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "1.0.0", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@1.0.0", "type": "library", "bom-ref": "pkg:npm/negotiator@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "group": "", "name": "mkdirp", "version": "3.0.1", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "SrcFile", "value": "node_modules/mkdirp/dist/cjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/dist/cjs/package.json" } ], "concludedValue": "node_modules/mkdirp/dist/cjs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "3.1.0", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@3.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minizlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minizlib/package.json" } ], "concludedValue": "node_modules/minizlib/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-sized", "version": "2.0.0", "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-sized@2.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-sized.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-sized@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-sized/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-sized/package.json" } ], "concludedValue": "node_modules/minipass-sized/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-pipeline", "version": "1.2.4", "description": "create a pipeline of streams using Minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-pipeline@1.2.4", "type": "library", "bom-ref": "pkg:npm/minipass-pipeline@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-pipeline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-pipeline/package.json" } ], "concludedValue": "node_modules/minipass-pipeline/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "4.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-pipeline/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-flush/node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/minipass-flush/node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "3.3.6", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@3.3.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@3.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-pipeline/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-flush/node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass-flush/node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-flush", "version": "1.0.7", "description": "A Minipass stream that calls a flush function before emitting 'end'", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-flush@1.0.7", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-flush.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-flush@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-flush/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/package.json" } ], "concludedValue": "node_modules/minipass-flush/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "minipass-fetch", "version": "5.0.2", "description": "An implementation of window.fetch in Node.js using Minipass streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-fetch@5.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/minipass-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-fetch@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-fetch/package.json" } ], "concludedValue": "node_modules/minipass-fetch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-collect", "version": "2.0.1", "description": "A Minipass stream that collects all the data into a single chunk", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-collect@2.0.1", "type": "library", "bom-ref": "pkg:npm/minipass-collect@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-collect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-collect/package.json" } ], "concludedValue": "node_modules/minipass-collect/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.6", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.6", "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-fn", "version": "2.1.0", "description": "Make a function mimic another one", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-fn@2.1.0", "type": "library", "bom-ref": "pkg:npm/mimic-fn@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-fn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-fn/package.json" } ], "concludedValue": "node_modules/mimic-fn/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "make-fetch-happen", "version": "15.0.6", "description": "Opinionated, caching, retrying fetch client", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-fetch-happen@15.0.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/make-fetch-happen.git" } ], "type": "library", "bom-ref": "pkg:npm/make-fetch-happen@15.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/make-fetch-happen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-fetch-happen/package.json" } ], "concludedValue": "node_modules/make-fetch-happen/package.json" } ] } }, { "authors": [ { "name": "Julien Fontanet " } ], "group": "", "name": "make-error", "version": "1.3.6", "description": "Make your own error types!", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-error@1.3.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JsCommunity/make-error" }, { "type": "vcs", "url": "git://github.com/JsCommunity/make-error.git" } ], "type": "library", "bom-ref": "pkg:npm/make-error@1.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/make-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-error/package.json" } ], "concludedValue": "node_modules/make-error/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "4.0.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@4.0.0", "type": "library", "bom-ref": "pkg:npm/make-dir@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "11.5.2", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@11.5.2", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Andres Suarez " } ], "group": "", "name": "loose-envify", "version": "1.4.0", "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/loose-envify@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zertosh/loose-envify" }, { "type": "vcs", "url": "git://github.com/zertosh/loose-envify.git" } ], "type": "library", "bom-ref": "pkg:npm/loose-envify@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/loose-envify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loose-envify/package.json" } ], "concludedValue": "node_modules/loose-envify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "1.3.1", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "jsonc-simple-parser", "version": "3.0.0", "description": "A simple JSON parser that supports comments and optional trailing commas.", "scope": "optional", "purl": "pkg:npm/jsonc-simple-parser@3.0.0", "type": "library", "bom-ref": "pkg:npm/jsonc-simple-parser@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonc-simple-parser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonc-simple-parser/package.json" } ], "concludedValue": "node_modules/jsonc-simple-parser/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "json-parse-even-better-errors", "version": "5.0.0", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-even-better-errors@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/json-parse-even-better-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/json-parse-even-better-errors@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-even-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-even-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-even-better-errors/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "4.0.0", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@4.0.0", "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "jackspeak", "version": "4.2.3", "description": "A very strict and proper argument parser.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jackspeak@4.2.