{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:e4a36273-a5bc-4454-839b-cd4ad59bcfab", "version": 1, "metadata": { "timestamp": "2026-09-21T16:22:45Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "escodegen", "group": "", "version": "1.1.0", "description": "ECMAScript code generator", "purl": "pkg:npm/escodegen@1.1.0", "bom-ref": "pkg:npm/escodegen@1.1.0", "properties": [ { "name": "cdx:npm:bin", "value": "esgenerate, escodegen" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:scripts", "value": "test, unit-test, lint, release, build-min, build" }, { "name": "cdx:npm:buildScripts", "value": "build-min, build" } ], "type": "application", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/escodegen" }, { "type": "vcs", "url": "http://github.com/Constellation/escodegen.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/Base64/package.json\\nnode_modules/MD5/package.json\\nnode_modules/StringScanner/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/ansicolors/package.json\\nnode_modules/archy/package.json\\nnode_modules/argparse/node_modules/underscore.string/package.json\\nnode_modules/argparse/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/assertion-error/package.json\\nnode_modules/async/package.json\\nnode_modules/aws-sign/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/binary/package.json\\nnode_modules/block-stream/package.json\\nnode_modules/boom/package.json\\nnode_modules/bops/package.json\\nnode_modules/bower-config/node_modules/mout/package.json\\nnode_modules/bower-config/package.json\\nnode_modules/bower-endpoint-parser/package.json\\nnode_modules/bower-json/package.json\\nnode_modules/bower-logger/package.json\\nnode_modules/bower-registry-client/node_modules/bower-config/package.json\\nnode_modules/bower-registry-client/node_modules/mout/package.json\\nnode_modules/bower-registry-client/package.json\\nnode_modules/bower/node_modules/q/package.json\\nnode_modules/bower/node_modules/semver/package.json\\nnode_modules/bower/package.json\\nnode_modules/buffer-browserify/package.json\\nnode_modules/buffers/package.json\\nnode_modules/cardinal/package.json\\nnode_modules/chai/package.json\\nnode_modules/chainsaw/package.json\\nnode_modules/chalk/package.json\\nnode_modules/charenc/package.json\\nnode_modules/chmodr/package.json\\nnode_modules/cli-color/package.json\\nnode_modules/cli/package.json\\nnode_modules/coffee-script-redux/package.json\\nnode_modules/coffee-script/package.json\\nnode_modules/colors/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/commonjs-everywhere/node_modules/estraverse/package.json\\nnode_modules/commonjs-everywhere/package.json\\nnode_modules/configstore/node_modules/js-yaml/package.json\\nnode_modules/configstore/node_modules/lodash/package.json\\nnode_modules/configstore/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/cookie-jar/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/crypt/package.json\\nnode_modules/cryptiles/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/cscodegen/package.json\\nnode_modules/ctype/package.json\\nnode_modules/dateformat/package.json\\nnode_modules/debug/package.json\\nnode_modules/debuglog/package.json\\nnode_modules/decompress-zip/node_modules/q/package.json\\nnode_modules/decompress-zip/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/deep-extend/package.json\\nnode_modules/defined/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/diff/package.json\\nnode_modules/es5-ext/package.json\\nnode_modules/escodegen/node_modules/estraverse/package.json\\nnode_modules/escodegen/package.json\\nnode_modules/escope/node_modules/estraverse/package.json\\nnode_modules/escope/package.json\\nnode_modules/esmangle/node_modules/estraverse/package.json\\nnode_modules/esmangle/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esshorten/node_modules/estraverse/package.json\\nnode_modules/esshorten/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/event-emitter/package.json\\nnode_modules/eventemitter2/package.json\\nnode_modules/events-browserify/package.json\\nnode_modules/exit/package.json\\nnode_modules/findup-sync/node_modules/glob/package.json\\nnode_modules/findup-sync/node_modules/graceful-fs/package.json\\nnode_modules/findup-sync/node_modules/inherits/package.json\\nnode_modules/findup-sync/node_modules/lodash/package.json\\nnode_modules/findup-sync/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/fstream-ignore/package.json\\nnode_modules/fstream/package.json\\nnode_modules/getobject/package.json\\nnode_modules/glob/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/growl/package.json\\nnode_modules/grunt-cli/node_modules/nopt/package.json\\nnode_modules/grunt-cli/package.json\\nnode_modules/grunt-contrib-jshint/package.json\\nnode_modules/grunt-mocha-test/package.json\\nnode_modules/grunt/node_modules/async/package.json\\nnode_modules/grunt/node_modules/glob/package.json\\nnode_modules/grunt/node_modules/graceful-fs/package.json\\nnode_modules/grunt/node_modules/inherits/package.json\\nnode_modules/grunt/node_modules/nopt/package.json\\nnode_modules/grunt/node_modules/rimraf/node_modules/graceful-fs/package.json\\nnode_modules/grunt/node_modules/rimraf/package