{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:c472196d-e362-4f7e-8c90-78d5f24f2834", "version": 1, "metadata": { "timestamp": "2026-11-12T10:07:47Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "sso", "group": "@better-auth", "version": "1.7.22", "description": "SSO plugin for Better Auth", "purl": "pkg:npm/%40better-auth/sso@1.7.22", "bom-ref": "pkg:npm/@better-auth/sso@1.7.22", "author": "Bereket Engida", "properties": [ { "name": "cdx:npm:scripts", "value": "build, dev, lint:package, lint:types, typecheck, test, coverage" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://www.better-auth.com/docs/plugins/sso" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@better-auth\\n@better-fetch\\n@types\\n@xmldom" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@better-auth/core/package.json\\nnode_modules/@better-auth/kysely-adapter/package.json\\nnode_modules/@better-auth/utils/package.json\\nnode_modules/@better-fetch/fetch/package.json\\nnode_modules/@types/body-parser/package.json\\nnode_modules/@types/express/package.json\\nnode_modules/@xmldom/xmldom/package.json\\nnode_modules/better-auth/package.json\\nnode_modules/better-call/package.json\\nnode_modules/body-parser/package.json\\nnode_modules/express/package.json\\nnode_modules/fast-xml-parser/package.json\\nnode_modules/jose/package.json\\nnode_modules/kysely/package.json\\nnode_modules/oauth2-mock-server/package.json\\nnode_modules/samlify/package.json\\nnode_modules/tldts/package.json\\nnode_modules/tsdown/package.json\\nnode_modules/zod/package.json" } ] }, "components": [ { "authors": [ { "name": "Colin McDonnell " } ], "group": "", "name": "zod", "version": "4.6.7", "description": "TypeScript-first schema declaration and validation library with static type inference", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zod@4.6.7", "externalReferences": [ { "type": "website", "url": "https://zod.dev" }, { "type": "vcs", "url": "git+https://github.com/colinhacks/zod.git" } ], "type": "library", "bom-ref": "pkg:npm/zod@4.6.7", "properties": [ { "name": "SrcFile", "value": "node_modules/zod/package.json" }, { "name": "ImportedModules", "value": "zod" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zod/package.json" } ], "concludedValue": "node_modules/zod/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 7 }, { "location": "dist/index.mjs", "line": 1803 }, { "location": "dist/index.mjs", "line": 1804 }, { "location": "dist/index.mjs", "line": 1815 }, { "location": "dist/index.mjs", "line": 1829 }, { "location": "dist/index.mjs", "line": 1830 }, { "location": "dist/index.mjs", "line": 1831 }, { "location": "dist/index.mjs", "line": 1832 }, { "location": "dist/index.mjs", "line": 1833 }, { "location": "dist/index.mjs", "line": 1834 }, { "location": "dist/index.mjs", "line": 1836 }, { "location": "dist/index.mjs", "line": 1837 }, { "location": "dist/index.mjs", "line": 1838 }, { "location": "dist/index.mjs", "line": 1839 }, { "location": "dist/index.mjs", "line": 1840 }, { "location": "dist/index.mjs", "line": 1841 }, { "location": "dist/index.mjs", "line": 1842 }, { "location": "dist/index.mjs", "line": 1844 }, { "location": "dist/index.mjs", "line": 1845 }, { "location": "dist/index.mjs", "line": 1846 }, { "location": "dist/index.mjs", "line": 1847 }, { "location": "dist/index.mjs", "line": 1848 }, { "location": "dist/index.mjs", "line": 1849 }, { "location": "dist/index.mjs", "line": 1850 }, { "location": "dist/index.mjs", "line": 1851 }, { "location": "dist/index.mjs", "line": 1856 }, { "location": "dist/index.mjs", "line": 1857 }, { "location": "dist/index.mjs", "line": 1858 }, { "location": "dist/index.mjs", "line": 1859 }, { "location": "dist/index.mjs", "line": 1860 }, { "location": "dist/index.mjs", "line": 1861 }, { "location": "dist/index.mjs", "line": 1862 }, { "location": "dist/index.mjs", "line": 1863 }, { "location": "dist/index.mjs", "line": 1866 }, { "location": "dist/index.mjs", "line": 1868 }, { "location": "dist/index.mjs", "line": 1869 }, { "location": "dist/index.mjs", "line": 1870 }, { "location": "dist/index.mjs", "line": 1871 }, { "location": "dist/index.mjs", "line": 1872 }, { "location": "dist/index.mjs", "line": 1873 }, { "location": "dist/index.mjs", "line": 1874 }, { "location": "dist/index.mjs", "line": 1875 }, { "location": "dist/index.mjs", "line": 1877 }, { "location": "dist/index.mjs", "line": 1878 }, { "location": "dist/index.mjs", "line": 1879 }, { "location": "dist/index.mjs", "line": 1882 }, { "location": "dist/index.mjs", "line": 1883 }, { "location": "dist/index.mjs", "line": 1884 }, { "location": "dist/index.mjs", "line": 1886 }, { "location": "dist/index.mjs", "line": 1887 }, { "location": "dist/index.mjs", "line": 1890 }, { "location": "dist/index.mjs", "line": 1891 }, { "location": "dist/index.mjs", "line": 1893 }, { "location": "dist/index.mjs", "line": 1894 }, { "location": "dist/index.mjs", "line": 1896 }, { "location": "dist/index.mjs", "line": 1897 }, { "location": "dist/index.mjs", "line": 1900 }, { "location": "dist/index.mjs", "line": 1901 }, { "location": "dist/index.mjs", "line": 1902 }, { "location": "dist/index.mjs", "line": 1903 }, { "location": "dist/index.mjs", "line": 1904 }, { "location": "dist/index.mjs", "line": 1905 }, { "location": "dist/index.mjs", "line": 1906 }, { "location": "dist/index.mjs", "line": 1907 }, { "location": "dist/index.mjs", "line": 1908 }, { "location": "dist/index.mjs", "line": 1910 }, { "location": "dist/index.mjs", "line": 1911 }, { "location": "dist/index.mjs", "line": 1912 }, { "location": "dist/index.mjs", "line": 1913 }, { "location": "dist/index.mjs", "line": 1914 }, { "location": "dist/index.mjs", "line": 1915 }, { "location": "dist/index.mjs", "line": 1918 }, { "location": "dist/index.mjs", "line": 1919 }, { "location": "dist/index.mjs", "line": 1920 }, { "location": "dist/index.mjs", "line": 1921 }, { "location": "dist/index.mjs", "line": 1924 }, { "location": "dist/index.mjs", "line": 1925 }, { "location": "dist/index.mjs", "line": 1930 }, { "location": "dist/index.mjs", "line": 1931 }, { "location": "dist/index.mjs", "line": 1932 }, { "location": "dist/index.mjs", "line": 1941 }, { "location": "dist/index.mjs", "line": 2242 }, { "location": "dist/index.mjs", "line": 2452 }, { "location": "dist/index.mjs", "line": 2499 }, { "location": "dist/index.mjs", "line": 3131 }, { "location": "dist/index.mjs", "line": 3515 }, { "location": "dist/index.mjs", "line": 3516 }, { "location": "dist/index.mjs", "line": 3517 }, { "location": "dist/index.mjs", "line": 3518 }, { "location": "dist/index.mjs", "line": 3519 }, { "location": "dist/index.mjs", "line": 3520 }, { "location": "dist/index.mjs", "line": 3521 }, { "location": "dist/index.mjs", "line": 3522 }, { "location": "dist/index.mjs", "line": 3523 }, { "location": "dist/index.mjs", "line": 3524 }, { "location": "dist/index.mjs", "line": 3526 }, { "location": "dist/index.mjs", "line": 3527 }, { "location": "dist/index.mjs", "line": 3747 }, { "location": "dist/index.mjs", "line": 3748 }, { "location": "dist/index.mjs", "line": 3749 }, { "location": "dist/index.mjs", "line": 3750 }, { "location": "dist/index.mjs", "line": 3751 }, { "location": "dist/index.mjs", "line": 4182 }, { "location": "dist/index.mjs", "line": 4183 }, { "location": "dist/index.mjs", "line": 4184 }, { "location": "dist/index.mjs", "line": 4190 }, { "location": "dist/index.mjs", "line": 4258 }, { "location": "dist/index.mjs", "line": 4259 }, { "location": "dist/index.mjs", "line": 4260 }, { "location": "dist/index.mjs", "line": 4261 }, { "location": "dist/index.mjs", "line": 4262 }, { "location": "dist/index.mjs", "line": 4263 }, { "location": "dist/index.mjs", "line": 4372 }, { "location": "src/routes/domain-verification.ts", "line": 8 }, { "location": "src/routes/domain-verification.ts", "line": 16 }, { "location": "src/routes/domain-verification.ts", "line": 17 }, { "location": "src/routes/providers.ts", "line": 13 }, { "location": "src/routes/providers.ts", "line": 633 }, { "location": "src/routes/providers.ts", "line": 634 }, { "location": "src/routes/providers.ts", "line": 1088 }, { "location": "src/routes/providers.ts", "line": 1089 }, { "location": "src/routes/schemas.ts", "line": 4 }, { "location": "src/routes/schemas.ts", "line": 8 }, { "location": "src/routes/schemas.ts", "line": 10 }, { "location": "src/routes/schemas.ts", "line": 36 }, { "location": "src/routes/schemas.ts", "line": 68 }, { "location": "src/routes/schemas.ts", "line": 70 }, { "location": "src/routes/schemas.ts", "line": 74 }, { "location": "src/routes/schemas.ts", "line": 81 }, { "location": "src/routes/schemas.ts", "line": 85 }, { "location": "src/routes/schemas.ts", "line": 91 }, { "location": "src/routes/schemas.ts", "line": 95 }, { "location": "src/routes/schemas.ts", "line": 97 }, { "location": "src/routes/schemas.ts", "line": 101 }, { "location": "src/routes/schemas.ts", "line": 105 }, { "location": "src/routes/schemas.ts", "line": 111 }, { "location": "src/routes/schemas.ts", "line": 117 }, { "location": "src/routes/schemas.ts", "line": 123 }, { "location": "src/routes/schemas.ts", "line": 127 }, { "location": "src/routes/schemas.ts", "line": 128 }, { "location": "src/routes/schemas.ts", "line": 134 }, { "location": "src/routes/schemas.ts", "line": 135 }, { "location": "src/routes/schemas.ts", "line": 136 }, { "location": "src/routes/schemas.ts", "line": 143 }, { "location": "src/routes/schemas.ts", "line": 148 }, { "location": "src/routes/schemas.ts", "line": 153 }, { "location": "src/routes/schemas.ts", "line": 158 }, { "location": "src/routes/schemas.ts", "line": 161 }, { "location": "src/routes/schemas.ts", "line": 162 }, { "location": "src/routes/schemas.ts", "line": 163 }, { "location": "src/routes/schemas.ts", "line": 168 }, { "location": "src/routes/schemas.ts", "line": 169 }, { "location": "src/routes/schemas.ts", "line": 176 }, { "location": "src/routes/schemas.ts", "line": 177 }, { "location": "src/routes/schemas.ts", "line": 183 }, { "location": "src/routes/schemas.ts", "line": 188 }, { "location": "src/routes/schemas.ts", "line": 192 }, { "location": "src/routes/schemas.ts", "line": 199 }, { "location": "src/routes/schemas.ts", "line": 200 }, { "location": "src/routes/schemas.ts", "line": 201 }, { "location": "src/routes/schemas.ts", "line": 202 }, { "location": "src/routes/schemas.ts", "line": 203 }, { "location": "src/routes/schemas.ts", "line": 204 }, { "location": "src/routes/schemas.ts", "line": 206 }, { "location": "src/routes/schemas.ts", "line": 207 }, { "location": "src/routes/schemas.ts", "line": 210 }, { "location": "src/routes/schemas.ts", "line": 218 }, { "location": "src/routes/schemas.ts", "line": 220 }, { "location": "src/routes/schemas.ts", "line": 221 }, { "location": "src/routes/schemas.ts", "line": 222 }, { "location": "src/routes/schemas.ts", "line": 228 }, { "location": "src/routes/schemas.ts", "line": 231 }, { "location": "src/routes/schemas.ts", "line": 232 }, { "location": "src/routes/schemas.ts", "line": 235 }, { "location": "src/routes/schemas.ts", "line": 236 }, { "location": "src/routes/schemas.ts", "line": 244 }, { "location": "src/routes/schemas.ts", "line": 245 }, { "location": "src/routes/schemas.ts", "line": 