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/jackspeak.git" } ], "type": "library", "bom-ref": "pkg:npm/jackspeak@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jackspeak/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jackspeak/package.json" } ], "concludedValue": "node_modules/jackspeak/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-reports", "version": "3.2.0", "description": "istanbul reports", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-reports@3.2.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-reports@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-reports/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-reports/package.json" } ], "concludedValue": "node_modules/istanbul-reports/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-report", "version": "3.0.1", "description": "Base reporting library for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-report@3.0.1", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-coverage", "version": "3.2.2", "description": "Data library for istanbul coverage objects", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-coverage@3.2.2", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "4.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@4.0.0", "type": "library", "bom-ref": "pkg:npm/isexe@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-plain-object", "version": "5.0.0", "description": "Returns true if an object was created by the `Object` constructor, or Object.create(null).", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-object@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-plain-object" } ], "type": "library", "bom-ref": "pkg:npm/is-plain-object@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-object/package.json" } ], "concludedValue": "node_modules/is-plain-object/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-in-ci", "version": "1.0.0", "description": "Check if the process is running in a Continuous Integration (CI) environment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-in-ci@1.0.0", "type": "library", "bom-ref": "pkg:npm/is-in-ci@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-in-ci/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-in-ci/package.json" } ], "concludedValue": "node_modules/is-in-ci/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "is-actual-promise", "version": "1.0.2", "description": "Verify if something is a Promise", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-actual-promise@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/is-actual-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/is-actual-promise@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-actual-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-actual-promise/package.json" } ], "concludedValue": "node_modules/is-actual-promise/package.json" } ] } }, { "authors": [ { "name": "Beau Gunderson (https://beaugunderson.com/)" } ], "group": "", "name": "ip-address", "version": "10.4.0", "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ip-address@10.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/beaugunderson/ip-address.git" } ], "type": "library", "bom-ref": "pkg:npm/ip-address@10.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ip-address/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ip-address/package.json" } ], "concludedValue": "node_modules/ip-address/package.json" } ] } }, { "authors": [ { "name": "Vadim Demedes (https://github.com/vadimdemedes)" } ], "group": "", "name": "ink", "version": "5.2.1", "description": "React for CLI", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ink@5.2.1", "type": "library", "bom-ref": "pkg:npm/ink@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ink/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ink/package.json" } ], "concludedValue": "node_modules/ink/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ini", "version": "6.0.0", "description": "An ini encoder/decoder for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@6.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ini/package.json" } ], "concludedValue": "node_modules/ini/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "indent-string", "version": "5.0.0", "description": "Indent each line in a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/indent-string@5.0.0", "type": "library", "bom-ref": "pkg:npm/indent-string@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/indent-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indent-string/package.json" } ], "concludedValue": "node_modules/indent-string/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ignore-walk", "version": "8.0.0", "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore-walk@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ignore-walk.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore-walk@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore-walk/package.json" } ], "concludedValue": "node_modules/ignore-walk/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.7.3", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/iconv-lite" }, { "type": "vcs", "url": "https://github.com/pillarjs/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "7.0.6", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "7.0.2", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-proxy-agent@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/http-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Kornel Lesiński (https://kornel.ski/)" } ], "group": "", "name": "http-cache-semantics", "version": "4.2.0", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-cache-semantics@4.2.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/kornelski/http-cache-semantics.git" } ], "type": "library", "bom-ref": "pkg:npm/http-cache-semantics@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/http-cache-semantics/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "html-escaper", "version": "2.0.2", "description": "fast and safe way to escape and unescape &<>'\" chars", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/html-escaper@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper" }, { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper.git" } ], "type": "library", "bom-ref": "pkg:npm/html-escaper@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/html-escaper/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-escaper/package.json" } ], "concludedValue": "node_modules/html-escaper/package.json" } ] }, "tags": [ "escape", "unescape" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "hosted-git-info", "version": "9.0.3", "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@9.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@9.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-east-asian-width", "version": "1.6.0", "description": "Determine the East Asian Width of a Unicode character", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-east-asian-width@1.6.0", "type": "library", "bom-ref": "pkg:npm/get-east-asian-width@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-east-asian-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-east-asian-width/package.json" } ], "concludedValue": "node_modules/get-east-asian-width/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "function-loop", "version": "4.0.0", "description": "Run a list of functions in order in a given object context. The functions can be callback-taking or promise-returning.