.json\\nnode_modules/grunt/package.json\\nnode_modules/handlebars/node_modules/optimist/package.json\\nnode_modules/handlebars/package.json\\nnode_modules/has-color/package.json\\nnode_modules/hawk/package.json\\nnode_modules/hoek/package.json\\nnode_modules/hooker/package.json\\nnode_modules/http-browserify/example/json-stream/node_modules/JSONStream/node_modules/jsonparse/package.json\\nnode_modules/http-browserify/example/json-stream/node_modules/JSONStream/package.json\\nnode_modules/http-browserify/node_modules/Base64/package.json\\nnode_modules/http-browserify/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/indexof/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inquirer/node_modules/lodash/package.json\\nnode_modules/inquirer/package.json\\nnode_modules/intersect/package.json\\nnode_modules/jade/node_modules/mkdirp/package.json\\nnode_modules/jade/package.json\\nnode_modules/jedediah/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jshint/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsonify/package.json\\nnode_modules/junk/package.json\\nnode_modules/lodash/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/memoizee/package.json\\nnode_modules/mime/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mkpath/package.json\\nnode_modules/mktemp/package.json\\nnode_modules/mocha/node_modules/glob/package.json\\nnode_modules/mocha/node_modules/graceful-fs/package.json\\nnode_modules/mocha/node_modules/inherits/package.json\\nnode_modules/mocha/package.json\\nnode_modules/mout/package.json\\nnode_modules/mute-stream/package.json\\nnode_modules/next-tick/package.json\\nnode_modules/node-uuid/package.json\\nnode_modules/nopt/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/open/package.json\\nnode_modules/optimist/package.json\\nnode_modules/osenv/package.json\\nnode_modules/p-throttler/node_modules/q/package.json\\nnode_modules/p-throttler/package.json\\nnode_modules/promptly/package.json\\nnode_modules/q/package.json\\nnode_modules/qs/package.json\\nnode_modules/querystring/package.json\\nnode_modules/read/node_modules/mute-stream/package.json\\nnode_modules/read/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/redeyed/package.json\\nnode_modules/request-progress/package.json\\nnode_modules/request-replay/package.json\\nnode_modules/request/package.json\\nnode_modules/resolve/package.json\\nnode_modules/retry/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/semver/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shelljs/package.json\\nnode_modules/sigmund/package.json\\nnode_modules/sntp/package.json\\nnode_modules/source-map/node_modules/amdefine/package.json\\nnode_modules/source-map/package.json\\nnode_modules/string_decoder/build/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/stringify-object/package.json\\nnode_modules/sudo-block/node_modules/ansi-styles/package.json\\nnode_modules/sudo-block/node_modules/chalk/package.json\\nnode_modules/sudo-block/package.json\\nnode_modules/tape/package.json\\nnode_modules/tar/package.json\\nnode_modules/throttleit/package.json\\nnode_modules/tmp/package.json\\nnode_modules/to-utf8/package.json\\nnode_modules/touch/node_modules/nopt/package.json\\nnode_modules/touch/package.json\\nnode_modules/traverse/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/uglify-js/node_modules/optimist/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/underscore.string/package.json\\nnode_modules/underscore/package.json\\nnode_modules/update-notifier/node_modules/semver/package.json\\nnode_modules/update-notifier/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/which/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/zlib-browserify/package.json" } ] }, "components": [ { "authors": [ { "name": "Brian J. Brennan" } ], "group": "", "name": "zlib-browserify", "version": "0.0.3", "description": "Wrapper for zlib.js to allow for browserifyication", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/zlib-browserify@0.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/brianloveswords/zlib-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/zlib-browserify@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/zlib-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/zlib-browserify/package.json" } ], "concludedValue": "node_modules/zlib-browserify/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "0.0.2", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@0.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.0.5", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "purl": "pkg:npm/which@1.0.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "vm-browserify", "version": "0.0.2", "description": "vm module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vm-browserify@0.0.