{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:640e24a2-a43b-4771-8ffd-1a8bf148f348", "version": 1, "metadata": { "timestamp": "2026-08-04T07:53:15Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "css", "group": "", "version": "2.2.4", "description": "CSS parser / stringifier", "purl": "pkg:npm/css@2.2.4", "bom-ref": "pkg:npm/css@2.2.4", "author": "TJ Holowaychuk ", "properties": [ { "name": "cdx:npm:scripts", "value": "benchmark, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/reworkcss/css.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "inherits", "version": "2.0.4", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.4.tgz" }, { "name": "ImportedModules", "value": "inherits" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/stringify/compress.js", "line": 7 }, { "location": "lib/stringify/identity.js", "line": 7 } ] } }, { "group": "", "name": "source-map", "version": "0.6.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.6.1.tgz" }, { "name": "ImportedModules", "value": "source-map" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/stringify/source-map-support.js", "line": 6 }, { "location": "lib/stringify/source-map-support.js", "line": 7 } ] } }, { "group": "", "name": "source-map-resolve", "version": "0.5.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "1edcfe467b175a4e7e3f6b25c79261dd0ebabe1423d429659b4cef9da63df3e345c7e0efd8217f7f93bfb7cc7e29a35dadd200b2bb8dce887f2a989a95ba809f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-resolve@0.5.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map-resolve/-/source-map-resolve-0.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map-resolve@0.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map-resolve/-/source-map-resolve-0.5.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "See https://github.com/lydell/source-map-resolve#deprecated" }, { "name": "ImportedModules", "value": "source-map-resolve" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/stringify/source-map-support.js", "line": 8 } ] } }, { "group": "", "name": "atob", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5a6eae92868e1898bfef7a7f725d86bcb8d323924cd64fced788ac0fbdd830bf12b6b1ffeff9511609a0f272026600f76d966f8f0086c6d30e0f7c16340bbc72" } ], "licenses": [ { "expression": "MIT OR Apache-2.0" } ], "purl": "pkg:npm/atob@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/atob/-/atob-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/atob@2.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/atob/-/atob-2.1.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/atob" }, { "name": "cdx:npm:bin", "value": "atob" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "decode-uri-component", "version": "0.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "16a51843ef28d79f06c864eb305266b3daa1dc2a932af02a82ab139e42c8f2c2aed34dbca2ba8187134c16415e9f4cc6ca0e9ea40083df6a63564e7c9e0204ad" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decode-uri-component@0.2.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/decode-uri-component/-/decode-uri-component-0.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/decode-uri-component@0.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/decode-uri-component/-/decode-uri-component-0.2.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve-url", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "66e179e6155441a69cce0388c2a5b390470489d9a50ffc65e38c755199e1397718b853764bafab731a46f82d4ddd2a34c2f348dc39892025057eed92c61066be" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-url@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve-url/-/resolve-url-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve-url@0.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve-url/-/resolve-url-0.2.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "https://github.com/lydell/resolve-url#deprecated" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map-url", "version": "0.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "70f8853932d42af245220e1229549ccb88a53cf5baac580c81fb9924f3680ee32cde70b51db314c9c068270efbc45229eb3d5425024e7f1e82f46307f340e24f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-url@0.4.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map-url/-/source-map-url-0.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map-url@0.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map-url/-/source-map-url-0.4.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "See https://github.com/lydell/source-map-url#deprecated" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "urix", "version": "0.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "026d68bac02148b05e07d706ffb93baf6474ce3e74b834656473c66dace2779b3dae517517f40a60e6c429222e9d28c83a4259ab04512e9bdec2312433ba52aa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/urix@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/urix/-/urix-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/urix@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/urix/-/urix-0.1.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please see https://github.com/lydell/urix#deprecated" }, { "name": "ImportedModules", "value": "urix" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/stringify/source-map-support.js", "line": 9 } ] } }, { "group": "", "name": "mocha", "version": "1.21.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9e0dabd18acb087b66a7c5bb1f22f34a66dd89db7783523adc784298ea991f8bf31619ad1dc630728026a6c24a2f5e361def4d0361c9a66b33f5a9980f1a19d5" } ], "purl": "pkg:npm/mocha@1.21.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.21.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@1.21.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.21.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha" }, { "name": "cdx:npm:bin", "value": "_mocha, mocha" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Mocha v1.x is no longer supported." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "commander", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "083e39d9f9e4d2343293735f9caf8a911fe150fa07b79a5568a1e882dcb2bf737453841f01a97d5b4feb5cb3a0fef55981029aee376d5f2a4ab356008a9d75b9" } ], "purl": "pkg:npm/commander@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8d1c4547415beb9ee29269ba2231d8df6bff36aa7d35d731e0b0484973dfa60b8d6878792499dbfb1dfba9a94a3d3bb87f13059d5048c841a2ef69a6be5d010b" } ], "purl": "pkg:npm/debug@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "0.6.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fe97377a1ed35a8ad3b5bbd783c8dee06bebbc4a827c7ecf0373fb896d35c8bd84e7714a8b1ce03016908b434e3db309a98df87014af474b59b6695391d506e0" } ], "purl": "pkg:npm/ms@0.6.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-0.6.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@0.6.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-0.6.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d7311bef7bde9971695267e1ddfb2d6b8607cf797079bc57bda5a63db16ff5aa6e8d00560e792b3c32d72d0b35819a3844258c0ec4fcf6bd0f7ffcfcff4d9318" } ], "purl": "pkg:npm/diff@1.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "710a5489dedb7535271629fc4bb06735d3a4fbf783a9098a80200d4b277f8c086b284bf152fafd550f176735e23ad7acb7c34b7e4dc5481673c2f7a664d43a56" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "85c8ff353516bfe0b731baab55bf45f9a1fa96f4f010725dc767e807196b56ae61eb313c05fbb8a6fe02000a9b0dc66bc3ff4093996c457958f40a3cfc5d13bb" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.2.14", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.2.14", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.2.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5a989b589eb4737020033f1ada2604ac3adc4f60bb3a62a7b168487073a39141c58e45e770986d2f1352a949b147146e9e96f923c569addeda35277636d92c25" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.7.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1eaeb5b2faa15c705363cd0ab2e2eb22d27d03460fd4f49e892e21862efb35c3d07fe17ec9a80e4a486e85974d0fb35f01ca479b8f7914a51399173283317438" } ], "purl": "pkg:npm/growl@1.8.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.8.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jade", "version": "0.26.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a4937bf3507163cca8e90977aef888d77990fe40e4e351476e6e0987b474c3c2f00ed994e43134d5adaa6db39096cf726f26bca1ff82966698de66b09ea59dc" } ], "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.26.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.26.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/jade" }, { "name": "cdx:npm:bin", "value": "jade" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d1f2f272997550c4c65f6e7b851b2efdaacbfdc51b72f40ce3330ac2f2efcd7b5f75ecc8578ca8b4f4b6758b649c5f8d9847d64a808417afa18fd5cb9bfea113" } ], "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "387b1d51c54043aa4eb60e49616a42068f56fc6c9256ec2f3fd86e791316ed4aac842d2d6dfccbbfcc23c924cf9b7b5f519ff6d4213d135a496a0380f753f17b" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c638cd1b2fabcb5961b4829caf63d3ea89376acce141f82b503a783992c769c811805985e9747d5c238955c5e55464289c8a9770ad43bea80a29038f5981927f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/mkdirp" }, { "name": "cdx:npm:bin", "value": "mkdirp" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "should", "version": "4.6.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93af900ef571a61ff11fd995004663145e62c341b5ef1e7d3e2891c5d32f58c16e8f4fa05e529d0cccce0c195bb08cb37cb93fd978a0265688eaa8f58453251e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should@4.6.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should/-/should-4.6.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/should@4.6.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should/-/should-4.6.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "should-equal", "version": "0.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fd0fe8f442fd089942b32f35ed991c415972533c9e594c52f4791752baafe2d4e0f9a397130bcea51d68753d0af43c1c300d200b2e39d8aef560903513a2b599" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-equal@0.3.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should-equal/-/should-equal-0.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/should-equal@0.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should-equal/-/should-equal-0.3.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "should-type", "version": "0.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bdef6d92ffe2dbd08eb6ea4f96eda0e125c679f8124e30d3048f1de54812993e764fd4f9541a5963dfd8827e4f6f775c09a88cc84cc1031064a541b111b6cc0f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-type@0.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should-type/-/should-type-0.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/should-type@0.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should-type/-/should-type-0.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "should-format", "version": "0.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f2836eacaa2d244432f876e82f1007920290f9d45f57d4e6540bdc6371ded5176713df78337f494e6902b7aedc59aca054b2947c170b4484e4a47cb61ec83072" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should-format@0.0.7", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should-format/-/should-format-0.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/should-format@0.0.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should-format/-/should-format-0.0.7.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "matcha", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "876acf2edfd61c9bf1445f9f8f938e6674c22ef7698fa164a6d4ab6f84fe1ce3ac9df2642e6207214c2778c5f8e32c58d7b830e1e76ab60c6a36b0f2b055dc8a" } ], "purl": "pkg:npm/matcha@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/matcha/-/matcha-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/matcha@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/matcha/-/matcha-0.5.