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-loop@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/function-loop#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/function-loop.git" } ], "type": "library", "bom-ref": "pkg:npm/function-loop@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/function-loop/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-loop/package.json" } ], "concludedValue": "node_modules/function-loop/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "fs-minipass", "version": "3.0.3", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-minipass@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass#readme" }, { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-minipass@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-minipass/package.json" } ], "concludedValue": "node_modules/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "fromentries", "version": "1.3.2", "description": "Object.fromEntries() ponyfill (in 6 lines)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fromentries@1.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/fromentries" }, { "type": "vcs", "url": "git://github.com/feross/fromentries.git" } ], "type": "library", "bom-ref": "pkg:npm/fromentries@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fromentries/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fromentries/package.json" } ], "concludedValue": "node_modules/fromentries/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "4.0.3", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@4.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "5.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@5.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "thecodrr " } ], "group": "", "name": "fdir", "version": "6.5.0", "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fdir@6.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thecodrr/fdir#readme" }, { "type": "vcs", "url": "git+https://github.com/thecodrr/fdir.git" } ], "type": "library", "bom-ref": "pkg:npm/fdir@6.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fdir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fdir/package.json" } ], "concludedValue": "node_modules/fdir/package.json" } ] } }, { "authors": [ { "name": "Sami Sayegh" } ], "group": "", "name": "exponential-backoff", "version": "3.1.3", "description": "A utility that allows retrying a function with an exponential delay between attempts.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/exponential-backoff@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/coveooss/exponential-backoff#readme" }, { "type": "vcs", "url": "git+https://github.com/coveooss/exponential-backoff.git" } ], "type": "library", "bom-ref": "pkg:npm/exponential-backoff@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/exponential-backoff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exponential-backoff/package.json" } ], "concludedValue": "node_modules/exponential-backoff/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "events-to-array", "version": "2.0.3", "description": "Put a bunch of emitted events in an array, for testing.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/events-to-array@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/events-to-array" }, { "type": "vcs", "url": "https://github.com/isaacs/events-to-array" } ], "type": "library", "bom-ref": "pkg:npm/events-to-array@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/events-to-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/events-to-array/package.json" } ], "concludedValue": "node_modules/events-to-array/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "2.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@2.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "group": "", "name": "es-toolkit", "version": "1.50.0", "description": "A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-toolkit@1.50.0", "externalReferences": [ { "type": "website", "url": "https://es-toolkit.dev" }, { "type": "vcs", "url": "https://github.com/toss/es-toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/es-toolkit@1.50.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-toolkit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-toolkit/package.json" } ], "concludedValue": "node_modules/es-toolkit/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "environment", "version": "1.1.0", "description": "Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/environment@1.1.0", "type": "library", "bom-ref": "pkg:npm/environment@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/environment/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/environment/package.json" } ], "concludedValue": "node_modules/environment/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "env-paths", "version": "2.2.1", "description": "Get paths for storing things like data, config, cache, etc", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-paths@2.2.1", "type": "library", "bom-ref": "pkg:npm/env-paths@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/env-paths/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-paths/package.json" } ], "concludedValue": "node_modules/env-paths/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "group": "", "name": "diff", "version": "8.0.4", "description": "A JavaScript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@8.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@8.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/node_modules/which/package.json" } ], "concludedValue": "node_modules/cross-spawn/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/node_modules/isexe/package.json" } ], "concludedValue": "node_modules/cross-spawn/node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Vadim Demedes " } ], "group": "", "name": "convert-to-spaces", "version": "2.0.1", "description": "Convert tabs to spaces in a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-to-spaces@2.0.1", "type": "library", "bom-ref": "pkg:npm/convert-to-spaces@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-to-spaces/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-to-spaces/package.json" } ], "concludedValue": "node_modules/convert-to-spaces/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "2.0.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "vdemedes (github.com/vadimdemedes)" } ], "group": "", "name": "code-excerpt", "version": "4.0.0", "description": "Extract code excerpts", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/code-excerpt@4.0.0", "type": "library", "bom-ref": "pkg:npm/code-excerpt@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/code-excerpt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/code-excerpt/package.json" } ], "concludedValue": "node_modules/code-excerpt/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "9.0.1", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@9.0.1", "type": "library", "bom-ref": "pkg:npm/cliui@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "cli-truncate", "version": "4.0.0", "description": "Truncate a string to a specific width in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-truncate@4.0.0", "type": "library", "bom-ref": "pkg:npm/cli-truncate@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-truncate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-truncate/package.json" } ], "concludedValue": "node_modules/cli-truncate/package.json" } ] } }, { "group": "", "name": "slice-ansi", "version": "5.0.0", "description": "Slice a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slice-ansi@5.0.0", "type": "library", "bom-ref": "pkg:npm/slice-ansi@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-truncate/node_modules/slice-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-truncate/node_modules/slice-ansi/package.json" } ], "concludedValue": "node_modules/cli-truncate/node_modules/slice-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "4.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@4.