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/vm-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/vm-browserify@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/vm-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vm-browserify/package.json" } ], "concludedValue": "node_modules/vm-browserify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "update-notifier", "version": "0.1.7", "description": "Update notifier for your package", "scope": "optional", "purl": "pkg:npm/update-notifier@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yeoman/update-notifier" }, { "type": "vcs", "url": "git://github.com/yeoman/update-notifier.git" } ], "type": "library", "bom-ref": "pkg:npm/update-notifier@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/update-notifier/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/update-notifier/package.json" } ], "concludedValue": "node_modules/update-notifier/package.json" } ] } }, { "group": "", "name": "semver", "version": "2.1.0", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@2.1.0", "type": "library", "bom-ref": "pkg:npm/semver@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/update-notifier/node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "SrcFile", "value": "node_modules/bower/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/node_modules/semver/package.json" } ], "concludedValue": "node_modules/bower/node_modules/semver/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 34 } ] } }, { "group": "", "name": "underscore.string", "version": "2.2.1", "description": "String manipulation extensions for Underscore.js javascript library.", "scope": "optional", "purl": "pkg:npm/underscore.string@2.2.1", "externalReferences": [ { "type": "vcs", "url": "http://epeli.github.com/underscore.string/" }, { "type": "vcs", "url": "https://github.com/epeli/underscore.string.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/underscore.string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/underscore.string/package.json" } ], "concludedValue": "node_modules/underscore.string/package.json" } ] } }, { "authors": [ { "name": "Jeremy Ashkenas " } ], "group": "", "name": "underscore", "version": "1.4.4", "description": "JavaScript's functional programming helper library.", "scope": "optional", "purl": "pkg:npm/underscore@1.4.4", "externalReferences": [ { "type": "website", "url": "http://underscorejs.org" }, { "type": "vcs", "url": "git://github.com/documentcloud/underscore.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/underscore/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/underscore/package.json" } ], "concludedValue": "node_modules/underscore/package.json" } ] } }, { "group": "", "name": "uglify-js", "version": "2.3.6", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "optional", "purl": "pkg:npm/uglify-js@2.3.6", "externalReferences": [ { "type": "website", "url": "http://lisperator.net/uglifyjs" }, { "type": "vcs", "url": "https://github.com/mishoo/UglifyJS2.git" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@2.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "optimist", "version": "0.3.7", "description": "Light-weight option parsing with an argv hash. No optstrings attached.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optimist@0.3.7", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-optimist.git" } ], "type": "library", "bom-ref": "pkg:npm/optimist@0.3.7", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/node_modules/optimist/package.json" }, { "name": "SrcFile", "value": "node_modules/handlebars/node_modules/optimist/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/handlebars/node_modules/optimist/package.json" } ], "concludedValue": "node_modules/handlebars/node_modules/optimist/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.3.0", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "purl": "pkg:npm/tunnel-agent@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "authors": [ { "name": "James Halliday" } ], "group": "", "name": "traverse", "version": "0.3.9", "description": "Traverse and transform objects by visiting every node on a recursive walk", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/traverse@0.3.9", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/js-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.3.9", "properties": [ { "name": "SrcFile", "value": "node_modules/traverse/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/traverse/package.json" } ], "concludedValue": "node_modules/traverse/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "touch", "version": "0.0.2", "description": "like touch(1) in node", "scope": "optional", "purl": "pkg:npm/touch@0.0.2", "type": "library", "bom-ref": "pkg:npm/touch@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/touch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/touch/package.json" } ], "concludedValue": "node_modules/touch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "1.0.10", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@1.0.10", "type": "library", "bom-ref": "pkg:npm/nopt@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/touch/node_modules/nopt/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt-cli/node_modules/nopt/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt/node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/node_modules/nopt/package.json" } ], "concludedValue": "node_modules/grunt/node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Chris Dickinson " } ], "group": "", "name": "to-utf8", "version": "0.0.1", "description": "single-function form of node's