{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:a2fbc8ab-704c-4133-bbab-0a8522042dfb", "version": 1, "metadata": { "timestamp": "2026-07-30T16:41:24Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "bufferutil", "group": "", "version": "4.1.0", "description": "WebSocket buffer utils", "purl": "pkg:npm/bufferutil@4.1.0", "bom-ref": "pkg:npm/bufferutil@4.1.0", "author": "Einar Otto Stangvik (http://2x.io)", "properties": [ { "name": "cdx:npm:scripts", "value": "install, prebuild, test" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "install" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/bufferutil" }, { "type": "vcs", "url": "https://github.com/websockets/bufferutil" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@isaacs\\n@npmcli\\n@pkgjs" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@isaacs/balanced-match/package.json\\nnode_modules/@isaacs/brace-expansion/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@isaacs/fs-minipass/package.json\\nnode_modules/@npmcli/agent/package.json\\nnode_modules/@npmcli/fs/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/bl/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/buffer/package.json\\nnode_modules/cacache/node_modules/glob/package.json\\nnode_modules/cacache/node_modules/minimatch/package.json\\nnode_modules/cacache/node_modules/path-scurry/package.json\\nnode_modules/cacache/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chalk/node_modules/supports-color/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/chownr/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/node_modules/wrap-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/diff/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/encoding/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/env-paths/package.json\\nnode_modules/err-code/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/exponential-backoff/package.json\\nnode_modules/fdir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/fs-constants/package.json\\nnode_modules/fs-minipass/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/glob/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/he/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http-proxy-agent/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ip-address/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isexe/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/log-symbols/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/make-fetch-happen/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/minipass-collect/package.json\\nnode_modules/minipass-fetch/package.json\\nnode_modules/minipass-flush/node_modules/minipass/package.json\\nnode_modules/minipass-flush/node_modules/yallist/package.json\\nnode_modules/minipass-flush/package.json\\nnode_modules/minipass-pipeline/node_modules/minipass/package.json\\nnode_modules/minipass-pipeline/node_modules/yallist/package.json\\nnode_modules/minipass-pipeline/package.json\\nnode_modules/minipass-sized/node_modules/minipass/package.json\\nnode_modules/minipass-sized/node_modules/yallist/package.json\\nnode_modules/minipass-sized/package.json\\nnode_modules/minipass/package.json\\nnode_modules/minizlib/package.json\\nnode_modules/mkdirp-classic/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/node-abi/package.json\\nnode_modules/node-gyp-build/package.json\\nnode_modules/node-gyp/node_modules/isexe/package.json\\nnode_modules/node-gyp/node_modules/which/package.json\\nnode_modules/node-gyp/package.json\\nnode_modules/nopt/package.json\\nnode_modules/npm-run-path/package.json\\nnode_modules/once/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-map/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/node_modules/lru-cache/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/prebuildify/package.json\\nnode_modules/proc-log/package.json\\nnode_modules/promise-retry/package.json\\nnode_modules/pump/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/retry/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/smart-buffer/package.json\\nnode_modules/socks-proxy-agent/package.json\\nnode_modules/socks/package.json\\nnode_modules/ssri/package.json\\nnode_modules/string-width-cjs/node_modules/ansi-regex/package.json\\nnode_modules/string-width-cjs/node_modules/emoji-regex/package.json\\nnode_modules/string-width-cjs/node_modules/strip-ansi/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/tar-fs/node_modules/chownr/package.json\\nnode_modules/tar-fs/package.json\\nnode_modules/tar-stream/package.json\\nnode_modules/tar/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/unique-filename/package.json\\nnode_modules/unique-slug/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/which/package.json\\nnode_modules/workerpool/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/string-width/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs-unparser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/emoji-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "yargs-unparser", "version": "2.0.0", "description": "Converts back a yargs argv object to its original array form", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yargs-unparser@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-unparser" } ], "type": "library", "bom-ref": "pkg:npm/yargs-unparser@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-unparser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-unparser/package.json" } ], "concludedValue": "node_modules/yargs-unparser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "21.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/yargs-parser@21.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@21.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "17.7.2", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yargs@17.7.2", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@17.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "5.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/yallist@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "7.0.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/wrap-ansi@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "8.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/wrap-ansi@8.1.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@8.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jos de Jong (https://github.com/josdejong)" } ], "group": "", "name": "workerpool", "version": "9.3.4", "description": "Offload tasks to a pool of workers on node.js and in the browser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/workerpool@9.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/josdejong/workerpool" }, { "type": "vcs", "url": "git://github.com/josdejong/workerpool.git" } ], "type": "library", "bom-ref": "pkg:npm/workerpool@9.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/workerpool/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/workerpool/package.json" } ], "concludedValue": "node_modules/workerpool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "unique-slug", "version": "6.0.0", "description": "Generate a unique character string suitible for use in files and URLs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/unique-slug@6.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/unique-slug.git" } ], "type": "library", "bom-ref": "pkg:npm/unique-slug@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unique-slug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unique-slug/package.json" } ], "concludedValue": "node_modules/unique-slug/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "unique-filename", "version": "5.0.0", "description": "Generate a unique filename for use in temporary directories or caches.