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/_matcha, /app/node_modules/.bin/matcha" }, { "name": "cdx:npm:bin", "value": "_matcha, matcha" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "electron", "version": "0.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0dfd374ff964c6716623ecb10d3819715a9ce1f2cba591d39df9141409602fc4f887fac8c08fca1414ea3dfa8846cf53568f6bbf6efe607571f65ff4b62210ee" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/electron@0.4.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/electron/-/electron-0.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/electron@0.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/electron/-/electron-0.4.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "The original electron project has been moved. Visit github.com/logicalparadox/electron for more details." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "drip", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0dbd6e58dae7754b04a54492f3ac1448093bd4eef408106d86de46f4468af16b033fcba43958974aea4ca20fda2e37808617ff98c3bbecd834e18a70b81b5232" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/drip@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/drip/-/drip-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/drip@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/drip/-/drip-1.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tea-concat", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0ed05f2cbc0b0542a1b7f1831c2b1f2322ebca0ba6db525d3d6e37f12aeeb638f6c55b4336b0f44423ffd531b0f5ab3e476a775b69cf62d9221aa0a95587acf8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tea-concat@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tea-concat/-/tea-concat-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tea-concat@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tea-concat/-/tea-concat-0.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "v8-argv", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7dbb09448cb604ffc9e95d3d30fd05a8c1549ec4d8b0bcb740ed4c528a02595b522c72e8df778c6497674a78ab1d13afcf104ad8722ab5730dc0835404ed325c" } ], "licenses": [ { "license": { "id": "WTFPL", "url": "https://opensource.org/licenses/WTFPL", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/v8-argv@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/v8-argv/-/v8-argv-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/v8-argv@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/v8-argv/-/v8-argv-0.1.0.tgz" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "bytes", "version": "1.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "ff1ebc5641cb793977fcb97c22fc5dc3386b4fe23229ce767bfa321e1036470a8faacc129e355b49d75f3d1c00b09b5b8a53003d2456c00969c5d62c49639329" } ], "purl": "pkg:npm/bytes@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bytes/-/bytes-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bytes@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bytes/-/bytes-1.0.0.tgz" }, { "name": "ImportedModules", "value": "bytes" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "benchmark/index.js", "line": 2 } ] } } ], "dependencies": [ { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/atob@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/decode-uri-component@0.2.2", "dependsOn": [] }, { "ref": "pkg:npm/resolve-url@0.2.1", "dependsOn": [] }, { "ref": "pkg:npm/source-map-url@0.4.1", "dependsOn": [] }, { "ref": "pkg:npm/urix@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/source-map-resolve@0.5.3", "dependsOn": [ "pkg:npm/atob@2.1.2", "pkg:npm/decode-uri-component@0.2.2", "pkg:npm/resolve-url@0.2.1", "pkg:npm/source-map-url@0.4.1", "pkg:npm/urix@0.1.0" ] }, { "ref": "pkg:npm/commander@2.3.0", "dependsOn": [] }, { "ref": "pkg:npm/ms@0.6.2", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.0.0", "dependsOn": [ "pkg:npm/ms@0.6.2" ] }, { "ref": "pkg:npm/diff@1.0.8", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.2.14", "dependsOn": [ "pkg:npm/lru-cache@2.7.3", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/glob@3.2.3", "dependsOn": [ "pkg:npm/graceful-fs@2.0.3", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@0.2.14" ] }, { "ref": "pkg:npm/growl@1.8.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/jade@0.26.3", "dependsOn": [ "pkg:npm/commander@0.6.1", "pkg:npm/mkdirp@0.3.0" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.0", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/mocha@1.21.5", "dependsOn": [ "pkg:npm/commander@2.3.0", "pkg:npm/debug@2.0.0", "pkg:npm/diff@1.0.8", "pkg:npm/escape-string-regexp@1.0.2", "pkg:npm/glob@3.2.3", "pkg:npm/growl@1.8.1", "pkg:npm/jade@0.26.3", "pkg:npm/mkdirp@0.5.0" ] }, { "ref": "pkg:npm/should-type@0.0.4", "dependsOn": [] }, { "ref": "pkg:npm/should-equal@0.3.1", "dependsOn": [ "pkg:npm/should-type@0.0.4" ] }, { "ref": "pkg:npm/should-format@0.0.7", "dependsOn": [ "pkg:npm/should-type@0.0.4" ] }, { "ref": "pkg:npm/should@4.6.5", "dependsOn": [ "pkg:npm/should-equal@0.3.1", "pkg:npm/should-format@0.0.7", "pkg:npm/should-type@0.0.4" ] }, { "ref": "pkg:npm/tea-concat@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/drip@1.1.0", "dependsOn": [ "pkg:npm/tea-concat@0.1.0" ] }, { "ref": "pkg:npm/electron@0.4.1", "dependsOn": [ "pkg:npm/drip@1.1.0" ] }, { "ref": "pkg:npm/v8-argv@0.1.0", "dependsOn": [] }, { "ref": "pkg:npm/matcha@0.5.0", "dependsOn": [ "pkg:npm/electron@0.4.1", "pkg:npm/v8-argv@0.1.0" ] }, { "ref": "pkg:npm/bytes@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/css@2.2.4", "dependsOn": [ "pkg:npm/bytes@1.0.0", "pkg:npm/inherits@2.0.4", "pkg:npm/matcha@0.5.0", "pkg:npm/mocha@1.21.5", "pkg:npm/should@4.6.5", "pkg:npm/source-map-resolve@0.5.3", "pkg:npm/source-map@0.6.1", "pkg:npm/urix@0.1.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/css@2.2.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-04T07:53:16Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'css' with version '2.2.4'." } ] }