Buffer.toString(utf8)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-utf8@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/chrisdickinson/to-utf8.git" } ], "type": "library", "bom-ref": "pkg:npm/to-utf8@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-utf8/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-utf8/package.json" } ], "concludedValue": "node_modules/to-utf8/package.json" } ] } }, { "authors": [ { "name": "KARASZI István (http://raszi.hu/)" } ], "group": "", "name": "tmp", "version": "0.0.23", "description": "Temporary file and directory creator", "scope": "optional", "purl": "pkg:npm/tmp@0.0.23", "externalReferences": [ { "type": "vcs", "url": "http://github.com/raszi/node-tmp" }, { "type": "vcs", "url": "git://github.com/raszi/node-tmp.git" } ], "type": "library", "bom-ref": "pkg:npm/tmp@0.0.23", "properties": [ { "name": "SrcFile", "value": "node_modules/tmp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tmp/package.json" } ], "concludedValue": "node_modules/tmp/package.json" } ] } }, { "group": "", "name": "throttleit", "version": "0.0.2", "description": "Throttle a function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/throttleit@0.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/component/throttle.git" } ], "type": "library", "bom-ref": "pkg:npm/throttleit@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/throttleit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/throttleit/package.json" } ], "concludedValue": "node_modules/throttleit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "tar", "version": "0.1.19", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@0.1.19", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@0.1.19", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tape", "version": "0.2.2", "description": "tap-producing test harness for node and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tape@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/tape" }, { "type": "vcs", "url": "git://github.com/substack/tape.git" } ], "type": "library", "bom-ref": "pkg:npm/tape@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/package.json" } ], "concludedValue": "node_modules/tape/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "sudo-block", "version": "0.2.1", "description": "Block users from running your tool with root permissions", "scope": "optional", "purl": "pkg:npm/sudo-block@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/sudo-block" }, { "type": "vcs", "url": "git://github.com/sindresorhus/sudo-block.git" } ], "type": "library", "bom-ref": "pkg:npm/sudo-block@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sudo-block/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sudo-block/package.json" } ], "concludedValue": "node_modules/sudo-block/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "chalk", "version": "0.1.1", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/chalk" }, { "type": "vcs", "url": "git://github.com/sindresorhus/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sudo-block/node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sudo-block/node_modules/chalk/package.json" } ], "concludedValue": "node_modules/sudo-block/node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "0.1.2", "description": "ANSI escape codes for colorizing strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/ansi-styles" }, { "type": "vcs", "url": "git://github.com/sindresorhus/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/sudo-block/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sudo-block/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/sudo-block/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "stringify-object", "version": "0.1.7", "description": "Stringify an object/array like JSON.stringify just without all the double-quotes", "scope": "optional", "purl": "pkg:npm/stringify-object@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yeoman/stringify-object" }, { "type": "vcs", "url": "git://github.com/yeoman/stringify-object.git" } ], "type": "library", "bom-ref": "pkg:npm/stringify-object@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/stringify-object/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stringify-object/package.json" } ], "concludedValue": "node_modules/stringify-object/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "string_decoder", "version": "0.10.24", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.24", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "group": "", "name": "string_decoder-build", "version": "0.0.0", "scope": "optional", "purl": "pkg:npm/string_decoder-build@0.0.0", "type": "library", "bom-ref": "pkg:npm/string_decoder-build@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/build/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/build/package.json" } ], "concludedValue": "node_modules/string_decoder/build/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.1.31", "description": "Generates and consumes source maps", "scope": "required", "purl": "pkg:npm/source-map@0.1.