{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:673c0803-7f2c-424c-8cc1-60fb5a3eab93", "version": 1, "metadata": { "timestamp": "2026-08-24T15:42:26Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "workbox-strategies", "group": "", "version": "7.4.1", "description": "A service worker helper library implementing common caching strategies.", "purl": "pkg:npm/workbox-strategies@7.4.1", "bom-ref": "pkg:npm/workbox-strategies@7.4.1", "author": "Google's Web DevRel Team and Google's Aurora Team", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/GoogleChrome/workbox" }, { "type": "vcs", "url": "git+https://github.com/googlechrome/workbox.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "workbox-core", "version": "7.3.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "67e998ac4adf878b77ce2ecd553bceb80081d00fe30376e0c543773f0b40547bdf12c67157d223bb9f34544113ba0df360945cd039a28bf6a2c48fd4c63f1f9b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/workbox-core@7.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/workbox-core/-/workbox-core-7.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/workbox-core@7.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/workbox-core/-/workbox-core-7.3.0.tgz" }, { "name": "cdx:npm:versionMismatchError", "value": "7.4.1 used instead of 7.3.0" }, { "name": "ImportedModules", "value": "workbox-core/_private/assert.js,assert,workbox-core/_private/assert.js/assert,workbox-core/_private/logger.js,logger,workbox-core/_private/logger.js/logger,workbox-core/_private/WorkboxError.js,WorkboxError,workbox-core/_private/WorkboxError.js/WorkboxError,workbox-core/_private/timeout.js,timeout,workbox-core/_private/timeout.js/timeout,workbox-core/_private/cacheNames.js,cacheNames,workbox-core/_private/cacheNames.js/cacheNames,workbox-core/_private/getFriendlyURL.js,getFriendlyURL,workbox-core/_private/getFriendlyURL.js/getFriendlyURL,workbox-core/_private/cacheMatchIgnoreParams.js,cacheMatchIgnoreParams,workbox-core/_private/cacheMatchIgnoreParams.js/cacheMatchIgnoreParams,workbox-core/_private/Deferred.js,Deferred,workbox-core/_private/Deferred.js/Deferred,workbox-core/_private/executeQuotaErrorCallbacks.js,executeQuotaErrorCallbacks,workbox-core/_private/executeQuotaErrorCallbacks.js/executeQuotaErrorCallbacks,workbox-core/types.js,HandlerCallbackOptions,workbox-core/types.js/HandlerCallbackOptions,RouteHandlerObject,workbox-core/types.js/RouteHandlerObject,WorkboxPlugin,workbox-core/types.js/WorkboxPlugin,MapLikeObject,workbox-core/types.js/MapLikeObject,WorkboxPluginCallbackParam,workbox-core/types.js/WorkboxPluginCallbackParam" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "CacheFirst.js", "line": 8 }, { "location": "CacheFirst.js", "line": 39 }, { "location": "CacheOnly.js", "line": 8 }, { "location": "CacheOnly.js", "line": 36 }, { "location": "NetworkFirst.js", "line": 8 }, { "location": "NetworkFirst.js", "line": 61 }, { "location": "NetworkFirst.js", "line": 80 }, { "location": "NetworkOnly.js", "line": 8 }, { "location": "NetworkOnly.js", "line": 53 }, { "location": "StaleWhileRevalidate.js", "line": 8 }, { "location": "StaleWhileRevalidate.js", "line": 68 }, { "location": "StrategyHandler.js", "line": 8 }, { "location": "StrategyHandler.js", "line": 86 }, { "location": "src/CacheFirst.ts", "line": 9 }, { "location": "src/CacheOnly.ts", "line": 9 }, { "location": "src/NetworkFirst.ts", "line": 9 }, { "location": "src/NetworkOnly.ts", "line": 9 }, { "location": "src/StaleWhileRevalidate.ts", "line": 9 }, { "location": "src/StrategyHandler.ts", "line": 9 }, { "location": "CacheFirst.js", "line": 9 }, { "location": "CacheFirst.js", "line": 10 }, { "location": "CacheOnly.js", "line": 9 }, { "location": "CacheOnly.js", "line": 10 }, { "location": "NetworkFirst.js", "line": 9 }, { "location": "NetworkFirst.js", "line": 10 }, { "location": "NetworkOnly.js", "line": 9 }, { "location": "NetworkOnly.js", "line": 10 }, { "location": "NetworkOnly.js", "line": 11 }, { "location": "StaleWhileRevalidate.js", "line": 9 }, { "location": "StaleWhileRevalidate.js", "line": 10 }, { "location": "Strategy.js", "line": 8 }, { "location": "Strategy.js", "line": 9 }, { "location": "Strategy.js", "line": 10 }, { "location": "Strategy.js", "line": 11 }, { "location": "StrategyHandler.js", "line": 9 }, { "location": "StrategyHandler.js", "line": 10 }, { "location": "StrategyHandler.js", "line": 11 }, { "location": "StrategyHandler.js", "line": 12 }, { "location": "StrategyHandler.js", "line": 13 }, { "location": "StrategyHandler.js", "line": 14 }, { "location": "StrategyHandler.js", "line": 15 }, { "location": "utils/messages.js", "line": 8 }, { "location": "utils/messages.js", "line": 9 }, { "location": "src/CacheFirst.ts", "line": 10 }, { "location": "src/CacheFirst.ts", "line": 11 }, { "location": "src/CacheOnly.ts", "line": 10 }, { "location": "src/CacheOnly.ts", "line": 11 }, { "location": "src/NetworkFirst.ts", "line": 10 }, { "location": "src/NetworkFirst.ts", "line": 11 }, { "location": "src/NetworkOnly.ts", "line": 10 }, { "location": "src/NetworkOnly.ts", "line": 11 }, { "location": "src/NetworkOnly.ts", "line": 12 }, { "location": "src/StaleWhileRevalidate.ts", "line": 10 }, { "location": "src/StaleWhileRevalidate.ts", "line": 11 }, { "location": "src/Strategy.ts", "line": 9 }, { "location": "src/Strategy.ts", "line": 10 }, { "location": "src/Strategy.ts", "line": 11 }, { "location": "src/Strategy.ts", "line": 12 }, { "location": "src/Strategy.ts", "line": 17 }, { "location": "src/StrategyHandler.ts", "line": 10 }, { "location": "src/StrategyHandler.ts", "line": 11 }, { "location": "src/StrategyHandler.ts", "line": 12 }, { "location": "src/StrategyHandler.ts", "line": 13 }, { "location": "src/StrategyHandler.ts", "line": 14 }, { "location": "src/StrategyHandler.ts", "line": 15 }, { "location": "src/StrategyHandler.ts", "line": 16 }, { "location": "src/StrategyHandler.ts", "line": 22 }, { "location": "src/plugins/cacheOkAndOpaquePlugin.ts", "line": 9 }, { "location": "src/utils/messages.ts", "line": 9 }, { "location": "src/utils/messages.ts", "line": 10 }, { "location": "CacheFirst.js", "line": 76 }, { "location": "CacheFirst.js", "line": 78 }, { "location": "CacheFirst.js", "line": 81 }, { "location": "CacheOnly.js", "line": 45 }, { "location": "CacheOnly.js", "line": 47 }, { "location": "CacheOnly.js", "line": 51 }, { "location": "CacheOnly.js", "line": 53 }, { "location": "NetworkFirst.js", "line": 112 }, { "location": "NetworkFirst.js", "line": 114 }, { "location": "NetworkFirst.js", "line": 117 }, { "location": "NetworkOnly.js", "line": 82 }, { "location": "NetworkOnly.js", "line": 84 }, { "location": "NetworkOnly.js", "line": 87 }, { "location": "NetworkOnly.js", "line": 90 }, { "location": "StaleWhileRevalidate.js", "line": 105 }, { "location": "StaleWhileRevalidate.js", "line": 107 }, { "location": "StaleWhileRevalidate.js", "line": 110 }, { "location": "Strategy.js", "line": 165 }, { "location": "StrategyHandler.js", "line": 129 }, { "location": "StrategyHandler.js", "line": 162 }, { "location": "StrategyHandler.js", "line": 177 }, { "location": "StrategyHandler.js", "line": 230 }, { "location": "StrategyHandler.js", "line": 233 }, { "location": "StrategyHandler.js", "line": 279 }, { "location": "StrategyHandler.js", "line": 287 }, { "location": "StrategyHandler.js", "line": 297 }, { "location": "StrategyHandler.js", "line": 313 }, { "location": "StrategyHandler.js", "line": 505 }, { "location": "StrategyHandler.js", "line": 510 }, { "location": "utils/messages.js", "line": 15 }, { "location": "utils/messages.js", "line": 16 }, { "location": "utils/messages.js", "line": 17 }, { "location": "src/CacheFirst.ts", "line": 84 }, { "location": "src/CacheFirst.ts", "line": 88 }, { "location": "src/CacheFirst.ts", "line": 91 }, { "location": "src/CacheOnly.ts", "line": 51 }, { "location": "src/CacheOnly.ts", "line": 55 }, { "location": "src/CacheOnly.ts", "line": 60 }, { "location": "src/CacheOnly.ts", "line": 62 }, { "location": "src/NetworkFirst.ts", "line": 136 }, { "location": "src/NetworkFirst.ts", "line": 140 }, { "location": "src/NetworkFirst.ts", "line": 143 }, { "location": "src/NetworkOnly.ts", "line": 103 }, { "location": "src/NetworkOnly.ts", "line": 107 }, { "location": "src/NetworkOnly.ts", "line": 109 }, { "location": "src/NetworkOnly.ts", "line": 112 }, { "location": "src/StaleWhileRevalidate.ts", "line": 118 }, { "location": "src/StaleWhileRevalidate.ts", "line": 122 }, { "location": "src/StaleWhileRevalidate.ts", "line": 125 }, { "location": "src/Strategy.ts", "line": 210 }, { "location": "src/StrategyHandler.ts", "line": 162 }, { "location": "src/StrategyHandler.ts", "line": 205 }, { "location": "src/StrategyHandler.ts", "line": 222 }, { "location": "src/StrategyHandler.ts", "line": 286 }, { "location": "src/StrategyHandler.ts", "line": 288 }, { "location": "src/StrategyHandler.ts", "line": 340 }, { "location": "src/StrategyHandler.ts", "line": 351 }, { "location": "src/StrategyHandler.ts", "line": 366 }, { "location": "src/StrategyHandler.ts", "line": 392 }, { "location": "src/StrategyHandler.ts", "line": 619 }, { "location": "src/StrategyHandler.ts", "line": 625 }, { "location": "src/utils/messages.ts", "line": 18 }, { "location": "src/utils/messages.ts", "line": 19 }, { "location": "src/utils/messages.ts", "line": 20 }, { "location": "NetworkOnly.js", "line": 67 }, { "location": "StrategyHandler.js", "line": 267 }, { "location": "src/NetworkOnly.ts", "line": 83 }, { "location": "src/StrategyHandler.ts", "line": 325 }, { "location": "Strategy.js", "line": 50 }, { "location": "src/Strategy.ts", "line": 76 }, { "location": "StrategyHandler.js", "line": 130 }, { "location": "StrategyHandler.js", "line": 163 }, { "location": "StrategyHandler.js", "line": 178 }, { "location": "StrategyHandler.js", "line": 272 }, { "location": "StrategyHandler.js", "line": 288 }, { "location": "StrategyHandler.js", "line": 291 }, { "location": "StrategyHandler.js", "line": 314 }, { "location": "utils/messages.js", "line": 12 }, { "location": "src/Strategy.ts", "line": 211 }, { "location": "src/StrategyHandler.ts", "line": 164 }, { "location": "src/StrategyHandler.ts", "line": 207 }, { "location": "src/StrategyHandler.ts", "line": 224 }, { "location": "src/StrategyHandler.ts", "line": 332 }, { "location": "src/StrategyHandler.ts", "line": 341 }, { "location": "src/StrategyHandler.ts", "line": 353 }, { "location": "src/StrategyHandler.ts", "line": 358 }, { "location": "src/StrategyHandler.ts", "line": 367 }, { "location": "src/StrategyHandler.ts", "line": 394 }, { "location": "src/utils/messages.ts", "line": 15 }, { "location": "StrategyHandler.js", "line": 306 }, { "location": "src/StrategyHandler.ts", "line": 380 }, { "location": "StrategyHandler.js", "line": 323 }, { "location": "src/StrategyHandler.ts", "line": 407 } ] } } ], "dependencies": [ { "ref": "pkg:npm/workbox-core@7.3.0", "dependsOn": [] }, { "ref": "pkg:npm/workbox-strategies@7.4.1", "dependsOn": [ "pkg:npm/workbox-core@7.3.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/workbox-strategies@7.4.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-24T15:42:26Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'workbox-strategies' with version '7.4.1'." } ] }