{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:e8f2b049-e496-42ef-a102-6059e2b5c68e", "version": 1, "metadata": { "timestamp": "2026-08-15T22:47:39Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "chardet", "group": "", "version": "2.2.0", "description": "Character encoding detector", "purl": "pkg:npm/chardet@2.2.0", "bom-ref": "pkg:npm/chardet@2.2.0", "author": "Dmitry Shirokov ", "properties": [ { "name": "cdx:npm:scripts", "value": "build, format, format:check, test, test:typecheck, prepublish, semantic-release, typecheck" }, { "name": "cdx:npm:buildScripts", "value": "build" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/runk/node-chardet" }, { "type": "vcs", "url": "https://github.com/runk/node-chardet.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@actions\\n@babel\\n@bcoe\\n@colors\\n@esbuild\\n@gar\\n@isaacs\\n@jridgewell\\n@npmcli\\n@octokit\\n@oxc-project\\n@pnpm\\n@rolldown\\n@sec-ant\\n@semantic-release\\n@sigstore\\n@simple-libs\\n@sindresorhus\\n@standard-schema\\n@tufjs\\n@types\\n@vitest" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@actions/core/package.json\\nnode_modules/@actions/exec/package.json\\nnode_modules/@actions/http-client/node_modules/undici/package.json\\nnode_modules/@actions/http-client/package.json\\nnode_modules/@actions/io/package.json\\nnode_modules/@babel/code-frame/node_modules/js-tokens/package.json\\nnode_modules/@babel/code-frame/package.json\\nnode_modules/@babel/helper-string-parser/package.json\\nnode_modules/@babel/helper-validator-identifier/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@bcoe/v8-coverage/package.json\\nnode_modules/@colors/colors/package.json\\nnode_modules/@esbuild/linux-x64/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@octokit/auth-token/package.json\\nnode_modules/@octokit/core/package.json\\nnode_modules/@octokit/endpoint/package.json\\nnode_modules/@octokit/graphql/package.json\\nnode_modules/@octokit/openapi-types/package.json\\nnode_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types/package.json\\nnode_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types/package.json\\nnode_modules/@octokit/plugin-paginate-rest/package.json\\nnode_modules/@octokit/plugin-retry/package.json\\nnode_modules/@octokit/plugin-throttling/package.json\\nnode_modules/@octokit/request-error/package.json\\nnode_modules/@octokit/request/package.json\\nnode_modules/@octokit/types/package.json\\nnode_modules/@oxc-project/types/package.json\\nnode_modules/@pnpm/config.env-replace/package.json\\nnode_modules/@pnpm/network.ca-file/node_modules/graceful-fs/package.json\\nnode_modules/@pnpm/network.ca-file/package.json\\nnode_modules/@pnpm/npm-conf/package.json\\nnode_modules/@rolldown/binding-linux-x64-gnu/package.json\\nnode_modules/@rolldown/pluginutils/package.json\\nnode_modules/@sec-ant/readable-stream/package.json\\nnode_modules/@semantic-release/commit-analyzer/package.json\\nnode_modules/@semantic-release/error/package.json\\nnode_modules/@semantic-release/github/package.json\\nnode_modules/@semantic-release/npm/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/hosted-git-info/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/lru-cache/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/normalize-package-data/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/parse-json/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/read-package-up/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/read-pkg/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/type-fest/package.json\\nnode_modules/@semantic-release/release-notes-generator/node_modules/unicorn-magic/package.json\\nnode_modules/@semantic-release/release-notes-generator/package.json\\nnode_modules/@simple-libs/stream-utils/package.json\\nnode_modules/@sindresorhus/is/package.json\\nnode_modules/@sindresorhus/merge-streams/package.json\\nnode_modules/@standard-schema/spec/package.json\\nnode_modules/@types/chai/package.json\\nnode_modules/@types/deep-eql/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/normalize-package-data/package.json\\nnode_modules/@vitest/coverage-v8/package.json\\nnode_modules/@vitest/expect/package.json\\nnode_modules/@vitest/mocker/package.json\\nnode_modules/@vitest/pretty-format/package.json\\nnode_modules/@vitest/runner/package.json\\nnode_modules/@vitest/snapshot/package.json\\nnode_modules/@vitest/spy/package.json\\nnode_modules/@vitest/utils/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/aggregate-error/package.json\\nnode_modules/ansi-escapes/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/any-promise/package.json\\nnode_modules/argparse/package.json\\nnode_modules/argv-formatter/package.json\\nnode_modules/array-ify/package.json\\nnode_modules/assertion-error/package.json\\nnode_modules/ast-v8-to-istanbul/package.json\\nnode_modules/before-after-hook/package.json\\nnode_modules/bottleneck/package.json\\nnode_modules/braces/package.json\\nnode_modules/callsites/package.json\\nnode_modules/chai/package.json\\nnode_modules/chalk/package.json\\nnode_modules/char-regex/package.json\\nnode_modules/clean-stack/package.json\\nnode_modules/cli-highlight/node_modules/ansi-styles/package.json\\nnode_modules/cli-highlight/node_modules/chalk/package.json\\nnode_modules/cli-highlight/node_modules/cliui/package.json\\nnode_modules/cli-highlight/node_modules/wrap-ansi/package.json\\nnode_modules/cli-highlight/node_modules/yargs-parser/package.json\\nnode_modules/cli-highlight/node_modules/yargs/package.json\\nnode_modules/cli-highlight/package.json\\nnode_modules/cli-table3/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/compare-func/package.json\\nnode_modules/config-chain/package.json\\nnode_modules/content-type/package.json\\nnode_modules/conventional-changelog-angular/package.json\\nnode_modules/conventional-changelog-writer/package.json\\nnode_modules/conventional-commits-filter/package.json\\nnode_modules/conventional-commits-parser/package.json\\nnode_modules/convert-hrtime/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cosmiconfig/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/crypto-random-string/node_modules/type-fest/package.json\\nnode_modules/crypto-random-string/package.json\\nnode_modules/debug/package.json\\nnode_modules/deep-extend/package.json\\nnode_modules/detect-libc/package.json\\nnode_modules/dir-glob/package.json\\nnode_modules/dot-prop/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/emojilib/package.json\\nnode_modules/env-ci/node_modules/execa/package.json\\nnode_modules/env-ci/node_modules/get-stream/package.json\\nnode_modules/env-ci/node_modules/human-signals/package.json\\nnode_modules/env-ci/node_modules/is-stream/package.json\\nnode_modules/env-ci/node_modules/npm-run-path/package.json\\nnode_modules/env-ci/node_modules/path-key/package.json\\nnode_modules/env-ci/node_modules/strip-final-newline/package.json\\nnode_modules/env-ci/package.json\\nnode_modules/env-paths/package.json\\nnode_modules/environment/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es-module-lexer/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/estree-walker/package.json\\nnode_modules/execa/node_modules/get-stream/package.json\\nnode_modules/execa/package.json\\nnode_modules/expect-type/package.json\\nnode_modules/fdir/package.json\\nnode_modules/figures/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/find-up-simple/package.json\\nnode_modules/find-up/package.json\\nnode_modules/find-versions/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/function-timeout/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-east-asian-width/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/git-log-parser/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/handlebars/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/highlight.js/package.json\\nnode_modules/hook-std/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/html-escaper/package.json\\nnode_modules/http-proxy-agent/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/human-signals/package.json\\nnode_modules/import-fresh/node_modules/resolve-from/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/import-from-esm/package.json\\nnode_modules/import-meta-resolve/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/index-to-position/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ini/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-number/package.json\\nnode_modules/is-obj/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/issue-parser/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/java-properties/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/json-parse-better-errors/package.json\\nnode_modules/json-parse-even-better-errors/package.json\\nnode_modules/json-with-bigint/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/lightningcss-linux-x64-gnu/package.json\\nnode_modules/lightningcss/package.json\\nnode_modules/lines-and-columns/package.json\\nnode_modules/load-json-file/node_modules/parse-json/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash-es/package.json\\nnode_modules/lodash.capitalize/package.json\\nnode_modules/lodash.escaperegexp/package.json\\nnode_modules/lodash.isplainobject/package.json\\nnode_modules/lodash.isstring/package.json\\nnode_modules/lodash.uniqby/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/magic-string/package.json\\nnode_modules/magicast/package.json\\nnode_modules/make-asynchronous/node_modules/type-fest/package.json\\nnode_modules/make-asynchronous/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/marked-terminal/package.json\\nnode_modules/marked/package.json\\nnode_modules/meow/package.json\\nnode_modules/merge-stream/package.json\\nnode_modules/micromatch/package.json\\nnode_modules/mime/package.json\\nnode_modules/mimic-fn/package.json\\nnode_modules/minimist/package.json\\nnode_modules/ms/package.json\\nnode_modules/mz/package.json\\nnode_modules/nanoid/package.json\\nnode_modules/neo-async/package.json\\nnode_modules/nerf-dart/package.json\\nnode_modules/node-emoji/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/normalize-url/package.json\\nnode_modules/npm-run-path/node_modules/path-key/package.json\\nnode_modules/npm-run-path/package.json\\nnode_modules/npm/node_modules/@gar/promise-retry/package.json\\nnode_modules/npm/node_modules/@isaacs/fs-minipass/package.json\\nnode_modules/npm/node_modules/@isaacs/string-locale-compare/package.json\\nnode_modules/npm/node_modules/@npmcli/agent/package.json\\nnode_modules/npm/node_modules/@npmcli/arborist/package.json\\nnode_modules/npm/node_modules/@npmcli/config/package.json\\nnode_modules/npm/node_modules/@npmcli/fs/package.json\\nnode_modules/npm/node_modules/@npmcli/git/package.json\\nnode_modules/npm/node_modules/@npmcli/installed-package-contents/package.json\\nnode_modules/npm/node_modules/@npmcli/map-workspaces/package.json\\nnode_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json\\nnode_modules/npm/node_modules/@npmcli/name-from-folder/package.json\\nnode_modules/npm/node_modules/@npmcli/node-gyp/package.json\\nnode_modules/npm/node_modules/@npmcli/package-json/package.json\\nnode_modules/npm/node_modules/@npmcli/promise-spawn/package.json\\nnode_modules/npm/node_modules/@npmcli/query/package.json\\nnode_modules/npm/node_modules/@npmcli/redact/package.json\\nnode_modules/npm/node_modules/@npmcli/run-script/package.json\\nnode_modules/npm/node_modules/@sigstore/bundle/package.json\\nnode_modules/npm/node_modules/@sigstore/core/package.json\\nnode_modules/npm/node_modules/@sigstore/protobuf-specs/package.json\\nnode_modules/npm/node_modules/@sigstore/sign/package.json\\nnode_modules/npm/node_modules/@sigstore/tuf/package.json\\nnode_modules/npm/node_modules/@sigstore/verify/package.json\\nnode_modules/npm/node_modules/@tufjs/canonical-json/package.json\\nnode_modules/npm/node_modules/@tufjs/models/package.json\\nnode_modules/npm/node_modules/abbrev/package.json\\nnode_modules/npm/node_modules/agent-base/package.json\\nnode_modules/npm/node_modules/aproba/package.json\\nnode_modules/npm/node_modules/archy/package.json\\nnode_modules/npm/node_modules/balanced-match/package.json\\nnode_modules/npm/node_modules/bin-links/package.json\\nnode_modules/npm/node_modules/binary-extensions/package.json\\nnode_modules/npm/node_modules/brace-expansion/package.json\\nnode_modules/npm/node_modules/cacache/package.json\\nnode_modules/npm/node_modules/chalk/package.json\\nnode_modules/npm/node_modules/chownr/package.json\\nnode_modules/npm/node_modules/ci-info/package.json\\nnode_modules/npm/node_modules/cidr-regex/package.json\\nnode_modules/npm/node_modules/cmd-shim/package.json\\nnode_modules/npm/node_modules/common-ancestor-path/package.json\\nnode_modules/npm/node_modules/cssesc/package.json\\nnode_modules/npm/node_modules/debug/package.json\\nnode_modules/npm/node_modules/diff/package.json\\nnode_modules/npm/node_modules/env-paths/package.json\\nnode_modules/npm/node_modules/exponential-backoff/package.json\\nnode_modules/npm/node_modules/fastest-levenshtein/package.json\\nnode_modules/npm/node_modules/fs-minipass/package.json\\nnode_modules/npm/node_modules/glob/package.json\\nnode_modules/npm/node_modules/graceful-fs/package.json\\nnode_modules/npm/node_modules/hosted-git-info/package.json\\nnode_modules/npm/node_modules/http-cache-semantics/package.json\\nnode_modules/npm/node_modules/http-proxy-agent/package.json\\nnode_modules/npm/node_modules/https-proxy-agent/package.json\\nnode_modules/npm/node_modules/iconv-lite/package.json\\nnode_modules/npm/node_modules/ignore-walk/package.json\\nnode_modules/npm/node_modules/ini/package.json\\nnode_modules/npm/node_modules/init-package-json/package.json\\nnode_modules/npm/node_modules/ip-address/package.json\\nnode_modules/npm/node_modules/is-cidr/package.json\\nnode_modules/npm/node_modules/isexe/package.json\\nnode_modules/npm/node_modules/json-parse-even-better-errors/package.json\\nnode_modules/npm/node_modules/json-stringify-nice/package.json\\nnode_modules/npm/node_modules/jsonparse/package.json\\nnode_modules/npm/node_modules/just-diff-apply/package.json\\nnode_modules/npm/node_modules/just-diff/package.json\\nnode_modules/npm/node_modules/libnpmaccess/package.json\\nnode_modules/npm/node_modules/libnpmdiff/package.json\\nnode_modules/npm/node_modules/libnpmexec/package.json\\nnode_modules/npm/node_modules/libnpmfund/package.json\\nnode_modules/npm/node_modules/libnpmorg/package.json\\nnode_modules/npm/node_modules/libnpmpack/package.json\\nnode_modules/npm/node_modules/libnpmpublish/package.json\\nnode_modules/npm/node_modules/libnpmsearch/package.json\\nnode_modules/npm/node_modules/libnpmteam/package.json\\nnode_modules/npm/node_modules/libnpmversion/package.json\\nnode_modules/npm/node_modules/lru-cache/package.json\\nnode_modules/npm/node_modules/make-fetch-happen/package.json\\nnode_modules/npm/node_modules/minimatch/package.json\\nnode_modules/npm/node_modules/minipass-collect/package.json\\nnode_modules/npm/node_modules/minipass-fetch/package.json\\nnode_modules/npm/node_modules/minipass-flush/package.json\\nnode_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json\\nnode_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json\\nnode_modules/npm/node_modules/minipass-pipeline/package.json\\nnode_modules/npm/node_modules/minipass-sized/package.json\\nnode_modules/npm/node_modules/minipass/package.json\\nnode_modules/npm/node_modules/minizlib/package.json\\nnode_modules/npm/node_modules/ms/package.json\\nnode_modules/npm/node_modules/mute-stream/package.json\\nnode_modules/npm/node_modules/negotiator/package.json\\nnode_modules/npm/node_modules/node-gyp/package.json\\nnode_modules/npm/node_modules/nopt/package.json\\nnode_modules/npm/node_modules/npm-audit-report/package.json\\nnode_modules/npm/node_modules/npm-bundled/package.json\\nnode_modules/npm/node_modules/npm-install-checks/package.json\\nnode_modules/npm/node_modules/npm-normalize-package-bin/package.json\\nnode_modules/npm/node_modules/npm-package-arg/package.json\\nnode_modules/npm/node_modules/npm-packlist/package.json\\nnode_modules/npm/node_modules/npm-pick-manifest/package.json\\nnode_modules/npm/node_modules/npm-profile/package.json\\nnode_modules/npm/node_modules/npm-registry-fetch/package.json\\nnode_modules/npm/node_modules/npm-user-validate/package.json\\nnode_modules/npm/node_modules/p-map/package.json\\nnode_modules/npm/node_modules/pacote/package.json\\nnode_modules/npm/node_modules/parse-conflict-json/package.json\\nnode_modules/npm/node_modules/path-scurry/package.json\\nnode_modules/npm/node_modules/postcss-selector-parser/package.json\\nnode_modules/npm/node_modules/proc-log/package.json\\nnode_modules/npm/node_modules/proggy/package.json\\nnode_modules/npm/node_modules/promise-all-reject-late/package.json\\nnode_modules/npm/node_modules/promise-call-limit/package.json\\nnode_modules/npm/node_modules/promzard/package.json\\nnode_modules/npm/node_modules/qrcode-terminal/package.json\\nnode_modules/npm/node_modules/read-cmd-shim/package.json\\nnode_modules/npm/node_modules/read/package.json\\nnode_modules/npm/node_modules/safer-buffer/package.json\\nnode_modules/npm/node_modules/semver/package.json\\nnode_modules/npm/node_modules/signal-exit/package.json\\nnode_modules/npm/node_modules/sigstore/package.json\\nnode_modules/npm/node_modules/smart-buffer/package.json\\nnode_modules/npm/node_modules/socks-proxy-agent/package.json\\nnode_modules/npm/node_modules/socks/package.json\\nnode_modules/npm/node_modules/spdx-exceptions/package.json\\nnode_modules/npm/node_modules/spdx-expression-parse/package.json\\nnode_modules/npm/node_modules/spdx-license-ids/package.json\\nnode_modules/npm/node_modules/ssri/package.json\\nnode_modules/npm/node_modules/supports-color/package.json\\nnode_modules/npm/node_modules/tar/package.json\\nnode_modules/npm/node_modules/text-table/package.json\\nnode_modules/npm/node_modules/tiny-relative-date/package.json\\nnode_modules/npm/node_modules/tinyglobby/node_modules/fdir/package.json\\nnode_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json\\nnode_modules/npm/node_modules/tinyglobby/package.json\\nnode_modules/npm/node_modules/treeverse/package.json\\nnode_modules/npm/node_modules/tuf-js/package.json\\nnode_modules/npm/node_modules/undici/package.json\\nnode_modules/npm/node_modules/util-deprecate/package.json\\nnode_modules/npm/node_modules/validate-npm-package-name/package.json\\nnode_modules/npm/node_modules/walk-up-path/package.json\\nnode_modules/npm/node_modules/which/package.json\\nnode_modules/npm/node_modules/write-file-atomic/package.json\\nnode_modules/npm/node_modules/yallist/package.json\\nnode_modules/npm/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/obug/package.json\\nnode_modules/onetime/package.json\\nnode_modules/p-each-series/package.json\\nnode_modules/p-event/package.json\\nnode_modules/p-filter/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-map/package.json\\nnode_modules/p-reduce/package.json\\nnode_modules/p-timeout/package.json\\nnode_modules/p-try/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/parse-ms/package.json\\nnode_modules/parse5-htmlparser2-tree-adapter/node_modules/parse5/package.json\\nnode_modules/parse5-htmlparser2-tree-adapter/package.json\\nnode_modules/parse5/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-type/package.json\\nnode_modules/pathe/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pify/package.json\\nnode_modules/pkg-conf/package.json\\nnode_modules/postcss/package.json\\nnode_modules/prettier/package.json\\nnode_modules/pretty-ms/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/proto-list/package.json\\nnode_modules/proxy-agent-negotiate/package.json\\nnode_modules/rc/package.json\\nnode_modules/read-package-up/package.json\\nnode_modules/read-pkg/node_modules/parse-json/node_modules/type-fest/package.json\\nnode_modules/read-pkg/node_modules/parse-json/package.json\\nnode_modules/read-pkg/node_modules/unicorn-magic/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/registry-auth-token/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/rolldown/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/semantic-release/package.json\\nnode_modules/semver-regex/package.json\\nnode_modules/semver/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/siginfo/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/signale/node_modules/ansi-styles/package.json\\nnode_modules/signale/node_modules/chalk/package.json\\nnode_modules/signale/node_modules/color-convert/package.json\\nnode_modules/signale/node_modules/color-name/package.json\\nnode_modules/signale/node_modules/escape-string-regexp/package.json\\nnode_modules/signale/node_modules/figures/package.json\\nnode_modules/signale/node_modules/has-flag/package.json\\nnode_modules/signale/node_modules/supports-color/package.json\\nnode_modules/signale/package.json\\nnode_modules/skin-tone/package.json\\nnode_modules/source-map-js/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spawn-error-forwarder/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/split2/package.json\\nnode_modules/stackback/package.json\\nnode_modules/std-env/package.json\\nnode_modules/stream-combiner2/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/strip-final-newline/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/super-regex/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/supports-hyperlinks/package.json\\nnode_modules/tagged-tag/package.json\\nnode_modules/temp-dir/package.json\\nnode_modules/tempy/node_modules/is-stream/package.json\\nnode_modules/tempy/node_modules/type-fest/package.json\\nnode_modules/tempy/package.json\\nnode_modules/thenify-all/package.json\\nnode_modules/thenify/package.json\\nnode_modules/through2/package.json\\nnode_modules/time-span/package.json\\nnode_modules/tinybench/package.json\\nnode_modules/tinyexec/package.json\\nnode_modules/tinyglobby/node_modules/picomatch/package.json\\nnode_modules/tinyglobby/package.json\\nnode_modules/tinyrainbow/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/traverse/package.json\\nnode_modules/tsx/package.json\\nnode_modules/tunnel/package.json\\nnode_modules/type-fest/package.json\\nnode_modules/typescript/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/undici-types/package.json\\nnode_modules/undici/package.json\\nnode_modules/unicode-emoji-modifier-base/package.json\\nnode_modules/unicorn-magic/package.json\\nnode_modules/unique-string/package.json\\nnode_modules/universal-user-agent/package.json\\nnode_modules/universalify/package.json\\nnode_modules/url-join/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/vite/node_modules/picomatch/package.json\\nnode_modules/vite/package.json\\nnode_modules/vitest/node_modules/picomatch/package.json\\nnode_modules/vitest/package.json\\nnode_modules/web-worker/package.json\\nnode_modules/which/package.json\\nnode_modules/why-is-node-running/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrap-ansi/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi/node_modules/string-width/package.json\\nnode_modules/wrap-ansi/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/xtend/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yoctocolors/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yoctocolors", "version": "2.2.0", "description": "The smallest and fastest command-line coloring package on the internet", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yoctocolors@2.2.0", "type": "library", "bom-ref": "pkg:npm/yoctocolors@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yoctocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yoctocolors/package.json" } ], "concludedValue": "node_modules/yoctocolors/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "22.0.0", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@22.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@22.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "18.1.0", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@18.1.0", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@18.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "8.2.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@8.2.2", "type": "library", "bom-ref": "pkg:npm/string-width@8.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/yargs/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "9.0.2", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@9.0.2", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@9.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "7.2.0", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@7.2.0", "type": "library", "bom-ref": "pkg:npm/string-width@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "10.6.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@10.6.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@10.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "1.0.0", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "why-is-node-running", "version": "2.3.0", "description": "Node is running but you don't know why? why-is-node-running is here to help you.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/why-is-node-running@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/why-is-node-running" }, { "type": "vcs", "url": "https://github.com/mafintosh/why-is-node-running.git" } ], "type": "library", "bom-ref": "pkg:npm/why-is-node-running@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/why-is-node-running/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/why-is-node-running/package.json" } ], "concludedValue": "node_modules/why-is-node-running/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "group": "", "name": "web-worker", "version": "1.5.0", "description": "Consistent Web Workers in browser and Node.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/web-worker@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/developit/web-worker" } ], "type": "library", "bom-ref": "pkg:npm/web-worker@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/web-worker/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/web-worker/package.json" } ], "concludedValue": "node_modules/web-worker/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "", "name": "vitest", "version": "4.1.10", "description": "Next generation testing framework powered by Vite", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vitest@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "framework", "bom-ref": "pkg:npm/vitest@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/package.json" }, { "name": "ImportedModules", "value": "vitest/config,defineConfig,vitest/config/defineConfig" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vitest/package.json" } ], "concludedValue": "node_modules/vitest/package.json" } ], "occurrences": [ { "location": "vitest.config.mjs", "line": 1 }, { "location": "vitest.config.mjs", "line": 3 } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.5", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/vitest/node_modules/picomatch/package.json" }, { "name": "SrcFile", "value": "node_modules/vite/node_modules/picomatch/package.json" }, { "name": "SrcFile", "value": "node_modules/tinyglobby/node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyglobby/node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/tinyglobby/node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Evan You" } ], "group": "", "name": "vite", "version": "8.2.1", "description": "Native-ESM powered web dev build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vite@8.2.1", "externalReferences": [ { "type": "website", "url": "https://vite.dev" }, { "type": "vcs", "url": "git+https://github.com/vitejs/vite.git" } ], "type": "library", "bom-ref": "pkg:npm/vite@8.