{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:90a6ad80-4acc-4cd8-b93f-7fd6c155ccd8", "version": 1, "metadata": { "timestamp": "2026-08-11T21:59:09Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "async-promise-queue", "group": "", "version": "1.0.5", "description": "wrapper around async.queue to make some common usages simpler", "purl": "pkg:npm/async-promise-queue@1.0.5", "bom-ref": "pkg:npm/async-promise-queue@1.0.5", "author": "Stefan Penner ", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test:debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "yarn.lock" } ] }, "components": [ { "group": "", "name": "assertion-error", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "13ca515d86206da0bac66e834dd397d87581094c" } ], "purl": "pkg:npm/assertion-error@1.0.2", "type": "library", "bom-ref": "pkg:npm/assertion-error@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "async", "version": "2.4.1", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "62a56b279c98a11d0987096a01cc3eeb8eb7bbd7" } ], "purl": "pkg:npm/async@2.4.1", "type": "library", "bom-ref": "pkg:npm/async@2.4.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "async" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 11 }, { "location": "index.js", "line": 36 } ] } }, { "group": "", "name": "balanced-match", "version": "0.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "cb3f3e3c732dc0f01ee70b403f302e61d7709838" } ], "purl": "pkg:npm/balanced-match@0.4.2", "type": "library", "bom-ref": "pkg:npm/balanced-match@0.4.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3effc3c50e000531fb720eaff80f0ae8ef23cf59" } ], "purl": "pkg:npm/brace-expansion@1.1.7", "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "browser-stdout", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f" } ], "purl": "pkg:npm/browser-stdout@1.3.0", "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "chai", "version": "4.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2f7327c4de6f385dd7787999e2ab02697a32b83b" } ], "purl": "pkg:npm/chai@4.0.2", "type": "library", "bom-ref": "pkg:npm/chai@4.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "test" ] }, { "group": "", "name": "check-error", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "574d312edd88bb5dd8912e9286dd6c0aed4aac82" } ], "purl": "pkg:npm/check-error@1.0.2", "type": "library", "bom-ref": "pkg:npm/check-error@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "commander", "version": "2.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9c99094176e12240cb22d6c5146098400fe0f7d4" } ], "purl": "pkg:npm/commander@2.9.0", "type": "library", "bom-ref": "pkg:npm/commander@2.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "purl": "pkg:npm/concat-map@0.0.1", "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "debug", "version": "2.6.0", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "bc596bcabe7617f11d9fa15361eded5608b8499b" } ], "purl": "pkg:npm/debug@2.6.0", "type": "library", "bom-ref": "pkg:npm/debug@2.6.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ImportedModules", "value": "debug" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 2 } ] } }, { "group": "", "name": "debug", "version": "2.6.8", "scope": "required", "hashes": [ { "alg": "SHA-256", "content": "e731531ca2ede27d188222427da17821d68ff4fc" } ], "purl": "pkg:npm/debug@2.6.8", "type": "library", "bom-ref": "pkg:npm/debug@2.6.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "debug" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 2 } ] } }, { "group": "", "name": "deep-eql", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b1bac06e56f0a76777686d50c9feb75c2ed7679a" } ], "purl": "pkg:npm/deep-eql@2.0.2", "type": "library", "bom-ref": "pkg:npm/deep-eql@2.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "diff", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c9ce393a4b7cbd0b058a725c93df299027868ff9" } ], "purl": "pkg:npm/diff@3.2.0", "type": "library", "bom-ref": "pkg:npm/diff@3.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "purl": "pkg:npm/fs.realpath@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "get-func-name", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "ead774abee72e20409433a066366023dd6887a41" } ], "purl": "pkg:npm/get-func-name@2.0.0", "type": "library", "bom-ref": "pkg:npm/get-func-name@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8" } ], "purl": "pkg:npm/glob@7.1.1", "type": "library", "bom-ref": "pkg:npm/glob@7.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "graceful-readlink", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725" } ], "purl": "pkg:npm/graceful-readlink@1.0.1", "type": "library", "bom-ref": "pkg:npm/graceful-readlink@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "purl": "pkg:npm/growl@1.9.2", "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "has-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa" } ], "purl": "pkg:npm/has-flag@1.