{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:045ac36f-ca0a-42d8-83f4-aa8344b72ff0", "version": 1, "metadata": { "timestamp": "2026-07-28T17:02:24Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "dom-converter", "group": "", "version": "0.2.0", "description": "converts bare objects to DOM objects or xml representations", "purl": "pkg:npm/dom-converter@0.2.0", "bom-ref": "pkg:npm/dom-converter@0.2.0", "author": "Aria Minaei", "properties": [ { "name": "cdx:npm:scripts", "value": "test, test:watch, compile, compile:watch, watch, winwatch, prepublish" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/AriaMinaei/dom-converter" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "utila", "version": "0.4.0", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "8a16a05d445657a3aea5eecc5b12a4fa5379772c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/utila@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/utila@0.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz" }, { "name": "ImportedModules", "value": "utila" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/domConverter.js#10" }, { "location": "lib/objectToSaneObject.js#5" } ] } }, { "group": "", "name": "chai", "version": "1.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e4031cc87654461a75943e5a35ab46eaf39c1eb9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chai@1.10.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chai/-/chai-1.10.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chai@1.10.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chai/-/chai-1.10.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "assertion-error", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c7f85438fdd466bc7ca16ab90c81513797a5d23b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/assertion-error@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/assertion-error@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "deep-eql", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ef558acab8de25206cd713906d74e56930eb69f2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/deep-eql@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deep-eql/-/deep-eql-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-eql@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deep-eql/-/deep-eql-0.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "type-detect", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0ba5ec2a885640e470ea4e8505971900dac58822" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/type-detect@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/type-detect/-/type-detect-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/type-detect@0.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/type-detect/-/type-detect-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chai-changes", "version": "1.3.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "483887fbc2e1a6bb6b1a2bbab012b79617229dae" } ], "purl": "pkg:npm/chai-changes@1.3.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chai-changes/-/chai-changes-1.3.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chai-changes@1.3.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chai-changes/-/chai-changes-1.3.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chai-fuzzy", "version": "1.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "acd0a27e03e3c251b254a5b308c70ef5fe3421fc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chai-fuzzy@1.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chai-fuzzy/-/chai-fuzzy-1.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chai-fuzzy@1.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chai-fuzzy/-/chai-fuzzy-1.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "underscore", "version": "1.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e7fe1eb670a477d73c830828c22e7fa26fe660ee5a8c268e81dce3fe85bed1e415f56c4a043670e7ec9c98a99e6935e32274bf5b4073a462e8db1476681c1976" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/underscore@1.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/underscore/-/underscore-1.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/underscore/-/underscore-1.9.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "coffee-script", "version": "1.12.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7cb78486ac329986adfcca533d48d2287558625d1e73698ec802c430b9b3af98b58acb86fba8df2368f6779a013b7548ce051780154870e4fdb87d5317105c93" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/coffee-script@1.12.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.12.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/coffee-script@1.12.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.12.7.tgz" }, { "name": "cdx:npm:deprecated", "value": "CoffeeScript on NPM has moved to \"coffeescript\" (no hyphen)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jitter", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "15d9ae4407f3e6327d6ad336faf0ebc5be0d25f0" } ], "purl": "pkg:npm/jitter@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jitter/-/jitter-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jitter@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jitter/-/jitter-1.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sink", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f5a6594b774e04612d8a7555893dcea6ac080be9" } ], "purl": "pkg:npm/sink@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sink/-/sink-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sink@0.