248 }, { "location": "src/routes/schemas.ts", "line": 249 }, { "location": "src/routes/schemas.ts", "line": 259 }, { "location": "src/routes/schemas.ts", "line": 260 }, { "location": "src/routes/schemas.ts", "line": 268 }, { "location": "src/routes/schemas.ts", "line": 270 }, { "location": "src/routes/schemas.ts", "line": 271 }, { "location": "src/routes/schemas.ts", "line": 272 }, { "location": "src/routes/schemas.ts", "line": 273 }, { "location": "src/routes/schemas.ts", "line": 274 }, { "location": "src/routes/schemas.ts", "line": 275 }, { "location": "src/routes/schemas.ts", "line": 276 }, { "location": "src/routes/schemas.ts", "line": 277 }, { "location": "src/routes/schemas.ts", "line": 280 }, { "location": "src/routes/schemas.ts", "line": 281 }, { "location": "src/routes/schemas.ts", "line": 282 }, { "location": "src/routes/schemas.ts", "line": 283 }, { "location": "src/routes/schemas.ts", "line": 284 }, { "location": "src/routes/schemas.ts", "line": 285 }, { "location": "src/routes/schemas.ts", "line": 289 }, { "location": "src/routes/schemas.ts", "line": 290 }, { "location": "src/routes/schemas.ts", "line": 294 }, { "location": "src/routes/schemas.ts", "line": 298 }, { "location": "src/routes/schemas.ts", "line": 304 }, { "location": "src/routes/schemas.ts", "line": 311 }, { "location": "src/routes/schemas.ts", "line": 327 }, { "location": "src/routes/schemas.ts", "line": 328 }, { "location": "src/routes/schemas.ts", "line": 329 }, { "location": "src/routes/schemas.ts", "line": 343 }, { "location": "src/routes/sso.ts", "line": 41 }, { "location": "src/routes/sso.ts", "line": 144 }, { "location": "src/routes/sso.ts", "line": 145 }, { "location": "src/routes/sso.ts", "line": 776 }, { "location": "src/routes/sso.ts", "line": 777 }, { "location": "src/routes/sso.ts", "line": 784 }, { "location": "src/routes/sso.ts", "line": 790 }, { "location": "src/routes/sso.ts", "line": 797 }, { "location": "src/routes/sso.ts", "line": 804 }, { "location": "src/routes/sso.ts", "line": 807 }, { "location": "src/routes/sso.ts", "line": 813 }, { "location": "src/routes/sso.ts", "line": 820 }, { "location": "src/routes/sso.ts", "line": 821 }, { "location": "src/routes/sso.ts", "line": 826 }, { "location": "src/routes/sso.ts", "line": 834 }, { "location": "src/routes/sso.ts", "line": 841 }, { "location": "src/routes/sso.ts", "line": 1255 }, { "location": "src/routes/sso.ts", "line": 1256 }, { "location": "src/routes/sso.ts", "line": 1257 }, { "location": "src/routes/sso.ts", "line": 1258 }, { "location": "src/routes/sso.ts", "line": 1259 }, { "location": "src/routes/sso.ts", "line": 2030 }, { "location": "src/routes/sso.ts", "line": 2031 }, { "location": "src/routes/sso.ts", "line": 2032 }, { "location": "src/routes/sso.ts", "line": 2041 }, { "location": "src/routes/sso.ts", "line": 2043 }, { "location": "src/routes/sso.ts", "line": 2175 }, { "location": "src/routes/sso.ts", "line": 2176 }, { "location": "src/routes/sso.ts", "line": 2177 }, { "location": "src/routes/sso.ts", "line": 2178 }, { "location": "src/routes/sso.ts", "line": 2179 }, { "location": "src/routes/sso.ts", "line": 2180 }, { "location": "src/routes/sso.ts", "line": 2448 }, { "location": "src/routes/sso.ts", "line": 2449 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 2 } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "tsdown", "version": "0.23.1", "description": "The Elegant Bundler for Libraries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsdown@0.23.1", "externalReferences": [ { "type": "website", "url": "http://tsdown.dev/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/tsdown.git" } ], "type": "library", "bom-ref": "pkg:npm/tsdown@0.23.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tsdown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsdown/package.json" } ], "concludedValue": "node_modules/tsdown/package.json" } ] } }, { "authors": [ { "name": "Rémi Berson" } ], "group": "", "name": "tldts", "version": "7.4.3", "description": "Library to work against complex domain names, subdomains and URIs.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tldts@7.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/remusao/tldts#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/remusao/tldts.git" } ], "type": "library", "bom-ref": "pkg:npm/tldts@7.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/tldts/package.json" }, { "name": "ImportedModules", "value": "tldts,getHostname,tldts/getHostname" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tldts/package.json" } ], "concludedValue": "node_modules/tldts/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 5 }, { "location": "dist/index.mjs", "line": 120 }, { "location": "src/utils.ts", "line": 2 }, { "location": "src/utils.ts", "line": 102 } ] } }, { "authors": [ { "name": "tngan" } ], "group": "", "name": "samlify", "version": "2.13.1", "description": "Node.js library for SAML SSO", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/samlify@2.13.