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/unique-filename@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/unique-filename" }, { "type": "vcs", "url": "git+https://github.com/npm/unique-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/unique-filename@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unique-filename/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unique-filename/package.json" } ], "concludedValue": "node_modules/unique-filename/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.15", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tinyglobby@0.2.15", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.15", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/tinyglobby/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "tar-stream", "version": "2.2.0", "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tar-stream@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/tar-stream" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/tar-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/tar-stream@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-stream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-stream/package.json" } ], "concludedValue": "node_modules/tar-stream/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus" } ], "group": "", "name": "tar-fs", "version": "2.1.4", "description": "filesystem bindings for tar-stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tar-fs@2.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/tar-fs" }, { "type": "vcs", "url": "https://github.com/mafintosh/tar-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/tar-fs@2.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-fs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-fs/package.json" } ], "concludedValue": "node_modules/tar-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "1.1.4", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/chownr@1.1.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/tar-fs/node_modules/chownr/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar-fs/node_modules/chownr/package.json" } ], "concludedValue": "node_modules/tar-fs/node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "", "name": "tar", "version": "7.5.2", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/tar@7.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@7.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "8.1.1", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@8.1.1", "type": "library", "bom-ref": "pkg:npm/supports-color@8.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "3.1.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-json-comments@3.1.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.1.2", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@7.1.2", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.3.0", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string_decoder@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "5.1.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string-width@5.1.2", "type": "library", "bom-ref": "pkg:npm/string-width@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ssri", "version": "13.0.0", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/ssri@13.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ssri.git" } ], "type": "library", "bom-ref": "pkg:npm/ssri@13.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ssri/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ssri/package.json" } ], "concludedValue": "node_modules/ssri/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "socks-proxy-agent", "version": "8.0.5", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/socks-proxy-agent@8.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/socks-proxy-agent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/socks-proxy-agent/package.json" } ], "concludedValue": "node_modules/socks-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "socks", "version": "2.8.7", "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/socks@2.8.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks.git" } ], "type": "library", "bom-ref": "pkg:npm/socks@2.8.7", "properties": [ { "name": "SrcFile", "value": "node_modules/socks/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/socks/package.json" } ], "concludedValue": "node_modules/socks/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "smart-buffer", "version": "4.2.0", "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/smart-buffer@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/smart-buffer@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/smart-buffer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/smart-buffer/package.json" } ], "concludedValue": "node_modules/smart-buffer/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "4.1.0", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/signal-exit@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "3.0.0", "description": "Regular expression for matching a shebang line", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "2.0.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "6.0.2", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/serialize-javascript@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.7.3", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/semver@7.7.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Tim Koschützki (http://debuggable.com/)" } ], "group": "", "name": "retry", "version": "0.12.0", "description": "Abstraction for exponential and custom retry strategies for failed operations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/retry@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tim-kos/node-retry" }, { "type": "vcs", "url": "git://github.com/tim-kos/node-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/retry@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/retry/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/retry/package.json" } ], "concludedValue": "node_modules/retry/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "4.1.2", "description": "Recursive version of fs.readdir with small RAM & CPU footprint.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readdirp@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "3.6.2", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readable-stream@3.6.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@3.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus Madsen " } ], "group": "", "name": "pump", "version": "3.0.3", "description": "pipe streams together and close all of them if one of them closes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/pump@3.0.3", "type": "library", "bom-ref": "pkg:npm/pump@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/pump/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pump/package.json" } ], "concludedValue": "node_modules/pump/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "promise-retry", "version": "2.0.1", "description": "Retries a function that returns a promise, leveraging the power of the retry module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/promise-retry@2.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-promise-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/promise-retry@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/promise-retry/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promise-retry/package.json" } ], "concludedValue": "node_modules/promise-retry/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "proc-log", "version": "6.1.0", "description": "just emit 'log' events on the process object", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/proc-log@6.