{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:f03553d8-e5ca-4ab4-837d-832fae57bf14", "version": 1, "metadata": { "timestamp": "2026-07-23T19:43:23Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "command-exists", "group": "", "version": "1.2.9", "description": "check whether a command line command exists in the current environment", "purl": "pkg:npm/command-exists@1.2.9", "bom-ref": "pkg:npm/command-exists@1.2.9", "author": "Matthew Conlen", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/mathisonian/command-exists" }, { "type": "vcs", "url": "http://github.com/mathisonian/command-exists" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "expect.js", "version": "0.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b0a59a0d2eff5437544ebf0ceaa6015841d09b5b" } ], "purl": "pkg:npm/expect.js@0.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/expect.js/-/expect.js-0.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/expect.js@0.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/expect.js/-/expect.js-0.3.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "jshint", "version": "2.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a28683fe1ac13e1bb7e715d6e209fea3748ebb386def781d06e7df809ceb6412593c68068a24ef244813cb116f04eda7cf4f97d46e9eb45f12cd43834e52d8e9" } ], "licenses": [ { "expression": "(MIT AND JSON)" } ], "purl": "pkg:npm/jshint@2.11.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jshint/-/jshint-2.11.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jshint@2.11.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jshint/-/jshint-2.11.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cli", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "22817534f24bfa4950c34d532d48ecbc621b8c14" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cli@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cli/-/cli-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cli@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cli/-/cli-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "exit", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0632638f8d877cc82107d30a0fff1a17cba1cd0c" } ], "purl": "pkg:npm/exit@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/exit@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2f06b1c3267bd8b93bbd920db4d36bcb05f466e2f24adadd0ed69b79f64a018e59189855b607739e5b917acc4d98f8ad1344803be3b6eac5931de292236c0c04" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "console-browserify", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f0241c45730a9fc6323b206dbf38edc741d0bb10" } ], "purl": "pkg:npm/console-browserify@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "date-now", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "eaf439fd4d4848ad74e5cc7dbef200672b9e345b" } ], "purl": "pkg:npm/date-now@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/date-now@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "htmlparser2", "version": "3.8.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "996c28b191516a8be86501a7d79757e5c70c1068" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/htmlparser2@3.8.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "domelementtype", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "052281f934a9329148fc73b108daf53bc68c39367c853de9337190d30fe65919a48440d2149924cb3cf85d0b01578e010a1c0692b0df3328d50f4780d9a155df" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/domelementtype@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domhandler", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2de59a0822d5027fabff6f032c2b25a2a8abe738" } ], "purl": "pkg:npm/domhandler@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domutils", "version": "1.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf" } ], "purl": "pkg:npm/domutils@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "dom-serializer", "version": "0.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dbfc4f6f7391b10e369c76224ae9d79038cf2c16848ffc53c143b807b5c26504d193b101b5338f6b2821d74600021d8e23542ba7a3567e9021cecc23d3276df6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/dom-serializer@0.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/dom-serializer@0.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domelementtype", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e47387503b1865657c14658dd0d8dbaff467edffde592422d6fefe1ec515c17827f2759694beb8cca0e44b49fc6664379a558e32e5ce9d1fbb371ff9b4c3b901" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/domelementtype@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "entities", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0fd7fb5742524702319512369a332ab9f0eb4439f1f29f9e10ecfb69433d4aebc5f20b01ceb6b4ffab5b8e5d66f1e407ad99588fa3f1a84d34859d5200828f2f" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/entities@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "entities", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b2987aa3821347fcde642b24fdfc9e4fb712bf26" } ], "licenses": [ { "license": { "name": "BSD-like" } } ], "purl": "pkg:npm/entities@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.1.14", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7cf4c54ef648e3813084c636dd2079e166c081d9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "0.10.31", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash", "version": "4.17.15", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f3139c447bc28e7a1c752e5ca705d05d5ce69a1e5ee7eb1a136406a1e4266ca9914ba277550a693ce22dd0c9e613ee31959a2e9b2d063c6d03d0c54841b340d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash@4.17.15", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.15", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "shelljs", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3596e6307a781544f591f37da618360f31db57b1" } ], "licenses": [ { "license": { "name": "BSD*" } } ], "purl": "pkg:npm/shelljs@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-json-comments", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1e15fbcac97d3ee99bf2d73b4c656b082bbafb91" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-json-comments@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "2.