{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d6a07f93-5af6-4b75-977f-4f7709de91b3", "version": 1, "metadata": { "timestamp": "2026-07-25T02:15:51Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "detect-element-overflow", "group": "", "version": "2.0.0", "description": "A function that tells you whether a given element is overflowing its container or not. Useful for creating dropdowns and tooltips.", "purl": "pkg:npm/detect-element-overflow@2.0.0", "bom-ref": "pkg:npm/detect-element-overflow@2.0.0", "author": "Wojciech Maj ", "properties": [ { "name": "cdx:npm:scripts", "value": "build, clean, format, lint, prepack, test, tsc" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/wojtekmaj/detect-element-overflow.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@biomejs\\n@isaacs\\n@pkgjs" }, { "name": "cdx:bom:componentSrcFiles", "value": "yarn.lock" } ] }, "components": [ { "group": "@biomejs", "name": "biome", "version": "1.9.0", "hashes": [ { "alg": "SHA-512", "content": "b07ad2c8dc3d52c0a4eea37f98d36399b33a13759903aa65f9678db916810b773fe94937c304899158479bccd8c3c90f0f30af22b34d6dc5963774f1acc5e245" } ], "purl": "pkg:npm/%40biomejs/biome@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/biome@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-darwin-arm64", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-darwin-arm64@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-darwin-arm64@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-darwin-x64", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-darwin-x64@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-darwin-x64@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-linux-arm64-musl", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-linux-arm64-musl@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-linux-arm64-musl@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-linux-arm64", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-linux-arm64@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-linux-arm64@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-linux-x64-musl", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-linux-x64-musl@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-linux-x64-musl@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-linux-x64", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-linux-x64@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-linux-x64@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-win32-arm64", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-win32-arm64@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-win32-arm64@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@biomejs", "name": "cli-win32-x64", "version": "1.9.0", "purl": "pkg:npm/%40biomejs/cli-win32-x64@1.9.0", "type": "library", "bom-ref": "pkg:npm/@biomejs/cli-win32-x64@1.9.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@isaacs", "name": "cliui", "version": "8.0.2", "hashes": [ { "alg": "SHA-512", "content": "b1bf42535d49f11dc137f18d5e4e63a28c5569de438a221c369483731e9dac9fb797af554e8bf02b6192d1e5eba6e6402cf93900c3d0ac86391d00d04876789e" } ], "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "type": "library", "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@pkgjs", "name": "parseargs", "version": "0.11.0", "hashes": [ { "alg": "SHA-512", "content": "5bd7576bb1b38a47a7fc7b51ac9f38748e772beebc56200450c4a817d712232b8f1d3ef70532c80840243c657d491cf6a6be1e3a214cff907645819fdc34aadd" } ], "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "type": "library", "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ansi-regex", "version": "5.0.1", "hashes": [ { "alg": "SHA-512", "content": "9a64bb8627b434ba9327b60c027742e5d17ac69277960d041898596271d992d4d52ba7267a63ca10232e29f6107fc8a835f6ce8d719b88c5f8493f8254813737" } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ansi-regex", "version": "6.0.1", "hashes": [ { "alg": "SHA-512", "content": "cbe16dbd2c6b2735d1df7976a7070dd277326434f0212f43abf6d87674095d247968209babdaad31bb00882fa68807256ba9be340eec2f1004de14ca75f52a08" } ], "purl": "pkg:npm/ansi-regex@6.