{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:3a0e1d7a-2c14-4c8a-be2c-91cd4d8872b4", "version": 1, "metadata": { "timestamp": "2026-09-22T10:39:10Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "openinference-genai", "group": "@arizeai", "version": "0.3.10", "description": "OpenInference utilities for converting OpenTelemetry GenAI span attributes to OpenInference span attributes", "purl": "pkg:npm/%40arizeai/openinference-genai@0.3.10", "bom-ref": "pkg:npm/@arizeai/openinference-genai@0.3.10", "author": "oss-devs@arize.com", "properties": [ { "name": "cdx:npm:scripts", "value": "prebuild, build, postbuild, type:check, test" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-genai" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@arizeai\\n@opentelemetry\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json\\nnode_modules/@opentelemetry/api/package.json\\nnode_modules/@opentelemetry/core/package.json\\nnode_modules/@opentelemetry/exporter-trace-otlp-proto/package.json\\nnode_modules/@opentelemetry/resources/package.json\\nnode_modules/@opentelemetry/sdk-trace-base/package.json\\nnode_modules/@opentelemetry/sdk-trace-node/package.json\\nnode_modules/@opentelemetry/semantic-conventions/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/typescript/package.json\\nnode_modules/vitest/package.json" } ] }, "components": [ { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.1.9", "description": "Next generation testing framework powered by Vite", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.1.9", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "ImportedModules", "value": "vitest/config,defineConfig,vitest/config/defineConfig" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ], "occurrences": [ { "location": "vitest.config.mts", "line": 1 }, { "location": "vitest.config.mts", "line": 3 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "7.0.2", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@7.0.2", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "group": "@types", "name": "node", "version": "20.19.23", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@20.19.23", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@20.19.23", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "semantic-conventions", "version": "1.41.1", "description": "OpenTelemetry semantic conventions", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/semantic-conventions@1.41.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/semantic-conventions@1.41.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/semantic-conventions/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/semantic-conventions/incubating,ATTR_GEN_AI_AGENT_DESCRIPTION,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_AGENT_DESCRIPTION,ATTR_GEN_AI_AGENT_ID,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_AGENT_ID,ATTR_GEN_AI_AGENT_NAME,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_AGENT_NAME,ATTR_GEN_AI_COMPLETION,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_COMPLETION,ATTR_GEN_AI_INPUT_MESSAGES,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_INPUT_MESSAGES,ATTR_GEN_AI_OPERATION_NAME,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_OPERATION_NAME,ATTR_GEN_AI_OUTPUT_MESSAGES,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_OUTPUT_MESSAGES,ATTR_GEN_AI_PROMPT,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_PROMPT,ATTR_GEN_AI_PROVIDER_NAME,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_PROVIDER_NAME,ATTR_GEN_AI_REQUEST_FREQUENCY_PENALTY,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_FREQUENCY_PENALTY,ATTR_GEN_AI_REQUEST_MAX_TOKENS,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_MAX_TOKENS,ATTR_GEN_AI_REQUEST_MODEL,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_MODEL,ATTR_GEN_AI_REQUEST_PRESENCE_PENALTY,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_PRESENCE_PENALTY,ATTR_GEN_AI_REQUEST_SEED,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_SEED,ATTR_GEN_AI_REQUEST_STOP_SEQUENCES,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_STOP_SEQUENCES,ATTR_GEN_AI_REQUEST_TEMPERATURE,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_TEMPERATURE,ATTR_GEN_AI_REQUEST_TOP_K,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_TOP_K,ATTR_GEN_AI_REQUEST_TOP_P,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_REQUEST_TOP_P,ATTR_GEN_AI_RESPONSE_FINISH_REASONS,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_RESPONSE_FINISH_REASONS,ATTR_GEN_AI_RESPONSE_MODEL,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_RESPONSE_MODEL,ATTR_GEN_AI_TOOL_CALL_ID,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_TOOL_CALL_ID,ATTR_GEN_AI_TOOL_DESCRIPTION,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_TOOL_DESCRIPTION,ATTR_GEN_AI_TOOL_NAME,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_TOOL_NAME,ATTR_GEN_AI_TOOL_TYPE,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_TOOL_TYPE,ATTR_GEN_AI_USAGE_INPUT_TOKENS,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_USAGE_INPUT_TOKENS,ATTR_GEN_AI_USAGE_OUTPUT_TOKENS,@opentelemetry/semantic-conventions/incubating/ATTR_GEN_AI_USAGE_OUTPUT_TOKENS,GEN_AI_OPERATION_NAME_VALUE_CHAT,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_CHAT,GEN_AI_OPERATION_NAME_VALUE_CREATE_AGENT,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_CREATE_AGENT,GEN_AI_OPERATION_NAME_VALUE_EMBEDDINGS,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_EMBEDDINGS,GEN_AI_OPERATION_NAME_VALUE_EXECUTE_TOOL,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_EXECUTE_TOOL,GEN_AI_OPERATION_NAME_VALUE_GENERATE_CONTENT,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_GENERATE_CONTENT,GEN_AI_OPERATION_NAME_VALUE_INVOKE_AGENT,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_INVOKE_AGENT,GEN_AI_OPERATION_NAME_VALUE_INVOKE_WORKFLOW,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_INVOKE_WORKFLOW,GEN_AI_OPERATION_NAME_VALUE_RETRIEVAL,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_RETRIEVAL,GEN_AI_OPERATION_NAME_VALUE_TEXT_COMPLETION,@opentelemetry/semantic-conventions/incubating/GEN_AI_OPERATION_NAME_VALUE_TEXT_COMPLETION" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/semantic-conventions/package.json" } ], "concludedValue": "node_modules/@opentelemetry/semantic-conventions/package.json" } ], "occurrences": [ { "location": "dist/commonjs/attributes.js", "line": 4 }, { "location": "dist/esm/attributes.js", "line": 1 }, { "location": "src/attributes.ts", "line": 38 } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-node", "version": "2.2.0", "description": "OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-node@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-node" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-node@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-node/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "sdk-trace-base", "version": "2.2.0", "description": "OpenTelemetry Tracing", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/sdk-trace-base@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-sdk-trace-base" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/sdk-trace-base@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ], "concludedValue": "node_modules/@opentelemetry/sdk-trace-base/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "resources", "version": "2.2.0", "description": "OpenTelemetry SDK resources", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/resources@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-resources" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/resources@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/resources/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/resources/package.json" } ], "concludedValue": "node_modules/@opentelemetry/resources/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "exporter-trace-otlp-proto", "version": "0.206.0", "description": "OpenTelemetry Collector Exporter allows user to send collected traces to the OpenTelemetry Collector using protobuf over HTTP", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/exporter-trace-otlp-proto@0.206.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/exporter-trace-otlp-proto" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/exporter-trace-otlp-proto@0.206.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ], "concludedValue": "node_modules/@opentelemetry/exporter-trace-otlp-proto/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "core", "version": "2.8.0", "description": "OpenTelemetry Core provides constants and utilities shared by all OpenTelemetry SDK packages.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/core@2.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/packages/opentelemetry-core" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/core@2.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/core/package.json" } ], "concludedValue": "node_modules/@opentelemetry/core/package.json" } ] } }, { "authors": [ { "name": "OpenTelemetry Authors" } ], "group": "@opentelemetry", "name": "api", "version": "1.9.0", "description": "Public API for OpenTelemetry", "scope": "excluded", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40opentelemetry/api@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/api" } ], "type": "library", "bom-ref": "pkg:npm/@opentelemetry/api@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@opentelemetry/api/package.json" }, { "name": "ImportedModules", "value": "@opentelemetry/api,Attributes,@opentelemetry/api/Attributes,AttributeValue,@opentelemetry/api/AttributeValue" }, { "name": "cdx:npm:package:type-only", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@opentelemetry/api/package.json" } ], "concludedValue": "node_modules/@opentelemetry/api/package.json" } ], "occurrences": [ { "location": "src/attributes.ts", "line": 1 }, { "location": "src/utils.ts", "line": 1 } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "oss-devs@arize.com" } ], "group": "@arizeai", "name": "openinference-semantic-conventions", "version": "2.12.0", "description": "This package provides OpenInference semantic conventions for tracing of LLM Applications.", "scope": "required", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40arizeai/openinference-semantic-conventions@2.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arize-ai/openinference/tree/main/js/packages/openinference-semantic-conventions" }, { "type": "vcs", "url": "git+https://github.com/Arize-ai/openinference.git" } ], "type": "library", "bom-ref": "pkg:npm/@arizeai/openinference-semantic-conventions@2.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" }, { "name": "ImportedModules", "value": "@arizeai/openinference-semantic-conventions,OpenInferenceSpanKind,@arizeai/openinference-semantic-conventions/OpenInferenceSpanKind,SemanticConventions,@arizeai/openinference-semantic-conventions/SemanticConventions,MimeType,@arizeai/openinference-semantic-conventions/MimeType" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "concludedValue": "node_modules/@arizeai/openinference-semantic-conventions/package.json" } ], "occurrences": [ { "location": "dist/commonjs/attributes.js", "line": 5 }, { "location": "dist/commonjs/utils.js", "line": 5 }, { "location": "dist/esm/attributes.js", "line": 2 }, { "location": "dist/esm/utils.js", "line": 1 }, { "location": "src/attributes.ts", "line": 43 }, { "location": "src/utils.ts", "line": 3 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@arizeai/openinference-genai@0.3.10" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-22T10:39:10Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 22, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'openinference-genai' with version '0.3.10'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 11 source files." } ] }