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tngan/samlify" } ], "type": "library", "bom-ref": "pkg:npm/samlify@2.13.1", "properties": [ { "name": "SrcFile", "value": "node_modules/samlify/package.json" }, { "name": "ImportedModules", "value": "samlify,samlify/types/src/flow,FlowResult,samlify/types/src/flow/FlowResult,samlify/types/src/entity,BindingContext,samlify/types/src/entity/BindingContext,samlify/types/src/types,RequestInfo,samlify/types/src/types/RequestInfo" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/samlify/package.json" } ], "concludedValue": "node_modules/samlify/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 17 }, { "location": "src/routes/saml-pipeline.ts", "line": 13 }, { "location": "src/routes/sso.ts", "line": 39 }, { "location": "src/routes/sso.ts", "line": 40 }, { "location": "src/samlify.ts", "line": 1 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 4 } ] }, "tags": [ "saml" ] }, { "authors": [ { "name": "Jorge Poveda " } ], "group": "", "name": "oauth2-mock-server", "version": "9.0.0", "description": "Configurable OAuth2/OpenID Connect server for automated testing and development purposes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth2-mock-server@9.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/axa-group/oauth2-mock-server.git" } ], "type": "library", "bom-ref": "pkg:npm/oauth2-mock-server@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth2-mock-server/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth2-mock-server/package.json" } ], "concludedValue": "node_modules/oauth2-mock-server/package.json" } ] }, "tags": [ "connect" ] }, { "authors": [ { "name": "Sami Koskimäki " } ], "group": "", "name": "kysely", "version": "0.28.17", "description": "Type safe SQL query builder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/kysely@0.28.17", "externalReferences": [ { "type": "website", "url": "https://kysely.dev" }, { "type": "vcs", "url": "git://github.com/kysely-org/kysely.git" } ], "type": "library", "bom-ref": "pkg:npm/kysely@0.28.17", "properties": [ { "name": "SrcFile", "value": "node_modules/kysely/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/kysely/package.json" } ], "concludedValue": "node_modules/kysely/package.json" } ] }, "tags": [ "sql" ] }, { "authors": [ { "name": "Filip Skokan " } ], "group": "", "name": "jose", "version": "6.2.3", "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jose@6.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/panva/jose" } ], "type": "library", "bom-ref": "pkg:npm/jose@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jose/package.json" }, { "name": "ImportedModules", "value": "jose,createRemoteJWKSet,jose/createRemoteJWKSet,customFetch,jose/customFetch" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jose/package.json" } ], "concludedValue": "node_modules/jose/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 13 }, { "location": "dist/index.mjs", "line": 568 }, { "location": "src/oidc/discovery.ts", "line": 18 }, { "location": "src/oidc/discovery.ts", "line": 434 } ] }, "tags": [ "security" ] }, { "authors": [ { "name": "Amit Gupta (https://solothought.com)" } ], "group": "", "name": "fast-xml-parser", "version": "5.12.0", "description": "Validate XML, Parse XML, Build XML without C/C++ based libraries", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-xml-parser@5.12.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/NaturalIntelligence/fast-xml-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-xml-parser@5.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-xml-parser/package.json" }, { "name": "ImportedModules", "value": "fast-xml-parser,XMLParser,fast-xml-parser/XMLParser,XMLValidator,fast-xml-parser/XMLValidator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-xml-parser/package.json" } ], "concludedValue": "node_modules/fast-xml-parser/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 3 }, { "location": "dist/index.mjs", "line": 4429 }, { "location": "src/index.ts", "line": 3 }, { "location": "src/index.ts", "line": 120 }, { "location": "src/saml/parser.ts", "line": 1 } ] }, "tags": [ "parse", "xml" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "express", "version": "5.2.1", "description": "Fast, unopinionated, minimalist web framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/express@5.2.1", "externalReferences": [ { "type": "website", "url": "https://expressjs.com/" } ], "type": "framework", "bom-ref": "pkg:npm/express@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/express/package.json" } ], "concludedValue": "node_modules/express/package.json" } ] }, "tags": [ "framework", "web" ] }, { "group": "", "name": "body-parser", "version": "2.4.0", "description": "Node.js body parsing middleware", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/body-parser@2.4.0", "type": "library", "bom-ref": "pkg:npm/body-parser@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/package.json" } ], "concludedValue": "node_modules/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "better-call", "version": "1.4.5", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/better-call@1.4.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/better-auth/better-call.git" } ], "type": "library", "bom-ref": "pkg:npm/better-call@1.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/better-call/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/better-call/package.json" } ], "concludedValue": "node_modules/better-call/package.json" } ] } }, { "group": "", "name": "better-auth", "version": "1.7.22", "description": "The most comprehensive authentication framework for TypeScript.