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ansi-styles", "version": "4.3.0", "hashes": [ { "alg": "SHA-512", "content": "895a23929da416f2bd3de7e9cb4eabd340949328ab85ddd6e484a637d8f6820d485f53933446f5291c3b760cbc488beb8e88573dd0f9c7daf83dccc8fe81b041" } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ansi-styles", "version": "6.2.1", "hashes": [ { "alg": "SHA-512", "content": "5d1ec38c123984bcedd996eac680d548f31828bd679a66db2bdf11844634dde55fec3efa9c6bb1d89056a5e79c1ac540c4c784d592ea1d25028a92227d2f2d5c" } ], "purl": "pkg:npm/ansi-styles@6.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.2", "hashes": [ { "alg": "SHA-512", "content": "9308baf0a7e4838a82bbfd11e01b1cb0f0cf2893bc1676c27c2a8c0e70cbae1c59120c3268517a8ae7fb6376b4639ef81ca22582611dbee4ed28df945134aaee" } ], "purl": "pkg:npm/balanced-match@1.0.2", "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "brace-expansion", "version": "2.0.1", "hashes": [ { "alg": "SHA-512", "content": "b358f2fe060e2d7a87aa015979ecea07f3c37d4018f8d6deb5bd4c229ad3a0384fe6029bb76cd8be63c81e516ee52d1a0673edbe2023d53a5191732ae3c3e49f" } ], "purl": "pkg:npm/brace-expansion@2.0.1", "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "color-convert", "version": "2.0.1", "hashes": [ { "alg": "SHA-512", "content": "37e1150172f2e311fe1b2df62c6293a342ee7380da7b9cfdba67ea539909afbd74da27033208d01d6d5cfc65ee7868a22e18d7e7648e004425441c0f8a15a7d7" } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "color-name", "version": "1.1.4", "hashes": [ { "alg": "SHA-512", "content": "a1a3f914156960902f46f7f56bc62effc6c94e84b2cae157a526b1c1f74b677a47ec602bf68a61abfa2b42d15b7c5651c6dbe72a43af720bc588dff885b10f95" } ], "purl": "pkg:npm/color-name@1.1.4", "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "cross-spawn", "version": "7.0.6", "hashes": [ { "alg": "SHA-512", "content": "053ea8b2135caff68a9e81470e845613e374e7309a47731e81639de3eaeb90c3d01af0e0b44d2ab9d50b43467223b88567dfeb3262db942dc063b9976718ffc1" } ], "purl": "pkg:npm/cross-spawn@7.0.6", "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "eastasianwidth", "version": "0.2.0", "hashes": [ { "alg": "SHA-512", "content": "26f364ebcdb6395f95124fda411f63137a4bfb5d3a06453f7f23dfe52502905bd84e0488172e0f9ec295fdc45f05c23d5d91baf16bd26f0fe9acd777a188dc39" } ], "purl": "pkg:npm/eastasianwidth@0.2.0", "type": "library", "bom-ref": "pkg:npm/eastasianwidth@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "emoji-regex", "version": "8.0.0", "hashes": [ { "alg": "SHA-512", "content": "b6053ad39951c4cf338f9092d7bfba448cdfd46fe6a2a034700b149ac9ffbc137e361cbd3c442297f86bed2e5f7576c1b54cc0a6bf8ef5106cc62f496af35010" } ], "purl": "pkg:npm/emoji-regex@8.0.0", "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "emoji-regex", "version": "9.2.2", "hashes": [ { "alg": "SHA-512", "content": "af014e759a72064cf66e6e694a7fc6b0ed3d8db680427b021a89727689671cefe9d04151b2cad51dbaf85d5ba790d061cd167f1cf32eb7b281f6368b3c181639" } ], "purl": "pkg:npm/emoji-regex@9.2.2", "type": "library", "bom-ref": "pkg:npm/emoji-regex@9.2.