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.1.31", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "escodegen.js", "line": 2042 } ] } }, { "authors": [ { "name": "James Burke (http://github.com/jrburke)" } ], "group": "", "name": "amdefine", "version": "0.1.0", "description": "Provide AMD's define() API for declaring modules in the AMD format", "scope": "optional", "purl": "pkg:npm/amdefine@0.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/jrburke/amdefine" }, { "type": "vcs", "url": "https://github.com/jrburke/amdefine.git" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/node_modules/amdefine/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/node_modules/amdefine/package.json" } ], "concludedValue": "node_modules/source-map/node_modules/amdefine/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "sntp", "version": "0.2.4", "description": "SNTP Client", "scope": "optional", "purl": "pkg:npm/sntp@0.2.4", "type": "library", "bom-ref": "pkg:npm/sntp@0.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/sntp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sntp/package.json" } ], "concludedValue": "node_modules/sntp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sigmund", "version": "1.0.0", "description": "Quick and dirty signatures for Objects.", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/sigmund" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sigmund/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sigmund/package.json" } ], "concludedValue": "node_modules/sigmund/package.json" } ] } }, { "authors": [ { "name": "Artur Adib " } ], "group": "", "name": "shelljs", "version": "0.1.4", "description": "Portable Unix shell commands for Node.js", "scope": "optional", "purl": "pkg:npm/shelljs@0.1.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/arturadib/shelljs" }, { "type": "vcs", "url": "git://github.com/arturadib/shelljs.git" } ], "type": "library", "bom-ref": "pkg:npm/shelljs@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/shelljs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shelljs/package.json" } ], "concludedValue": "node_modules/shelljs/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "sha.js", "version": "1.3.0", "description": "streaming sha1 hash in pure javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sha.js@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/sha.js" }, { "type": "vcs", "url": "git://github.com/dominictarr/sha.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sha.js@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/package.json" } ], "concludedValue": "node_modules/sha.js/package.json" } ] } }, { "group": "", "name": "semver", "version": "2.2.1", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@2.2.1", "type": "library", "bom-ref": "pkg:npm/semver@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 34 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.2.6", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.2.6", "type": "library", "bom-ref": "pkg:npm/rimraf@2.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Tim Koschützki (http://debuggable.com/)" } ], "group": "", "name": "retry", "version": "0.6.0", "description": "Abstraction for exponential and custom retry strategies for failed operations.", "scope": "optional", "purl": "pkg:npm/retry@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tim-kos/node-retry" }, { "type": "vcs", "url": "git://github.com/felixge/node-retry.git" } ], "type": "library", "bom-ref": "pkg:npm/retry@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/retry/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/retry/package.json" } ], "concludedValue": "node_modules/retry/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "0.3.1", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@0.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "request-replay", "version": "0.2.0", "description": "Replays a request when a network error occurs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request-replay@0.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-request-replay" } ], "type": "library", "bom-ref": "pkg:npm/request-replay@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/request-replay/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request-replay/package.json" } ], "concludedValue": "node_modules/request-replay/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "request-progress", "version": "0.3.1", "description": "Tracks the download progress of a request made with mikeal/request", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request-progress@0.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-request-progress" } ], "type": "library", "bom-ref": "pkg:npm/request-progress@0.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/request-progress/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request-progress/package.json" } ], "concludedValue": "node_modules/request-progress/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.27.0", "description": "Simplified HTTP request client.", "scope": "optional", "purl": "pkg:npm/request@2.27.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/mikeal/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.27.0", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "redeyed", "version": "0.4.2", "description": "Takes JavaScript code, along with a config and returns the original code with tokens wrapped as configured.