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/vite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vite/package.json" } ], "concludedValue": "node_modules/vite/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "validate-npm-package-license", "version": "3.0.4", "description": "Give me a string and I'll tell you if it's a valid npm package license string", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-license@3.0.4", "type": "library", "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-license/package.json" } ], "concludedValue": "node_modules/validate-npm-package-license/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "SrcFile", "value": "node_modules/npm/node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/npm/node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "José F. Romaniello (http://joseoncode.com)" } ], "group": "", "name": "url-join", "version": "5.0.0", "description": "Join urls and normalize as in path.join.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url-join@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/jfromaniello/url-join.git" } ], "type": "library", "bom-ref": "pkg:npm/url-join@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/url-join/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url-join/package.json" } ], "concludedValue": "node_modules/url-join/package.json" } ] } }, { "authors": [ { "name": "Ryan Zimmerman " } ], "group": "", "name": "universalify", "version": "2.0.1", "description": "Make a callback- or promise-based function support both promises and callbacks.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/universalify@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/RyanZim/universalify#readme" }, { "type": "vcs", "url": "git+https://github.com/RyanZim/universalify.git" } ], "type": "library", "bom-ref": "pkg:npm/universalify@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/universalify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/universalify/package.json" } ], "concludedValue": "node_modules/universalify/package.json" } ] } }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "", "name": "universal-user-agent", "version": "7.0.3", "description": "Get a user agent string across all JavaScript Runtime Environments", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/universal-user-agent@7.0.3", "type": "library", "bom-ref": "pkg:npm/universal-user-agent@7.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/universal-user-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/universal-user-agent/package.json" } ], "concludedValue": "node_modules/universal-user-agent/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unique-string", "version": "3.0.0", "description": "Generate a unique random string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unique-string@3.0.0", "type": "library", "bom-ref": "pkg:npm/unique-string@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unique-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unique-string/package.json" } ], "concludedValue": "node_modules/unique-string/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unicorn-magic", "version": "0.3.0", "description": "Some useful utilities I often need", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.3.0", "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unicorn-magic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicorn-magic/package.json" } ], "concludedValue": "node_modules/unicorn-magic/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "unicode-emoji-modifier-base", "version": "1.0.0", "description": "The set of Unicode symbols that can serve as a base for emoji modifiers, i.e. those with the `Emoji_Modifier_Base` property set to `Yes`.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicode-emoji-modifier-base@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mathiasbynens/unicode-emoji-modifier-base" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/unicode-emoji-modifier-base.git" } ], "type": "library", "bom-ref": "pkg:npm/unicode-emoji-modifier-base@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unicode-emoji-modifier-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unicode-emoji-modifier-base/package.json" } ], "concludedValue": "node_modules/unicode-emoji-modifier-base/package.json" } ] } }, { "group": "", "name": "undici-types", "version": "7.18.2", "description": "A stand-alone types package for Undici", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici-types@7.18.2", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici-types@7.18.2", "properties": [ { "name": "SrcFile", "value": "node_modules/undici-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici-types/package.json" } ], "concludedValue": "node_modules/undici-types/package.json" } ] } }, { "group": "", "name": "undici", "version": "7.29.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@7.29.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@7.29.0", "properties": [ { "name": "SrcFile", "value": "node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici/package.json" } ], "concludedValue": "node_modules/undici/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "uglify-js", "version": "3.19.3", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@3.19.3", "type": "library", "bom-ref": "pkg:npm/uglify-js@3.19.3", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "5.8.0", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@5.8.0", "type": "library", "bom-ref": "pkg:npm/type-fest@5.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "Koichi Kobayashi " } ], "group": "", "name": "tunnel", "version": "0.0.6", "description": "Node HTTP/HTTPS Agents for tunneling proxies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel@0.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/koichik/node-tunnel/" }, { "type": "vcs", "url": "https://github.com/koichik/node-tunnel.git" } ], "type": "library", "bom-ref": "pkg:npm/tunnel@0.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel/package.json" } ], "concludedValue": "node_modules/tunnel/package.json" } ] } }, { "authors": [ { "name": "Hiroki Osame " } ], "group": "", "name": "tsx", "version": "4.23.12", "description": "TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsx@4.23.12", "externalReferences": [ { "type": "website", "url": "https://tsx.hirok.io" } ], "type": "library", "bom-ref": "pkg:npm/tsx@4.23.12", "properties": [ { "name": "SrcFile", "value": "node_modules/tsx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsx/package.json" } ], "concludedValue": "node_modules/tsx/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "traverse", "version": "0.6.8", "description": "traverse and transform objects by visiting every node on a recursive walk", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/traverse@0.6.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/js-traverse" }, { "type": "vcs", "url": "git://github.com/ljharb/js-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.6.8", "properties": [ { "name": "SrcFile", "value": "node_modules/traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/traverse/package.json" } ], "concludedValue": "node_modules/traverse/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "to-regex-range", "version": "5.0.1", "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-regex-range@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/to-regex-range" } ], "type": "library", "bom-ref": "pkg:npm/to-regex-range@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-regex-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-regex-range/package.json" } ], "concludedValue": "node_modules/to-regex-range/package.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "tinyrainbow", "version": "3.1.1", "description": "A small library to print colourful messages.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyrainbow@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tinylibs/tinyrainbow#readme" }, { "type": "vcs", "url": "git+https://github.com/tinylibs/tinyrainbow.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyrainbow@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyrainbow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyrainbow/package.json" } ], "concludedValue": "node_modules/tinyrainbow/package.json" } ] } }, { "authors": [ { "name": "Superchupu" } ], "group": "", "name": "tinyglobby", "version": "0.2.17", "description": "A fast and minimal alternative to globby and fast-glob", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyglobby@0.2.17", "externalReferences": [ { "type": "website", "url": "https://superchupu.dev/tinyglobby" }, { "type": "vcs", "url": "git+https://github.com/SuperchupuDev/tinyglobby.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyglobby@0.2.17", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyglobby/package.json" }, { "name": "SrcFile", "value": "node_modules/npm/node_modules/tinyglobby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/tinyglobby/package.json" } ], "concludedValue": "node_modules/npm/node_modules/tinyglobby/package.json" } ] } }, { "authors": [ { "name": "James Garbutt (https://github.com/43081j)" } ], "group": "", "name": "tinyexec", "version": "1.3.0", "description": "A minimal library for executing processes in Node", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinyexec@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tinylibs/tinyexec#readme" }, { "type": "vcs", "url": "git+https://github.com/tinylibs/tinyexec.git" } ], "type": "library", "bom-ref": "pkg:npm/tinyexec@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tinyexec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinyexec/package.json" } ], "concludedValue": "node_modules/tinyexec/package.json" } ] } }, { "group": "", "name": "tinybench", "version": "2.9.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tinybench@2.9.0", "type": "library", "bom-ref": "pkg:npm/tinybench@2.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tinybench/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tinybench/package.json" } ], "concludedValue": "node_modules/tinybench/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "time-span", "version": "5.1.0", "description": "Simplified high resolution timing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/time-span@5.1.0", "type": "library", "bom-ref": "pkg:npm/time-span@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/time-span/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/time-span/package.json" } ], "concludedValue": "node_modules/time-span/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "2.0.5", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "thenify-all", "version": "1.6.0", "description": "Promisifies all the selected functions in an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/thenify-all@1.6.0", "type": "library", "bom-ref": "pkg:npm/thenify-all@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/thenify-all/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/thenify-all/package.json" } ], "concludedValue": "node_modules/thenify-all/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "thenify", "version": "3.3.1", "description": "Promisify a callback-based function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/thenify@3.3.1", "type": "library", "bom-ref": "pkg:npm/thenify@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/thenify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/thenify/package.json" } ], "concludedValue": "node_modules/thenify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "tempy", "version": "3.2.0", "description": "Get a random temporary file or directory path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tempy@3.2.0", "type": "library", "bom-ref": "pkg:npm/tempy@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tempy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tempy/package.json" } ], "concludedValue": "node_modules/tempy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "2.19.0", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@2.19.0", "type": "library", "bom-ref": "pkg:npm/type-fest@2.19.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tempy/node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tempy/node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/tempy/node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "3.0.0", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-stream@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tempy/node_modules/is-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "temp-dir", "version": "3.0.0", "description": "Get the real path of the system temp directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/temp-dir@3.0.0", "type": "library", "bom-ref": "pkg:npm/temp-dir@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/temp-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/temp-dir/package.json" } ], "concludedValue": "node_modules/temp-dir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "tagged-tag", "version": "1.0.0", "description": "Unique tag for use in the type-fest Tagged type", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tagged-tag@1.0.0", "type": "library", "bom-ref": "pkg:npm/tagged-tag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tagged-tag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tagged-tag/package.json" } ], "concludedValue": "node_modules/tagged-tag/package.json" } ] } }, { "group": "", "name": "supports-hyperlinks", "version": "3.2.0", "description": "Detect whether a terminal supports hyperlinks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-hyperlinks@3.2.0", "type": "library", "bom-ref": "pkg:npm/supports-hyperlinks@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-hyperlinks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-hyperlinks/package.json" } ], "concludedValue": "node_modules/supports-hyperlinks/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "super-regex", "version": "1.1.0", "description": "Make a regular expression time out if it takes too long to execute", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/super-regex@1.1.0", "type": "library", "bom-ref": "pkg:npm/super-regex@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/super-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/super-regex/package.json" } ], "concludedValue": "node_modules/super-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "2.0.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@2.0.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-final-newline", "version": "4.0.0", "description": "Strip the final newline character from a string or Uint8Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-final-newline@4.0.0", "type": "library", "bom-ref": "pkg:npm/strip-final-newline@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-final-newline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-final-newline/package.json" } ], "concludedValue": "node_modules/strip-final-newline/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-bom", "version": "3.0.0", "description": "Strip UTF-8 byte order mark (BOM) from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom@3.0.0", "type": "library", "bom-ref": "pkg:npm/strip-bom@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-bom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-bom/package.json" } ], "concludedValue": "node_modules/strip-bom/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/strip-ansi/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "stream-combiner2", "version": "1.1.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-combiner2@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-combiner2" }, { "type": "vcs", "url": "git://github.com/substack/stream-combiner2.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner2@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-combiner2/package.json" } ], "concludedValue": "node_modules/stream-combiner2/package.json" } ] } }, { "group": "", "name": "std-env", "version": "4.2.0", "description": "Runtime agnostic JS utils", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/std-env@4.2.0", "type": "library", "bom-ref": "pkg:npm/std-env@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/std-env/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/std-env/package.json" } ], "concludedValue": "node_modules/std-env/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "stackback", "version": "0.0.2", "description": "return list of CallSite objects from a captured stacktrace", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stackback@0.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/node-stackback.git" } ], "type": "library", "bom-ref": "pkg:npm/stackback@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/stackback/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stackback/package.json" } ], "concludedValue": "node_modules/stackback/package.json" } ] } }, { "authors": [ { "name": "Matteo Collina " } ], "group": "", "name": "split2", "version": "1.0.0", "description": "split a Text Stream into a Line Stream, using Stream 3", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/split2@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcollina/split2.git" } ], "type": "library", "bom-ref": "pkg:npm/split2@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/split2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/split2/package.json" } ], "concludedValue": "node_modules/split2/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.23", "description": "A list of SPDX license identifiers", "scope": "optional", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.23", "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.23", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "SrcFile", "value": "node_modules/npm/node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/npm/node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "3.0.1", "description": "parse SPDX license expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.1", "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.5.0", "description": "list of SPDX standard license exceptions", "scope": "optional", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.5.0", "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "SrcFile", "value": "node_modules/npm/node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/npm/node_modules/spdx-exceptions/package.json" } ] } }, { "group": "", "name": "spdx-correct", "version": "3.2.0", "description": "correct invalid SPDX expressions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-correct@3.2.0", "type": "library", "bom-ref": "pkg:npm/spdx-correct@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-correct/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-correct/package.json" } ], "concludedValue": "node_modules/spdx-correct/package.json" } ] } }, { "authors": [ { "name": "Ben Drucker (http://bendrucker.me)" } ], "group": "", "name": "spawn-error-forwarder", "version": "1.0.0", "description": "Emit errors on stdout stream for a spawned child process", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spawn-error-forwarder@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bendrucker/spawn-error-forwarder" }, { "type": "vcs", "url": "https://github.com/bendrucker/spawn-error-forwarder.git" } ], "type": "library", "bom-ref": "pkg:npm/spawn-error-forwarder@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spawn-error-forwarder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spawn-error-forwarder/package.json" } ], "concludedValue": "node_modules/spawn-error-forwarder/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Valentin 7rulnik Semirulnik " } ], "group": "", "name": "source-map-js", "version": "1.2.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-js@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/7rulnik/source-map-js" } ], "type": "library", "bom-ref": "pkg:npm/source-map-js@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-js/package.json" } ], "concludedValue": "node_modules/source-map-js/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "skin-tone", "version": "2.0.0", "description": "Change the skin tone of an emoji 👌👌🏻👌🏼👌🏽👌🏾👌🏿", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/skin-tone@2.0.0", "type": "library", "bom-ref": "pkg:npm/skin-tone@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/skin-tone/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/skin-tone/package.json" } ], "concludedValue": "node_modules/skin-tone/package.json" } ] } }, { "authors": [ { "name": "Klaus Sinani (https://klaussinani.github.io)" } ], "group": "", "name": "signale", "version": "1.4.0", "description": "👋 Hackable console logger", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signale@1.4.0", "type": "library", "bom-ref": "pkg:npm/signale@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/package.json" } ], "concludedValue": "node_modules/signale/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "5.5.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@5.5.0", "type": "library", "bom-ref": "pkg:npm/supports-color@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/signale/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "3.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@3.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/signale/node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "figures", "version": "2.0.0", "description": "Unicode symbols with Windows CMD fallbacks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/figures@2.0.0", "type": "library", "bom-ref": "pkg:npm/figures@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/figures/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/figures/package.json" } ], "concludedValue": "node_modules/signale/node_modules/figures/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/signale/node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.3", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dfcreative/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/color-name/package.json" } ], "concludedValue": "node_modules/signale/node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "1.9.3", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@1.9.3", "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/signale/node_modules/color-convert/package.json" } ] } }, { "group": "", "name": "chalk", "version": "2.4.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@2.4.2", "type": "library", "bom-ref": "pkg:npm/chalk@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/chalk/package.json" } ], "concludedValue": "node_modules/signale/node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "3.2.1", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@3.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/signale/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signale/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/signale/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "4.1.0", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "SrcFile", "value": "node_modules/npm/node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/npm/node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Emil Bay " } ], "group": "", "name": "siginfo", "version": "2.0.0", "description": "Utility module to print pretty messages on SIGINFO/SIGUSR1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/siginfo@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/emilbayes/siginfo#readme" }, { "type": "vcs", "url": "git+https://github.com/emilbayes/siginfo.git" } ], "type": "library", "bom-ref": "pkg:npm/siginfo@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/siginfo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/siginfo/package.json" } ], "concludedValue": "node_modules/siginfo/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "3.0.0", "description": "Regular expression for matching a shebang line", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "2.0.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "semver-regex", "version": "4.0.5", "description": "Regular expression for matching semver versions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver-regex@4.0.5", "type": "library", "bom-ref": "pkg:npm/semver-regex@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver-regex/package.json" } ], "concludedValue": "node_modules/semver-regex/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.8.5", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.8.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "SrcFile", "value": "node_modules/npm/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/semver/package.json" } ], "concludedValue": "node_modules/npm/node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Stephan Bönnemann (http://boennemann.me)" } ], "group": "", "name": "semantic-release", "version": "25.0.9", "description": "Automated semver compliant package publishing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semantic-release@25.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/semantic-release#readme" }, { "type": "vcs", "url": "git+https://github.com/semantic-release/semantic-release.git" } ], "type": "library", "bom-ref": "pkg:npm/semantic-release@25.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/semantic-release/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semantic-release/package.json" } ], "concludedValue": "node_modules/semantic-release/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "group": "", "name": "rolldown", "version": "1.2.4", "description": "Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rolldown@1.2.4", "externalReferences": [ { "type": "website", "url": "https://rolldown.rs/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/rolldown.git" } ], "type": "library", "bom-ref": "pkg:npm/rolldown@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/rolldown/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rolldown/package.json" } ], "concludedValue": "node_modules/rolldown/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "5.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@5.0.0", "type": "library", "bom-ref": "pkg:npm/resolve-from@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Espen Hovlandsdal " } ], "group": "", "name": "registry-auth-token", "version": "5.1.1", "description": "Get the auth token set for an npm registry (if any)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/registry-auth-token@5.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rexxars/registry-auth-token#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/rexxars/registry-auth-token.git" } ], "type": "library", "bom-ref": "pkg:npm/registry-auth-token@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/registry-auth-token/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/registry-auth-token/package.json" } ], "concludedValue": "node_modules/registry-auth-token/package.json" } ] }, "tags": [ "auth", "token" ] }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "10.1.0", "description": "Read a package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@10.1.0", "type": "library", "bom-ref": "pkg:npm/read-pkg@10.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/read-pkg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unicorn-magic", "version": "0.4.0", "description": "Some useful utilities I often need", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.4.0", "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/node_modules/unicorn-magic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/node_modules/unicorn-magic/package.json" } ], "concludedValue": "node_modules/read-pkg/node_modules/unicorn-magic/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "8.3.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@8.3.0", "type": "library", "bom-ref": "pkg:npm/parse-json@8.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/node_modules/parse-json/package.json" }, { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "4.41.0", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@4.41.0", "type": "library", "bom-ref": "pkg:npm/type-fest@4.41.