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/better-auth@1.7.22", "externalReferences": [ { "type": "website", "url": "https://better-auth.com" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ], "type": "framework", "bom-ref": "pkg:npm/better-auth@1.7.22", "properties": [ { "name": "SrcFile", "value": "node_modules/better-auth/package.json" }, { "name": "ImportedModules", "value": "better-auth/api,APIError,better-auth/api/APIError,addOAuthServerContext,better-auth/api/addOAuthServerContext,createAuthEndpoint,better-auth/api/createAuthEndpoint,createAuthMiddleware,better-auth/api/createAuthMiddleware,generateGenericState,better-auth/api/generateGenericState,getSessionFromCtx,better-auth/api/getSessionFromCtx,parseGenericState,better-auth/api/parseGenericState,sessionMiddleware,better-auth/api/sessionMiddleware,better-auth/crypto,generateRandomString,better-auth/crypto/generateRandomString,better-auth/db,parseInputData,better-auth/db/parseInputData,toZodSchema,better-auth/db/toZodSchema,better-auth/cookies,deleteSessionCookie,better-auth/cookies/deleteSessionCookie,setAccountCookie,better-auth/cookies/setAccountCookie,setSessionCookie,better-auth/cookies/setSessionCookie,better-auth/oauth2,additionalAuthorizationParamsSchema,better-auth/oauth2/additionalAuthorizationParamsSchema,generateState,better-auth/oauth2/generateState,handleOAuthUserInfo,better-auth/oauth2/handleOAuthUserInfo,parseState,better-auth/oauth2/parseState,better-auth/client,BetterAuthClientPlugin,better-auth/client/BetterAuthClientPlugin,DBFieldAttribute,better-auth/db/DBFieldAttribute,better-auth,AuthContext,better-auth/AuthContext,BetterAuthPlugin,better-auth/BetterAuthPlugin,Verification,better-auth/Verification,GenericEndpointContext,better-auth/GenericEndpointContext,OAuth2Tokens,better-auth/OAuth2Tokens,User,better-auth/User,PrivateKeyJwtSigningAlgorithm,better-auth/PrivateKeyJwtSigningAlgorithm,TokenEndpointAuth,better-auth/TokenEndpointAuth,StateData,better-auth/StateData,Awaitable,better-auth/Awaitable,DBTransactionAdapter,better-auth/DBTransactionAdapter,FieldAttributeToObject,better-auth/db/FieldAttributeToObject,InferAdditionalFieldsFromPluginOptions,better-auth/db/InferAdditionalFieldsFromPluginOptions,RemoveFieldsWithReturnedFalse,better-auth/db/RemoveFieldsWithReturnedFalse,DBAdapter,better-auth/DBAdapter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/better-auth/package.json" } ], "concludedValue": "node_modules/better-auth/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 2 }, { "location": "dist/index.mjs", "line": 1276 }, { "location": "dist/index.mjs", "line": 2214 }, { "location": "dist/index.mjs", "line": 2262 }, { "location": "dist/index.mjs", "line": 2346 }, { "location": "dist/index.mjs", "line": 2449 }, { "location": "dist/index.mjs", "line": 2521 }, { "location": "dist/index.mjs", "line": 2558 }, { "location": "dist/index.mjs", "line": 2643 }, { "location": "dist/index.mjs", "line": 2657 }, { "location": "dist/index.mjs", "line": 3133 }, { "location": "dist/index.mjs", "line": 3156 }, { "location": "dist/index.mjs", "line": 3530 }, { "location": "dist/index.mjs", "line": 3686 }, { "location": "dist/index.mjs", "line": 4115 }, { "location": "dist/index.mjs", "line": 4138 }, { "location": "dist/index.mjs", "line": 4150 }, { "location": "dist/index.mjs", "line": 4187 }, { "location": "dist/index.mjs", "line": 4211 }, { "location": "dist/index.mjs", "line": 4266 }, { "location": "dist/index.mjs", "line": 4275 }, { "location": "dist/index.mjs", "line": 4291 }, { "location": "dist/index.mjs", "line": 4312 }, { "location": "dist/index.mjs", "line": 4318 }, { "location": "dist/index.mjs", "line": 4341 }, { "location": "dist/index.mjs", "line": 4343 }, { "location": "dist/index.mjs", "line": 4362 }, { "location": "dist/index.mjs", "line": 4370 }, { "location": "dist/index.mjs", "line": 4376 }, { "location": "dist/index.mjs", "line": 4380 }, { "location": "dist/index.mjs", "line": 4382 }, { "location": "dist/index.mjs", "line": 4565 }, { "location": "dist/index.mjs", "line": 4567 }, { "location": "dist/index.mjs", "line": 4581 }, { "location": "src/index.ts", "line": 2 }, { "location": "src/index.ts", "line": 415 }, { "location": "src/index.ts", "line": 419 }, { "location": "src/index.ts", "line": 444 }, { "location": "src/oidc/errors.ts", "line": 8 }, { "location": "src/routes/domain-verification.ts", "line": 6 }, { "location": "src/routes/domain-verification.ts", "line": 61 }, { "location": "src/routes/domain-verification.ts", "line": 129 }, { "location": "src/routes/helpers.ts", "line": 2 }, { "location": "src/routes/providers.ts", "line": 12 }, { "location": "src/routes/providers.ts", "line": 553 }, { "location": "src/routes/providers.ts", "line": 679 }, { "location": "src/routes/providers.ts", "line": 823 }, { "location": "src/routes/providers.ts", "line": 1083 }, { "location": "src/routes/saml-pipeline.ts", "line": 10 }, { "location": "src/routes/schemas.ts", "line": 2 }, { "location": "src/routes/sso.ts", "line": 26 }, { "location": "src/routes/sso.ts", "line": 149 }, { "location": "src/routes/sso.ts", "line": 214 }, { "location": "src/routes/sso.ts", "line": 850 }, { "location": "src/routes/sso.ts", "line": 1136 }, { "location": "src/routes/sso.ts", "line": 1934 }, { "location": "src/routes/sso.ts", "line": 1959 }, { "location": "src/routes/sso.ts", "line": 1978 }, { "location": "src/routes/sso.ts", "line": 2036 }, { "location": "src/routes/sso.ts", "line": 2081 }, { "location": "src/routes/sso.ts", "line": 2184 }, { "location": "src/routes/sso.ts", "line": 2200 }, { "location": "src/routes/sso.ts", "line": 2235 }, { "location": "src/routes/sso.ts", "line": 2277 }, { "location": "src/routes/sso.ts", "line": 2295 }, { "location": "src/routes/sso.ts", "line": 2351 }, { "location": "src/routes/sso.ts", "line": 2354 }, { "location": "src/routes/sso.ts", "line": 2411 }, { "location": "src/routes/sso.ts", "line": 2444 }, { "location": "src/routes/sso.ts", "line": 2456 }, { "location": "src/routes/sso.ts", "line": 2471 }, { "location": "src/routes/sso.ts", "line": 2484 }, { "location": "src/saml/algorithms.ts", "line": 1 }, { "location": "src/saml/assertions.ts", "line": 