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "purl": "pkg:npm/inflight@1.0.6", "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "purl": "pkg:npm/inherits@2.0.3", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "json3", "version": "3.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1" } ], "purl": "pkg:npm/json3@3.3.2", "type": "library", "bom-ref": "pkg:npm/json3@3.3.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._baseassign", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e" } ], "purl": "pkg:npm/lodash._baseassign@3.2.0", "type": "library", "bom-ref": "pkg:npm/lodash._baseassign@3.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._basecopy", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36" } ], "purl": "pkg:npm/lodash._basecopy@3.0.1", "type": "library", "bom-ref": "pkg:npm/lodash._basecopy@3.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._basecreate", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1bc661614daa7fc311b7d03bf16806a0213cf821" } ], "purl": "pkg:npm/lodash._basecreate@3.0.3", "type": "library", "bom-ref": "pkg:npm/lodash._basecreate@3.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash._getnative", "version": "3.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5" } ], "purl": "pkg:npm/lodash._getnative@3.9.1", "type": "library", "bom-ref": "pkg:npm/lodash._getnative@3.9.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "native" ] }, { "group": "", "name": "lodash._isiterateecall", "version": "3.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5203ad7ba425fae842460e696db9cf3e6aac057c" } ], "purl": "pkg:npm/lodash._isiterateecall@3.0.9", "type": "library", "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.create", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7" } ], "purl": "pkg:npm/lodash.create@3.1.1", "type": "library", "bom-ref": "pkg:npm/lodash.create@3.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.isarguments", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2f573d85c6a24289ff00663b491c1d338ff3458a" } ], "purl": "pkg:npm/lodash.isarguments@3.1.0", "type": "library", "bom-ref": "pkg:npm/lodash.isarguments@3.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.isarray", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55" } ], "purl": "pkg:npm/lodash.isarray@3.0.4", "type": "library", "bom-ref": "pkg:npm/lodash.isarray@3.0.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash.keys", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a" } ], "purl": "pkg:npm/lodash.keys@3.1.2", "type": "library", "bom-ref": "pkg:npm/lodash.keys@3.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash", "version": "4.17.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae" } ], "purl": "pkg:npm/lodash@4.17.4", "type": "library", "bom-ref": "pkg:npm/lodash@4.17.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5166e286457f03306064be5497e8dbb0c3d32083" } ], "purl": "pkg:npm/minimatch@3.0.4", "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "purl": "pkg:npm/minimist@0.0.8", "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "purl": "pkg:npm/mkdirp@0.5.1", "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mocha", "version": "3.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d0ef4d332126dbf18d0d640c9b382dd48be97594" } ], "purl": "pkg:npm/mocha@3.4.2", "type": "library", "bom-ref": "pkg:npm/mocha@3.4.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "test" ] }, { "group": "", "name": "ms", "version": "0.7.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "ae25cf2512b3885a1d95d7f037868d8431124765" } ], "purl": "pkg:npm/ms@0.7.2", "type": "library", "bom-ref": "pkg:npm/ms@0.7.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" } ], "purl": "pkg:npm/ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "purl": "pkg:npm/once@1.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "pathval", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b942e6d4bde653005ef6b71361def8727d0645e0" } ], "purl": "pkg:npm/pathval@1.1.0", "type": "library", "bom-ref": "pkg:npm/pathval@1.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "supports-color", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5" } ], "purl": "pkg:npm/supports-color@3.1.2", "type": "library", "bom-ref": "pkg:npm/supports-color@3.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "type-detect", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "46d0cc8553abb7b13a352b0d6dea2fd58f2d9b55" } ], "purl": "pkg:npm/type-detect@3.0.0", "type": "library", "bom-ref": "pkg:npm/type-detect@3.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "type-detect", "version": "4.