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/node_modules/parse-json/node_modules/type-fest/package.json" }, { "name": "SrcFile", "value": "node_modules/make-asynchronous/node_modules/type-fest/package.json" }, { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "read-package-up", "version": "12.0.0", "description": "Read the closest package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-package-up@12.0.0", "type": "library", "bom-ref": "pkg:npm/read-package-up@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-package-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-package-up/package.json" } ], "concludedValue": "node_modules/read-package-up/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "rc", "version": "1.2.8", "description": "hardwired configuration loader", "scope": "optional", "licenses": [ { "expression": "BSD-2-Clause OR MIT OR Apache-2.0" } ], "purl": "pkg:npm/rc@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/rc.git" } ], "type": "library", "bom-ref": "pkg:npm/rc@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/rc/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rc/package.json" } ], "concludedValue": "node_modules/rc/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "proxy-agent-negotiate", "version": "1.1.0", "description": "Negotiate/SPNEGO proxy authentication for proxy-agents", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-agent-negotiate@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-agent-negotiate@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-agent-negotiate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-agent-negotiate/package.json" } ], "concludedValue": "node_modules/proxy-agent-negotiate/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "proto-list", "version": "1.2.4", "description": "A utility for managing a prototype chain", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proto-list@1.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/proto-list" } ], "type": "library", "bom-ref": "pkg:npm/proto-list@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/proto-list/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proto-list/package.json" } ], "concludedValue": "node_modules/proto-list/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "pretty-ms", "version": "9.3.0", "description": "Convert milliseconds to a human readable string: `1337000000` → `15d 11h 23m 20s`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-ms@9.3.0", "type": "library", "bom-ref": "pkg:npm/pretty-ms@9.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-ms/package.json" } ], "concludedValue": "node_modules/pretty-ms/package.json" } ] } }, { "authors": [ { "name": "James Long" } ], "group": "", "name": "prettier", "version": "3.9.6", "description": "Prettier is an opinionated code formatter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prettier@3.9.6", "externalReferences": [ { "type": "website", "url": "https://prettier.io" } ], "type": "library", "bom-ref": "pkg:npm/prettier@3.9.6", "properties": [ { "name": "SrcFile", "value": "node_modules/prettier/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prettier/package.json" } ], "concludedValue": "node_modules/prettier/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "postcss", "version": "8.5.26", "description": "Tool for transforming styles with JS plugins", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss@8.5.26", "externalReferences": [ { "type": "website", "url": "https://postcss.org/" } ], "type": "library", "bom-ref": "pkg:npm/postcss@8.5.26", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/package.json" } ], "concludedValue": "node_modules/postcss/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pkg-conf", "version": "2.1.0", "description": "Get namespaced config from the closest package.json", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-conf@2.1.0", "type": "library", "bom-ref": "pkg:npm/pkg-conf@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-conf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/package.json" } ], "concludedValue": "node_modules/pkg-conf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "3.0.0", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@3.0.0", "type": "library", "bom-ref": "pkg:npm/pify@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "2.3.2", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@2.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@2.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picocolors@1.1.1", "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "group": "", "name": "pathe", "version": "2.0.3", "description": "Universal filesystem path utils", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pathe@2.0.3", "type": "library", "bom-ref": "pkg:npm/pathe@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/pathe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pathe/package.json" } ], "concludedValue": "node_modules/pathe/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-type", "version": "4.0.0", "description": "Check if a path is a file, directory, or symlink", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-type@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-type/package.json" } ], "concludedValue": "node_modules/path-type/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "3.1.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "3.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@3.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Ivan Nikulin (https://github.com/inikulin)" } ], "group": "", "name": "parse5-htmlparser2-tree-adapter", "version": "6.0.1", "description": "htmlparser2 tree adapter for parse5.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse5-htmlparser2-tree-adapter@6.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inikulin/parse5" }, { "type": "vcs", "url": "git://github.com/inikulin/parse5.git" } ], "type": "library", "bom-ref": "pkg:npm/parse5-htmlparser2-tree-adapter@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parse5-htmlparser2-tree-adapter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse5-htmlparser2-tree-adapter/package.json" } ], "concludedValue": "node_modules/parse5-htmlparser2-tree-adapter/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Ivan Nikulin (https://github.com/inikulin)" } ], "group": "", "name": "parse5", "version": "6.0.1", "description": "HTML parser and serializer.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse5@6.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inikulin/parse5" }, { "type": "vcs", "url": "git://github.com/inikulin/parse5.git" } ], "type": "library", "bom-ref": "pkg:npm/parse5@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parse5-htmlparser2-tree-adapter/node_modules/parse5/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse5-htmlparser2-tree-adapter/node_modules/parse5/package.json" } ], "concludedValue": "node_modules/parse5-htmlparser2-tree-adapter/node_modules/parse5/package.json" } ] } }, { "authors": [ { "name": "Ivan Nikulin (https://github.com/inikulin)" } ], "group": "", "name": "parse5", "version": "5.1.1", "description": "HTML parser and serializer.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse5@5.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inikulin/parse5" }, { "type": "vcs", "url": "git://github.com/inikulin/parse5.git" } ], "type": "library", "bom-ref": "pkg:npm/parse5@5.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parse5/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse5/package.json" } ], "concludedValue": "node_modules/parse5/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "parse-ms", "version": "4.0.0", "description": "Parse milliseconds into an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-ms@4.0.0", "type": "library", "bom-ref": "pkg:npm/parse-ms@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-ms/package.json" } ], "concludedValue": "node_modules/parse-ms/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "5.2.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@5.2.0", "type": "library", "bom-ref": "pkg:npm/parse-json@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parent-module", "version": "1.0.1", "description": "Get the path of the parent module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parent-module@1.0.1", "type": "library", "bom-ref": "pkg:npm/parent-module@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parent-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parent-module/package.json" } ], "concludedValue": "node_modules/parent-module/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "1.0.0", "description": "`Promise#try()` ponyfill - Starts a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@1.0.0", "type": "library", "bom-ref": "pkg:npm/p-try@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-timeout", "version": "6.1.4", "description": "Timeout a promise after a specified amount of time", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-timeout@6.1.4", "type": "library", "bom-ref": "pkg:npm/p-timeout@6.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/p-timeout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-timeout/package.json" } ], "concludedValue": "node_modules/p-timeout/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-reduce", "version": "3.0.0", "description": "Reduce a list of values using promises into a promise for a value", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-reduce@3.0.0", "type": "library", "bom-ref": "pkg:npm/p-reduce@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-reduce/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-reduce/package.json" } ], "concludedValue": "node_modules/p-reduce/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "7.0.6", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-map@7.0.6", "type": "library", "bom-ref": "pkg:npm/p-map@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/p-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-map/package.json" } ], "concludedValue": "node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "2.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@2.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "1.3.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@1.3.0", "type": "library", "bom-ref": "pkg:npm/p-limit@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-filter", "version": "4.1.0", "description": "Filter promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-filter@4.1.0", "type": "library", "bom-ref": "pkg:npm/p-filter@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-filter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-filter/package.json" } ], "concludedValue": "node_modules/p-filter/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-event", "version": "6.0.1", "description": "Promisify an event by waiting for it to be emitted", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-event@6.0.1", "type": "library", "bom-ref": "pkg:npm/p-event@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/p-event/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-event/package.json" } ], "concludedValue": "node_modules/p-event/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-each-series", "version": "3.0.0", "description": "Iterate over promises serially", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-each-series@3.0.0", "type": "library", "bom-ref": "pkg:npm/p-each-series@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-each-series/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-each-series/package.json" } ], "concludedValue": "node_modules/p-each-series/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "onetime", "version": "6.0.0", "description": "Ensure a function is only called once", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/onetime@6.0.0", "type": "library", "bom-ref": "pkg:npm/onetime@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/onetime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/onetime/package.json" } ], "concludedValue": "node_modules/onetime/package.json" } ] } }, { "authors": [ { "name": "Kevin Deng " } ], "group": "", "name": "obug", "version": "2.1.4", "description": "A lightweight JavaScript debugging utility, forked from debug, featuring TypeScript and ESM support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/obug@2.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sxzz/obug#readme" }, { "type": "vcs", "url": "git+https://github.com/sxzz/obug.git" } ], "type": "library", "bom-ref": "pkg:npm/obug@2.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/obug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/obug/package.json" } ], "concludedValue": "node_modules/obug/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "object-assign", "version": "4.1.1", "description": "ES2015 `Object.assign()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-assign@4.1.1", "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-assign/package.json" } ], "concludedValue": "node_modules/object-assign/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "npm-run-path", "version": "6.0.0", "description": "Get your PATH prepended with locally installed binaries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/npm-run-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/package.json" } ], "concludedValue": "node_modules/npm-run-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "4.0.0", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-key@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/node_modules/path-key/package.json" }, { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/path-key/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm", "version": "11.19.0", "description": "a package manager for JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Artistic-2.0", "url": "https://opensource.org/licenses/Artistic-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm@11.19.0", "externalReferences": [ { "type": "website", "url": "https://docs.npmjs.com/" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/npm@11.19.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/package.json" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/package.json" } ], "concludedValue": "node_modules/npm/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "5.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/npm/node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "write-file-atomic", "version": "7.0.1", "description": "Write files in an atomic fashion w/configurable ownership", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/write-file-atomic@7.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/write-file-atomic" }, { "type": "vcs", "url": "git+https://github.com/npm/write-file-atomic.git" } ], "type": "library", "bom-ref": "pkg:npm/write-file-atomic@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/write-file-atomic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/write-file-atomic/package.json" } ], "concludedValue": "node_modules/npm/node_modules/write-file-atomic/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "which", "version": "6.0.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@6.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/which/package.json" } ], "concludedValue": "node_modules/npm/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "walk-up-path", "version": "4.0.0", "description": "Given a path string, return a generator that walks up the path, emitting each dirname.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/walk-up-path@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/walk-up-path" } ], "type": "library", "bom-ref": "pkg:npm/walk-up-path@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/walk-up-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/walk-up-path/package.json" } ], "concludedValue": "node_modules/npm/node_modules/walk-up-path/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "validate-npm-package-name", "version": "7.0.2", "description": "Give me a string and I'll tell you if it's a valid npm package name", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-name@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/validate-npm-package-name" }, { "type": "vcs", "url": "git+https://github.com/npm/validate-npm-package-name.git" } ], "type": "library", "bom-ref": "pkg:npm/validate-npm-package-name@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/validate-npm-package-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/validate-npm-package-name/package.json" } ], "concludedValue": "node_modules/npm/node_modules/validate-npm-package-name/package.json" } ] } }, { "group": "", "name": "undici", "version": "6.27.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@6.27.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@6.27.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/undici/package.json" } ], "concludedValue": "node_modules/npm/node_modules/undici/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "", "name": "tuf-js", "version": "4.1.0", "description": "JavaScript implementation of The Update Framework (TUF)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tuf-js@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme" }, { "type": "vcs", "url": "git+https://github.com/theupdateframework/tuf-js.git" } ], "type": "framework", "bom-ref": "pkg:npm/tuf-js@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/tuf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/tuf-js/package.json" } ], "concludedValue": "node_modules/npm/node_modules/tuf-js/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "treeverse", "version": "3.0.0", "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/treeverse@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/treeverse.git" } ], "type": "library", "bom-ref": "pkg:npm/treeverse@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/treeverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/treeverse/package.json" } ], "concludedValue": "node_modules/npm/node_modules/treeverse/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.4", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/picomatch@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "thecodrr " } ], "group": "", "name": "fdir", "version": "6.5.0", "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fdir@6.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thecodrr/fdir#readme" }, { "type": "vcs", "url": "git+https://github.com/thecodrr/fdir.git" } ], "type": "library", "bom-ref": "pkg:npm/fdir@6.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/tinyglobby/node_modules/fdir/package.json" }, { "name": "SrcFile", "value": "node_modules/fdir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fdir/package.json" } ], "concludedValue": "node_modules/fdir/package.json" } ] } }, { "authors": [ { "name": "Joseph Wynn (https://wildlyinaccurate.com/)" } ], "group": "", "name": "tiny-relative-date", "version": "2.0.2", "description": "Tiny function that provides relative, human-readable dates.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tiny-relative-date@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/wildlyinaccurate/relative-date.git" } ], "type": "library", "bom-ref": "pkg:npm/tiny-relative-date@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/tiny-relative-date/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/tiny-relative-date/package.json" } ], "concludedValue": "node_modules/npm/node_modules/tiny-relative-date/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "text-table", "version": "0.2.0", "description": "borderless text tables with alignment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-table@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/text-table" }, { "type": "vcs", "url": "git://github.com/substack/text-table.git" } ], "type": "library", "bom-ref": "pkg:npm/text-table@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/text-table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/text-table/package.json" } ], "concludedValue": "node_modules/npm/node_modules/text-table/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "", "name": "tar", "version": "7.5.19", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@7.5.19", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@7.5.19", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/tar/package.json" } ], "concludedValue": "node_modules/npm/node_modules/tar/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "10.2.2", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@10.2.2", "type": "library", "bom-ref": "pkg:npm/supports-color@10.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/npm/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ssri", "version": "13.0.1", "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ssri@13.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ssri.git" } ], "type": "library", "bom-ref": "pkg:npm/ssri@13.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/ssri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/ssri/package.json" } ], "concludedValue": "node_modules/npm/node_modules/ssri/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "4.0.0", "description": "parse SPDX license expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@4.0.0", "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/npm/node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "socks-proxy-agent", "version": "8.0.5", "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks-proxy-agent@8.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/socks-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/socks-proxy-agent/package.json" } ], "concludedValue": "node_modules/npm/node_modules/socks-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "socks", "version": "2.8.9", "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/socks@2.8.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/socks/" }, { "type": "vcs", "url": "git+https://github.com/JoshGlazebrook/socks.git" } ], "type": "library", "bom-ref": "pkg:npm/socks@2.8.9", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/socks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/socks/package.json" } ], "concludedValue": "node_modules/npm/node_modules/socks/package.json" } ] } }, { "authors": [ { "name": "Josh Glazebrook" } ], "group": "", "name": "smart-buffer", "version": "4.2.0", "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/smart-buffer@4.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer/" }, { "type": "vcs", "url": "https://github.com/JoshGlazebrook/smart-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/smart-buffer@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/smart-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/smart-buffer/package.json" } ], "concludedValue": "node_modules/npm/node_modules/smart-buffer/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "", "name": "sigstore", "version": "4.1.1", "description": "code-signing for npm packages", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigstore@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/sigstore@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/sigstore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/sigstore/package.json" } ], "concludedValue": "node_modules/npm/node_modules/sigstore/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/npm/node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "read-cmd-shim", "version": "6.0.0", "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-cmd-shim@6.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/read-cmd-shim#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/read-cmd-shim.git" } ], "type": "library", "bom-ref": "pkg:npm/read-cmd-shim@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/read-cmd-shim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/read-cmd-shim/package.json" } ], "concludedValue": "node_modules/npm/node_modules/read-cmd-shim/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "read", "version": "5.0.1", "description": "read(1) for node programs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read@5.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/read.git" } ], "type": "library", "bom-ref": "pkg:npm/read@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/read/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/read/package.json" } ], "concludedValue": "node_modules/npm/node_modules/read/package.json" } ] } }, { "group": "", "name": "qrcode-terminal", "version": "0.12.0", "description": "QRCodes, in the terminal", "scope": "optional", "purl": "pkg:npm/qrcode-terminal@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gtanner/qrcode-terminal" }, { "type": "vcs", "url": "https://github.com/gtanner/qrcode-terminal" } ], "type": "library", "bom-ref": "pkg:npm/qrcode-terminal@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/qrcode-terminal/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/qrcode-terminal/package.json" } ], "concludedValue": "node_modules/npm/node_modules/qrcode-terminal/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "promzard", "version": "3.0.1", "description": "prompting wizardly", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promzard@3.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/promzard.git" } ], "type": "library", "bom-ref": "pkg:npm/promzard@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/promzard/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/promzard/package.json" } ], "concludedValue": "node_modules/npm/node_modules/promzard/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "promise-call-limit", "version": "3.0.2", "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promise-call-limit@3.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/promise-call-limit" } ], "type": "library", "bom-ref": "pkg:npm/promise-call-limit@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/promise-call-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/promise-call-limit/package.json" } ], "concludedValue": "node_modules/npm/node_modules/promise-call-limit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "promise-all-reject-late", "version": "1.0.1", "description": "Like Promise.all, but save rejections until all promises are resolved", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promise-all-reject-late@1.0.1", "type": "library", "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/promise-all-reject-late/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/promise-all-reject-late/package.json" } ], "concludedValue": "node_modules/npm/node_modules/promise-all-reject-late/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "proggy", "version": "4.0.0", "description": "Progress bar updates at a distance", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proggy@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/proggy.git" } ], "type": "library", "bom-ref": "pkg:npm/proggy@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/proggy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/proggy/package.json" } ], "concludedValue": "node_modules/npm/node_modules/proggy/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "proc-log", "version": "6.1.0", "description": "just emit 'log' events on the process object", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proc-log@6.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/proc-log.git" } ], "type": "library", "bom-ref": "pkg:npm/proc-log@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/proc-log/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/proc-log/package.json" } ], "concludedValue": "node_modules/npm/node_modules/proc-log/package.json" } ] }, "tags": [ "emit" ] }, { "group": "", "name": "postcss-selector-parser", "version": "7.1.4", "description": "Selector parser with built in methods for working with selector strings.