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sink/-/sink-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "2.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "161be5bdeb496771eb9b35745050b622b5aefc58" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@2.5.3", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/mocha/-/mocha-2.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@2.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/mocha/-/mocha-2.5.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "commander", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fd430e889832ec353b9acd1de217c11cb3eef873" } ], "purl": "pkg:npm/commander@2.3.0", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/commander/-/commander-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/commander/-/commander-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f87057e995b1a1f6ae6a4960664137bc56f039da" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@2.2.0", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/debug/-/debug-2.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/debug/-/debug-2.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "0.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9cd13c03adbff25b65effde7ce864ee952017098" } ], "purl": "pkg:npm/ms@0.7.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@0.7.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf" } ], "purl": "pkg:npm/diff@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dbc2fe674e71949caf3fb2695ce7f2dc1d9a8d1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4a973f635b9190f715d10987d5c00fd2815ebe3d" } ], "licenses": [ { "license": { "name": "BSD" } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "275d8edaac4f1bb3326472089e7949c8394699dd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6d4524e8b955f95d4f5b58851ce21dd72fb4e952" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3ff21f198cad2175f9f3b781853fd94d0d19b590" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/growl@1.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jade", "version": "0.26.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8f10d7977d8d79f2f6ff862a81b0513ccb25686c" } ], "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fa68a14f6a945d54dbbe50d8cdb3320e9e3b1a06" } ], "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/commander/-/commander-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bbf5ab1ba827af23575143490426455f481fe1e" } ], "licenses": [ { "license": { "name": "MIT/X11" } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ff1ed1e61169d06b3cf2d588e188b18d8847e17e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "to-iso-string", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dc19e664dfccbe25bd8db508b00c6da158255d1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/to-iso-string@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/to-iso-string/-/to-iso-string-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/to-iso-string@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/to-iso-string/-/to-iso-string-0.0.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "to-iso-string has been deprecated, use @segment/to-iso-string instead." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha-pretty-spec-reporter", "version": "0.1.0-beta.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f16129b874ff7cd2bcfefdfe6caa230812793e6a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha-pretty-spec-reporter@0.1.0-beta.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha-pretty-spec-reporter/-/mocha-pretty-spec-reporter-0.1.0-beta.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha-pretty-spec-reporter@0.1.0-beta.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha-pretty-spec-reporter/-/mocha-pretty-spec-reporter-0.1.0-beta.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "pretty-error", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "85b7109e7d42896e926a102a3435c1252b34e3c6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/pretty-error@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/pretty-error/-/pretty-error-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/pretty-error@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/pretty-error/-/pretty-error-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "renderkid", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e7f878f6b626c9776acb6b1350b11e3518be5ffe" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/renderkid@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/renderkid/-/renderkid-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/renderkid@0.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/renderkid/-/renderkid-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "CSSselect", "version": "0.3.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0779a069d12da9ff5875dd125a0287599c05b6a5" } ], "licenses": [ { "license": { "name": "BSD-like" } } ], "purl": "pkg:npm/CSSselect@0.3.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/CSSselect/-/CSSselect-0.3.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/CSSselect@0.3.