{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:084499d6-1cde-4c87-a19f-37e59e8ac722", "version": 1, "metadata": { "timestamp": "2026-07-30T07:12:29Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "domhandler", "group": "", "version": "2.4.2", "description": "handler for htmlparser2 that turns pages into a dom", "purl": "pkg:npm/domhandler@2.4.2", "bom-ref": "pkg:npm/domhandler@2.4.2", "author": "Felix Boehm ", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "externalReferences": [ { "type": "vcs", "url": "git://github.com/fb55/DomHandler.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "domelementtype", "version": "1.3.0", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2" } ], "purl": "pkg:npm/domelementtype@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "update to domelementtype@1.3.1" }, { "name": "ImportedModules", "value": "domelementtype" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js#1" } ] } }, { "group": "", "name": "htmlparser2", "version": "3.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bdf87acca0f3f9e53fa4fcceb0f4b4cbb00b338" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/htmlparser2@3.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "domhandler", "version": "2.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "892e47000a99be55bbf3774ffea0561d8879c259" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/domhandler@2.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domutils", "version": "1.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2e07765dc27f363130fbbb45bdf2b13b3098299b1d72de6573343665a418f038f3ee97c00f719ba7cc92256b6b78823fbc394c566c706baa4799dc48620b6d0e" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/domutils@1.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "dom-serializer", "version": "0.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "073c697546ce0780ce23be4a28e293e40bc30c82" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/dom-serializer@0.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/dom-serializer@0.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domelementtype", "version": "1.1.3", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "bd28773e2642881aec51544924299c5cd822185b" } ], "purl": "pkg:npm/domelementtype@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz" }, { "name": "ImportedModules", "value": "domelementtype" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "index.js#1" } ] } }, { "group": "", "name": "entities", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0" } ], "licenses": [ { "license": { "name": "BSD-like" } } ], "purl": "pkg:npm/entities@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b50b4a03d588021045dfe54b02c7b232a65e0635b4007268c4eb58a92519349c5ab84ae62db566d855b5cbe27f600f5d52b002dfd2137a39595a1548c1ac242b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readable-stream@2.3.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bb935d48582cba168c06834957a54a3e07124f11" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "32d102d53a8dd045399dea61689e2b02d4e11ed0bce9d34df6a0ae121b6c86fa55064016e593bb04048df5112717d7a85c6711b9bfa916e284a4e1c4f876c433" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/process-nextick-args@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "safe-buffer", "version": "5.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "util-deprecate", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "3.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ffa9dad34d4c25612d6311ce57558b7ec991e182329e4504841c33b1bf9f936aa64378aab22db9f25fd0d8c58724c22601c36967c0c475800aef6347a0843d12" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@3.5.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@3.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "browser-stdout", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/browser-stdout@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "2.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9c99094176e12240cb22d6c5146098400fe0f7d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-readlink", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/graceful-readlink@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-readlink@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.6.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e731531ca2ede27d188222427da17821d68ff4fc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@2.6.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c9ce393a4b7cbd0b058a725c93df299027868ff9" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/diff@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/growl@1.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "he", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "93410fd21b009735151f8868c2f271f3427e23fd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json3", "version": "3.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1" } ], "purl": "pkg:npm/json3@3.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json3@3.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please use the native JSON object instead of JSON 3" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.create", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.create@3.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.create@3.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._baseassign", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._baseassign@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._baseassign@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._basecopy", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._basecopy@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._basecopy@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.keys", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.keys@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.keys@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._getnative", "version": "3.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._getnative@3.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._getnative@3.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "native" ] }, { "group": "", "name": "lodash.isarguments", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2f573d85c6a24289ff00663b491c1d338ff3458a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.isarguments@3.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isarguments@3.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.isarray", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.isarray@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isarray@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._basecreate", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bc661614daa7fc311b7d03bf16806a0213cf821" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._basecreate@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._basecreate@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._isiterateecall", "version": "3.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5203ad7ba425fae842460e696db9cf3e6aac057c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._isiterateecall@3.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jshint", "version": "2.9.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1e7252915ce681b40827ee14248c46d34e9aa62c" } ], "licenses": [ { "expression": "(MIT AND JSON)" } ], "purl": "pkg:npm/jshint@2.9.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jshint/-/jshint-2.9.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jshint@2.9.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jshint/-/jshint-2.9.