4 }, { "location": "src/saml/cert.ts", "line": 7 }, { "location": "src/saml/cert.ts", "line": 39 }, { "location": "src/saml/response-binding.ts", "line": 3 }, { "location": "src/saml/timestamp.ts", "line": 1 }, { "location": "src/saml-state.ts", "line": 6 }, { "location": "src/saml-state.ts", "line": 46 }, { "location": "src/saml-state.ts", "line": 69 }, { "location": "src/user-resolution.ts", "line": 7 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 1 }, { "location": "dist/index.mjs", "line": 6 }, { "location": "dist/index.mjs", "line": 19 }, { "location": "dist/index.mjs", "line": 24 }, { "location": "dist/index.mjs", "line": 25 }, { "location": "src/client.ts", "line": 1 }, { "location": "src/client.ts", "line": 2 }, { "location": "src/index.ts", "line": 1 }, { "location": "src/linking/org-assignment.ts", "line": 1 }, { "location": "src/routes/domain-verification.ts", "line": 1 }, { "location": "src/routes/domain-verification.ts", "line": 7 }, { "location": "src/routes/providers.ts", "line": 7 }, { "location": "src/routes/saml-pipeline.ts", "line": 9 }, { "location": "src/routes/saml-pipeline.ts", "line": 11 }, { "location": "src/routes/saml-pipeline.ts", "line": 12 }, { "location": "src/routes/schemas.ts", "line": 3 }, { "location": "src/routes/sso.ts", "line": 19 }, { "location": "src/routes/sso.ts", "line": 31 }, { "location": "src/routes/sso.ts", "line": 32 }, { "location": "src/routes/sso.ts", "line": 38 }, { "location": "src/saml-state.ts", "line": 1 }, { "location": "src/saml-state.ts", "line": 7 }, { "location": "src/types.ts", "line": 6 }, { "location": "src/types.ts", "line": 12 }, { "location": "src/user-resolution.ts", "line": 6 }, { "location": "src/user-resolution.ts", "line": 8 }, { "location": "dist/client.d.mts", "line": 2 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 5 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 6 }, { "location": "dist/index.mjs", "line": 2547 }, { "location": "dist/index.mjs", "line": 2631 }, { "location": "dist/index.mjs", "line": 3497 }, { "location": "src/routes/domain-verification.ts", "line": 113 }, { "location": "src/routes/sso.ts", "line": 727 }, { "location": "src/saml-state.ts", "line": 28 }, { "location": "dist/index.mjs", "line": 1810 }, { "location": "dist/index.mjs", "line": 1824 }, { "location": "src/routes/schemas.ts", "line": 29 }, { "location": "src/routes/schemas.ts", "line": 62 }, { "location": "dist/index.mjs", "line": 3082 }, { "location": "dist/index.mjs", "line": 3083 }, { "location": "dist/index.mjs", "line": 4035 }, { "location": "dist/index.mjs", "line": 4036 }, { "location": "dist/index.mjs", "line": 4326 }, { "location": "dist/index.mjs", "line": 4364 }, { "location": "dist/index.mjs", "line": 4423 }, { "location": "src/routes/saml-pipeline.ts", "line": 825 }, { "location": "src/routes/saml-pipeline.ts", "line": 827 }, { "location": "src/routes/sso.ts", "line": 1826 }, { "location": "src/routes/sso.ts", "line": 1828 }, { "location": "src/routes/sso.ts", "line": 2321 }, { "location": "src/routes/sso.ts", "line": 2418 }, { "location": "src/routes/sso.ts", "line": 2573 }, { "location": "dist/index.mjs", "line": 3020 }, { "location": "dist/index.mjs", "line": 3687 }, { "location": "dist/index.mjs", "line": 3779 }, { "location": "dist/index.mjs", "line": 3965 }, { "location": "dist/index.mjs", "line": 4116 }, { "location": "dist/index.mjs", "line": 4162 }, { "location": "src/routes/saml-pipeline.ts", "line": 729 }, { "location": "src/routes/sso.ts", "line": 1139 }, { "location": "src/routes/sso.ts", "line": 1309 }, { "location": "src/routes/sso.ts", "line": 1728 }, { "location": "src/routes/sso.ts", "line": 1937 }, { "location": "src/routes/sso.ts", "line": 1994 } ] }, "tags": [ "framework" ] }, { "group": "@xmldom", "name": "xmldom", "version": "0.9.12", "description": "A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40xmldom/xmldom@0.9.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xmldom/xmldom" }, { "type": "vcs", "url": "git://github.com/xmldom/xmldom.git" } ], "type": "library", "bom-ref": "pkg:npm/@xmldom/xmldom@0.9.12", "properties": [ { "name": "SrcFile", "value": "node_modules/@xmldom/xmldom/package.json" }, { "name": "ImportedModules", "value": "@xmldom/xmldom,DOMParser,@xmldom/xmldom/DOMParser,Element,@xmldom/xmldom/Element" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@xmldom/xmldom/package.json" } ], "concludedValue": "node_modules/@xmldom/xmldom/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 16 }, { "location": "src/routes/saml-pipeline.ts", "line": 7 }, { "location": "src/routes/saml-pipeline.ts", "line": 8 }, { "location": "src/saml/assertions.ts", "line": 2 }, { "location": "src/saml/assertions.ts", "line": 3 }, { "location": "src/saml/response-binding.ts", "line": 1 }, { "location": "src/saml/response-binding.ts", "line": 2 } ] }, "tags": [ "xml" ] }, { "group": "@types", "name": "express", "version": "5.0.6", "description": "TypeScript definitions for express", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/express@5.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/express@5.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/express/package.json" } ], "concludedValue": "node_modules/@types/express/package.json" } ] } }, { "group": "@types", "name": "body-parser", "version": "1.19.6", "description": "TypeScript definitions for body-parser", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/body-parser@1.19.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/body-parser" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/body-parser@1.19.