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "foreground-child", "version": "3.3.0", "hashes": [ { "alg": "SHA-512", "content": "028f1d41000553fcfa6c4bb5c372963bf3d9bf0b1f25a87d1a6253014343fb69dfb1b42d9625d7cf44c8ba429940f3d0ff718b62105d4d4a4f6ef8ca0a53faa2" } ], "purl": "pkg:npm/foreground-child@3.3.0", "type": "library", "bom-ref": "pkg:npm/foreground-child@3.3.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "11.0.0", "hashes": [ { "alg": "SHA-512", "content": "419866015d8795258a8ac51de5b9d1a99c72634fc3ead93338e4da388e89773ab21681e494eac0fbc4250b003451ca3110bb4f1c9393d15d14466270094fdb4e" } ], "purl": "pkg:npm/glob@11.0.0", "type": "library", "bom-ref": "pkg:npm/glob@11.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "husky", "version": "9.0.7", "hashes": [ { "alg": "SHA-512", "content": "ac36838bc230b42ca878eeb6993cba5499b858700581fa9e8b579227af9ad47bdbf4c050f4145f51f33f77c16d359f329622b7050150c78a7c52be26cc24174e" } ], "purl": "pkg:npm/husky@9.0.7", "type": "library", "bom-ref": "pkg:npm/husky@9.0.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "hashes": [ { "alg": "SHA-512", "content": "bb11d825e049f38e04c06373a8d72782eee0205bda9d908cc550ccb3c59b99d750ff9537982e01733c1c94a58e35400661f57042158ff5e8f3e90cf936daf0fc" } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "isexe", "version": "2.0.0", "hashes": [ { "alg": "SHA-512", "content": "228cfa503fadc2c31596ab06ed6aa82c9976eec2bfd83397e7eaf06d0ccf42cd1dfd6743bf9aeb01aebd4156d009994c5f76ea898d2832c1fe342da923ca457d" } ], "purl": "pkg:npm/isexe@2.0.0", "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "jackspeak", "version": "4.0.1", "hashes": [ { "alg": "SHA-512", "content": "c87997d9c9c5b7366259b1f2a444ef148692f8eedad5307caca939babbb60af2b47d306e5c63bf9d5fefbab2ab48d4da275188c3de525d0e716cc21b784bbccb" } ], "purl": "pkg:npm/jackspeak@4.0.1", "type": "library", "bom-ref": "pkg:npm/jackspeak@4.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lru-cache", "version": "11.0.0", "hashes": [ { "alg": "SHA-512", "content": "827ff0e0739f9b0f30f92f5a5fc97c6a2bd3ae32c0452bc58cb7411d6c589d49536073027293f2d1f02d0c2e72b63b162f238df7e9ff6f4cc0345f92afec4d1d" } ], "purl": "pkg:npm/lru-cache@11.0.0", "type": "library", "bom-ref": "pkg:npm/lru-cache@11.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimatch", "version": "10.0.1", "hashes": [ { "alg": "SHA-512", "content": "e6c29a81fe83e1877ad51348306be2e8aeca18c88fdee7a99df44322314279e15799e41d7cb274e4e8bb0b451a3bc622d6182e157dfa1717d6cda75e9cd8cd5d" } ], "purl": "pkg:npm/minimatch@10.0.1", "type": "library", "bom-ref": "pkg:npm/minimatch@10.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minipass", "version": "7.1.2", "hashes": [ { "alg": "SHA-512", "content": "b0fd20bb9fb56e5fa9a8bfac539e8915ae07430a619e4b86ff71f5fc757ef3924b23b2c4230393af1eda647ed3d75739e4e0acb250a6b1eb277cf7f8fe449557" } ], "purl": "pkg:npm/minipass@7.1.2", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "package-json-from-dist", "version": "1.0.0", "hashes": [ { "alg": "SHA-512", "content": "e3ffaf6ac1040ab6082a658230c041ad14e72fabe99076a2081bb1d5d41210f11872403fc09082daf4387fc0baa6577f96c9c0e94c90c394fd57794b66aa4033" } ], "purl": "pkg:npm/package-json-from-dist@1.0.0", "type": "library", "bom-ref": "pkg:npm/package-json-from-dist@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "path-key", "version": "3.1.1", "hashes": [ { "alg": "SHA-512", "content": "748c43efd5a569c039d7a00a03b58eecd1d75f3999f5a28303d75f521288df4823bc057d8784eb72358b2895a05f29a070bc9f1f17d28226cc4e62494cc58c4c" } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "path-scurry", "version": "2.0.0", "hashes": [ { "alg": "SHA-512", "content": "3da4adedaa8e7ef8d6dc4f35a0ff8f05a9b4d8365f2b28047752b62d4c1ad73eec21e37b1579ef2d075920157856a3b52ae8309c480a6f1a8bbe06ff8e52b33c" } ], "purl": "pkg:npm/path-scurry@2.0.0", "type": "library", "bom-ref": "pkg:npm/path-scurry@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rimraf", "version": "6.0.1", "hashes": [ { "alg": "SHA-512", "content": "b30b6b072771f0d1e73b4ca5f37bb2944ee09375be9db5f558fcd3310000d29dfcfa93cf7734d75295ad5a7486dc8e40f63089ced1722a664539ffc0c3ece8c6" } ], "purl": "pkg:npm/rimraf@6.0.1", "type": "library", "bom-ref": "pkg:npm/rimraf@6.