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0e3f2670b44099b0b46c284d136a7ef49c74c2ea" } ], "purl": "pkg:npm/type-detect@4.0.3", "type": "library", "bom-ref": "pkg:npm/type-detect@4.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "purl": "pkg:npm/wrappy@1.0.2", "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/assertion-error@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/async@2.4.1", "dependsOn": [ "pkg:npm/lodash@4.17.4" ] }, { "ref": "pkg:npm/balanced-match@0.4.2", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.7", "dependsOn": [ "pkg:npm/balanced-match@0.4.2", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/browser-stdout@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/chai@4.0.2", "dependsOn": [ "pkg:npm/assertion-error@1.0.2", "pkg:npm/check-error@1.0.2", "pkg:npm/deep-eql@2.0.2", "pkg:npm/get-func-name@2.0.0", "pkg:npm/pathval@1.1.0", "pkg:npm/type-detect@4.0.3" ] }, { "ref": "pkg:npm/check-error@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.9.0", "dependsOn": [ "pkg:npm/graceful-readlink@1.0.1" ] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.6.0", "dependsOn": [ "pkg:npm/ms@0.7.2" ] }, { "ref": "pkg:npm/debug@2.6.8", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/deep-eql@2.0.2", "dependsOn": [ "pkg:npm/type-detect@3.0.0" ] }, { "ref": "pkg:npm/diff@3.2.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/get-func-name@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.1", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/graceful-readlink@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/json3@3.3.2", "dependsOn": [] }, { "ref": "pkg:npm/lodash._baseassign@3.2.0", "dependsOn": [ "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash.keys@3.1.2" ] }, { "ref": "pkg:npm/lodash._basecopy@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._basecreate@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lodash._getnative@3.9.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._isiterateecall@3.0.9", "dependsOn": [] }, { "ref": "pkg:npm/lodash.create@3.1.1", "dependsOn": [ "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._isiterateecall@3.0.9" ] }, { "ref": "pkg:npm/lodash.isarguments@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarray@3.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lodash.keys@3.1.2", "dependsOn": [ "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4" ] }, { "ref": "pkg:npm/lodash@4.17.4", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.7" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/mocha@3.4.2", "dependsOn": [ "pkg:npm/browser-stdout@1.3.0", "pkg:npm/commander@2.9.0", "pkg:npm/debug@2.6.0", "pkg:npm/diff@3.2.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.1.1", "pkg:npm/growl@1.9.2", "pkg:npm/json3@3.3.2", "pkg:npm/lodash.create@3.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@3.1.2" ] }, { "ref": "pkg:npm/ms@0.7.2", "dependsOn": [] }, { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/pathval@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@3.1.2", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/type-detect@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/type-detect@4.0.3", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/async-promise-queue@1.0.5", "dependsOn": [ "pkg:npm/assertion-error@1.0.2", "pkg:npm/async@2.4.1", "pkg:npm/balanced-match@0.4.2", "pkg:npm/brace-expansion@1.1.7", "pkg:npm/browser-stdout@1.3.0", "pkg:npm/chai@4.0.2", "pkg:npm/check-error@1.0.2", "pkg:npm/commander@2.9.0", "pkg:npm/concat-map@0.0.1", "pkg:npm/debug@2.6.0", "pkg:npm/debug@2.6.8", "pkg:npm/deep-eql@2.0.2", "pkg:npm/diff@3.2.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/fs.realpath@1.0.0", "pkg:npm/get-func-name@2.0.0", "pkg:npm/glob@7.1.1", "pkg:npm/graceful-readlink@1.0.1", "pkg:npm/growl@1.9.2", "pkg:npm/has-flag@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/json3@3.3.2", "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash._isiterateecall@3.0.9", "pkg:npm/lodash.create@3.1.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4", "pkg:npm/lodash.keys@3.1.2", "pkg:npm/lodash@4.17.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/minimist@0.0.8", "pkg:npm/mkdirp@0.5.1", "pkg:npm/mocha@3.4.2", "pkg:npm/ms@0.7.2", "pkg:npm/ms@2.0.0", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1", "pkg:npm/pathval@1.1.0", "pkg:npm/supports-color@3.1.2", "pkg:npm/type-detect@3.0.0", "pkg:npm/type-detect@4.0.3", "pkg:npm/wrappy@1.0.2" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/async-promise-queue@1.0.5" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-11T21:59:09Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'async-promise-queue' with version '1.0.5'." } ] }