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss-selector-parser@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/postcss/postcss-selector-parser" }, { "type": "vcs", "url": "https://github.com/postcss/postcss-selector-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/postcss-selector-parser@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/postcss-selector-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/postcss-selector-parser/package.json" } ], "concludedValue": "node_modules/npm/node_modules/postcss-selector-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "2.0.2", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-scurry@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/path-scurry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/npm/node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "parse-conflict-json", "version": "5.0.1", "description": "Parse a JSON string that has git merge conflicts, resolving if possible", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-conflict-json@5.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/parse-conflict-json.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-conflict-json@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/parse-conflict-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/parse-conflict-json/package.json" } ], "concludedValue": "node_modules/npm/node_modules/parse-conflict-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "pacote", "version": "21.5.1", "description": "JavaScript package downloader", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pacote@21.5.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/pacote.git" } ], "type": "library", "bom-ref": "pkg:npm/pacote@21.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/pacote/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/pacote/package.json" } ], "concludedValue": "node_modules/npm/node_modules/pacote/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-map", "version": "7.0.4", "description": "Map over promises concurrently", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-map@7.0.4", "type": "library", "bom-ref": "pkg:npm/p-map@7.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/p-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/p-map/package.json" } ], "concludedValue": "node_modules/npm/node_modules/p-map/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-user-validate", "version": "4.0.0", "description": "User validations for npm", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-user-validate@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-user-validate.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-user-validate@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-user-validate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-user-validate/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-user-validate/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-registry-fetch", "version": "19.1.1", "description": "Fetch-based http client for use with npm registry APIs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-registry-fetch@19.1.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-registry-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-registry-fetch@19.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-registry-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-registry-fetch/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-registry-fetch/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-profile", "version": "12.0.2", "description": "Library for updating an npmjs.com profile", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-profile@12.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-profile.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-profile@12.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-profile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-profile/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-profile/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-pick-manifest", "version": "11.0.3", "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-pick-manifest@11.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-pick-manifest.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-pick-manifest@11.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-pick-manifest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-pick-manifest/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-pick-manifest/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-packlist", "version": "10.0.4", "description": "Get a list of the files to add from a folder into an npm package", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-packlist@10.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-packlist.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-packlist@10.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-packlist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-packlist/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-packlist/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-package-arg", "version": "13.0.2", "description": "Parse the things that can be arguments to `npm install`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-package-arg@13.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-package-arg" }, { "type": "vcs", "url": "git+https://github.com/npm/npm-package-arg.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-package-arg@13.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-package-arg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-package-arg/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-package-arg/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-normalize-package-bin", "version": "5.0.0", "description": "Turn any flavor of allowable package.json bin into a normalized object", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-normalize-package-bin@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-normalize-package-bin.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-normalize-package-bin@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-normalize-package-bin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-normalize-package-bin/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-normalize-package-bin/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-install-checks", "version": "8.0.0", "description": "Check the engines and platform fields in package.json", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-install-checks@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-install-checks.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-install-checks@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-install-checks/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-install-checks/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-install-checks/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-bundled", "version": "5.0.0", "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-bundled@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/npm-bundled.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-bundled@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-bundled/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-bundled/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-bundled/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "npm-audit-report", "version": "7.0.0", "description": "Given a response from the npm security api, render it into a variety of security reports", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-audit-report@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-audit-report#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/npm-audit-report.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-audit-report@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/npm-audit-report/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/npm-audit-report/package.json" } ], "concludedValue": "node_modules/npm/node_modules/npm-audit-report/package.json" } ] }, "tags": [ "security" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "nopt", "version": "9.0.0", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@9.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/nopt/package.json" } ], "concludedValue": "node_modules/npm/node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://tootallnate.net)" } ], "group": "", "name": "node-gyp", "version": "12.4.0", "description": "Node.js native addon build tool", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-gyp@12.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-gyp@12.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/node-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/node-gyp/package.json" } ], "concludedValue": "node_modules/npm/node_modules/node-gyp/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "1.0.0", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@1.0.0", "type": "library", "bom-ref": "pkg:npm/negotiator@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/npm/node_modules/negotiator/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "mute-stream", "version": "3.0.0", "description": "Bytes go in, but they don't come out (when muted).", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mute-stream@3.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/mute-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/mute-stream@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/mute-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/mute-stream/package.json" } ], "concludedValue": "node_modules/npm/node_modules/mute-stream/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "3.1.0", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@3.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minizlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minizlib/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minizlib/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-sized", "version": "2.0.0", "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-sized@2.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-sized.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-sized@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-sized/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-sized/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-sized/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-pipeline", "version": "1.2.4", "description": "create a pipeline of streams using Minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-pipeline@1.2.4", "type": "library", "bom-ref": "pkg:npm/minipass-pipeline@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-pipeline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-pipeline/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-pipeline/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "4.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "3.3.6", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@3.3.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@3.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-flush", "version": "1.0.6", "description": "A Minipass stream that calls a flush function before emitting 'end'", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-flush@1.0.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/minipass-flush.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-flush@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-flush/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-flush/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-flush/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "minipass-fetch", "version": "5.0.2", "description": "An implementation of window.fetch in Node.js using Minipass streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-fetch@5.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/minipass-fetch.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass-fetch@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-fetch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-fetch/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-fetch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "minipass-collect", "version": "2.0.1", "description": "A Minipass stream that collects all the data into a single chunk", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass-collect@2.0.1", "type": "library", "bom-ref": "pkg:npm/minipass-collect@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass-collect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass-collect/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass-collect/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@7.1.3", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minipass/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@10.2.5", "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/npm/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "make-fetch-happen", "version": "15.0.6", "description": "Opinionated, caching, retrying fetch client", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-fetch-happen@15.0.6", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/make-fetch-happen.git" } ], "type": "library", "bom-ref": "pkg:npm/make-fetch-happen@15.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/make-fetch-happen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/make-fetch-happen/package.json" } ], "concludedValue": "node_modules/npm/node_modules/make-fetch-happen/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "11.5.1", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@11.5.1", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/npm/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmversion", "version": "8.0.4", "description": "library to do the things that 'npm version' does", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmversion@8.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmversion@8.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmversion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmversion/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmversion/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmteam", "version": "8.0.2", "description": "npm Team management APIs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmteam@8.0.2", "externalReferences": [ { "type": "website", "url": "https://npmjs.com/package/libnpmteam" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmteam@8.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmteam/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmteam/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmteam/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmsearch", "version": "9.0.1", "description": "Programmatic API for searching in npm and compatible registries.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmsearch@9.0.1", "externalReferences": [ { "type": "website", "url": "https://npmjs.com/package/libnpmsearch" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmsearch@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmsearch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmsearch/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmsearch/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmpublish", "version": "11.2.0", "description": "Programmatic API for the bits behind npm publish and unpublish", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmpublish@11.2.0", "externalReferences": [ { "type": "website", "url": "https://npmjs.com/package/libnpmpublish" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmpublish@11.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmpublish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmpublish/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmpublish/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmpack", "version": "9.1.12", "description": "Programmatic API for the bits behind npm pack", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmpack@9.1.12", "externalReferences": [ { "type": "website", "url": "https://npmjs.com/package/libnpmpack" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmpack@9.1.12", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmpack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmpack/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmpack/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmorg", "version": "8.0.1", "description": "Programmatic api for `npm org` commands", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmorg@8.0.1", "externalReferences": [ { "type": "website", "url": "https://npmjs.com/package/libnpmorg" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmorg@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmorg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmorg/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmorg/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmfund", "version": "7.0.26", "description": "Programmatic API for npm fund", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmfund@7.0.26", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmfund@7.0.26", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmfund/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmfund/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmfund/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmexec", "version": "10.3.2", "description": "npm exec (npx) programmatic API", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmexec@10.3.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmexec@10.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmexec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmexec/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmexec/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmdiff", "version": "8.1.12", "description": "The registry diff", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmdiff@8.1.12", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmdiff@8.1.12", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmdiff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmdiff/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmdiff/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "libnpmaccess", "version": "10.0.3", "description": "programmatic library for `npm access` commands", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/libnpmaccess@10.0.3", "externalReferences": [ { "type": "website", "url": "https://npmjs.com/package/libnpmaccess" }, { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/libnpmaccess@10.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/libnpmaccess/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/libnpmaccess/package.json" } ], "concludedValue": "node_modules/npm/node_modules/libnpmaccess/package.json" } ] } }, { "authors": [ { "name": "Angus Croll" } ], "group": "", "name": "just-diff-apply", "version": "5.5.0", "description": "Apply a diff to an object. Optionally supports jsonPatch protocol", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/just-diff-apply@5.5.0", "type": "library", "bom-ref": "pkg:npm/just-diff-apply@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/just-diff-apply/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/just-diff-apply/package.json" } ], "concludedValue": "node_modules/npm/node_modules/just-diff-apply/package.json" } ] } }, { "authors": [ { "name": "Angus Croll" } ], "group": "", "name": "just-diff", "version": "6.0.2", "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/just-diff@6.0.2", "type": "library", "bom-ref": "pkg:npm/just-diff@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/just-diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/just-diff/package.json" } ], "concludedValue": "node_modules/npm/node_modules/just-diff/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "1.3.1", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/npm/node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "json-stringify-nice", "version": "1.1.4", "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-nice@1.1.4", "type": "library", "bom-ref": "pkg:npm/json-stringify-nice@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/json-stringify-nice/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/json-stringify-nice/package.json" } ], "concludedValue": "node_modules/npm/node_modules/json-stringify-nice/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "json-parse-even-better-errors", "version": "5.0.0", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-even-better-errors@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/json-parse-even-better-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/json-parse-even-better-errors@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/json-parse-even-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/json-parse-even-better-errors/package.json" } ], "concludedValue": "node_modules/npm/node_modules/json-parse-even-better-errors/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "4.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@4.0.0", "type": "library", "bom-ref": "pkg:npm/isexe@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/isexe/package.json" } ], "concludedValue": "node_modules/npm/node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "silverwind " } ], "group": "", "name": "is-cidr", "version": "6.0.4", "description": "Check if a string is an IP address in CIDR notation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-cidr@6.0.4", "type": "library", "bom-ref": "pkg:npm/is-cidr@6.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/is-cidr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/is-cidr/package.json" } ], "concludedValue": "node_modules/npm/node_modules/is-cidr/package.json" } ] } }, { "authors": [ { "name": "Beau Gunderson (https://beaugunderson.com/)" } ], "group": "", "name": "ip-address", "version": "10.2.0", "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ip-address@10.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/beaugunderson/ip-address.git" } ], "type": "library", "bom-ref": "pkg:npm/ip-address@10.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/ip-address/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/ip-address/package.json" } ], "concludedValue": "node_modules/npm/node_modules/ip-address/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "init-package-json", "version": "8.2.5", "description": "A node module to get your node module started", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/init-package-json@8.2.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/init-package-json.git" } ], "type": "library", "bom-ref": "pkg:npm/init-package-json@8.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/init-package-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/init-package-json/package.json" } ], "concludedValue": "node_modules/npm/node_modules/init-package-json/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ini", "version": "6.0.0", "description": "An ini encoder/decoder for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@6.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/ini/package.json" } ], "concludedValue": "node_modules/npm/node_modules/ini/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "ignore-walk", "version": "8.0.0", "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore-walk@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/ignore-walk.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore-walk@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/ignore-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/ignore-walk/package.json" } ], "concludedValue": "node_modules/npm/node_modules/ignore-walk/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.7.2", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/iconv-lite" }, { "type": "vcs", "url": "https://github.com/pillarjs/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/npm/node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "7.0.6", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/npm/node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "7.0.2", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-proxy-agent@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/http-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/npm/node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Kornel Lesiński (https://kornel.ski/)" } ], "group": "", "name": "http-cache-semantics", "version": "4.2.0", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-cache-semantics@4.2.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/kornelski/http-cache-semantics.git" } ], "type": "library", "bom-ref": "pkg:npm/http-cache-semantics@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/npm/node_modules/http-cache-semantics/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "hosted-git-info", "version": "9.0.3", "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@9.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@9.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/hosted-git-info/package.json" }, { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.11", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "13.0.6", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@13.0.6", "type": "library", "bom-ref": "pkg:npm/glob@13.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/glob/package.json" } ], "concludedValue": "node_modules/npm/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "fs-minipass", "version": "3.0.3", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-minipass@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass#readme" }, { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-minipass@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/fs-minipass/package.json" } ], "concludedValue": "node_modules/npm/node_modules/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "Kasper U. Weihe" } ], "group": "", "name": "fastest-levenshtein", "version": "1.0.16", "description": "Fastest Levenshtein distance implementation in JS.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fastest-levenshtein@1.0.16", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ka-weihe/fastest-levenshtein#README" }, { "type": "vcs", "url": "git+https://github.com/ka-weihe/fastest-levenshtein.git" } ], "type": "library", "bom-ref": "pkg:npm/fastest-levenshtein@1.0.16", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/fastest-levenshtein/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/fastest-levenshtein/package.json" } ], "concludedValue": "node_modules/npm/node_modules/fastest-levenshtein/package.json" } ] } }, { "authors": [ { "name": "Sami Sayegh" } ], "group": "", "name": "exponential-backoff", "version": "3.1.3", "description": "A utility that allows retrying a function with an exponential delay between attempts.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/exponential-backoff@3.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/coveooss/exponential-backoff#readme" }, { "type": "vcs", "url": "git+https://github.com/coveooss/exponential-backoff.git" } ], "type": "library", "bom-ref": "pkg:npm/exponential-backoff@3.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/exponential-backoff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/exponential-backoff/package.json" } ], "concludedValue": "node_modules/npm/node_modules/exponential-backoff/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "env-paths", "version": "2.2.1", "description": "Get paths for storing things like data, config, cache, etc", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-paths@2.2.1", "type": "library", "bom-ref": "pkg:npm/env-paths@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/env-paths/package.json" }, { "name": "SrcFile", "value": "node_modules/env-paths/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-paths/package.json" } ], "concludedValue": "node_modules/env-paths/package.json" } ] } }, { "group": "", "name": "diff", "version": "8.0.4", "description": "A JavaScript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@8.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@8.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/diff/package.json" } ], "concludedValue": "node_modules/npm/node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "cssesc", "version": "3.0.0", "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cssesc@3.