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-truncate/node_modules/is-fullwidth-code-point/package.json" }, { "name": "SrcFile", "value": "node_modules/@alcalzone/ansi-tokenize/node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@alcalzone/ansi-tokenize/node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/@alcalzone/ansi-tokenize/node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "cli-cursor", "version": "4.0.0", "description": "Toggle the CLI cursor", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-cursor@4.0.0", "type": "library", "bom-ref": "pkg:npm/cli-cursor@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-cursor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-cursor/package.json" } ], "concludedValue": "node_modules/cli-cursor/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "cli-boxes", "version": "3.0.0", "description": "Boxes for use in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-boxes@3.0.0", "type": "library", "bom-ref": "pkg:npm/cli-boxes@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-boxes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-boxes/package.json" } ], "concludedValue": "node_modules/cli-boxes/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "3.0.0", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@3.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chownr/package.json" } ], "concludedValue": "node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "4.0.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chokidar@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "group": "", "name": "chalk", "version": "5.6.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@5.6.2", "type": "library", "bom-ref": "pkg:npm/chalk@5.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "cacache", "version": "20.0.4", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacache@20.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cacache.git" } ], "type": "library", "bom-ref": "pkg:npm/cacache@20.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/package.json" } ], "concludedValue": "node_modules/cacache/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "c8", "version": "12.0.0", "description": "output coverage reports using Node.js' built in coverage", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/c8@12.0.0", "type": "library", "bom-ref": "pkg:npm/c8@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/package.json" } ], "concludedValue": "node_modules/c8/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "3.3.1", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@3.3.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/node_modules/foreground-child/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/c8/node_modules/foreground-child/package.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.9", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@5.0.9", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "balanced-match", "version": "4.0.4", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "auto-bind", "version": "5.0.1", "description": "Automatically bind methods to their class instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/auto-bind@5.0.1", "type": "library", "bom-ref": "pkg:npm/auto-bind@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/auto-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/auto-bind/package.json" } ], "concludedValue": "node_modules/auto-bind/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "async-hook-domain", "version": "4.0.1", "description": "An implementation of Domain-like error handling, built on async_hooks", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async-hook-domain@4.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/tapjs/async-hook-domain.git" } ], "type": "library", "bom-ref": "pkg:npm/async-hook-domain@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/async-hook-domain/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async-hook-domain/package.json" } ], "concludedValue": "node_modules/async-hook-domain/package.json" } ] } }, { "authors": [ { "name": "Josh Junon " } ], "group": "", "name": "arg", "version": "4.1.3", "description": "Another simple argument parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/arg@4.1.3", "type": "library", "bom-ref": "pkg:npm/arg@4.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/arg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/arg/package.json" } ], "concludedValue": "node_modules/arg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-escapes", "version": "7.3.0", "description": "ANSI escape codes for manipulating the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-escapes@7.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-escapes@7.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-escapes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-escapes/package.json" } ], "concludedValue": "node_modules/ansi-escapes/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "7.1.4", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agent-base@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/agent-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/agent-base/package.json" } ] } }, { "group": "", "name": "acorn-walk", "version": "8.3.5", "description": "ECMAScript (ESTree) AST walker", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-walk@8.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@8.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-walk/package.json" } ], "concludedValue": "node_modules/acorn-walk/package.json" } ] } }, { "group": "", "name": "acorn", "version": "8.18.0", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@8.18.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "git+https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "abbrev", "version": "4.0.0", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "@typescript", "name": "native-preview-linux-x64", "version": "7.0.0-dev.20260707.2", "description": "Preview CLI and JS API for the native TypeScript compiler port", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40typescript/native-preview-linux-x64@7.0.0-dev.20260707.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/typescript-go.git" } ], "type": "library", "bom-ref": "pkg:npm/@typescript/native-preview-linux-x64@7.0.0-dev.20260707.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@typescript/native-preview-linux-x64/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@typescript/native-preview-linux-x64/package.json" } ], "concludedValue": "node_modules/@typescript/native-preview-linux-x64/package.json" } ] }, "tags": [ "api", "cli", "native" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "@typescript", "name": "native-preview", "version": "7.0.0-dev.20260707.2", "description": "Preview CLI and JS API for the native TypeScript compiler port", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40typescript/native-preview@7.0.0-dev.20260707.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/typescript-go.git" } ], "type": "library", "bom-ref": "pkg:npm/@typescript/native-preview@7.0.0-dev.20260707.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@typescript/native-preview/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@typescript/native-preview/package.json" } ], "concludedValue": "node_modules/@typescript/native-preview/package.json" } ] }, "tags": [ "api", "cli", "native" ] }, { "authors": [ { "name": "Microsoft Corporation" } ], "group": "", "name": "vscode-jsonrpc", "version": "9.0.0", "description": "A json rpc implementation over streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vscode-jsonrpc@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Microsoft/vscode-languageserver-node.git" } ], "type": "library", "bom-ref": "pkg:npm/vscode-jsonrpc@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@typescript/native-preview/vendor/vscode-jsonrpc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@typescript/native-preview/vendor/vscode-jsonrpc/package.json" } ], "concludedValue": "node_modules/@typescript/native-preview/vendor/vscode-jsonrpc/package.json" } ] }, "tags": [ "json", "rpc" ] }, { "group": "@types", "name": "node", "version": "26.1.2", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@26.