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "shebang-command", "version": "2.0.0", "hashes": [ { "alg": "SHA-512", "content": "a41692e7d89a553ef21d324a5cceb5f686d1f3c040759c50aab69688634688c5c327f26f3ecf7001ebfd78c01f3c7c0a11a7c8bfd0a8bc9f6240d4f40b224e4e" } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "shebang-regex", "version": "3.0.0", "hashes": [ { "alg": "SHA-512", "content": "1dbed0726dd0e1152a92696c76c7f06084eb32a90f0528d11acd764043aacf76994b2fb30aa1291a21bd019d6699164d048286309a278855ee7bec06cf6fb690" } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "signal-exit", "version": "4.1.0", "hashes": [ { "alg": "SHA-512", "content": "41602dce540e46d599edba9d9860193398d135f7ff72cab629db5171516cfae628d21e7bfccde1bbfdf11c48726bc2a6d1a8fb8701125852fbfda7cf19c6aa83" } ], "purl": "pkg:npm/signal-exit@4.1.0", "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "string-width", "version": "4.2.3", "hashes": [ { "alg": "SHA-512", "content": "1e525e92e5eae0afd7454086eed9c818ee84374bb80328fc41217ae72ff5f065ef1c9d7f72da41de40c75fa8bb3dee63d92373fd492c84260a552c636392a47b" } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "string-width-cjs", "version": "4.2.3", "hashes": [ { "alg": "SHA-512", "content": "1e525e92e5eae0afd7454086eed9c818ee84374bb80328fc41217ae72ff5f065ef1c9d7f72da41de40c75fa8bb3dee63d92373fd492c84260a552c636392a47b" } ], "purl": "pkg:npm/string-width-cjs@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width-cjs@4.2.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "string-width", "version": "5.1.2", "hashes": [ { "alg": "SHA-512", "content": "ab9c4264443d35b8b923cbdd513a089a60de339216d3b0ed3be3ba57d6880e1a192b70ae17225f764d7adbf5994e9bb8df253a944736c15a0240eff553c678ca" } ], "purl": "pkg:npm/string-width@5.1.2", "type": "library", "bom-ref": "pkg:npm/string-width@5.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "strip-ansi", "version": "6.0.1", "hashes": [ { "alg": "SHA-512", "content": "1ae5f212a126fe5b167707f716942490e3933085a5ff6c008ab97ab2f272c8025d3aa218b7bd6ab25729ca20cc81cddb252102f8751e13482a5199e873680952" } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "strip-ansi-cjs", "version": "6.0.1", "hashes": [ { "alg": "SHA-512", "content": "1ae5f212a126fe5b167707f716942490e3933085a5ff6c008ab97ab2f272c8025d3aa218b7bd6ab25729ca20cc81cddb252102f8751e13482a5199e873680952" } ], "purl": "pkg:npm/strip-ansi-cjs@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi-cjs@6.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "strip-ansi", "version": "7.1.0", "hashes": [ { "alg": "SHA-512", "content": "a198c3762e8832505328cbf9e8c8381de14a4fa50a4f9b2160138158ea88c0f5549fb50cb13c651c3088f47e63a108b34622ec18c0499b6c8c3a5ddf6b305ac4" } ], "purl": "pkg:npm/strip-ansi@7.1.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "typescript", "version": "5.5.2", "hashes": [ { "alg": "SHA-512", "content": "8ca39b27b5f9bd7f32db795045933ab5247897660627251e8254180b792a395bf061ea7231947d5d7ffa5cb4cc771970fd4ef543275f9b559f08c9325cccfce3" } ], "purl": "pkg:npm/typescript@5.5.2", "type": "library", "bom-ref": "pkg:npm/typescript@5.5.