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/cssesc" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/cssesc.git" } ], "type": "library", "bom-ref": "pkg:npm/cssesc@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/cssesc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/cssesc/package.json" } ], "concludedValue": "node_modules/npm/node_modules/cssesc/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "common-ancestor-path", "version": "2.0.0", "description": "Find the common ancestor of 2 or more paths on Windows or Unix", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/common-ancestor-path@2.0.0", "type": "library", "bom-ref": "pkg:npm/common-ancestor-path@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/common-ancestor-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/common-ancestor-path/package.json" } ], "concludedValue": "node_modules/npm/node_modules/common-ancestor-path/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "cmd-shim", "version": "8.0.0", "description": "Used in npm for command line application support", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cmd-shim@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cmd-shim.git" } ], "type": "library", "bom-ref": "pkg:npm/cmd-shim@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/cmd-shim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/cmd-shim/package.json" } ], "concludedValue": "node_modules/npm/node_modules/cmd-shim/package.json" } ] } }, { "authors": [ { "name": "silverwind " } ], "group": "", "name": "cidr-regex", "version": "5.0.5", "description": "Regular expression for matching IP addresses in CIDR notation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cidr-regex@5.0.5", "type": "library", "bom-ref": "pkg:npm/cidr-regex@5.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/cidr-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/cidr-regex/package.json" } ], "concludedValue": "node_modules/npm/node_modules/cidr-regex/package.json" } ] } }, { "authors": [ { "name": "Thomas Watson Steen (https://twitter.com/wa7son)" } ], "group": "", "name": "ci-info", "version": "4.4.0", "description": "Get details about the current Continuous Integration environment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ci-info@4.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/watson/ci-info" } ], "type": "library", "bom-ref": "pkg:npm/ci-info@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/ci-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/ci-info/package.json" } ], "concludedValue": "node_modules/npm/node_modules/ci-info/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "3.0.0", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@3.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/chownr/package.json" } ], "concludedValue": "node_modules/npm/node_modules/chownr/package.json" } ] } }, { "group": "", "name": "chalk", "version": "5.6.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@5.6.2", "type": "library", "bom-ref": "pkg:npm/chalk@5.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/chalk/package.json" }, { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "cacache", "version": "20.0.4", "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacache@20.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cacache.git" } ], "type": "library", "bom-ref": "pkg:npm/cacache@20.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/cacache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/cacache/package.json" } ], "concludedValue": "node_modules/npm/node_modules/cacache/package.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.7", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@5.0.7", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/npm/node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "binary-extensions", "version": "3.1.0", "description": "List of binary file extensions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/binary-extensions@3.1.0", "type": "library", "bom-ref": "pkg:npm/binary-extensions@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/binary-extensions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/binary-extensions/package.json" } ], "concludedValue": "node_modules/npm/node_modules/binary-extensions/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "bin-links", "version": "6.0.2", "description": "JavaScript package binary linker", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bin-links@6.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/bin-links.git" } ], "type": "library", "bom-ref": "pkg:npm/bin-links@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/bin-links/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/bin-links/package.json" } ], "concludedValue": "node_modules/npm/node_modules/bin-links/package.json" } ] }, "tags": [ "binary" ] }, { "group": "", "name": "balanced-match", "version": "4.0.4", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/npm/node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "archy", "version": "1.0.0", "description": "render nested hierarchies `npm ls` style with unicode pipes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archy@1.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-archy.git" } ], "type": "library", "bom-ref": "pkg:npm/archy@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/archy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/archy/package.json" } ], "concludedValue": "node_modules/npm/node_modules/archy/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "aproba", "version": "2.1.0", "description": "A ridiculously light-weight argument validator (now browser friendly)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aproba@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/aproba" }, { "type": "vcs", "url": "https://github.com/iarna/aproba" } ], "type": "library", "bom-ref": "pkg:npm/aproba@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/aproba/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/aproba/package.json" } ], "concludedValue": "node_modules/npm/node_modules/aproba/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "7.1.4", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agent-base@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/agent-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/npm/node_modules/agent-base/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "abbrev", "version": "4.0.0", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/npm/node_modules/abbrev/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@tufjs", "name": "models", "version": "4.1.0", "description": "TUF metadata models", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tufjs/models@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme" }, { "type": "vcs", "url": "git+https://github.com/theupdateframework/tuf-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@tufjs/models@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@tufjs/models/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@tufjs/models/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@tufjs/models/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@tufjs", "name": "canonical-json", "version": "2.0.0", "description": "OLPC JSON canonicalization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40tufjs/canonical-json@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/canonical-json#readme" }, { "type": "vcs", "url": "git+https://github.com/theupdateframework/tuf-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@tufjs/canonical-json@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@tufjs/canonical-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@tufjs/canonical-json/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@tufjs/canonical-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "verify", "version": "3.1.1", "description": "Verification of Sigstore signatures", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/verify@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/verify#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/verify@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@sigstore/verify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@sigstore/verify/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@sigstore/verify/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "tuf", "version": "4.0.2", "description": "Client for the Sigstore TUF repository", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/tuf@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/tuf@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@sigstore/tuf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@sigstore/tuf/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@sigstore/tuf/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "sign", "version": "4.1.1", "description": "Sigstore signing library", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/sign@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/sign#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/sign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@sigstore/sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@sigstore/sign/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@sigstore/sign/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "protobuf-specs", "version": "0.5.1", "description": "code-signing for npm packages", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/protobuf-specs@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/protobuf-specs#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/protobuf-specs.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/protobuf-specs@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "core", "version": "3.2.1", "description": "Base library for Sigstore", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/core@3.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/core#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/core@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@sigstore/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@sigstore/core/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@sigstore/core/package.json" } ] } }, { "authors": [ { "name": "bdehamer@github.com" } ], "group": "@sigstore", "name": "bundle", "version": "4.0.0", "description": "Sigstore bundle type", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sigstore/bundle@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/bundle#readme" }, { "type": "vcs", "url": "git+https://github.com/sigstore/sigstore-js.git" } ], "type": "library", "bom-ref": "pkg:npm/@sigstore/bundle@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@sigstore/bundle/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@sigstore/bundle/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@sigstore/bundle/package.json" } ] }, "tags": [ "bundle" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "run-script", "version": "10.0.4", "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/run-script@10.0.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/run-script.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/run-script@10.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/run-script/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/run-script/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/run-script/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "redact", "version": "4.0.0", "description": "Redact sensitive npm information from output", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/redact@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/redact.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/redact@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/redact/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/redact/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/redact/package.json" } ] }, "tags": [ "sensitive" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "query", "version": "5.0.0", "description": "npm query parser and tools", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/query@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/query.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/query@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/query/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/query/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/query/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "promise-spawn", "version": "9.0.1", "description": "spawn processes the way the npm cli likes to do", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/promise-spawn@9.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/promise-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/promise-spawn@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/promise-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/promise-spawn/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/promise-spawn/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "package-json", "version": "7.0.5", "description": "Programmatic API to update package.json", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/package-json@7.0.5", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/package-json.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/package-json@7.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/package-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/package-json/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/package-json/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "node-gyp", "version": "5.0.0", "description": "Tools for dealing with node-gyp packages", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/node-gyp@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/node-gyp@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/node-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/node-gyp/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/node-gyp/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "name-from-folder", "version": "4.0.0", "description": "Get the package name from a folder path", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/name-from-folder@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/name-from-folder.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/name-from-folder@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/name-from-folder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/name-from-folder/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/name-from-folder/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "metavuln-calculator", "version": "9.0.3", "description": "Calculate meta-vulnerabilities from package security advisories", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/metavuln-calculator@9.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/metavuln-calculator.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/metavuln-calculator@9.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json" } ] }, "tags": [ "security" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "map-workspaces", "version": "5.0.3", "description": "Retrieves a name:pathname Map for a given workspaces config", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/map-workspaces@5.0.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/map-workspaces.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/map-workspaces@5.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/map-workspaces/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/map-workspaces/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/map-workspaces/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "installed-package-contents", "version": "4.0.0", "description": "Get the list of files installed in a package in node_modules, including bundled dependencies", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/installed-package-contents@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/installed-package-contents.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/installed-package-contents@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "git", "version": "7.0.2", "description": "a util for spawning git from npm CLI contexts", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/git@7.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/git.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/git@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/git/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/git/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/git/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "fs", "version": "5.0.0", "description": "filesystem utilities for the npm cli", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/fs@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/fs.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/fs@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/fs/package.json" }, { "name": "ImportedModules", "value": "fs" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/fs/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/fs/package.json" } ], "occurrences": [ { "location": "lib/fs/node.js", "line": 6 }, { "location": "src/fs/node.ts", "line": 5 } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "config", "version": "10.12.0", "description": "Configuration management for the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/config@10.12.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/config@10.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/config/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/config/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/config/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "arborist", "version": "9.9.1", "description": "Manage node_modules trees", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/arborist@9.9.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/arborist@9.9.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/arborist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/arborist/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/arborist/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "@npmcli", "name": "agent", "version": "4.0.2", "description": "the http/https agent used by the npm cli", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40npmcli/agent@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/agent#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/agent.git" } ], "type": "library", "bom-ref": "pkg:npm/@npmcli/agent@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@npmcli/agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@npmcli/agent/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@npmcli/agent/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "@isaacs", "name": "string-locale-compare", "version": "1.1.0", "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/string-locale-compare" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/string-locale-compare@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter" } ], "group": "@isaacs", "name": "fs-minipass", "version": "4.0.1", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/@isaacs/fs-minipass@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@isaacs/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@isaacs/fs-minipass/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@isaacs/fs-minipass/package.json" } ] } }, { "group": "@gar", "name": "promise-retry", "version": "1.0.3", "description": "Retries a function that returns a promise, leveraging the power of the retry module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40gar/promise-retry@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/wraithgar/node-promise-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/@gar/promise-retry@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/npm/node_modules/@gar/promise-retry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm/node_modules/@gar/promise-retry/package.json" } ], "concludedValue": "node_modules/npm/node_modules/@gar/promise-retry/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "normalize-url", "version": "9.0.1", "description": "Normalize a URL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-url@9.0.1", "type": "library", "bom-ref": "pkg:npm/normalize-url@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-url/package.json" } ], "concludedValue": "node_modules/normalize-url/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "normalize-package-data", "version": "8.0.0", "description": "Normalizes data that can be found in package.json files.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@8.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "Daniel Bugl " } ], "group": "", "name": "node-emoji", "version": "2.2.0", "description": "Friendly emoji lookups and parsing utilities for Node.js. 💖", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-emoji@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/omnidan/node-emoji" } ], "type": "library", "bom-ref": "pkg:npm/node-emoji@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-emoji/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-emoji/package.json" } ], "concludedValue": "node_modules/node-emoji/package.json" } ] } }, { "authors": [ { "name": "Stephan Bönnemann (http://boennemann.me/)" } ], "group": "", "name": "nerf-dart", "version": "1.0.0", "description": "maps a URL to an identifier", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nerf-dart@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/boennemann/nerf-dart#readme" }, { "type": "vcs", "url": "https://github.com/boennemann/nerf-dart.git" } ], "type": "library", "bom-ref": "pkg:npm/nerf-dart@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nerf-dart/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nerf-dart/package.json" } ], "concludedValue": "node_modules/nerf-dart/package.json" } ] } }, { "group": "", "name": "neo-async", "version": "2.6.2", "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/neo-async@2.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/suguru03/neo-async" } ], "type": "library", "bom-ref": "pkg:npm/neo-async@2.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/neo-async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/neo-async/package.json" } ], "concludedValue": "node_modules/neo-async/package.json" } ] } }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "nanoid", "version": "3.3.18", "description": "A tiny (116 bytes), secure URL-friendly unique string ID generator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nanoid@3.3.18", "type": "library", "bom-ref": "pkg:npm/nanoid@3.3.18", "properties": [ { "name": "SrcFile", "value": "node_modules/nanoid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nanoid/package.json" } ], "concludedValue": "node_modules/nanoid/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "mz", "version": "2.7.0", "description": "modernize node.js to current ECMAScript standards", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mz@2.7.0", "type": "library", "bom-ref": "pkg:npm/mz@2.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mz/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mz/package.json" } ], "concludedValue": "node_modules/mz/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "mimic-fn", "version": "4.0.0", "description": "Make a function mimic another one", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-fn@4.0.0", "type": "library", "bom-ref": "pkg:npm/mimic-fn@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-fn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-fn/package.json" } ], "concludedValue": "node_modules/mimic-fn/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "4.1.0", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/mime" } ], "type": "library", "bom-ref": "pkg:npm/mime@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "micromatch", "version": "4.0.8", "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/micromatch@4.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/micromatch" } ], "type": "library", "bom-ref": "pkg:npm/micromatch@4.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/micromatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/micromatch/package.json" } ], "concludedValue": "node_modules/micromatch/package.json" } ] } }, { "authors": [ { "name": "Stephen Sugden " } ], "group": "", "name": "merge-stream", "version": "2.0.0", "description": "Create a stream that emits events from multiple other streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-stream@2.0.0", "type": "library", "bom-ref": "pkg:npm/merge-stream@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-stream/package.json" } ], "concludedValue": "node_modules/merge-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "meow", "version": "13.2.0", "description": "CLI app helper", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/meow@13.2.0", "type": "library", "bom-ref": "pkg:npm/meow@13.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/meow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/meow/package.json" } ], "concludedValue": "node_modules/meow/package.json" } ] } }, { "authors": [ { "name": "Mikael Brevik" } ], "group": "", "name": "marked-terminal", "version": "7.3.0", "description": "A custom render for marked to output to the Terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/marked-terminal@7.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikaelbr/marked-terminal" }, { "type": "vcs", "url": "https://github.com/mikaelbr/marked-terminal.git" } ], "type": "library", "bom-ref": "pkg:npm/marked-terminal@7.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/marked-terminal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/marked-terminal/package.json" } ], "concludedValue": "node_modules/marked-terminal/package.json" } ] } }, { "authors": [ { "name": "Christopher Jeffrey" } ], "group": "", "name": "marked", "version": "15.0.12", "description": "A markdown parser built for speed", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/marked@15.0.12", "externalReferences": [ { "type": "website", "url": "https://marked.js.org" }, { "type": "vcs", "url": "git://github.com/markedjs/marked.git" } ], "type": "library", "bom-ref": "pkg:npm/marked@15.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/marked/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/marked/package.json" } ], "concludedValue": "node_modules/marked/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "4.0.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-dir@4.0.0", "type": "library", "bom-ref": "pkg:npm/make-dir@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "make-asynchronous", "version": "1.1.0", "description": "Make a synchronous function asynchronous by running it in a worker", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/make-asynchronous@1.1.0", "type": "library", "bom-ref": "pkg:npm/make-asynchronous@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-asynchronous/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-asynchronous/package.json" } ], "concludedValue": "node_modules/make-asynchronous/package.json" } ] } }, { "group": "", "name": "magicast", "version": "0.5.4", "description": "Modify a JS/TS file and write back magically just like JSON!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magicast@0.5.4", "type": "library", "bom-ref": "pkg:npm/magicast@0.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/magicast/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magicast/package.json" } ], "concludedValue": "node_modules/magicast/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.30.21", "description": "Modify strings, generate sourcemaps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/magic-string@0.30.21", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Rich-Harris/magic-string.git" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.21", "properties": [ { "name": "SrcFile", "value": "node_modules/magic-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magic-string/package.json" } ], "concludedValue": "node_modules/magic-string/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "11.5.2", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@11.5.2", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@11.