{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:4afc9c0b-3a3a-4a75-b845-4d48078f2ff6", "version": 1, "metadata": { "timestamp": "2026-08-24T15:42:25Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "workbox-routing", "group": "", "version": "7.4.1", "description": "A service worker helper library to route request URLs to handlers.", "purl": "pkg:npm/workbox-routing@7.4.1", "bom-ref": "pkg:npm/workbox-routing@7.4.1", "author": "Google's Web DevRel Team and Google's Aurora Team", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/GoogleChrome/workbox" }, { "type": "vcs", "url": "git+https://github.com/googlechrome/workbox.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "workbox-core", "version": "7.3.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "67e998ac4adf878b77ce2ecd553bceb80081d00fe30376e0c543773f0b40547bdf12c67157d223bb9f34544113ba0df360945cd039a28bf6a2c48fd4c63f1f9b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/workbox-core@7.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/workbox-core/-/workbox-core-7.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/workbox-core@7.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/workbox-core/-/workbox-core-7.3.0.tgz" }, { "name": "cdx:npm:versionMismatchError", "value": "7.4.1 used instead of 7.3.0" }, { "name": "ImportedModules", "value": "workbox-core/_private/assert.js,assert,workbox-core/_private/assert.js/assert,workbox-core/_private/logger.js,logger,workbox-core/_private/logger.js/logger,workbox-core/_private/getFriendlyURL.js,getFriendlyURL,workbox-core/_private/getFriendlyURL.js/getFriendlyURL,workbox-core/_private/WorkboxError.js,WorkboxError,workbox-core/_private/WorkboxError.js/WorkboxError,workbox-core/types.js,RouteHandler,workbox-core/types.js/RouteHandler,RouteMatchCallbackOptions,workbox-core/types.js/RouteMatchCallbackOptions,RouteMatchCallback,workbox-core/types.js/RouteMatchCallback,RouteHandlerObject,workbox-core/types.js/RouteHandlerObject,RouteHandlerCallbackOptions,workbox-core/types.js/RouteHandlerCallbackOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "NavigationRoute.js", "line": 8 }, { "location": "NavigationRoute.js", "line": 54 }, { "location": "NavigationRoute.js", "line": 60 }, { "location": "RegExpRoute.js", "line": 8 }, { "location": "RegExpRoute.js", "line": 39 }, { "location": "Route.js", "line": 8 }, { "location": "Route.js", "line": 35 }, { "location": "Route.js", "line": 42 }, { "location": "Router.js", "line": 8 }, { "location": "Router.js", "line": 127 }, { "location": "Router.js", "line": 335 }, { "location": "Router.js", "line": 341 }, { "location": "Router.js", "line": 347 }, { "location": "Router.js", "line": 353 }, { "location": "Router.js", "line": 359 }, { "location": "utils/normalizeHandler.js", "line": 8 }, { "location": "utils/normalizeHandler.js", "line": 20 }, { "location": "utils/normalizeHandler.js", "line": 31 }, { "location": "src/NavigationRoute.ts", "line": 9 }, { "location": "src/RegExpRoute.ts", "line": 9 }, { "location": "src/Route.ts", "line": 9 }, { "location": "src/Router.ts", "line": 9 }, { "location": "src/utils/normalizeHandler.ts", "line": 9 }, { "location": "NavigationRoute.js", "line": 9 }, { "location": "RegExpRoute.js", "line": 9 }, { "location": "Router.js", "line": 9 }, { "location": "Router.js", "line": 11 }, { "location": "Router.js", "line": 13 }, { "location": "registerRoute.js", "line": 8 }, { "location": "registerRoute.js", "line": 9 }, { "location": "src/NavigationRoute.ts", "line": 10 }, { "location": "src/NavigationRoute.ts", "line": 11 }, { "location": "src/RegExpRoute.ts", "line": 10 }, { "location": "src/RegExpRoute.ts", "line": 15 }, { "location": "src/Route.ts", "line": 16 }, { "location": "src/Router.ts", "line": 10 }, { "location": "src/Router.ts", "line": 16 }, { "location": "src/Router.ts", "line": 18 }, { "location": "src/Router.ts", "line": 21 }, { "location": "src/registerRoute.ts", "line": 9 }, { "location": "src/registerRoute.ts", "line": 10 }, { "location": "src/registerRoute.ts", "line": 11 }, { "location": "src/setCatchHandler.ts", "line": 9 }, { "location": "src/setDefaultHandler.ts", "line": 9 }, { "location": "src/utils/normalizeHandler.ts", "line": 10 }, { "location": "NavigationRoute.js", "line": 89 }, { "location": "NavigationRoute.js", "line": 98 }, { "location": "NavigationRoute.js", "line": 103 }, { "location": "RegExpRoute.js", "line": 58 }, { "location": "Router.js", "line": 93 }, { "location": "Router.js", "line": 137 }, { "location": "Router.js", "line": 175 }, { "location": "Router.js", "line": 182 }, { "location": "Router.js", "line": 185 }, { "location": "Router.js", "line": 188 }, { "location": "Router.js", "line": 191 }, { "location": "Router.js", "line": 212 }, { "location": "Router.js", "line": 214 }, { "location": "Router.js", "line": 215 }, { "location": "Router.js", "line": 216 }, { "location": "Router.js", "line": 231 }, { "location": "Router.js", "line": 233 }, { "location": "Router.js", "line": 234 }, { "location": "Router.js", "line": 235 }, { "location": "Router.js", "line": 271 }, { "location": "registerRoute.js", "line": 52 }, { "location": "registerRoute.js", "line": 61 }, { "location": "src/NavigationRoute.ts", "line": 113 }, { "location": "src/NavigationRoute.ts", "line": 125 }, { "location": "src/NavigationRoute.ts", "line": 133 }, { "location": "src/RegExpRoute.ts", "line": 71 }, { "location": "src/Router.ts", "line": 120 }, { "location": "src/Router.ts", "line": 179 }, { "location": "src/Router.ts", "line": 226 }, { "location": "src/Router.ts", "line": 234 }, { "location": "src/Router.ts", "line": 238 }, { "location": "src/Router.ts", "line": 240 }, { "location": "src/Router.ts", "line": 244 }, { "location": "src/Router.ts", "line": 269 }, { "location": "src/Router.ts", "line": 275 }, { "location": "src/Router.ts", "line": 276 }, { "location": "src/Router.ts", "line": 277 }, { "location": "src/Router.ts", "line": 293 }, { "location": "src/Router.ts", "line": 299 }, { "location": "src/Router.ts", "line": 300 }, { "location": "src/Router.ts", "line": 301 }, { "location": "src/Router.ts", "line": 348 }, { "location": "src/registerRoute.ts", "line": 66 }, { "location": "src/registerRoute.ts", "line": 80 }, { "location": "Router.js", "line": 213 }, { "location": "Router.js", "line": 232 }, { "location": "src/Router.ts", "line": 271 }, { "location": "src/Router.ts", "line": 295 }, { "location": "src/Router.ts", "line": 349 } ] } } ], "dependencies": [ { "ref": "pkg:npm/workbox-core@7.3.0", "dependsOn": [] }, { "ref": "pkg:npm/workbox-routing@7.4.1", "dependsOn": [ "pkg:npm/workbox-core@7.3.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/workbox-routing@7.4.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-24T15:42:25Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'workbox-routing' with version '7.4.1'." } ] }