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "which", "version": "2.0.2", "hashes": [ { "alg": "SHA-512", "content": "66522872a768b60c2a65a57e8ad184e5372f5b6a9ca6d5f033d4b0dc98aff63995655a7503b9c0a2598936f532120e81dd8cc155e2e92ed662a2b9377cc4374f" } ], "purl": "pkg:npm/which@2.0.2", "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wrap-ansi-cjs", "version": "7.0.0", "hashes": [ { "alg": "SHA-512", "content": "d15fc12c11e4cbc4044a552129ebc75ee3f57aa9c1958373a4db0292d72282f54373b536103987a4a7594db1ef6a4f10acf92978f79b98c49306a4b58c77d4da" } ], "purl": "pkg:npm/wrap-ansi-cjs@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi-cjs@7.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wrap-ansi", "version": "8.1.0", "hashes": [ { "alg": "SHA-512", "content": "138ff58a41d2f877eae87e3282c0630fc2789012fc1af4d6bd626eeb9a2f9a65ca92005e6e69a75c7b85a68479fe7443c7dbe1eb8fbaa681a4491364b7c55c60" } ], "purl": "pkg:npm/wrap-ansi@8.1.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@8.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@biomejs/biome@1.9.0", "dependsOn": [ "pkg:npm/@biomejs/cli-darwin-arm64@1.9.0", "pkg:npm/@biomejs/cli-darwin-x64@1.9.0", "pkg:npm/@biomejs/cli-linux-arm64-musl@1.9.0", "pkg:npm/@biomejs/cli-linux-arm64@1.9.0", "pkg:npm/@biomejs/cli-linux-x64-musl@1.9.0", "pkg:npm/@biomejs/cli-linux-x64@1.9.0", "pkg:npm/@biomejs/cli-win32-arm64@1.9.0", "pkg:npm/@biomejs/cli-win32-x64@1.9.0" ] }, { "ref": "pkg:npm/@biomejs/cli-darwin-arm64@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-darwin-x64@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-linux-arm64-musl@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-linux-arm64@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-linux-x64-musl@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-linux-x64@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-win32-arm64@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@biomejs/cli-win32-x64@1.9.0", "dependsOn": [] }, { "ref": "pkg:npm/@isaacs/cliui@8.0.2", "dependsOn": [ "pkg:npm/string-width@4.2.3", "pkg:npm/string-width@5.1.2", "pkg:npm/strip-ansi@6.0.1", "pkg:npm/strip-ansi@7.1.0", "pkg:npm/wrap-ansi@7.0.0", "pkg:npm/wrap-ansi@8.1.0" ] }, { "ref": "pkg:npm/@pkgjs/parseargs@0.11.0", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@5.0.1", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@6.0.1", "dependsOn": [] }, { "ref": "pkg:npm/ansi-styles@4.3.0", "dependsOn": [ "pkg:npm/color-convert@2.0.1" ] }, { "ref": "pkg:npm/ansi-styles@6.2.1", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@2.0.1", "dependsOn": [ "pkg:npm/balanced-match@1.0.2" ] }, { "ref": "pkg:npm/color-convert@2.0.1", "dependsOn": [ "pkg:npm/color-name@1.1.4" ] }, { "ref": "pkg:npm/color-name@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/cross-spawn@7.0.6", "dependsOn": [ "pkg:npm/path-key@3.1.1", "pkg:npm/shebang-command@2.0.0", "pkg:npm/which@2.0.2" ] }, { "ref": "pkg:npm/detect-element-overflow@2.0.0", "dependsOn": [ "pkg:npm/@biomejs/biome@1.9.0", "pkg:npm/@biomejs/cli-darwin-arm64@1.9.0", "pkg:npm/@biomejs/cli-darwin-x64@1.9.0", "pkg:npm/@biomejs/cli-linux-arm64-musl@1.9.0", "pkg:npm/@biomejs/cli-linux-arm64@1.9.0", "pkg:npm/@biomejs/cli-linux-x64-musl@1.9.0", "pkg:npm/@biomejs/cli-linux-x64@1.9.0", "pkg:npm/@biomejs/cli-win32-arm64@1.9.0", "pkg:npm/@biomejs/cli-win32-x64@1.9.0", "pkg:npm/@isaacs/cliui@8.0.2", "pkg:npm/@pkgjs/parseargs@0.11.0", "pkg:npm/ansi-regex@5.0.1", "pkg:npm/ansi-regex@6.0.1", "pkg:npm/ansi-styles@4.3.0", "pkg:npm/ansi-styles@6.2.1", "pkg:npm/balanced-match@1.0.2", "pkg:npm/brace-expansion@2.0.1", "pkg:npm/color-convert@2.0.1", "pkg:npm/color-name@1.1.4", "pkg:npm/cross-spawn@7.0.6", "pkg:npm/eastasianwidth@0.2.0", "pkg:npm/emoji-regex@8.0.0", "pkg:npm/emoji-regex@9.2.2", "pkg:npm/foreground-child@3.3.0", "pkg:npm/glob@11.0.0", "pkg:npm/husky@9.0.7", "pkg:npm/is-fullwidth-code-point@3.0.0", "pkg:npm/isexe@2.0.0", "pkg:npm/jackspeak@4.0.1", "pkg:npm/lru-cache@11.0.0", "pkg:npm/minimatch@10.0.1", "pkg:npm/minipass@7.1.2", "pkg:npm/package-json-from-dist@1.0.0", "pkg:npm/path-key@3.1.1", "pkg:npm/path-scurry@2.0.0", "pkg:npm/rimraf@6.0.1", "pkg:npm/shebang-command@2.0.0", "pkg:npm/shebang-regex@3.0.0", "pkg:npm/signal-exit@4.1.0", "pkg:npm/string-width-cjs@4.2.3", "pkg:npm/string-width@5.1.2", "pkg:npm/strip-ansi-cjs@6.0.1", "pkg:npm/strip-ansi@7.1.0", "pkg:npm/typescript@5.5.2", "pkg:npm/which@2.0.2", "pkg:npm/wrap-ansi-cjs@7.0.0", "pkg:npm/wrap-ansi@8.1.0" ] }, { "ref": "pkg:npm/eastasianwidth@0.2.0", "dependsOn": [] }, { "ref": "pkg:npm/emoji-regex@8.0.0", "dependsOn": [] }, { "ref": "pkg:npm/emoji-regex@9.2.2", "dependsOn": [] }, { "ref": "pkg:npm/foreground-child@3.3.0", "dependsOn": [ "pkg:npm/cross-spawn@7.0.6", "pkg:npm/signal-exit@4.1.0" ] }, { "ref": "pkg:npm/glob@11.0.0", "dependsOn": [ "pkg:npm/foreground-child@3.3.0", "pkg:npm/jackspeak@4.0.1", "pkg:npm/minimatch@10.0.1", "pkg:npm/minipass@7.1.2", "pkg:npm/package-json-from-dist@1.0.0", "pkg:npm/path-scurry@2.0.0" ] }, { "ref": "pkg:npm/husky@9.0.7", "dependsOn": [] }, { "ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isexe@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/jackspeak@4.0.1", "dependsOn": [ "pkg:npm/@isaacs/cliui@8.0.2", "pkg:npm/@pkgjs/parseargs@0.11.0" ] }, { "ref": "pkg:npm/lru-cache@11.0.0", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@10.0.1", "dependsOn": [ "pkg:npm/brace-expansion@2.0.1" ] }, { "ref": "pkg:npm/minipass@7.1.2", "dependsOn": [] }, { "ref": "pkg:npm/package-json-from-dist@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/path-key@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/path-scurry@2.0.0", "dependsOn": [ "pkg:npm/lru-cache@11.0.0", "pkg:npm/minipass@7.1.2" ] }, { "ref": "pkg:npm/rimraf@6.0.1", "dependsOn": [ "pkg:npm/glob@11.0.0", "pkg:npm/package-json-from-dist@1.0.0" ] }, { "ref": "pkg:npm/shebang-command@2.0.0", "dependsOn": [ "pkg:npm/shebang-regex@3.0.0" ] }, { "ref": "pkg:npm/shebang-regex@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/signal-exit@4.1.0", "dependsOn": [] }, { "ref": "pkg:npm/string-width-cjs@4.2.3", "dependsOn": [ "pkg:npm/emoji-regex@8.0.0", "pkg:npm/is-fullwidth-code-point@3.0.0", "pkg:npm/strip-ansi@6.0.1" ] }, { "ref": "pkg:npm/string-width@5.1.2", "dependsOn": [ "pkg:npm/eastasianwidth@0.2.0", "pkg:npm/emoji-regex@9.2.2", "pkg:npm/strip-ansi@7.1.0" ] }, { "ref": "pkg:npm/strip-ansi-cjs@6.0.1", "dependsOn": [ "pkg:npm/ansi-regex@5.0.1" ] }, { "ref": "pkg:npm/strip-ansi@7.1.0", "dependsOn": [ "pkg:npm/ansi-regex@6.0.1" ] }, { "ref": "pkg:npm/typescript@5.5.2", "dependsOn": [] }, { "ref": "pkg:npm/which@2.0.2", "dependsOn": [ "pkg:npm/isexe@2.0.0" ] }, { "ref": "pkg:npm/wrap-ansi-cjs@7.0.0", "dependsOn": [ "pkg:npm/ansi-styles@4.3.0", "pkg:npm/string-width@4.2.3", "pkg:npm/strip-ansi@6.0.1" ] }, { "ref": "pkg:npm/wrap-ansi@8.1.0", "dependsOn": [ "pkg:npm/ansi-styles@6.2.1", "pkg:npm/string-width@5.1.2", "pkg:npm/strip-ansi@7.1.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/detect-element-overflow@2.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-25T02:15:51Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'detect-element-overflow' with version '2.0.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: yarn.lock." } ] }