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.uniqby", "version": "4.7.0", "description": "The lodash method `_.uniqBy` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.uniqby@4.7.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.uniqby@4.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.uniqby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.uniqby/package.json" } ], "concludedValue": "node_modules/lodash.uniqby/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.isstring", "version": "4.0.1", "description": "The lodash method `_.isString` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.isstring@4.0.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isstring@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.isstring/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.isstring/package.json" } ], "concludedValue": "node_modules/lodash.isstring/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.isplainobject", "version": "4.0.6", "description": "The lodash method `_.isPlainObject` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.isplainobject@4.0.6", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.isplainobject/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.isplainobject/package.json" } ], "concludedValue": "node_modules/lodash.isplainobject/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.escaperegexp", "version": "4.1.2", "description": "The lodash method `_.escapeRegExp` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.escaperegexp@4.1.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.escaperegexp@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.escaperegexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.escaperegexp/package.json" } ], "concludedValue": "node_modules/lodash.escaperegexp/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.capitalize", "version": "4.2.1", "description": "The lodash method `_.capitalize` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.capitalize@4.2.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.capitalize@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.capitalize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.capitalize/package.json" } ], "concludedValue": "node_modules/lodash.capitalize/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash-es", "version": "4.18.1", "description": "Lodash exported as ES modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash-es@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/custom-builds" } ], "type": "library", "bom-ref": "pkg:npm/lodash-es@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash-es/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash-es/package.json" } ], "concludedValue": "node_modules/lodash-es/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "2.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@2.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "load-json-file", "version": "4.0.0", "description": "Read and parse a JSON file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/load-json-file@4.0.0", "type": "library", "bom-ref": "pkg:npm/load-json-file@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/load-json-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/package.json" } ], "concludedValue": "node_modules/load-json-file/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "4.0.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@4.0.0", "type": "library", "bom-ref": "pkg:npm/parse-json@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/load-json-file/node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/load-json-file/node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Brian Donovan " } ], "group": "", "name": "lines-and-columns", "version": "1.2.4", "description": "Maps lines and columns to character offsets and back.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lines-and-columns@1.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eventualbuddha/lines-and-columns#readme" }, { "type": "vcs", "url": "https://github.com/eventualbuddha/lines-and-columns.git" } ], "type": "library", "bom-ref": "pkg:npm/lines-and-columns@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/lines-and-columns/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lines-and-columns/package.json" } ], "concludedValue": "node_modules/lines-and-columns/package.json" } ] } }, { "group": "", "name": "lightningcss-linux-x64-gnu", "version": "1.33.0", "description": "A CSS parser, transformer, and minifier written in Rust", "scope": "optional", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lightningcss-linux-x64-gnu@1.33.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/parcel-bundler/lightningcss.git" } ], "type": "library", "bom-ref": "pkg:npm/lightningcss-linux-x64-gnu@1.33.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lightningcss-linux-x64-gnu/package.json" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lightningcss-linux-x64-gnu/package.json" } ], "concludedValue": "node_modules/lightningcss-linux-x64-gnu/package.json" } ] } }, { "group": "", "name": "lightningcss", "version": "1.33.0", "description": "A CSS parser, transformer, and minifier written in Rust", "scope": "optional", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0", "properties": [ { "name": "cdx:license:category", "value": "Copyleft Limited" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lightningcss@1.33.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/parcel-bundler/lightningcss.git" } ], "type": "library", "bom-ref": "pkg:npm/lightningcss@1.33.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lightningcss/package.json" }, { "name": "cdx:license:category", "value": "Copyleft Limited" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lightningcss/package.json" } ], "concludedValue": "node_modules/lightningcss/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "jsonfile", "version": "6.2.1", "description": "Easily read/write JSON files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonfile@6.2.1", "type": "library", "bom-ref": "pkg:npm/jsonfile@6.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonfile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonfile/package.json" } ], "concludedValue": "node_modules/jsonfile/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Ivan Korolenko " } ], "group": "", "name": "json-with-bigint", "version": "3.5.11", "description": "JS library that allows you to easily serialize and deserialize data with BigInt values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-with-bigint@3.5.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Ivan-Korolenko/json-with-bigint" } ], "type": "library", "bom-ref": "pkg:npm/json-with-bigint@3.5.11", "properties": [ { "name": "SrcFile", "value": "node_modules/json-with-bigint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-with-bigint/package.json" } ], "concludedValue": "node_modules/json-with-bigint/package.json" } ] } }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "json-parse-even-better-errors", "version": "2.3.1", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", "type": "library", "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-even-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-even-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-even-better-errors/package.json" } ] } }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "json-parse-better-errors", "version": "1.0.2", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-better-errors@1.0.2", "type": "library", "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-better-errors/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "4.3.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@4.3.1", "type": "library", "bom-ref": "pkg:npm/js-yaml@4.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "10.0.0", "description": "Tiny JavaScript tokenizer.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@10.0.0", "type": "library", "bom-ref": "pkg:npm/js-tokens@10.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "group": "", "name": "java-properties", "version": "1.0.2", "description": "Reads and interpolates Java .properties files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/java-properties@1.0.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/mattdsteele/java-properties" }, { "type": "vcs", "url": "https://github.com/mattdsteele/java-properties.git" } ], "type": "library", "bom-ref": "pkg:npm/java-properties@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/java-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/java-properties/package.json" } ], "concludedValue": "node_modules/java-properties/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-reports", "version": "3.2.0", "description": "istanbul reports", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-reports@3.2.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-reports@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-reports/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-reports/package.json" } ], "concludedValue": "node_modules/istanbul-reports/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-report", "version": "3.0.1", "description": "Base reporting library for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-report@3.0.1", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-coverage", "version": "3.2.2", "description": "Data library for istanbul coverage objects", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul-lib-coverage@3.2.2", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Pierre Vanduynslager (https://github.com/pvdlg)" } ], "group": "", "name": "issue-parser", "version": "7.0.2", "description": "Parser for Github, GitLab and Bitbucket issues actions, references and mentions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/issue-parser@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/issue-parser#readme" }, { "type": "vcs", "url": "https://github.com/semantic-release/issue-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/issue-parser@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/issue-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/issue-parser/package.json" } ], "concludedValue": "node_modules/issue-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "2.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-unicode-supported@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "4.0.1", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@4.0.1", "type": "library", "bom-ref": "pkg:npm/is-stream@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "4.1.0", "description": "Check if a value is a plain object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-obj@4.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-obj", "version": "2.0.0", "description": "Check if a value is an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-obj@2.0.0", "type": "library", "bom-ref": "pkg:npm/is-obj@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-obj/package.json" } ], "concludedValue": "node_modules/is-obj/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-number", "version": "7.0.0", "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-number" } ], "type": "library", "bom-ref": "pkg:npm/is-number@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number/package.json" } ], "concludedValue": "node_modules/is-number/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.2.1", "description": "Determines if an object can be used as an array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/is-arrayish/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "ini", "version": "1.3.8", "description": "An ini encoder/decoder for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@1.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@1.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ini/package.json" } ], "concludedValue": "node_modules/ini/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "index-to-position", "version": "1.2.0", "description": "Convert a string index to its line and column position", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/index-to-position@1.2.0", "type": "library", "bom-ref": "pkg:npm/index-to-position@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/index-to-position/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/index-to-position/package.json" } ], "concludedValue": "node_modules/index-to-position/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "indent-string", "version": "5.0.0", "description": "Indent each line in a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/indent-string@5.0.0", "type": "library", "bom-ref": "pkg:npm/indent-string@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/indent-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indent-string/package.json" } ], "concludedValue": "node_modules/indent-string/package.json" } ] } }, { "authors": [ { "name": "Titus Wormer (https://wooorm.com)" } ], "group": "", "name": "import-meta-resolve", "version": "4.2.0", "description": "Resolve things like Node.js — ponyfill for `import.meta.resolve`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-meta-resolve@4.2.0", "type": "library", "bom-ref": "pkg:npm/import-meta-resolve@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-meta-resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-meta-resolve/package.json" } ], "concludedValue": "node_modules/import-meta-resolve/package.json" } ] } }, { "authors": [ { "name": "Pierre Cavin (https://github.com/sheerlox)" } ], "group": "", "name": "import-from-esm", "version": "2.0.0", "description": "Import a module like with require() but from a given path (for ESM)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-from-esm@2.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/sheerlox/import-from-esm.git" } ], "type": "library", "bom-ref": "pkg:npm/import-from-esm@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-from-esm/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-from-esm/package.json" } ], "concludedValue": "node_modules/import-from-esm/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "import-fresh", "version": "3.3.1", "description": "Import a module while bypassing the cache", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-fresh@3.3.1", "type": "library", "bom-ref": "pkg:npm/import-fresh@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/import-fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-fresh/package.json" } ], "concludedValue": "node_modules/import-fresh/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "4.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@4.0.0", "type": "library", "bom-ref": "pkg:npm/resolve-from@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-fresh/node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-fresh/node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/import-fresh/node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "ehmicky (https://github.com/ehmicky)" } ], "group": "", "name": "human-signals", "version": "8.0.1", "description": "Human-friendly process signals", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/human-signals@8.0.1", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/ehmicky/human-signals" }, { "type": "vcs", "url": "git+https://github.com/ehmicky/human-signals.git" } ], "type": "library", "bom-ref": "pkg:npm/human-signals@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/human-signals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/human-signals/package.json" } ], "concludedValue": "node_modules/human-signals/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "9.1.0", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@9.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@9.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "http-proxy-agent", "version": "9.1.0", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-proxy-agent@9.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@9.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-proxy-agent/package.json" } ], "concludedValue": "node_modules/http-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "html-escaper", "version": "2.0.2", "description": "fast and safe way to escape and unescape &<>'\" chars", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/html-escaper@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper" }, { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper.git" } ], "type": "library", "bom-ref": "pkg:npm/html-escaper@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/html-escaper/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-escaper/package.json" } ], "concludedValue": "node_modules/html-escaper/package.json" } ] }, "tags": [ "escape", "unescape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "hook-std", "version": "4.0.0", "description": "Hook and modify stdout and stderr", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hook-std@4.0.0", "type": "library", "bom-ref": "pkg:npm/hook-std@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hook-std/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hook-std/package.json" } ], "concludedValue": "node_modules/hook-std/package.json" } ] } }, { "authors": [ { "name": "Ivan Sagalaev " } ], "group": "", "name": "highlight.js", "version": "10.7.3", "description": "Syntax highlighting with language autodetection.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/highlight.js@10.7.3", "externalReferences": [ { "type": "website", "url": "https://highlightjs.org/" }, { "type": "vcs", "url": "git://github.com/highlightjs/highlight.js.git" } ], "type": "library", "bom-ref": "pkg:npm/highlight.js@10.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/highlight.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/highlight.js/package.json" } ], "concludedValue": "node_modules/highlight.js/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Yehuda Katz" } ], "group": "", "name": "handlebars", "version": "4.7.9", "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/handlebars@4.7.9", "externalReferences": [ { "type": "website", "url": "https://handlebarsjs.com/" }, { "type": "vcs", "url": "https://github.com/handlebars-lang/handlebars.js.git" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@4.7.9", "properties": [ { "name": "SrcFile", "value": "node_modules/handlebars/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/handlebars/package.json" } ], "concludedValue": "node_modules/handlebars/package.json" } ] }, "tags": [ "templates" ] }, { "group": "", "name": "git-log-parser", "version": "1.2.1", "description": "git-log-parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/git-log-parser@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bendrucker/git-log-parser" }, { "type": "vcs", "url": "https://github.com/bendrucker/git-log-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/git-log-parser@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/git-log-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/git-log-parser/package.json" } ], "concludedValue": "node_modules/git-log-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "6.0.1", "description": "Get a stream as a string, buffer, or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@6.0.1", "type": "library", "bom-ref": "pkg:npm/get-stream@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-east-asian-width", "version": "1.6.0", "description": "Determine the East Asian Width of a Unicode character", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-east-asian-width@1.6.0", "type": "library", "bom-ref": "pkg:npm/get-east-asian-width@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-east-asian-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-east-asian-width/package.json" } ], "concludedValue": "node_modules/get-east-asian-width/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "function-timeout", "version": "1.0.2", "description": "Make a synchronous function have a timeout", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-timeout@1.0.2", "type": "library", "bom-ref": "pkg:npm/function-timeout@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/function-timeout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-timeout/package.json" } ], "concludedValue": "node_modules/function-timeout/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "11.4.0", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@11.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "git+https://github.com/jprichardson/node-fs-extra.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@11.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-versions", "version": "6.0.0", "description": "Find semver versions in a string: `unicorn v1.2.3` → `1.2.3`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-versions@6.0.0", "type": "library", "bom-ref": "pkg:npm/find-versions@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-versions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-versions/package.json" } ], "concludedValue": "node_modules/find-versions/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up-simple", "version": "1.0.1", "description": "Find a file or directory by walking up parent directories — Zero dependencies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up-simple@1.0.1", "type": "library", "bom-ref": "pkg:npm/find-up-simple@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up-simple/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up-simple/package.json" } ], "concludedValue": "node_modules/find-up-simple/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "2.1.0", "description": "Find a file by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@2.1.0", "type": "library", "bom-ref": "pkg:npm/find-up@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "fill-range", "version": "7.1.1", "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fill-range@7.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/fill-range" } ], "type": "library", "bom-ref": "pkg:npm/fill-range@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fill-range/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fill-range/package.json" } ], "concludedValue": "node_modules/fill-range/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "figures", "version": "6.1.0", "description": "Unicode symbols with fallbacks for older terminals", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/figures@6.1.0", "type": "library", "bom-ref": "pkg:npm/figures@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/figures/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/figures/package.json" } ], "concludedValue": "node_modules/figures/package.json" } ] } }, { "group": "", "name": "expect-type", "version": "1.4.0", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/expect-type@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mmkal/expect-type#readme" }, { "type": "vcs", "url": "https://github.com/mmkal/expect-type.git" } ], "type": "library", "bom-ref": "pkg:npm/expect-type@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/expect-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/expect-type/package.json" } ], "concludedValue": "node_modules/expect-type/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "9.6.1", "description": "Process execution for humans", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@9.6.1", "type": "library", "bom-ref": "pkg:npm/execa@9.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "9.0.1", "description": "Get a stream as a string, Buffer, ArrayBuffer or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@9.0.1", "type": "library", "bom-ref": "pkg:npm/get-stream@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/execa/node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "estree-walker", "version": "3.0.3", "description": "Traverse an ESTree-compliant AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estree-walker@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/estree-walker" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/estree-walker/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estree-walker/package.json" } ], "concludedValue": "node_modules/estree-walker/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "5.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@5.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "group": "", "name": "esbuild", "version": "0.28.2", "description": "An extremely fast JavaScript and CSS bundler and minifier.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esbuild@0.28.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/esbuild@0.28.2", "properties": [ { "name": "SrcFile", "value": "node_modules/esbuild/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esbuild/package.json" } ], "concludedValue": "node_modules/esbuild/package.json" } ] } }, { "authors": [ { "name": "Guy Bedford" } ], "group": "", "name": "es-module-lexer", "version": "2.3.1", "description": "Lexes ES modules returning their import/export metadata", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-module-lexer@2.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/guybedford/es-module-lexer#readme" }, { "type": "vcs", "url": "git+https://github.com/guybedford/es-module-lexer.git" } ], "type": "library", "bom-ref": "pkg:npm/es-module-lexer@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/es-module-lexer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-module-lexer/package.json" } ], "concludedValue": "node_modules/es-module-lexer/package.json" } ] } }, { "group": "", "name": "error-ex", "version": "1.3.4", "description": "Easy error subclassing and stack customization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-ex@1.3.4", "type": "library", "bom-ref": "pkg:npm/error-ex@1.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/error-ex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-ex/package.json" } ], "concludedValue": "node_modules/error-ex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "environment", "version": "1.1.0", "description": "Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/environment@1.1.0", "type": "library", "bom-ref": "pkg:npm/environment@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/environment/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/environment/package.json" } ], "concludedValue": "node_modules/environment/package.json" } ] } }, { "authors": [ { "name": "Pierre Vanduynslager (https://github.com/pvdlg)" } ], "group": "", "name": "env-ci", "version": "11.2.0", "description": "Get environment variables exposed by CI services", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/env-ci@11.2.0", "type": "library", "bom-ref": "pkg:npm/env-ci@11.