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@26.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "istanbul-lib-coverage", "version": "2.0.6", "description": "TypeScript definitions for istanbul-lib-coverage", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/istanbul-lib-coverage" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/@types/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@tufjs", "name": "models", "version": "4.1.0", "description": "TUF metadata models", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tufjs/models@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme" }, { "type": "vcs", "url": "git+https://github.com/theupdateframework/tuf-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@tufjs/models@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@tufjs/models/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tufjs/models/package.json" } ], "concludedValue": "node_modules/@tufjs/models/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@tufjs", "name": "canonical-json", "version": "2.0.0", "description": "OLPC JSON canonicalization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tufjs/canonical-json@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/canonical-json#readme" }, { "type": "vcs", "url": "git+https://github.com/theupdateframework/tuf-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@tufjs/canonical-json@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@tufjs/canonical-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tufjs/canonical-json/package.json" } ], "concludedValue": "node_modules/@tufjs/canonical-json/package.json" } ] }, "tags": [ "json" ] }, { "group": "@tsconfig", "name": "node20", "version": "20.1.9", "description": "A base TSConfig for working with Node 20.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node20@20.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tsconfig/bases.git" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node20@20.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@tsconfig/node20/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tsconfig/node20/package.json" } ], "concludedValue": "node_modules/@tsconfig/node20/package.json" } ] } }, { "group": "@tsconfig", "name": "node18", "version": "18.2.6", "description": "A base TSConfig for working with Node 18.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node18@18.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tsconfig/bases.git" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node18@18.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@tsconfig/node18/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tsconfig/node18/package.json" } ], "concludedValue": "node_modules/@tsconfig/node18/package.json" } ] } }, { "group": "@tsconfig", "name": "node16", "version": "16.1.8", "description": "A base TSConfig for working with Node 16.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node16@16.1.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tsconfig/bases.git" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node16@16.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@tsconfig/node16/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tsconfig/node16/package.json" } ], "concludedValue": "node_modules/@tsconfig/node16/package.json" } ] } }, { "group": "@tsconfig", "name": "node14", "version": "14.1.8", "description": "A base TSConfig for working with Node 14.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tsconfig/node14@14.1.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tsconfig/bases.git" } ], "type": "library", "bom-ref": "pkg:npm/@tsconfig/node14@14.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@tsconfig/node14/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tsconfig/node14/package.json" } ], "concludedValue": "node_modules/@tsconfig/node14/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "worker", "version": "4.3.11", "description": "a built-in tap extension for t.worker()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/worker@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/worker#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/worker@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/worker/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/worker/package.json" } ], "concludedValue": "node_modules/@tapjs/worker/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "typescript", "version": "3.5.11", "description": "a built-in tap extension that adds typescript support", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/typescript@3.5.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/typescript#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/typescript@3.5.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/typescript/package.json" } ], "concludedValue": "node_modules/@tapjs/typescript/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "test", "version": "4.4.9", "description": "the pluggable Test class for node-tap", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/test@4.4.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/test#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/test@4.4.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/test/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/test/package.json" } ], "concludedValue": "node_modules/@tapjs/test/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "test-built", "version": "0.0.0", "description": "the plugged in Test class for node-tap", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/test-built@0.0.0", "type": "library", "bom-ref": "pkg:npm/@tapjs/test-built@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/test/test-built/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/test/test-built/package.json" } ], "concludedValue": "node_modules/@tapjs/test/test-built/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "stdin", "version": "4.3.11", "description": "a built-in tap extension for t.stdin()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/stdin@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/stdin#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/stdin@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/stdin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/stdin/package.json" } ], "concludedValue": "node_modules/@tapjs/stdin/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "stack", "version": "4.3.3", "description": "Utility for working with stack traces", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/stack@4.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/stack#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/stack@4.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/stack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/stack/package.json" } ], "concludedValue": "node_modules/@tapjs/stack/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "spawn", "version": "4.3.11", "description": "a built-in tap extension for t.spawn()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/spawn@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/spawn#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/spawn@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/spawn/package.json" } ], "concludedValue": "node_modules/@tapjs/spawn/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "snapshot", "version": "4.3.11", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/snapshot@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/snapshot#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/snapshot@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/snapshot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/snapshot/package.json" } ], "concludedValue": "node_modules/@tapjs/snapshot/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "run", "version": "4.5.9", "description": "Command-line interface for the node-tap runner", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/run@4.5.