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/proc-log.git" } ], "type": "library", "bom-ref": "pkg:npm/proc-log@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proc-log/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proc-log/package.json" } ], "concludedValue": "node_modules/proc-log/package.json" } ] }, "tags": [ "emit" ] }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "prebuildify", "version": "6.0.1", "description": "Create and package prebuilds for native modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/prebuildify@6.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/prebuild/prebuildify" }, { "type": "vcs", "url": "https://github.com/prebuild/prebuildify.git" } ], "type": "library", "bom-ref": "pkg:npm/prebuildify@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/prebuildify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prebuildify/package.json" } ], "concludedValue": "node_modules/prebuildify/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.3", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/picomatch@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/picocolors@1.1.1", "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "1.11.1", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/path-scurry@1.11.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@1.11.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "10.4.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/lru-cache@10.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@10.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/node_modules/lru-cache/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/path-scurry/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "3.1.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "package-json-from-dist", "version": "1.0.1", "description": "Load the local package.json from either src or dist folder", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/package-json-from-dist@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/package-json-from-dist.git" } ], "type": "library", "bom-ref": "pkg:npm/package-json-from-dist@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package-json-from-dist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-json-from-dist/package.json" } ], "concludedValue": "node_modules/package-json-from-dist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "7.0.4", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/p-map@7.0.4", "type": "library", "bom-ref": "pkg:npm/p-map@7.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/p-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-map/package.json" } ], "concludedValue": "node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "npm-run-path", "version": "3.1.0", "description": "Get your PATH prepended with locally installed binaries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/npm-run-path@3.1.0", "type": "library", "bom-ref": "pkg:npm/npm-run-path@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/package.json" } ], "concludedValue": "node_modules/npm-run-path/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "nopt", "version": "9.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/nopt@9.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "node-gyp-build", "version": "4.8.4", "description": "Build tool and bindings loader for node-gyp that supports prebuilds", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/node-gyp-build@4.8.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/prebuild/node-gyp-build" }, { "type": "vcs", "url": "https://github.com/prebuild/node-gyp-build.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp-build@4.8.4", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp-build/package.json" }, { "name": "ImportedModules", "value": "node-gyp-build" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp-build/package.json" } ], "concludedValue": "node_modules/node-gyp-build/package.json" } ], "occurrences": [ { "location": "index.js#4" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "node-gyp", "version": "12.1.0", "description": "Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/node-gyp@12.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp@12.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/package.json" } ], "concludedValue": "node_modules/node-gyp/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "which", "version": "6.0.0", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/which@6.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/node_modules/which/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/node_modules/which/package.json" } ], "concludedValue": "node_modules/node-gyp/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "3.1.1", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/isexe@3.1.1", "type": "library", "bom-ref": "pkg:npm/isexe@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/node-gyp/node_modules/isexe/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-gyp/node_modules/isexe/package.json" } ], "concludedValue": "node_modules/node-gyp/node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Lukas Geiger" } ], "group": "", "name": "node-abi", "version": "3.85.0", "description": "Get the Node ABI for a given target and runtime, and vice versa.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/node-abi@3.85.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/electron/node-abi#readme" }, { "type": "vcs", "url": "git+https://github.com/electron/node-abi.git" } ], "type": "library", "bom-ref": "pkg:npm/node-abi@3.85.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-abi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-abi/package.json" } ], "concludedValue": "node_modules/node-abi/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "1.0.0", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/negotiator@1.0.0", "type": "library", "bom-ref": "pkg:npm/negotiator@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "11.7.5", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@11.7.5", "externalReferences": [ { "type": "website", "url": "https://mochajs.org/" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@11.7.5", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "mkdirp-classic", "version": "0.5.3", "description": "Mirror of mkdirp 0.5.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp-classic@0.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/mkdirp-classic" }, { "type": "vcs", "url": "https://github.com/mafintosh/mkdirp-classic.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp-classic@0.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp-classic/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp-classic/package.json" } ], "concludedValue": "node_modules/mkdirp-classic/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "3.1.0", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minizlib@3.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minizlib/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minizlib/package.json" } ], "concludedValue": "node_modules/minizlib/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-sized", "version": "1.0.3", "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass-sized@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-sized.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-sized@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-sized/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-sized/package.json" } ], "concludedValue": "node_modules/minipass-sized/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "4.