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/body-parser/package.json" } ], "concludedValue": "node_modules/@types/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "@better-fetch", "name": "fetch", "version": "1.3.3", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-fetch/fetch@1.3.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/better-auth/better-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/@better-fetch/fetch@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-fetch/fetch/package.json" }, { "name": "ImportedModules", "value": "@better-fetch/fetch,betterFetch,@better-fetch/fetch/betterFetch,BetterFetchOption,@better-fetch/fetch/BetterFetchOption" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-fetch/fetch/package.json" } ], "concludedValue": "node_modules/@better-fetch/fetch/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 12 }, { "location": "dist/index.mjs", "line": 535 }, { "location": "src/oidc/discovery.ts", "line": 16 }, { "location": "src/oidc/discovery.ts", "line": 17 }, { "location": "src/oidc/discovery.ts", "line": 359 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 3 } ] } }, { "authors": [ { "name": "Bereket Engida" } ], "group": "@better-auth", "name": "utils", "version": "0.5.1", "description": "A collection of utilities for better-auth", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-auth/utils@0.5.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/better-auth/utils.git" } ], "type": "library", "bom-ref": "pkg:npm/@better-auth/utils@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-auth/utils/package.json" }, { "name": "ImportedModules", "value": "@better-auth/utils/base64,base64,@better-auth/utils/base64/base64,base64Url,@better-auth/utils/base64/base64Url,@better-auth/utils/hash,createHash,@better-auth/utils/hash/createHash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-auth/utils/package.json" } ], "concludedValue": "node_modules/@better-auth/utils/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 14 }, { "location": "dist/index.mjs", "line": 913 }, { "location": "dist/index.mjs", "line": 1188 }, { "location": "src/provider-reference.ts", "line": 1 }, { "location": "src/provider-reference.ts", "line": 104 }, { "location": "src/saml/assertions.ts", "line": 1 }, { "location": "src/saml/assertions.ts", "line": 43 }, { "location": "dist/index.mjs", "line": 15 }, { "location": "dist/index.mjs", "line": 905 }, { "location": "src/provider-reference.ts", "line": 2 }, { "location": "src/provider-reference.ts", "line": 93 } ] } }, { "group": "@better-auth", "name": "kysely-adapter", "version": "1.7.22", "description": "Kysely adapter for Better Auth", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-auth/kysely-adapter@1.7.22", "externalReferences": [ { "type": "website", "url": "https://www.better-auth.com/docs/adapters/kysely" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ], "type": "library", "bom-ref": "pkg:npm/@better-auth/kysely-adapter@1.7.22", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-auth/kysely-adapter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-auth/kysely-adapter/package.json" } ], "concludedValue": "node_modules/@better-auth/kysely-adapter/package.json" } ] } }, { "group": "@better-auth", "name": "core", "version": "1.7.22", "description": "The most comprehensive authentication framework for TypeScript.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40better-auth/core@1.7.22", "externalReferences": [ { "type": "website", "url": "https://www.better-auth.com" }, { "type": "vcs", "url": "git+https://github.com/better-auth/better-auth.git" } ], "type": "framework", "bom-ref": "pkg:npm/@better-auth/core@1.7.22", "properties": [ { "name": "SrcFile", "value": "node_modules/@better-auth/core/package.json" }, { "name": "ImportedModules", "value": "@better-auth/core/context,getCurrentAdapter,@better-auth/core/context/getCurrentAdapter,getCurrentDBAdapterAsyncLocalStorage,@better-auth/core/context/getCurrentDBAdapterAsyncLocalStorage,runWithTransaction,@better-auth/core/context/runWithTransaction,@better-auth/core/utils/db,filterOutputFields,@better-auth/core/utils/db/filterOutputFields,@better-auth/core/oauth2/internal,verifyIdToken,@better-auth/core/oauth2/internal/verifyIdToken,@better-auth/core/utils/host,classifyHost,@better-auth/core/utils/host/classifyHost,isPublicRoutableHost,@better-auth/core/utils/host/isPublicRoutableHost,@better-auth/core/utils/error-codes,defineErrorCodes,@better-auth/core/utils/error-codes/defineErrorCodes,@better-auth/core/api,HIDE_METADATA,@better-auth/core/api/HIDE_METADATA,@better-auth/core/oauth2,PRIVATE_KEY_JWT_SIGNING_ALGORITHMS,@better-auth/core/oauth2/PRIVATE_KEY_JWT_SIGNING_ALGORITHMS,authorizationCodeRequest,@better-auth/core/oauth2/authorizationCodeRequest,createAuthorizationURL,@better-auth/core/oauth2/createAuthorizationURL,createPrivateKeyJwtClientAssertionGetter,@better-auth/core/oauth2/createPrivateKeyJwtClientAssertionGetter,getOAuth2Tokens,@better-auth/core/oauth2/getOAuth2Tokens,parseStringBoolean,@better-auth/core/oauth2/parseStringBoolean,@better-auth/core/utils/is-api-error,isAPIError,@better-auth/core/utils/is-api-error/isAPIError,@better-auth/core/utils/url,appendQueryParams,@better-auth/core/utils/url/appendQueryParams,@better-auth/core/db/adapter,DBAdapter,@better-auth/core/db/adapter/DBAdapter,@better-auth/core/db,DBFieldAttribute,@better-auth/core/db/DBFieldAttribute,@better-auth/core,GenericEndpointContext,@better-auth/core/GenericEndpointContext" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@better-auth/core/package.json" } ], "concludedValue": "node_modules/@better-auth/core/package.json" } ], "occurrences": [ { "location": "dist/index.mjs", "line": 8 }, { "location": "dist/index.mjs", "line": 2043 }, { "location": "dist/index.mjs", "line": 2367 }, { "location": "dist/index.mjs", "line": 2368 }, { "location": "dist/index.mjs", "line": 2467 }, { "location": "dist/index.mjs", "line": 2468 }, { "location": "dist/index.mjs", "line": 3001 }, { "location": "dist/index.mjs", "line": 3003 }, { "location": "dist/index.mjs", "line": 3015 }, { "location": "dist/index.mjs", "line": 3945 }, { "location": "dist/index.mjs", "line": 3947 }, { "location": "dist/index.mjs", "line": 3960 }, { "location": "src/routes/providers.ts", "line": 4 }, { "location": "src/routes/providers.ts", "line": 275 }, { "location": "src/routes/providers.ts", "line": 877 }, { "location": "src/routes/providers.ts", "line": 880 }, { "location": "src/routes/providers.ts", "line": 1119 }, { "location": "src/routes/providers.ts", "line": 1120 }, { "location": "src/routes/saml-pipeline.ts", "line": 4 }, { "location": "src/routes/saml-pipeline.ts", "line": 684 }, { "location": "src/routes/saml-pipeline.ts", "line": 691 }, { "location": "src/routes/saml-pipeline.ts", "line": 717 }, { "location": "src/routes/sso.ts", "line": 5 }, { "location": "src/routes/sso.ts", "line": 1681 }, { "location": "src/routes/sso.ts", "line": 1689 }, { "location": "src/routes/sso.ts", "line": 1716 }, { "location": "src/user-resolution.ts", "line": 1 }, { "location": "dist/index.mjs", "line": 9 }, { "location": "dist/index.mjs", "line": 2109 }, { "location": "src/routes/providers.ts", "line": 6 }, { "location": "src/routes/providers.ts", "line": 384 }, { "location": "dist/index.mjs", "line": 10 }, { "location": "dist/index.mjs", "line": 569 }, { "location": "src/oidc/discovery.ts", "line": 11 }, { "location": "src/oidc/discovery.ts", "line": 438 }, { "location": "dist/index.mjs", "line": 11 }, { "location": "dist/index.mjs", "line": 411 }, { "location": "dist/index.mjs", "line": 469 }, { "location": "dist/index.mjs", "line": 482 }, { "location": "src/oidc/discovery.ts", "line": 15 }, { "location": "src/oidc/discovery.ts", "line": 181 }, { "location": "src/oidc/discovery.ts", "line": 260 }, { "location": "src/oidc/discovery.ts", "line": 279 }, { "location": "dist/index.mjs", "line": 18 }, { "location": "dist/index.mjs", "line": 1240 }, { "location": "src/saml/error-codes.ts", "line": 1 }, { "location": "src/saml/error-codes.ts", "line": 3 }, { "location": "dist/index.mjs", "line": 20 }, { "location": "src/routes/sso.ts", "line": 1 }, { "location": "dist/index.mjs", "line": 21 }, { "location": "dist/index.mjs", "line": 2968 }, { "location": "dist/index.mjs", "line": 3689 }, { "location": "dist/index.mjs", "line": 3832 }, { "location": "dist/index.mjs", "line": 3835 }, { "location": "dist/index.mjs", "line": 3846 }, { "location": "dist/index.mjs", "line": 3861 }, { "location": "dist/index.mjs", "line": 3907 }, { "location": "dist/index.mjs", "line": 3918 }, { "location": "dist/index.mjs", "line": 4118 }, { "location": "src/routes/saml-pipeline.ts", "line": 5 }, { "location": "src/routes/saml-pipeline.ts", "line": 630 }, { "location": "src/routes/sso.ts", "line": 13 }, { "location": "src/routes/sso.ts", "line": 1145 }, { "location": "src/routes/sso.ts", "line": 1438 }, { "location": "src/routes/sso.ts", "line": 1458 }, { "location": "src/routes/sso.ts", "line": 1489 }, { "location": "src/routes/sso.ts", "line": 1612 }, { "location": "src/routes/sso.ts", "line": 1632 }, { "location": "src/routes/sso.ts", "line": 1943 }, { "location": "dist/index.mjs", "line": 22 }, { "location": "dist/index.mjs", "line": 2878 }, { "location": "dist/index.mjs", "line": 3056 }, { "location": "dist/index.mjs", "line": 3863 }, { "location": "dist/index.mjs", "line": 4010 }, { "location": "src/routes/saml-pipeline.ts", "line": 6 }, { "location": "src/routes/saml-pipeline.ts", "line": 446 }, { "location": "src/routes/saml-pipeline.ts", "line": 774 }, { "location": "src/routes/sso.ts", "line": 14 }, { "location": "src/routes/sso.ts", "line": 1491 }, { "location": "src/routes/sso.ts", "line": 1787 }, { "location": "dist/index.mjs", "line": 23 }, { "location": "dist/index.mjs", "line": 3783 }, { "location": "dist/index.mjs", "line": 3792 }, { "location": "dist/index.mjs", "line": 4166 }, { "location": "dist/index.mjs", "line": 4176 }, { "location": "dist/index.mjs", "line": 4214 }, { "location": "dist/index.mjs", "line": 4287 }, { "location": "src/routes/sso.ts", "line": 15 }, { "location": "src/routes/sso.ts", "line": 1316 }, { "location": "src/routes/sso.ts", "line": 1330 }, { "location": "src/routes/sso.ts", "line": 2000 }, { "location": "src/routes/sso.ts", "line": 2014 }, { "location": "src/routes/sso.ts", "line": 2086 }, { "location": "src/routes/sso.ts", "line": 2224 }, { "location": "src/routes/helpers.ts", "line": 1 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 7 }, { "location": "src/routes/providers.ts", "line": 5 }, { "location": "src/routes/schemas.ts", "line": 1 }, { "location": "src/saml/response-validation.ts", "line": 1 }, { "location": "dist/index-CndkJEsk.d.mts", "line": 8 } ] }, "tags": [ "framework" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@better-auth/sso@1.7.22" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.1", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-12T10:07:47Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, November 12, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'sso' with version '1.7.22'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 19 source files." } ] }