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/run#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/run@4.5.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/run/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/run/package.json" } ], "concludedValue": "node_modules/@tapjs/run/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "reporter", "version": "4.4.11", "description": "Pretty test output reporters for tap", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/reporter@4.4.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/reporter#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/reporter@4.4.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/reporter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/reporter/package.json" } ], "concludedValue": "node_modules/@tapjs/reporter/package.json" } ] }, "tags": [ "test" ] }, { "group": "@tapjs", "name": "processinfo", "version": "3.1.12", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/processinfo@3.1.12", "type": "library", "bom-ref": "pkg:npm/@tapjs/processinfo@3.1.12", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/processinfo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/processinfo/package.json" } ], "concludedValue": "node_modules/@tapjs/processinfo/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "node-serialize", "version": "4.3.11", "description": "Stream TAP test data as a serialized node:test stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/node-serialize@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/node-serialize#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/node-serialize@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/node-serialize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/node-serialize/package.json" } ], "concludedValue": "node_modules/@tapjs/node-serialize/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "mock", "version": "4.4.9", "description": "tap plugin adding t.mockRequire() and t.mockImport()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/mock@4.4.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/mock#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/mock@4.4.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/mock/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/mock/package.json" } ], "concludedValue": "node_modules/@tapjs/mock/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "intercept", "version": "4.3.11", "description": "a built-in tap extension for t.intercept() and t.capture()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/intercept@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/intercept#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/intercept@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/intercept/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/intercept/package.json" } ], "concludedValue": "node_modules/@tapjs/intercept/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "fixture", "version": "4.3.11", "description": "Tap plugin to provide t.testdir() and t.fixture()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/fixture@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/fixture#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/fixture@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/fixture/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/fixture/package.json" } ], "concludedValue": "node_modules/@tapjs/fixture/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "filter", "version": "4.3.11", "description": "tap plugin providing t.only() and grep option", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/filter@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/filter#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/filter@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/filter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/filter/package.json" } ], "concludedValue": "node_modules/@tapjs/filter/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "error-serdes", "version": "4.3.2", "description": "Port of node's error_serdes.js to userland, plus test message streaming", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/error-serdes@4.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/error-serdes#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/error-serdes@4.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/error-serdes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/error-serdes/package.json" } ], "concludedValue": "node_modules/@tapjs/error-serdes/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "core", "version": "4.5.9", "description": "pluggable core of node-tap", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/core@4.5.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/core#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/core@4.5.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/core/package.json" } ], "concludedValue": "node_modules/@tapjs/core/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "config", "version": "5.6.5", "description": "Utility loading and managing tap configuration", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/config@5.6.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/config#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/config@5.6.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/config/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/config/package.json" } ], "concludedValue": "node_modules/@tapjs/config/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "chdir", "version": "3.3.11", "description": "a built-in tap extension for t.chdir()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/chdir@3.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/chdir#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/chdir@3.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/chdir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/chdir/package.json" } ], "concludedValue": "node_modules/@tapjs/chdir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "before-each", "version": "4.3.11", "description": "a built-in tap extension for t.beforeEach()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/before-each@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/before-each#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/before-each@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/before-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/before-each/package.json" } ], "concludedValue": "node_modules/@tapjs/before-each/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "before", "version": "4.3.11", "description": "a built-in tap extension for t.before()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/before@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/before#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/before@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/before/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/before/package.json" } ], "concludedValue": "node_modules/@tapjs/before/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "@tapjs", "name": "asserts", "version": "4.3.11", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/asserts@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/asserts#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/asserts@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/asserts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/asserts/package.json" } ], "concludedValue": "node_modules/@tapjs/asserts/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "after-each", "version": "4.3.11", "description": "a built-in tap extension for t.afterEach()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/after-each@4.