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/yallist@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-sized/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-pipeline/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-flush/node_modules/yallist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/minipass-flush/node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "3.3.6", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass@3.3.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@3.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-sized/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-pipeline/node_modules/minipass/package.json" }, { "name": "SrcFile", "value": "node_modules/minipass-flush/node_modules/minipass/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass-flush/node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-pipeline", "version": "1.2.4", "description": "create a pipeline of streams using Minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass-pipeline@1.2.4", "type": "library", "bom-ref": "pkg:npm/minipass-pipeline@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-pipeline/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-pipeline/package.json" } ], "concludedValue": "node_modules/minipass-pipeline/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-flush", "version": "1.0.5", "description": "A Minipass stream that calls a flush function before emitting 'end'", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass-flush@1.0.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-flush.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-flush@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-flush/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-flush/package.json" } ], "concludedValue": "node_modules/minipass-flush/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "minipass-fetch", "version": "5.0.0", "description": "An implementation of window.fetch in Node.js using Minipass streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minipass-fetch@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/minipass-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-fetch@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-fetch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-fetch/package.json" } ], "concludedValue": "node_modules/minipass-fetch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-collect", "version": "2.0.1", "description": "A Minipass stream that collects all the data into a single chunk", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass-collect@2.0.1", "type": "library", "bom-ref": "pkg:npm/minipass-collect@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass-collect/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass-collect/package.json" } ], "concludedValue": "node_modules/minipass-collect/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.2", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass@7.1.2", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "9.0.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@9.0.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@9.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "make-fetch-happen", "version": "15.0.3", "description": "Opinionated, caching, retrying fetch client", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/make-fetch-happen@15.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/make-fetch-happen.git" } ], "type": "library", "bom-ref": "pkg:npm/make-fetch-happen@15.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/make-fetch-happen/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-fetch-happen/package.json" } ], "concludedValue": "node_modules/make-fetch-happen/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "11.2.4", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/lru-cache@11.2.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "log-symbols", "version": "4.1.0", "description": "Colored symbols for various log levels. Example: `✔︎ Success`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/log-symbols@4.1.0", "type": "library", "bom-ref": "pkg:npm/log-symbols@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/log-symbols/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/log-symbols/package.json" } ], "concludedValue": "node_modules/log-symbols/package.json" } ] }, "tags": [ "log" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "4.1.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/js-yaml@4.1.1", "type": "library", "bom-ref": "pkg:npm/js-yaml@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "jackspeak", "version": "3.4.3", "description": "A very strict and proper argument parser.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/jackspeak@3.4.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/jackspeak.git" } ], "type": "library", "bom-ref": "pkg:npm/jackspeak@3.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jackspeak/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jackspeak/package.json" } ], "concludedValue": "node_modules/jackspeak/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "0.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-unicode-supported@0.1.0", "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "2.1.0", "description": "Check if a value is a plain object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-plain-obj@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "3.0.3", "description": "Check if a path is inside another path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-path-inside@3.0.3", "type": "library", "bom-ref": "pkg:npm/is-path-inside@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Beau Gunderson (https://beaugunderson.com/)" } ], "group": "", "name": "ip-address", "version": "10.1.0", "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ip-address@10.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/beaugunderson/ip-address.git" } ], "type": "library", "bom-ref": "pkg:npm/ip-address@10.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ip-address/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ip-address/package.json" } ], "concludedValue": "node_modules/ip-address/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Jens Taylor (https://github.com/homebrewing)" } ], "group": "", "name": "imurmurhash", "version": "0.1.4", "description": "An incremental implementation of MurmurHash3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/imurmurhash@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" }, { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" } ], "type": "library", "bom-ref": "pkg:npm/imurmurhash@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/imurmurhash/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/imurmurhash/package.json" } ], "concludedValue": "node_modules/imurmurhash/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.2.1", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/ieee754@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ieee754/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.6.3", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/iconv-lite@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "7.0.6", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/https-proxy-agent@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/https-proxy-agent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "7.0.2", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/http-proxy-agent@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/http-proxy-agent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Kornel Lesiński (https://kornel.ski/)" } ], "group": "", "name": "http-cache-semantics", "version": "4.2.0", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/http-cache-semantics@4.2.