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "161be5bdeb496771eb9b35745050b622b5aefc58" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@2.5.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-2.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@2.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-2.5.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "commander", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fd430e889832ec353b9acd1de217c11cb3eef873" } ], "purl": "pkg:npm/commander@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f87057e995b1a1f6ae6a4960664137bc56f039da" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@2.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "0.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9cd13c03adbff25b65effde7ce864ee952017098" } ], "purl": "pkg:npm/ms@0.7.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@0.7.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf" } ], "purl": "pkg:npm/diff@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dbc2fe674e71949caf3fb2695ce7f2dc1d9a8d1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4a973f635b9190f715d10987d5c00fd2815ebe3d" } ], "licenses": [ { "license": { "name": "BSD" } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "275d8edaac4f1bb3326472089e7949c8394699dd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6d4524e8b955f95d4f5b58851ce21dd72fb4e952" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3ff21f198cad2175f9f3b781853fd94d0d19b590" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/growl@1.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jade", "version": "0.26.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8f10d7977d8d79f2f6ff862a81b0513ccb25686c" } ], "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fa68a14f6a945d54dbbe50d8cdb3320e9e3b1a06" } ], "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bbf5ab1ba827af23575143490426455f481fe1e" } ], "licenses": [ { "license": { "name": "MIT/X11" } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ff1ed1e61169d06b3cf2d588e188b18d8847e17e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "to-iso-string", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dc19e664dfccbe25bd8db508b00c6da158255d1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/to-iso-string@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/to-iso-string/-/to-iso-string-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/to-iso-string@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/to-iso-string/-/to-iso-string-0.0.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "to-iso-string has been deprecated, use @segment/to-iso-string instead." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/expect.js@0.3.1", "dependsOn": [] }, { "ref": "pkg:npm/exit@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.6", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/cli@1.0.1", "dependsOn": [ "pkg:npm/exit@0.1.2", "pkg:npm/glob@7.1.6" ] }, { "ref": "pkg:npm/date-now@0.1.4", "dependsOn": [] }, { "ref": "pkg:npm/console-browserify@1.1.0", "dependsOn": [ "pkg:npm/date-now@0.1.4" ] }, { "ref": "pkg:npm/domelementtype@1.3.1", "dependsOn": [] }, { "ref": "pkg:npm/domhandler@2.3.0", "dependsOn": [ "pkg:npm/domelementtype@1.3.1" ] }, { "ref": "pkg:npm/domelementtype@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/entities@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/dom-serializer@0.2.2", "dependsOn": [ "pkg:npm/domelementtype@2.0.1", "pkg:npm/entities@2.0.0" ] }, { "ref": "pkg:npm/domutils@1.5.1", "dependsOn": [ "pkg:npm/dom-serializer@0.2.2", "pkg:npm/domelementtype@1.3.1" ] }, { "ref": "pkg:npm/entities@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@0.10.31", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.1.14", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.4", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/htmlparser2@3.8.3", "dependsOn": [ "pkg:npm/domelementtype@1.3.1", "pkg:npm/domhandler@2.3.0", "pkg:npm/domutils@1.5.1", "pkg:npm/entities@1.0.0", "pkg:npm/readable-stream@1.1.14" ] }, { "ref": "pkg:npm/lodash@4.17.15", "dependsOn": [] }, { "ref": "pkg:npm/shelljs@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/strip-json-comments@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/jshint@2.11.0", "dependsOn": [ "pkg:npm/cli@1.0.1", "pkg:npm/console-browserify@1.1.0", "pkg:npm/exit@0.1.2", "pkg:npm/htmlparser2@3.8.3", "pkg:npm/lodash@4.17.15", "pkg:npm/minimatch@3.0.4", "pkg:npm/shelljs@0.3.0", "pkg:npm/strip-json-comments@1.0.4" ] }, { "ref": "pkg:npm/commander@2.3.0", "dependsOn": [] }, { "ref": "pkg:npm/ms@0.7.1", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.2.0", "dependsOn": [ "pkg:npm/ms@0.7.1" ] }, { "ref": "pkg:npm/diff@1.4.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.3.0", "dependsOn": [ "pkg:npm/lru-cache@2.7.3", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/glob@3.2.11", "dependsOn": [ "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@0.3.0" ] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/commander@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/jade@0.26.3", "dependsOn": [ "pkg:npm/commander@0.6.1", "pkg:npm/mkdirp@0.3.0" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/supports-color@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/to-iso-string@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/mocha@2.5.3", "dependsOn": [ "pkg:npm/commander@2.3.0", "pkg:npm/debug@2.2.0", "pkg:npm/diff@1.4.0", "pkg:npm/escape-string-regexp@1.0.2", "pkg:npm/glob@3.2.11", "pkg:npm/growl@1.9.2", "pkg:npm/jade@0.26.3", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@1.2.0", "pkg:npm/to-iso-string@0.0.2" ] }, { "ref": "pkg:npm/command-exists@1.2.9", "dependsOn": [ "pkg:npm/expect.js@0.3.1", "pkg:npm/jshint@2.11.0", "pkg:npm/mocha@2.5.3" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/command-exists@1.2.9" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-23T19:43:23Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, July 23, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'command-exists' with version '1.2.9'." } ] }