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/env-ci/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/package.json" } ], "concludedValue": "node_modules/env-ci/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-final-newline", "version": "3.0.0", "description": "Strip the final newline character from a string/buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-final-newline@3.0.0", "type": "library", "bom-ref": "pkg:npm/strip-final-newline@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/strip-final-newline/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/strip-final-newline/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/strip-final-newline/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "npm-run-path", "version": "5.3.0", "description": "Get your PATH prepended with locally installed binaries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-path@5.3.0", "type": "library", "bom-ref": "pkg:npm/npm-run-path@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/npm-run-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/npm-run-path/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/npm-run-path/package.json" } ] } }, { "authors": [ { "name": "ehmicky (https://github.com/ehmicky)" } ], "group": "", "name": "human-signals", "version": "5.0.0", "description": "Human-friendly process signals", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/human-signals@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/ehmicky/human-signals" } ], "type": "library", "bom-ref": "pkg:npm/human-signals@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/human-signals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/human-signals/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/human-signals/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "8.0.1", "description": "Get a stream as a string, Buffer, ArrayBuffer or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@8.0.1", "type": "library", "bom-ref": "pkg:npm/get-stream@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "execa", "version": "8.0.1", "description": "Process execution for humans", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@8.0.1", "type": "library", "bom-ref": "pkg:npm/execa@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/env-ci/node_modules/execa/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/env-ci/node_modules/execa/package.json" } ], "concludedValue": "node_modules/env-ci/node_modules/execa/package.json" } ] } }, { "authors": [ { "name": "Mu-An Chiou " } ], "group": "", "name": "emojilib", "version": "2.4.0", "description": "Emoji keyword library.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emojilib@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/muan/emojilib#readme" }, { "type": "vcs", "url": "git+https://github.com/muan/emojilib.git" } ], "type": "library", "bom-ref": "pkg:npm/emojilib@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/emojilib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emojilib/package.json" } ], "concludedValue": "node_modules/emojilib/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Conrad Pankoff (http://www.fknsrs.biz/)" } ], "group": "", "name": "duplexer2", "version": "0.1.4", "description": "Like duplexer but using streams3", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/duplexer2@0.1.4", "type": "library", "bom-ref": "pkg:npm/duplexer2@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer2/package.json" } ], "concludedValue": "node_modules/duplexer2/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "dot-prop", "version": "5.3.0", "description": "Get, set, or delete a property from a nested object using a dot path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dot-prop@5.3.0", "type": "library", "bom-ref": "pkg:npm/dot-prop@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/dot-prop/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dot-prop/package.json" } ], "concludedValue": "node_modules/dot-prop/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "dir-glob", "version": "3.0.1", "description": "Convert directories to glob compatible strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dir-glob@3.0.1", "type": "library", "bom-ref": "pkg:npm/dir-glob@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dir-glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dir-glob/package.json" } ], "concludedValue": "node_modules/dir-glob/package.json" } ] } }, { "authors": [ { "name": "Lovell Fuller " } ], "group": "", "name": "detect-libc", "version": "2.1.2", "description": "Node.js module to detect the C standard library (libc) implementation family and version", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-libc@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/lovell/detect-libc.git" } ], "type": "library", "bom-ref": "pkg:npm/detect-libc@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-libc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-libc/package.json" } ], "concludedValue": "node_modules/detect-libc/package.json" } ] } }, { "authors": [ { "name": "Viacheslav Lotsmanov " } ], "group": "", "name": "deep-extend", "version": "0.6.0", "description": "Recursive object extending", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-extend@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unclechu/node-deep-extend" }, { "type": "vcs", "url": "git://github.com/unclechu/node-deep-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-extend@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-extend/package.json" } ], "concludedValue": "node_modules/deep-extend/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "crypto-random-string", "version": "4.0.0", "description": "Generate a cryptographically strong random string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crypto-random-string@4.0.0", "type": "library", "bom-ref": "pkg:npm/crypto-random-string@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/crypto-random-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypto-random-string/package.json" } ], "concludedValue": "node_modules/crypto-random-string/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "1.4.0", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@1.4.0", "type": "library", "bom-ref": "pkg:npm/type-fest@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/crypto-random-string/node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypto-random-string/node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/crypto-random-string/node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Daniel Fischer " } ], "group": "", "name": "cosmiconfig", "version": "9.0.2", "description": "Find and load configuration from a package.json property, rc file, TypeScript module, and more!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cosmiconfig@9.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cosmiconfig/cosmiconfig#readme" }, { "type": "vcs", "url": "git+https://github.com/cosmiconfig/cosmiconfig.git" } ], "type": "library", "bom-ref": "pkg:npm/cosmiconfig@9.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cosmiconfig/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cosmiconfig/package.json" } ], "concludedValue": "node_modules/cosmiconfig/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.3", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "2.0.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "convert-hrtime", "version": "5.0.0", "description": "Convert the result of `process.hrtime.bigint()` to seconds, milliseconds, nanoseconds", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-hrtime@5.0.0", "type": "library", "bom-ref": "pkg:npm/convert-hrtime@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-hrtime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-hrtime/package.json" } ], "concludedValue": "node_modules/convert-hrtime/package.json" } ] } }, { "authors": [ { "name": "Steve Mao (https://github.com/stevemao)" } ], "group": "", "name": "conventional-commits-parser", "version": "6.4.0", "description": "Parse raw conventional commits.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/conventional-commits-parser@6.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-parser#readme" }, { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog.git" } ], "type": "library", "bom-ref": "pkg:npm/conventional-commits-parser@6.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/conventional-commits-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/conventional-commits-parser/package.json" } ], "concludedValue": "node_modules/conventional-commits-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Steve Mao (https://github.com/stevemao)" } ], "group": "", "name": "conventional-commits-filter", "version": "5.0.0", "description": "Filter out reverted commits parsed by conventional-commits-parser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/conventional-commits-filter@5.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-filter#readme" }, { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog.git" } ], "type": "library", "bom-ref": "pkg:npm/conventional-commits-filter@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/conventional-commits-filter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/conventional-commits-filter/package.json" } ], "concludedValue": "node_modules/conventional-commits-filter/package.json" } ] } }, { "authors": [ { "name": "Steve Mao (https://github.com/stevemao)" } ], "group": "", "name": "conventional-changelog-writer", "version": "8.4.0", "description": "Write logs based on conventional commits and templates.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/conventional-changelog-writer@8.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-writer#readme" }, { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog.git" } ], "type": "library", "bom-ref": "pkg:npm/conventional-changelog-writer@8.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/conventional-changelog-writer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/conventional-changelog-writer/package.json" } ], "concludedValue": "node_modules/conventional-changelog-writer/package.json" } ] }, "tags": [ "templates" ] }, { "authors": [ { "name": "Steve Mao" } ], "group": "", "name": "conventional-changelog-angular", "version": "8.3.1", "description": "Angular preset for conventional-changelog.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/conventional-changelog-angular@8.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-angular#readme" }, { "type": "vcs", "url": "https://github.com/conventional-changelog/conventional-changelog.git" } ], "type": "library", "bom-ref": "pkg:npm/conventional-changelog-angular@8.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/conventional-changelog-angular/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/conventional-changelog-angular/package.json" } ], "concludedValue": "node_modules/conventional-changelog-angular/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "content-type", "version": "2.1.0", "description": "Create and parse HTTP Content-Type header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/content-type@2.1.0", "type": "library", "bom-ref": "pkg:npm/content-type@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/content-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/content-type/package.json" } ], "concludedValue": "node_modules/content-type/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Dominic Tarr (http://dominictarr.com)" } ], "group": "", "name": "config-chain", "version": "1.1.13", "description": "HANDLE CONFIGURATION ONCE AND FOR ALL", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/config-chain@1.1.13", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/config-chain" }, { "type": "vcs", "url": "https://github.com/dominictarr/config-chain.git" } ], "type": "library", "bom-ref": "pkg:npm/config-chain@1.1.13", "properties": [ { "name": "SrcFile", "value": "node_modules/config-chain/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/config-chain/package.json" } ], "concludedValue": "node_modules/config-chain/package.json" } ] } }, { "authors": [ { "name": "Steve Mao (https://github.com/stevemao)" } ], "group": "", "name": "compare-func", "version": "2.0.0", "description": "Get a compare function for array to sort", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/compare-func@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stevemao/compare-func" } ], "type": "library", "bom-ref": "pkg:npm/compare-func@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/compare-func/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/compare-func/package.json" } ], "concludedValue": "node_modules/compare-func/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "9.0.1", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@9.0.1", "type": "library", "bom-ref": "pkg:npm/cliui@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "James Talmage" } ], "group": "", "name": "cli-table3", "version": "0.6.5", "description": "Pretty unicode tables for the command line. Based on the original cli-table.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-table3@0.6.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cli-table/cli-table3" }, { "type": "vcs", "url": "https://github.com/cli-table/cli-table3.git" } ], "type": "library", "bom-ref": "pkg:npm/cli-table3@0.6.5", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-table3/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-table3/package.json" } ], "concludedValue": "node_modules/cli-table3/package.json" } ] } }, { "authors": [ { "name": "Felix Becker " } ], "group": "", "name": "cli-highlight", "version": "2.1.11", "description": "Syntax highlighting in your terminal", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-highlight@2.1.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixfbecker/cli-highlight#readme" }, { "type": "vcs", "url": "https://github.com/felixfbecker/cli-highlight.git" } ], "type": "library", "bom-ref": "pkg:npm/cli-highlight@2.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/package.json" } ], "concludedValue": "node_modules/cli-highlight/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "20.2.9", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@20.2.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@20.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/cli-highlight/node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "16.2.2", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@16.2.2", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@16.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/node_modules/yargs/package.json" } ], "concludedValue": "node_modules/cli-highlight/node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "7.0.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/cli-highlight/node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "7.0.4", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@7.0.4", "type": "library", "bom-ref": "pkg:npm/cliui@7.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cli-highlight/node_modules/cliui/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/node_modules/chalk/package.json" } ], "concludedValue": "node_modules/cli-highlight/node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-highlight/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-highlight/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/cli-highlight/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "clean-stack", "version": "5.3.0", "description": "Clean up error stack traces", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clean-stack@5.3.0", "type": "library", "bom-ref": "pkg:npm/clean-stack@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/clean-stack/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clean-stack/package.json" } ], "concludedValue": "node_modules/clean-stack/package.json" } ] } }, { "authors": [ { "name": "Richie Bendall " } ], "group": "", "name": "char-regex", "version": "1.0.2", "description": "A regex to match any full character, considering weird character ranges.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/char-regex@1.0.2", "type": "library", "bom-ref": "pkg:npm/char-regex@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/char-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/char-regex/package.json" } ], "concludedValue": "node_modules/char-regex/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "chai", "version": "6.2.2", "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chai@6.2.2", "externalReferences": [ { "type": "website", "url": "http://chaijs.com" }, { "type": "vcs", "url": "https://github.com/chaijs/chai" } ], "type": "framework", "bom-ref": "pkg:npm/chai@6.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chai/package.json" } ], "concludedValue": "node_modules/chai/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "callsites", "version": "3.1.0", "description": "Get callsites from the V8 stack trace API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/callsites@3.1.0", "type": "library", "bom-ref": "pkg:npm/callsites@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/callsites/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/callsites/package.json" } ], "concludedValue": "node_modules/callsites/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "braces", "version": "3.0.3", "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/braces@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/braces" } ], "type": "library", "bom-ref": "pkg:npm/braces@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/braces/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/braces/package.json" } ], "concludedValue": "node_modules/braces/package.json" } ] } }, { "authors": [ { "name": "Simon Grondin" } ], "group": "", "name": "bottleneck", "version": "2.19.5", "description": "Distributed task scheduler and rate limiter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bottleneck@2.19.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/SGrondin/bottleneck" } ], "type": "library", "bom-ref": "pkg:npm/bottleneck@2.19.5", "properties": [ { "name": "SrcFile", "value": "node_modules/bottleneck/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bottleneck/package.json" } ], "concludedValue": "node_modules/bottleneck/package.json" } ] } }, { "authors": [ { "name": "Gregor Martynus" } ], "group": "", "name": "before-after-hook", "version": "4.0.0", "description": "asynchronous before/error/after hooks for internal functionality", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/before-after-hook@4.0.0", "type": "library", "bom-ref": "pkg:npm/before-after-hook@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/before-after-hook/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/before-after-hook/package.json" } ], "concludedValue": "node_modules/before-after-hook/package.json" } ] } }, { "authors": [ { "name": "Ari Perkkiö " } ], "group": "", "name": "ast-v8-to-istanbul", "version": "1.0.5", "description": "AST-aware v8-to-istanbul", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ast-v8-to-istanbul@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/AriPerkkio/ast-v8-to-istanbul" }, { "type": "vcs", "url": "git+https://github.com/AriPerkkio/ast-v8-to-istanbul.git" } ], "type": "library", "bom-ref": "pkg:npm/ast-v8-to-istanbul@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/ast-v8-to-istanbul/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ast-v8-to-istanbul/package.json" } ], "concludedValue": "node_modules/ast-v8-to-istanbul/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Jake Luer (http://qualiancy.com)" } ], "group": "", "name": "assertion-error", "version": "2.0.1", "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assertion-error@2.0.1", "type": "framework", "bom-ref": "pkg:npm/assertion-error@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/assertion-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assertion-error/package.json" } ], "concludedValue": "node_modules/assertion-error/package.json" } ] }, "tags": [ "framework", "test", "validation" ] }, { "authors": [ { "name": "Steve Mao (https://github.com/stevemao)" } ], "group": "", "name": "array-ify", "version": "1.0.0", "description": "Turn anything into an array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-ify@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stevemao/array-ify" } ], "type": "library", "bom-ref": "pkg:npm/array-ify@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/array-ify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-ify/package.json" } ], "concludedValue": "node_modules/array-ify/package.json" } ] } }, { "authors": [ { "name": "Ben Drucker (http://bendrucker.me)" } ], "group": "", "name": "argv-formatter", "version": "1.0.0", "description": "Bizarro minimist: transform an options object into argv", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argv-formatter@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bendrucker/argv-formatter" }, { "type": "vcs", "url": "https://github.com/bendrucker/argv-formatter.git" } ], "type": "library", "bom-ref": "pkg:npm/argv-formatter@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/argv-formatter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argv-formatter/package.json" } ], "concludedValue": "node_modules/argv-formatter/package.json" } ] }, "tags": [ "transform" ] }, { "group": "", "name": "argparse", "version": "2.0.1", "description": "CLI arguments parser. Native port of python's argparse.", "scope": "optional", "licenses": [ { "license": { "id": "Python-2.0", "url": "https://opensource.org/licenses/Python-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@2.0.1", "type": "library", "bom-ref": "pkg:npm/argparse@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] } }, { "authors": [ { "name": "Kevin Beaty" } ], "group": "", "name": "any-promise", "version": "1.3.0", "description": "Resolve any installed ES6 compatible promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/any-promise@1.3.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kevinbeaty/any-promise" }, { "type": "vcs", "url": "https://github.com/kevinbeaty/any-promise" } ], "type": "library", "bom-ref": "pkg:npm/any-promise@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/any-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/any-promise/package.json" } ], "concludedValue": "node_modules/any-promise/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.3.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@6.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-escapes", "version": "7.3.0", "description": "ANSI escape codes for manipulating the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-escapes@7.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-escapes@7.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-escapes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-escapes/package.json" } ], "concludedValue": "node_modules/ansi-escapes/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "aggregate-error", "version": "5.0.0", "description": "Create an error from multiple errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aggregate-error@5.0.0", "type": "library", "bom-ref": "pkg:npm/aggregate-error@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aggregate-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aggregate-error/package.json" } ], "concludedValue": "node_modules/aggregate-error/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "agent-base", "version": "9.0.0", "description": "Turn a function into an `http.Agent` instance", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/agent-base@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/agent-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/agent-base/package.json" } ], "concludedValue": "node_modules/agent-base/package.json" } ] } }, { "group": "@vitest", "name": "utils", "version": "4.1.10", "description": "Shared Vitest utility functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/utils@4.1.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/utils" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/utils@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/utils/package.json" } ], "concludedValue": "node_modules/@vitest/utils/package.json" } ] } }, { "group": "@vitest", "name": "spy", "version": "4.1.10", "description": "Lightweight Jest compatible spy implementation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/spy@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/api/mock" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/spy@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/spy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/spy/package.json" } ], "concludedValue": "node_modules/@vitest/spy/package.json" } ] } }, { "group": "@vitest", "name": "snapshot", "version": "4.1.10", "description": "Vitest snapshot manager", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/snapshot@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/guide/snapshot" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/snapshot@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/snapshot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/snapshot/package.json" } ], "concludedValue": "node_modules/@vitest/snapshot/package.json" } ] } }, { "group": "@vitest", "name": "runner", "version": "4.1.10", "description": "Vitest test runner", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/runner@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/api/advanced/runner" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/runner@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/runner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/runner/package.json" } ], "concludedValue": "node_modules/@vitest/runner/package.json" } ] }, "tags": [ "test" ] }, { "group": "@vitest", "name": "pretty-format", "version": "4.1.10", "description": "Fork of pretty-format with support for ESM", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/pretty-format@4.1.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/pretty-format" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/pretty-format@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/pretty-format/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/pretty-format/package.json" } ], "concludedValue": "node_modules/@vitest/pretty-format/package.json" } ] } }, { "group": "@vitest", "name": "mocker", "version": "4.1.10", "description": "Vitest module mocker implementation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/mocker@4.1.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vitest-dev/vitest/tree/main/packages/mocker" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/mocker@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/mocker/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/mocker/package.json" } ], "concludedValue": "node_modules/@vitest/mocker/package.json" } ] } }, { "group": "@vitest", "name": "expect", "version": "4.1.10", "description": "Jest's expect matchers as a Chai plugin", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/expect@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/api/expect" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/expect@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/expect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/expect/package.json" } ], "concludedValue": "node_modules/@vitest/expect/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Anthony Fu " } ], "group": "@vitest", "name": "coverage-v8", "version": "4.1.10", "description": "V8 coverage provider for Vitest", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40vitest/coverage-v8@4.1.10", "externalReferences": [ { "type": "website", "url": "https://vitest.dev/guide/coverage" }, { "type": "vcs", "url": "git+https://github.com/vitest-dev/vitest.git" } ], "type": "library", "bom-ref": "pkg:npm/@vitest/coverage-v8@4.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@vitest/coverage-v8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@vitest/coverage-v8/package.json" } ], "concludedValue": "node_modules/@vitest/coverage-v8/package.json" } ] } }, { "group": "@types", "name": "normalize-package-data", "version": "2.4.4", "description": "TypeScript definitions for normalize-package-data", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/normalize-package-data@2.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/normalize-package-data" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/normalize-package-data@2.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/normalize-package-data/package.json" } ], "concludedValue": "node_modules/@types/normalize-package-data/package.json" } ] } }, { "group": "@types", "name": "node", "version": "24.13.3", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@24.13.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@24.13.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "estree", "version": "1.0.9", "description": "TypeScript definitions for estree", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/estree@1.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@1.