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/kornelski/http-cache-semantics.git" } ], "type": "library", "bom-ref": "pkg:npm/http-cache-semantics@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-cache-semantics/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/http-cache-semantics/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.2.0", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/he@1.2.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "10.5.0", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@10.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@10.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "fs-minipass", "version": "3.0.3", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs-minipass@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass#readme" }, { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-minipass@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-minipass/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-minipass/package.json" } ], "concludedValue": "node_modules/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "fs-constants", "version": "1.0.0", "description": "Require constants across node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/fs-constants@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/fs-constants" }, { "type": "vcs", "url": "https://github.com/mafintosh/fs-constants.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-constants@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-constants/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-constants/package.json" } ], "concludedValue": "node_modules/fs-constants/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "3.3.1", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/foreground-child@3.3.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughskennedy.com)" } ], "group": "", "name": "flat", "version": "5.0.2", "description": "Take a nested Javascript object and flatten it, or unflatten an object with delimited keys", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/flat@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/flat" }, { "type": "vcs", "url": "git://github.com/hughsk/flat.git" } ], "type": "library", "bom-ref": "pkg:npm/flat@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/flat/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat/package.json" } ], "concludedValue": "node_modules/flat/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "5.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/find-up@5.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "thecodrr " } ], "group": "", "name": "fdir", "version": "6.5.0", "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/fdir@6.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thecodrr/fdir#readme" }, { "type": "vcs", "url": "git+https://github.com/thecodrr/fdir.git" } ], "type": "library", "bom-ref": "pkg:npm/fdir@6.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fdir/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fdir/package.json" } ], "concludedValue": "node_modules/fdir/package.json" } ] } }, { "authors": [ { "name": "Sami Sayegh" } ], "group": "", "name": "exponential-backoff", "version": "3.1.3", "description": "A utility that allows retrying a function with an exponential delay between attempts.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/exponential-backoff@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/coveooss/exponential-backoff#readme" }, { "type": "vcs", "url": "git+https://github.com/coveooss/exponential-backoff.git" } ], "type": "library", "bom-ref": "pkg:npm/exponential-backoff@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/exponential-backoff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exponential-backoff/package.json" } ], "concludedValue": "node_modules/exponential-backoff/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "4.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@4.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "err-code", "version": "2.0.3", "description": "Create an error with a code", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/err-code@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/js-err-code.git" } ], "type": "library", "bom-ref": "pkg:npm/err-code@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/err-code/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/err-code/package.json" } ], "concludedValue": "node_modules/err-code/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "env-paths", "version": "2.2.1", "description": "Get paths for storing things like data, config, cache, etc", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/env-paths@2.2.1", "type": "library", "bom-ref": "pkg:npm/env-paths@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/env-paths/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-paths/package.json" } ], "concludedValue": "node_modules/env-paths/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "end-of-stream", "version": "1.4.5", "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/end-of-stream@1.4.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/end-of-stream" }, { "type": "vcs", "url": "git://github.com/mafintosh/end-of-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/end-of-stream@1.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/end-of-stream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/end-of-stream/package.json" } ], "concludedValue": "node_modules/end-of-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Andris Reinman" } ], "group": "", "name": "encoding", "version": "0.1.13", "description": "Convert encodings, uses iconv-lite", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/encoding@0.1.13", "type": "library", "bom-ref": "pkg:npm/encoding@0.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/encoding/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/encoding/package.json" } ], "concludedValue": "node_modules/encoding/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "9.2.2", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/emoji-regex@9.2.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@9.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Masaki Komagata" } ], "group": "", "name": "eastasianwidth", "version": "0.2.0", "description": "Get East Asian Width from a character.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/eastasianwidth@0.2.0", "type": "library", "bom-ref": "pkg:npm/eastasianwidth@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eastasianwidth/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eastasianwidth/package.json" } ], "concludedValue": "node_modules/eastasianwidth/package.json" } ] } }, { "group": "", "name": "diff", "version": "7.0.0", "description": "A JavaScript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/diff@7.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "4.0.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/decamelize@4.0.0", "type": "library", "bom-ref": "pkg:npm/decamelize@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "8.0.1", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/cliui@8.0.1", "type": "library", "bom-ref": "pkg:npm/cliui@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "3.0.0", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/chownr@3.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chownr/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chownr/package.json" } ], "concludedValue": "node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "4.0.