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "cli", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "22817534f24bfa4950c34d532d48ecbc621b8c14" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cli@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cli/-/cli-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cli@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cli/-/cli-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "exit", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0632638f8d877cc82107d30a0fff1a17cba1cd0c" } ], "purl": "pkg:npm/exit@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/exit@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "console-browserify", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f0241c45730a9fc6323b206dbf38edc741d0bb10" } ], "purl": "pkg:npm/console-browserify@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "date-now", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "eaf439fd4d4848ad74e5cc7dbef200672b9e345b" } ], "purl": "pkg:npm/date-now@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/date-now@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "htmlparser2", "version": "3.8.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "996c28b191516a8be86501a7d79757e5c70c1068" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/htmlparser2@3.8.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "domhandler", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2de59a0822d5027fabff6f032c2b25a2a8abe738" } ], "purl": "pkg:npm/domhandler@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "domutils", "version": "1.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf" } ], "purl": "pkg:npm/domutils@1.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "entities", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b2987aa3821347fcde642b24fdfc9e4fb712bf26" } ], "licenses": [ { "license": { "name": "BSD-like" } } ], "purl": "pkg:npm/entities@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.1.14", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7cf4c54ef648e3813084c636dd2079e166c081d9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "0.10.31", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash", "version": "3.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3678bd8ab995057c07ade836ed2ef087da811d45" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash@3.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash/-/lodash-3.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash@3.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash/-/lodash-3.7.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "shelljs", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3596e6307a781544f591f37da618360f31db57b1" } ], "licenses": [ { "license": { "name": "BSD*" } } ], "purl": "pkg:npm/shelljs@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-json-comments", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1e15fbcac97d3ee99bf2d73b4c656b082bbafb91" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-json-comments@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/domelementtype@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/domhandler@2.4.1", "dependsOn": [ "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/domelementtype@1.1.3", "dependsOn": [] }, { "ref": "pkg:npm/entities@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/dom-serializer@0.1.0", "dependsOn": [ "pkg:npm/domelementtype@1.1.3", "pkg:npm/entities@1.1.1" ] }, { "ref": "pkg:npm/domutils@1.7.0", "dependsOn": [ "pkg:npm/dom-serializer@0.1.0", "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/process-nextick-args@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/safe-buffer@5.1.2", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@1.1.1", "dependsOn": [ "pkg:npm/safe-buffer@5.1.2" ] }, { "ref": "pkg:npm/util-deprecate@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@2.3.6", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.3", "pkg:npm/isarray@1.0.0", "pkg:npm/process-nextick-args@2.0.0", "pkg:npm/safe-buffer@5.1.2", "pkg:npm/string_decoder@1.1.1", "pkg:npm/util-deprecate@1.0.2" ] }, { "ref": "pkg:npm/htmlparser2@3.9.2", "dependsOn": [ "pkg:npm/domelementtype@1.3.0", "pkg:npm/domhandler@2.4.1", "pkg:npm/domutils@1.7.0", "pkg:npm/entities@1.1.1", "pkg:npm/inherits@2.0.3", "pkg:npm/readable-stream@2.3.6" ] }, { "ref": "pkg:npm/browser-stdout@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/graceful-readlink@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.9.0", "dependsOn": [ "pkg:npm/graceful-readlink@1.0.1" ] }, { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.6.8", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/diff@3.2.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.1", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/he@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/json3@3.3.2", "dependsOn": [] }, { "ref": "pkg:npm/lodash._basecopy@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._getnative@3.9.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarguments@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarray@3.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lodash.keys@3.1.2", "dependsOn": [ "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4" ] }, { "ref": "pkg:npm/lodash._baseassign@3.2.0", "dependsOn": [ "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash.keys@3.1.2" ] }, { "ref": "pkg:npm/lodash._basecreate@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lodash._isiterateecall@3.0.9", "dependsOn": [] }, { "ref": "pkg:npm/lodash.create@3.1.1", "dependsOn": [ "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._isiterateecall@3.0.9" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/has-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@3.1.2", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/mocha@3.5.3", "dependsOn": [ "pkg:npm/browser-stdout@1.3.0", "pkg:npm/commander@2.9.0", "pkg:npm/debug@2.6.8", "pkg:npm/diff@3.2.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.1.1", "pkg:npm/growl@1.9.2", "pkg:npm/he@1.1.1", "pkg:npm/json3@3.3.2", "pkg:npm/lodash.create@3.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@3.1.2" ] }, { "ref": "pkg:npm/exit@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.2", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/cli@1.0.1", "dependsOn": [ "pkg:npm/exit@0.1.2", "pkg:npm/glob@7.1.2" ] }, { "ref": "pkg:npm/date-now@0.1.4", "dependsOn": [] }, { "ref": "pkg:npm/console-browserify@1.1.0", "dependsOn": [ "pkg:npm/date-now@0.1.4" ] }, { "ref": "pkg:npm/domhandler@2.3.0", "dependsOn": [ "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/domutils@1.5.1", "dependsOn": [ "pkg:npm/dom-serializer@0.1.0", "pkg:npm/domelementtype@1.3.0" ] }, { "ref": "pkg:npm/entities@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isarray@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@0.10.31", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.1.14", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.3", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/htmlparser2@3.8.3", "dependsOn": [ "pkg:npm/domelementtype@1.3.0", "pkg:npm/domhandler@2.3.0", "pkg:npm/domutils@1.5.1", "pkg:npm/entities@1.0.0", "pkg:npm/readable-stream@1.1.14" ] }, { "ref": "pkg:npm/lodash@3.7.0", "dependsOn": [] }, { "ref": "pkg:npm/shelljs@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/strip-json-comments@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/jshint@2.9.5", "dependsOn": [ "pkg:npm/cli@1.0.1", "pkg:npm/console-browserify@1.1.0", "pkg:npm/exit@0.1.2", "pkg:npm/htmlparser2@3.8.3", "pkg:npm/lodash@3.7.0", "pkg:npm/minimatch@3.0.4", "pkg:npm/shelljs@0.3.0", "pkg:npm/strip-json-comments@1.0.4" ] }, { "ref": "pkg:npm/domhandler@2.4.2", "dependsOn": [ "pkg:npm/domelementtype@1.3.0", "pkg:npm/htmlparser2@3.9.2", "pkg:npm/jshint@2.9.5", "pkg:npm/mocha@3.5.3" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/domhandler@2.4.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-30T07:12:29Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, July 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'domhandler' with version '2.4.2'." } ] }