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/estree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/estree/package.json" } ], "concludedValue": "node_modules/@types/estree/package.json" } ] } }, { "group": "@types", "name": "deep-eql", "version": "4.0.2", "description": "TypeScript definitions for deep-eql", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/deep-eql@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/deep-eql" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/deep-eql@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/deep-eql/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/deep-eql/package.json" } ], "concludedValue": "node_modules/@types/deep-eql/package.json" } ] } }, { "group": "@types", "name": "chai", "version": "5.2.3", "description": "TypeScript definitions for chai", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/chai@5.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/chai" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/chai@5.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/chai/package.json" } ], "concludedValue": "node_modules/@types/chai/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Colin McDonnell" } ], "group": "@standard-schema", "name": "spec", "version": "1.1.0", "description": "A family of specs for interoperable TypeScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40standard-schema/spec@1.1.0", "externalReferences": [ { "type": "website", "url": "https://standardschema.dev" }, { "type": "vcs", "url": "https://github.com/standard-schema/standard-schema" } ], "type": "library", "bom-ref": "pkg:npm/@standard-schema/spec@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@standard-schema/spec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@standard-schema/spec/package.json" } ], "concludedValue": "node_modules/@standard-schema/spec/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "merge-streams", "version": "4.0.0", "description": "Merge multiple streams into a unified stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/merge-streams@4.0.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/merge-streams@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/merge-streams/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/merge-streams/package.json" } ], "concludedValue": "node_modules/@sindresorhus/merge-streams/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "@sindresorhus", "name": "is", "version": "4.6.0", "description": "Type check values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/is@4.6.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/is@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/is/package.json" } ], "concludedValue": "node_modules/@sindresorhus/is/package.json" } ] } }, { "authors": [ { "name": "Dan Onoshko (https://github.com/dangreen)" } ], "group": "@simple-libs", "name": "stream-utils", "version": "1.2.0", "description": "A small set of utilities for streams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40simple-libs/stream-utils@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TrigenSoftware/simple-libs/tree/main/packages/stream-utils#readme" }, { "type": "vcs", "url": "https://github.com/TrigenSoftware/simple-libs.git" } ], "type": "library", "bom-ref": "pkg:npm/@simple-libs/stream-utils@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@simple-libs/stream-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@simple-libs/stream-utils/package.json" } ], "concludedValue": "node_modules/@simple-libs/stream-utils/package.json" } ] } }, { "authors": [ { "name": "Pierre Vanduynslager (https://twitter.com/@pvdlg_)" } ], "group": "@semantic-release", "name": "release-notes-generator", "version": "14.1.1", "description": "semantic-release plugin to generate changelog content with conventional-changelog", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40semantic-release/release-notes-generator@14.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/release-notes-generator#readme" }, { "type": "vcs", "url": "https://github.com/semantic-release/release-notes-generator.git" } ], "type": "library", "bom-ref": "pkg:npm/@semantic-release/release-notes-generator@14.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "unicorn-magic", "version": "0.1.0", "description": "Some useful utilities I often need", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unicorn-magic@0.1.0", "type": "library", "bom-ref": "pkg:npm/unicorn-magic@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/unicorn-magic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/unicorn-magic/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/unicorn-magic/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "9.0.1", "description": "Read a package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@9.0.1", "type": "library", "bom-ref": "pkg:npm/read-pkg@9.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/read-pkg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "read-package-up", "version": "11.0.0", "description": "Read the closest package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-package-up@11.0.0", "type": "library", "bom-ref": "pkg:npm/read-package-up@11.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/read-package-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/read-package-up/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/read-package-up/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "normalize-package-data", "version": "6.0.2", "description": "Normalizes data that can be found in package.json files.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@6.0.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "10.4.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@10.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@10.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "hosted-git-info", "version": "7.0.2", "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@7.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/release-notes-generator/node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/release-notes-generator/node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/@semantic-release/release-notes-generator/node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "Pierre Vanduynslager (https://twitter.com/@pvdlg_)" } ], "group": "@semantic-release", "name": "npm", "version": "13.1.5", "description": "semantic-release plugin to publish a npm package", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40semantic-release/npm@13.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/npm#readme" }, { "type": "vcs", "url": "https://github.com/semantic-release/npm.git" } ], "type": "library", "bom-ref": "pkg:npm/@semantic-release/npm@13.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/npm/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/npm/package.json" } ], "concludedValue": "node_modules/@semantic-release/npm/package.json" } ] } }, { "authors": [ { "name": "Pierre Vanduynslager (https://twitter.com/@pvdlg_)" } ], "group": "@semantic-release", "name": "github", "version": "12.0.9", "description": "semantic-release plugin to publish a GitHub release and comment on released Pull Requests/Issues", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40semantic-release/github@12.0.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/github" }, { "type": "vcs", "url": "https://github.com/semantic-release/github.git" } ], "type": "library", "bom-ref": "pkg:npm/@semantic-release/github@12.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/github/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/github/package.json" } ], "concludedValue": "node_modules/@semantic-release/github/package.json" } ] } }, { "authors": [ { "name": "Stephan Bönnemann (http://boennemann.me)" } ], "group": "@semantic-release", "name": "error", "version": "4.0.0", "description": "errors with more than just a message", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40semantic-release/error@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/error#readme" }, { "type": "vcs", "url": "https://github.com/semantic-release/error.git" } ], "type": "library", "bom-ref": "pkg:npm/@semantic-release/error@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/error/package.json" } ], "concludedValue": "node_modules/@semantic-release/error/package.json" } ] } }, { "authors": [ { "name": "Pierre Vanduynslager (https://twitter.com/@pvdlg_)" } ], "group": "@semantic-release", "name": "commit-analyzer", "version": "13.0.1", "description": "semantic-release plugin to analyze commits with conventional-changelog", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40semantic-release/commit-analyzer@13.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/semantic-release/commit-analyzer#readme" }, { "type": "vcs", "url": "https://github.com/semantic-release/commit-analyzer.git" } ], "type": "library", "bom-ref": "pkg:npm/@semantic-release/commit-analyzer@13.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@semantic-release/commit-analyzer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@semantic-release/commit-analyzer/package.json" } ], "concludedValue": "node_modules/@semantic-release/commit-analyzer/package.json" } ] } }, { "authors": [ { "name": "Ze-Zheng Wu" } ], "group": "@sec-ant", "name": "readable-stream", "version": "0.4.1", "description": "A tiny, zero-dependency yet spec-compliant asynchronous iterator polyfill/ponyfill for ReadableStreams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sec-ant/readable-stream@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Sec-ant/readable-stream" }, { "type": "vcs", "url": "git+https://github.com/Sec-ant/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/@sec-ant/readable-stream@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@sec-ant/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sec-ant/readable-stream/package.json" } ], "concludedValue": "node_modules/@sec-ant/readable-stream/package.json" } ] } }, { "group": "@rolldown", "name": "pluginutils", "version": "1.0.1", "description": "Plugin utilities for Rolldown", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rolldown/pluginutils@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rolldown/plugins/tree/main/packages/pluginutils#readme" }, { "type": "vcs", "url": "git+https://github.com/rolldown/plugins.git" } ], "type": "library", "bom-ref": "pkg:npm/@rolldown/pluginutils@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@rolldown/pluginutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rolldown/pluginutils/package.json" } ], "concludedValue": "node_modules/@rolldown/pluginutils/package.json" } ] } }, { "group": "@rolldown", "name": "binding-linux-x64-gnu", "version": "1.2.4", "description": "Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40rolldown/binding-linux-x64-gnu@1.2.4", "externalReferences": [ { "type": "website", "url": "https://rolldown.rs/" }, { "type": "vcs", "url": "git+https://github.com/rolldown/rolldown.git" } ], "type": "library", "bom-ref": "pkg:npm/@rolldown/binding-linux-x64-gnu@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@rolldown/binding-linux-x64-gnu/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rolldown/binding-linux-x64-gnu/package.json" } ], "concludedValue": "node_modules/@rolldown/binding-linux-x64-gnu/package.json" } ] }, "tags": [ "api" ] }, { "group": "@pnpm", "name": "npm-conf", "version": "3.0.3", "description": "Get the npm config", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40pnpm/npm-conf@3.0.3", "type": "library", "bom-ref": "pkg:npm/@pnpm/npm-conf@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@pnpm/npm-conf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pnpm/npm-conf/package.json" } ], "concludedValue": "node_modules/@pnpm/npm-conf/package.json" } ] } }, { "group": "@pnpm", "name": "network.ca-file", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40pnpm/network.ca-file@1.0.2", "externalReferences": [ { "type": "website", "url": "https://bit.dev/pnpm/network/ca-file" }, { "type": "vcs", "url": "https://github.com/pnpm/components" } ], "type": "library", "bom-ref": "pkg:npm/@pnpm/network.ca-file@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@pnpm/network.ca-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pnpm/network.ca-file/package.json" } ], "concludedValue": "node_modules/@pnpm/network.ca-file/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.10", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@pnpm/network.ca-file/node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pnpm/network.ca-file/node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/@pnpm/network.ca-file/node_modules/graceful-fs/package.json" } ] } }, { "group": "@pnpm", "name": "config.env-replace", "version": "1.1.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40pnpm/config.env-replace@1.1.0", "externalReferences": [ { "type": "website", "url": "https://bit.cloud/pnpm/config/env-replace" }, { "type": "vcs", "url": "https://github.com/pnpm/components" } ], "type": "library", "bom-ref": "pkg:npm/@pnpm/config.env-replace@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@pnpm/config.env-replace/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pnpm/config.env-replace/package.json" } ], "concludedValue": "node_modules/@pnpm/config.env-replace/package.json" } ] } }, { "authors": [ { "name": "Boshen and oxc contributors" } ], "group": "@oxc-project", "name": "types", "version": "0.144.0", "description": "Types for Oxc AST nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40oxc-project/types@0.144.0", "externalReferences": [ { "type": "website", "url": "https://oxc.rs" }, { "type": "vcs", "url": "git+https://github.com/oxc-project/oxc.git" } ], "type": "library", "bom-ref": "pkg:npm/@oxc-project/types@0.144.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@oxc-project/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@oxc-project/types/package.json" } ], "concludedValue": "node_modules/@oxc-project/types/package.json" } ] } }, { "authors": [ { "name": "Gregor Martynus (https://twitter.com/gr2m)" } ], "group": "@octokit", "name": "types", "version": "17.0.0", "description": "Shared TypeScript definitions for Octokit projects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/types@17.0.0", "type": "library", "bom-ref": "pkg:npm/@octokit/types@17.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/types/package.json" } ], "concludedValue": "node_modules/@octokit/types/package.json" } ] } }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "@octokit", "name": "request-error", "version": "7.1.1", "description": "Error class for Octokit request errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/request-error@7.1.1", "type": "library", "bom-ref": "pkg:npm/@octokit/request-error@7.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/request-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/request-error/package.json" } ], "concludedValue": "node_modules/@octokit/request-error/package.json" } ] } }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "@octokit", "name": "request", "version": "10.0.13", "description": "Send parameterized requests to GitHub's APIs with sensible defaults in browsers and Node", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/request@10.0.13", "type": "library", "bom-ref": "pkg:npm/@octokit/request@10.0.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/request/package.json" } ], "concludedValue": "node_modules/@octokit/request/package.json" } ] } }, { "authors": [ { "name": "Simon Grondin (http://github.com/SGrondin)" } ], "group": "@octokit", "name": "plugin-throttling", "version": "11.0.5", "description": "Octokit plugin for GitHub's recommended request throttling", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/plugin-throttling@11.0.5", "type": "library", "bom-ref": "pkg:npm/@octokit/plugin-throttling@11.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/plugin-throttling/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/plugin-throttling/package.json" } ], "concludedValue": "node_modules/@octokit/plugin-throttling/package.json" } ] } }, { "authors": [ { "name": "Simon Grondin (http://github.com/SGrondin)" } ], "group": "@octokit", "name": "plugin-retry", "version": "8.1.1", "description": "Automatic retry plugin for octokit", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/plugin-retry@8.1.1", "type": "library", "bom-ref": "pkg:npm/@octokit/plugin-retry@8.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/plugin-retry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/plugin-retry/package.json" } ], "concludedValue": "node_modules/@octokit/plugin-retry/package.json" } ] } }, { "group": "@octokit", "name": "plugin-paginate-rest", "version": "14.0.0", "description": "Octokit plugin to paginate REST API endpoint responses", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/plugin-paginate-rest@14.0.0", "type": "library", "bom-ref": "pkg:npm/@octokit/plugin-paginate-rest@14.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/plugin-paginate-rest/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/plugin-paginate-rest/package.json" } ], "concludedValue": "node_modules/@octokit/plugin-paginate-rest/package.json" } ] }, "tags": [ "api", "rest" ] }, { "authors": [ { "name": "Gregor Martynus (https://twitter.com/gr2m)" } ], "group": "@octokit", "name": "types", "version": "16.0.0", "description": "Shared TypeScript definitions for Octokit projects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/types@16.0.0", "type": "library", "bom-ref": "pkg:npm/@octokit/types@16.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types/package.json" } ], "concludedValue": "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types/package.json" } ] } }, { "authors": [ { "name": "Gregor Martynus (https://twitter.com/gr2m)" } ], "group": "@octokit", "name": "openapi-types", "version": "27.0.0", "description": "Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/openapi-types@27.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/octokit/openapi-types.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@octokit/openapi-types@27.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types/package.json" } ], "concludedValue": "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Gregor Martynus (https://twitter.com/gr2m)" } ], "group": "@octokit", "name": "openapi-types", "version": "28.0.0", "description": "Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/openapi-types@28.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/octokit/openapi-types.ts.git" } ], "type": "library", "bom-ref": "pkg:npm/@octokit/openapi-types@28.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/openapi-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/openapi-types/package.json" } ], "concludedValue": "node_modules/@octokit/openapi-types/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "@octokit", "name": "graphql", "version": "9.0.4", "description": "GitHub GraphQL API client for browsers and Node", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/graphql@9.0.4", "type": "library", "bom-ref": "pkg:npm/@octokit/graphql@9.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/graphql/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/graphql/package.json" } ], "concludedValue": "node_modules/@octokit/graphql/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "@octokit", "name": "endpoint", "version": "11.0.4", "description": "Turns REST API endpoints into generic request options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/endpoint@11.0.4", "type": "library", "bom-ref": "pkg:npm/@octokit/endpoint@11.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/endpoint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/endpoint/package.json" } ], "concludedValue": "node_modules/@octokit/endpoint/package.json" } ] }, "tags": [ "api", "rest" ] }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "@octokit", "name": "core", "version": "7.0.7", "description": "Extendable client for GitHub's REST & GraphQL APIs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/core@7.0.7", "type": "library", "bom-ref": "pkg:npm/@octokit/core@7.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/core/package.json" } ], "concludedValue": "node_modules/@octokit/core/package.json" } ] }, "tags": [ "rest" ] }, { "authors": [ { "name": "Gregor Martynus (https://github.com/gr2m)" } ], "group": "@octokit", "name": "auth-token", "version": "6.0.0", "description": "GitHub API token authentication for browsers and Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40octokit/auth-token@6.0.0", "type": "library", "bom-ref": "pkg:npm/@octokit/auth-token@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@octokit/auth-token/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@octokit/auth-token/package.json" } ], "concludedValue": "node_modules/@octokit/auth-token/package.json" } ] }, "tags": [ "api", "token" ] }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "description": "Trace the original position through a source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.5", "description": "Encode/decode sourcemap mappings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/resolve-uri/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/resolve-uri/package.json" } ], "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json" } ] } }, { "group": "@esbuild", "name": "linux-x64", "version": "0.28.2", "description": "The Linux 64-bit binary for esbuild, a JavaScript bundler.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40esbuild/linux-x64@0.28.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/evanw/esbuild.git" } ], "type": "library", "bom-ref": "pkg:npm/@esbuild/linux-x64@0.28.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@esbuild/linux-x64/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@esbuild/linux-x64/package.json" } ], "concludedValue": "node_modules/@esbuild/linux-x64/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "DABH" } ], "group": "@colors", "name": "colors", "version": "1.5.0", "description": "get colors in your node.js console", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40colors/colors@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DABH/colors.js" }, { "type": "vcs", "url": "http://github.com/DABH/colors.js.git" } ], "type": "library", "bom-ref": "pkg:npm/@colors/colors@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@colors/colors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@colors/colors/package.json" } ], "concludedValue": "node_modules/@colors/colors/package.json" } ] } }, { "authors": [ { "name": "Charles Samborski (https://demurgos.net)" } ], "group": "@bcoe", "name": "v8-coverage", "version": "1.0.2", "description": "Helper functions for V8 coverage files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40bcoe/v8-coverage@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bcoe/v8-coverage.git" } ], "type": "library", "bom-ref": "pkg:npm/@bcoe/v8-coverage@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@bcoe/v8-coverage/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@bcoe/v8-coverage/package.json" } ], "concludedValue": "node_modules/@bcoe/v8-coverage/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "types", "version": "7.29.8", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.29.8", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-types" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.29.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "parser", "version": "7.29.8", "description": "A JavaScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.29.8", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-parser" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.29.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "helper-validator-identifier", "version": "7.29.7", "description": "Validate identifier/keywords name", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-validator-identifier/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-validator-identifier/package.json" } ], "concludedValue": "node_modules/@babel/helper-validator-identifier/package.json" } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "helper-string-parser", "version": "7.29.7", "description": "A utility package to parse strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-helper-string-parser" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-string-parser@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-string-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-string-parser/package.json" } ], "concludedValue": "node_modules/@babel/helper-string-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "code-frame", "version": "7.29.7", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.29.7", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-code-frame" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.29.7", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "4.0.0", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@4.0.0", "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/node_modules/js-tokens/package.json" } ] } }, { "group": "@actions", "name": "io", "version": "3.0.2", "description": "Actions io lib", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/io@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/io" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/io@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/io/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/io/package.json" } ], "concludedValue": "node_modules/@actions/io/package.json" } ] } }, { "group": "@actions", "name": "http-client", "version": "4.0.1", "description": "Actions Http Client", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/http-client@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/http-client" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/http-client@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/http-client/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/http-client/package.json" } ], "concludedValue": "node_modules/@actions/http-client/package.json" } ] } }, { "group": "", "name": "undici", "version": "6.28.0", "description": "An HTTP/1.1 client, written from scratch for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici@6.28.0", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici@6.28.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/http-client/node_modules/undici/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/http-client/node_modules/undici/package.json" } ], "concludedValue": "node_modules/@actions/http-client/node_modules/undici/package.json" } ] } }, { "group": "@actions", "name": "exec", "version": "3.0.0", "description": "Actions exec lib", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/exec@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/exec" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/exec@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/exec/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/exec/package.json" } ], "concludedValue": "node_modules/@actions/exec/package.json" } ] } }, { "group": "@actions", "name": "core", "version": "3.0.1", "description": "Actions core lib", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40actions/core@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/actions/toolkit/tree/main/packages/core" }, { "type": "vcs", "url": "git+https://github.com/actions/toolkit.git" } ], "type": "library", "bom-ref": "pkg:npm/@actions/core@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@actions/core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@actions/core/package.json" } ], "concludedValue": "node_modules/@actions/core/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/chardet@2.2.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-15T22:47:39Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, August 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'chardet' with version '2.2.0'. The package type in this SBOM is npm with 22 purl namespaces described under components. The components were identified from 504 source files." } ] }