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chokidar@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/node_modules/supports-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/chalk/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "6.3.0", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/camelcase@6.3.0", "type": "library", "bom-ref": "pkg:npm/camelcase@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "cacache", "version": "20.0.3", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/cacache@20.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cacache.git" } ], "type": "library", "bom-ref": "pkg:npm/cacache@20.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/package.json" } ], "concludedValue": "node_modules/cacache/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "2.0.1", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/path-scurry@2.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/node_modules/path-scurry/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/cacache/node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.1.1", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/minimatch@10.1.1", "type": "library", "bom-ref": "pkg:npm/minimatch@10.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/node_modules/minimatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/cacache/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.0", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/glob@13.0.0", "type": "library", "bom-ref": "pkg:npm/glob@13.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cacache/node_modules/glob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacache/node_modules/glob/package.json" } ], "concludedValue": "node_modules/cacache/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "buffer", "version": "5.7.1", "description": "Node.js Buffer API, for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/buffer@5.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/buffer" }, { "type": "vcs", "url": "git://github.com/feross/buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer@5.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer/package.json" } ], "concludedValue": "node_modules/buffer/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "2.0.2", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "bl", "version": "4.1.0", "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/bl@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/bl" }, { "type": "vcs", "url": "https://github.com/rvagg/bl.git" } ], "type": "library", "bom-ref": "pkg:npm/bl@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bl/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bl/package.json" } ], "concludedValue": "node_modules/bl/package.json" } ] } }, { "authors": [ { "name": "T. Jameson Little " } ], "group": "", "name": "base64-js", "version": "1.5.1", "description": "Base64 encoding/decoding in pure JS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/base64-js@1.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/beatgammit/base64-js" }, { "type": "vcs", "url": "git://github.com/beatgammit/base64-js.git" } ], "type": "library", "bom-ref": "pkg:npm/base64-js@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/base64-js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/base64-js/package.json" } ], "concludedValue": "node_modules/base64-js/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "group": "", "name": "argparse", "version": "2.0.1", "description": "CLI arguments parser. Native port of python's argparse.", "scope": "optional", "licenses": [ { "license": { "id": "Python-2.0", "url": "https://opensource.org/licenses/Python-2.0" } } ], "purl": "pkg:npm/argparse@2.0.1", "type": "library", "bom-ref": "pkg:npm/argparse@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.2.2", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-regex@6.2.2", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "7.1.4", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/agent-base@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/agent-base/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/agent-base/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "abbrev", "version": "4.0.0", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/abbrev@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } }, { "group": "@pkgjs", "name": "parseargs", "version": "0.11.0", "description": "Polyfill of future proposal for `util.parseArgs()`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pkgjs/parseargs#readme" } ], "type": "library", "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@pkgjs/parseargs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pkgjs/parseargs/package.json" } ], "concludedValue": "node_modules/@pkgjs/parseargs/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "fs", "version": "5.0.0", "description": "filesystem utilities for the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/%40npmcli/fs@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/fs.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/fs@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/fs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/fs/package.json" } ], "concludedValue": "node_modules/@npmcli/fs/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "agent", "version": "4.0.0", "description": "the http/https agent used by the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/%40npmcli/agent@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/agent#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/agent.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/agent@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@npmcli/agent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@npmcli/agent/package.json" } ], "concludedValue": "node_modules/@npmcli/agent/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@isaacs", "name": "fs-minipass", "version": "4.0.1", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/fs-minipass/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/fs-minipass/package.json" } ], "concludedValue": "node_modules/@isaacs/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "@isaacs", "name": "cliui", "version": "8.0.2", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "type": "library", "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/cliui/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/cliui/package.json" } ], "concludedValue": "node_modules/@isaacs/cliui/package.json" } ] } }, { "group": "@isaacs", "name": "brace-expansion", "version": "5.0.0", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40isaacs/brace-expansion@5.0.0", "type": "library", "bom-ref": "pkg:npm/@isaacs/brace-expansion@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/brace-expansion/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/brace-expansion/package.json" } ], "concludedValue": "node_modules/@isaacs/brace-expansion/package.json" } ] } }, { "group": "@isaacs", "name": "balanced-match", "version": "4.0.1", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40isaacs/balanced-match@4.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/balanced-match@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/balanced-match/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/balanced-match/package.json" } ], "concludedValue": "node_modules/@isaacs/balanced-match/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/bufferutil@4.1.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-30T16:41:24Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, July 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bufferutil' with version '4.1.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 174 source files." } ] }