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/after-each#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/after-each@4.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/after-each/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/after-each/package.json" } ], "concludedValue": "node_modules/@tapjs/after-each/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@tapjs", "name": "after", "version": "3.3.11", "description": "a built-in tap extension for t.after() and t.teardown()", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tapjs/after@3.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/tapjs/tree/main/src/after#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/tapjs/tapjs.git" } ], "type": "library", "bom-ref": "pkg:npm/@tapjs/after@3.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@tapjs/after/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@tapjs/after/package.json" } ], "concludedValue": "node_modules/@tapjs/after/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "verify", "version": "3.1.1", "description": "Verification of Sigstore signatures", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/verify@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/verify#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/verify@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sigstore/verify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sigstore/verify/package.json" } ], "concludedValue": "node_modules/@sigstore/verify/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "tuf", "version": "4.0.2", "description": "Client for the Sigstore TUF repository", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/tuf@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/tuf@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@sigstore/tuf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sigstore/tuf/package.json" } ], "concludedValue": "node_modules/@sigstore/tuf/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "sign", "version": "4.1.1", "description": "Sigstore signing library", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/sign@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/sign#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/sign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sigstore/sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sigstore/sign/package.json" } ], "concludedValue": "node_modules/@sigstore/sign/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "protobuf-specs", "version": "0.5.1", "description": "code-signing for npm packages", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/protobuf-specs@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/protobuf-specs#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/protobuf-specs.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/protobuf-specs@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sigstore/protobuf-specs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sigstore/protobuf-specs/package.json" } ], "concludedValue": "node_modules/@sigstore/protobuf-specs/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "core", "version": "3.2.1", "description": "Base library for Sigstore", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/core@3.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/core#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/core@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sigstore/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sigstore/core/package.json" } ], "concludedValue": "node_modules/@sigstore/core/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "bundle", "version": "4.0.0", "description": "Sigstore bundle type", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/bundle@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/bundle#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/bundle@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sigstore/bundle/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sigstore/bundle/package.json" } ], "concludedValue": "node_modules/@sigstore/bundle/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "run-script", "version": "10.0.4", "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/run-script@10.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/run-script.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/run-script@10.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/run-script/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/run-script/package.json" } ], "concludedValue": "node_modules/@npmcli/run-script/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "redact", "version": "4.0.0", "description": "Redact sensitive npm information from output", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/redact@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/redact.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/redact@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/redact/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/redact/package.json" } ], "concludedValue": "node_modules/@npmcli/redact/package.json" } ] }, "tags": [ "sensitive" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "promise-spawn", "version": "9.0.1", "description": "spawn processes the way the npm cli likes to do", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/promise-spawn@9.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/promise-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/promise-spawn@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/promise-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/promise-spawn/package.json" } ], "concludedValue": "node_modules/@npmcli/promise-spawn/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "package-json", "version": "7.0.5", "description": "Programmatic API to update package.json", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/package-json@7.0.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/package-json.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/package-json@7.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/package-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/package-json/package.json" } ], "concludedValue": "node_modules/@npmcli/package-json/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "node-gyp", "version": "5.0.0", "description": "Tools for dealing with node-gyp packages", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/node-gyp@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/node-gyp@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/node-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/node-gyp/package.json" } ], "concludedValue": "node_modules/@npmcli/node-gyp/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "installed-package-contents", "version": "4.0.0", "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/installed-package-contents@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/installed-package-contents.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/installed-package-contents@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/installed-package-contents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/installed-package-contents/package.json" } ], "concludedValue": "node_modules/@npmcli/installed-package-contents/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "git", "version": "7.0.2", "description": "a util for spawning git from npm CLI contexts", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/git@7.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/git.