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/CSSselect/-/CSSselect-0.3.11.tgz" }, { "name": "cdx:npm:deprecated", "value": "the module is now available as 'css-select'" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "CSSwhat", "version": "0.4.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "867da0ff39f778613242c44cfea83f0aa4ebdf9b" } ], "licenses": [ { "license": { "name": "BSD-like" } } ], "purl": "pkg:npm/CSSwhat@0.4.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/CSSwhat/-/CSSwhat-0.4.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/CSSwhat@0.4.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/CSSwhat/-/CSSwhat-0.4.7.tgz" }, { "name": "cdx:npm:deprecated", "value": "the module is now available as 'css-what'" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domutils", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bd59d149cf2c034fec81a1ce063bc20fb572a2ab" } ], "purl": "pkg:npm/domutils@1.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domutils/-/domutils-1.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domutils/-/domutils-1.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domelementtype", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2" } ], "purl": "pkg:npm/domelementtype@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "update to domelementtype@1.3.1" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "dom-converter", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a45ef5727b890c9bffe6d7c876e7b19cb0e17f3b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/dom-converter@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/dom-converter@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "utila", "version": "0.3.3", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "d7e8e7d7e309107092b05f8d9688824d633a4226" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/utila@0.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/utila/-/utila-0.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/utila@0.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/utila/-/utila-0.3.3.tgz" }, { "name": "ImportedModules", "value": "utila" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/domConverter.js#10" }, { "location": "lib/objectToSaneObject.js#5" } ] } }, { "group": "", "name": "htmlparser2", "version": "3.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "cc70d05a59f6542e43f0e685c982e14c924a9efe" } ], "purl": "pkg:npm/htmlparser2@3.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "domhandler", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d2646f5e57f6c3bab11cf6cb05d3c0acf7412594" } ], "purl": "pkg:npm/domhandler@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domutils", "version": "1.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bddc3de099b9a2efacc51c623f28f416ecc57485" } ], "purl": "pkg:npm/domutils@1.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domutils/-/domutils-1.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domutils/-/domutils-1.1.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.0.34", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readable-stream@1.0.34", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.0.34", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "0.10.31", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sinon", "version": "1.17.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4542a4f49ba0c45c05eb2e9dd9d203e2b8efe0bf" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/sinon@1.17.7", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/sinon/-/sinon-1.17.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sinon@1.17.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/sinon/-/sinon-1.17.7.tgz" }, { "name": "cdx:npm:deprecated", "value": "16.1.1" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "formatio", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5ed3ccd636551097383465d996199100e86161e9" } ], "purl": "pkg:npm/formatio@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/formatio/-/formatio-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/formatio@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/formatio/-/formatio-1.1.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package is unmaintained. Use @sinonjs/formatio instead" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "samsam", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bec11fdc83a9fda063401210e40176c3024d1567" } ], "purl": "pkg:npm/samsam@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/samsam/-/samsam-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/samsam@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/samsam/-/samsam-1.1.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated in favour of @sinonjs/samsam" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lolex", "version": "1.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7c3da62ffcb30f0f5a80a2566ca24e45d8a01f31" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/lolex@1.3.2", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/lolex/-/lolex-1.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lolex@1.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/lolex/-/lolex-1.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "util", "version": "0.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e67d76b8ccca0a3bc1d873c51e76d04a36aa01af7c2f98885e61eb6422dabee6557b4a9efd22466c31969696879399670645910cef9d46ed7f3e099460a3cf4f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/util@0.11.