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/git@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/git/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/git/package.json" } ], "concludedValue": "node_modules/@npmcli/git/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "fs", "version": "5.0.0", "description": "filesystem utilities for the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/fs@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/fs.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/fs@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/fs/package.json" } ], "concludedValue": "node_modules/@npmcli/fs/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "agent", "version": "4.0.2", "description": "the http/https agent used by the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/agent@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/agent#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/agent.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/agent@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/agent/package.json" } ], "concludedValue": "node_modules/@npmcli/agent/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.9", "description": "Trace the original position through a source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.9", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/jridgewell/trace-mapping.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.5", "description": "Encode/decode sourcemap mappings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/resolve-uri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/resolve-uri/package.json" } ], "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json" } ] } }, { "authors": [ { "name": "Corey Farrell" } ], "group": "@istanbuljs", "name": "schema", "version": "0.1.6", "description": "Schemas describing various structures used by nyc and istanbuljs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40istanbuljs/schema@0.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/istanbuljs/schema#readme" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/schema.git" } ], "type": "library", "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@istanbuljs/schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@istanbuljs/schema/package.json" } ], "concludedValue": "node_modules/@istanbuljs/schema/package.json" } ] } }, { "group": "@isaacs", "name": "which", "version": "7.0.4", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/which@7.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/which.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/which@7.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/which/package.json" } ], "concludedValue": "node_modules/@isaacs/which/package.json" } ] } }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "@isaacs", "name": "ts-node-temp-fork-for-pr-2009", "version": "10.9.7", "description": "TypeScript execution environment and REPL for node.js, with source map support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/ts-node-temp-fork-for-pr-2009@10.9.7", "externalReferences": [ { "type": "website", "url": "https://typestrong.org/ts-node" }, { "type": "vcs", "url": "git://github.com/TypeStrong/ts-node.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/ts-node-temp-fork-for-pr-2009@10.9.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/ts-node-temp-fork-for-pr-2009/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/ts-node-temp-fork-for-pr-2009/package.json" } ], "concludedValue": "node_modules/@isaacs/ts-node-temp-fork-for-pr-2009/package.json" } ] } }, { "group": "", "name": "diff", "version": "4.0.4", "description": "A javascript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@4.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/ts-node-temp-fork-for-pr-2009/node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/ts-node-temp-fork-for-pr-2009/node_modules/diff/package.json" } ], "concludedValue": "node_modules/@isaacs/ts-node-temp-fork-for-pr-2009/node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@isaacs", "name": "fs-minipass", "version": "4.0.1", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/fs-minipass/package.json" } ], "concludedValue": "node_modules/@isaacs/fs-minipass/package.json" } ] } }, { "group": "@isaacs", "name": "cliui", "version": "9.0.0", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/cliui@9.0.0", "type": "library", "bom-ref": "pkg:npm/@isaacs/cliui@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/cliui/package.json" } ], "concludedValue": "node_modules/@isaacs/cliui/package.json" } ] } }, { "group": "@gar", "name": "promise-retry", "version": "1.0.3", "description": "Retries a function that returns a promise, leveraging the power of the retry module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40gar/promise-retry@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/wraithgar/node-promise-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/@gar/promise-retry@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@gar/promise-retry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@gar/promise-retry/package.json" } ], "concludedValue": "node_modules/@gar/promise-retry/package.json" } ] } }, { "group": "@cspotcode", "name": "source-map-support", "version": "0.8.1", "description": "Fixes stack traces for files with source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40cspotcode/source-map-support@0.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cspotcode/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/@cspotcode/source-map-support@0.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@cspotcode/source-map-support/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@cspotcode/source-map-support/package.json" } ], "concludedValue": "node_modules/@cspotcode/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Charles Samborski (https://demurgos.net)" } ], "group": "@bcoe", "name": "v8-coverage", "version": "1.0.2", "description": "Helper functions for V8 coverage files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bcoe/v8-coverage@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bcoe/v8-coverage.git" } ], "type": "library", "bom-ref": "pkg:npm/@bcoe/v8-coverage@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@bcoe/v8-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@bcoe/v8-coverage/package.json" } ], "concludedValue": "node_modules/@bcoe/v8-coverage/package.json" } ] } }, { "authors": [ { "name": "Chris Baker" } ], "group": "@base2", "name": "pretty-print-object", "version": "1.0.1", "description": "Convert an object or array into a formatted string", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40base2/pretty-print-object@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Chris-Baker/pretty-print-object" } ], "type": "library", "bom-ref": "pkg:npm/@base2/pretty-print-object@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@base2/pretty-print-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@base2/pretty-print-object/package.json" } ], "concludedValue": "node_modules/@base2/pretty-print-object/package.json" } ] } }, { "authors": [ { "name": "AlCalzone " } ], "group": "@alcalzone", "name": "ansi-tokenize", "version": "0.1.3", "description": "Efficiently modify strings containing ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40alcalzone/ansi-tokenize@0.1.3", "type": "library", "bom-ref": "pkg:npm/@alcalzone/ansi-tokenize@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@alcalzone/ansi-tokenize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@alcalzone/ansi-tokenize/package.json" } ], "concludedValue": "node_modules/@alcalzone/ansi-tokenize/package.json" } ] }, "tags": [ "escape" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/wide-align@1.1.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-04T12:01:33Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'wide-align' with version '1.1.5'. The package type in this SBOM is npm with 15 purl namespaces described under components. The components were identified from 284 source files." } ] }