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/util/-/util-0.11.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/util@0.11.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/util/-/util-0.11.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sinon-chai", "version": "2.14.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f6cb48175bad074cb0347353ed18225db7667a7f100c246cad38f0f86f5380ab7561ec638aff1339667a587b133f3e7b624cb70c8b3066f12a5fc7e9b87343b5" } ], "licenses": [ { "expression": "(BSD-2-Clause OR WTFPL)" } ], "purl": "pkg:npm/sinon-chai@2.14.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sinon-chai/-/sinon-chai-2.14.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sinon-chai@2.14.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sinon-chai/-/sinon-chai-2.14.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/utila@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/assertion-error@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/type-detect@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/deep-eql@0.1.3", "dependsOn": [ "pkg:npm/type-detect@0.1.1" ] }, { "ref": "pkg:npm/chai@1.10.0", "dependsOn": [ "pkg:npm/assertion-error@1.0.0", "pkg:npm/deep-eql@0.1.3" ] }, { "ref": "pkg:npm/chai-changes@1.3.6", "dependsOn": [] }, { "ref": "pkg:npm/underscore@1.9.1", "dependsOn": [] }, { "ref": "pkg:npm/chai-fuzzy@1.6.1", "dependsOn": [ "pkg:npm/chai@1.10.0", "pkg:npm/underscore@1.9.1" ] }, { "ref": "pkg:npm/coffee-script@1.12.7", "dependsOn": [] }, { "ref": "pkg:npm/sink@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/jitter@1.3.0", "dependsOn": [ "pkg:npm/coffee-script@1.12.7", "pkg:npm/sink@0.1.1" ] }, { "ref": "pkg:npm/commander@2.3.0", "dependsOn": [] }, { "ref": "pkg:npm/ms@0.7.1", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.2.0", "dependsOn": [ "pkg:npm/ms@0.7.1" ] }, { "ref": "pkg:npm/diff@1.4.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.3.0", "dependsOn": [ "pkg:npm/lru-cache@2.7.3", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/glob@3.2.11", "dependsOn": [ "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@0.3.0" ] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/commander@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/jade@0.26.3", "dependsOn": [ "pkg:npm/commander@0.6.1", "pkg:npm/mkdirp@0.3.0" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/supports-color@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/to-iso-string@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/mocha@2.5.3", "dependsOn": [ "pkg:npm/commander@2.3.0", "pkg:npm/debug@2.2.0", "pkg:npm/diff@1.4.0", "pkg:npm/escape-string-regexp@1.0.2", "pkg:npm/glob@3.2.11", "pkg:npm/growl@1.9.2", "pkg:npm/jade@0.26.3", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@1.2.0", "pkg:npm/to-iso-string@0.0.2" ] }, { "ref": "pkg:npm/CSSwhat@0.4.7", "dependsOn": [] }, { "ref": "pkg:npm/domelementtype@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/domutils@1.2.2", "dependsOn": [ "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/CSSselect@0.3.11", "dependsOn": [ "pkg:npm/CSSwhat@0.4.7", "pkg:npm/domutils@1.2.2" ] }, { "ref": "pkg:npm/utila@0.3.3", "dependsOn": [] }, { "ref": "pkg:npm/dom-converter@0.1.4", "dependsOn": [ "pkg:npm/utila@0.3.3" ] }, { "ref": "pkg:npm/domhandler@2.1.0", "dependsOn": [ "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/domutils@1.1.6", "dependsOn": [ "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@0.10.31", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.0.34", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.3", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/htmlparser2@3.3.0", "dependsOn": [ "pkg:npm/domelementtype@1.3.0", "pkg:npm/domhandler@2.1.0", "pkg:npm/domutils@1.1.6", "pkg:npm/readable-stream@1.0.34" ] }, { "ref": "pkg:npm/renderkid@0.2.1", "dependsOn": [ "pkg:npm/CSSselect@0.3.11", "pkg:npm/dom-converter@0.1.4", "pkg:npm/htmlparser2@3.3.0", "pkg:npm/utila@0.3.3" ] }, { "ref": "pkg:npm/pretty-error@1.1.2", "dependsOn": [ "pkg:npm/renderkid@0.2.1", "pkg:npm/utila@0.4.0" ] }, { "ref": "pkg:npm/mocha-pretty-spec-reporter@0.1.0-beta.1", "dependsOn": [ "pkg:npm/diff@1.4.0", "pkg:npm/pretty-error@1.1.2" ] }, { "ref": "pkg:npm/samsam@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/formatio@1.1.1", "dependsOn": [ "pkg:npm/samsam@1.1.2" ] }, { "ref": "pkg:npm/lolex@1.3.2", "dependsOn": [] }, { "ref": "pkg:npm/util@0.11.0", "dependsOn": [ "pkg:npm/inherits@2.0.3" ] }, { "ref": "pkg:npm/sinon@1.17.7", "dependsOn": [ "pkg:npm/formatio@1.1.1", "pkg:npm/lolex@1.3.2", "pkg:npm/samsam@1.1.2", "pkg:npm/util@0.11.0" ] }, { "ref": "pkg:npm/sinon-chai@2.14.0", "dependsOn": [ "pkg:npm/chai@1.10.0", "pkg:npm/sinon@1.17.7" ] }, { "ref": "pkg:npm/dom-converter@0.2.0", "dependsOn": [ "pkg:npm/chai-changes@1.3.6", "pkg:npm/chai-fuzzy@1.6.1", "pkg:npm/chai@1.10.0", "pkg:npm/coffee-script@1.12.7", "pkg:npm/jitter@1.3.0", "pkg:npm/mocha-pretty-spec-reporter@0.1.0-beta.1", "pkg:npm/mocha@2.5.3", "pkg:npm/sinon-chai@2.14.0", "pkg:npm/sinon@1.17.7", "pkg:npm/utila@0.4.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/dom-converter@0.2.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-28T17:02:24Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, July 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'dom-converter' with version '0.2.0'." } ] }