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/redeyed@0.4.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/thlorenz/redeyed.git" } ], "type": "library", "bom-ref": "pkg:npm/redeyed@0.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/redeyed/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/redeyed/package.json" } ], "concludedValue": "node_modules/redeyed/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "readable-stream", "version": "1.1.10", "description": "An exploration of a new kind of readable streams for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@1.1.10", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.10", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "read", "version": "1.0.5", "description": "read(1) for node programs", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read@1.0.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/read.git" } ], "type": "library", "bom-ref": "pkg:npm/read@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/read/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read/package.json" } ], "concludedValue": "node_modules/read/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "mute-stream", "version": "0.0.4", "description": "Bytes go in, but they don't come out (when muted).", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mute-stream@0.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/mute-stream" } ], "type": "library", "bom-ref": "pkg:npm/mute-stream@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/read/node_modules/mute-stream/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read/node_modules/mute-stream/package.json" } ], "concludedValue": "node_modules/read/node_modules/mute-stream/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring", "version": "0.2.1", "description": "Node's querystring module for all engines.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/querystring@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Gozala/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring/package.json" } ], "concludedValue": "node_modules/querystring/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "qs", "version": "0.6.6", "description": "querystring parser", "scope": "optional", "purl": "pkg:npm/qs@0.6.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/node-querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@0.6.6", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Kris Kowal (https://github.com/kriskowal)" } ], "group": "", "name": "q", "version": "1.0.0", "description": "A library for promises (CommonJS/Promises/A,B,D)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/q@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriskowal/q" }, { "type": "vcs", "url": "git://github.com/kriskowal/q.git" } ], "type": "library", "bom-ref": "pkg:npm/q@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/q/package.json" }, { "name": "ImportedModules", "value": "q" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/q/package.json" } ], "concludedValue": "node_modules/q/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 36 } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "promptly", "version": "0.2.0", "description": "Simple command line prompting utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/promptly@0.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-promptly" } ], "type": "library", "bom-ref": "pkg:npm/promptly@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/promptly/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/promptly/package.json" } ], "concludedValue": "node_modules/promptly/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "p-throttler", "version": "0.0.1", "description": "A promise based throttler capable of limiting execution of parallel tasks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-throttler@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-p-throttler" } ], "type": "library", "bom-ref": "pkg:npm/p-throttler@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/p-throttler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-throttler/package.json" } ], "concludedValue": "node_modules/p-throttler/package.json" } ] } }, { "authors": [ { "name": "Kris Kowal (https://github.com/kriskowal)" } ], "group": "", "name": "q", "version": "0.9.7", "description": "A library for promises (CommonJS/Promises/A,B,D)", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/q@0.9.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriskowal/q" }, { "type": "vcs", "url": "git://github.com/kriskowal/q.git" } ], "type": "library", "bom-ref": "pkg:npm/q@0.9.7", "properties": [ { "name": "SrcFile", "value": "node_modules/p-throttler/node_modules/q/package.json" }, { "name": "ImportedModules", "value": "q" }, { "name": "SrcFile", "value": "node_modules/decompress-zip/node_modules/q/package.json" }, { "name": "SrcFile", "value": "node_modules/bower/node_modules/q/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/node_modules/q/package.json" } ], "concludedValue": "node_modules/bower/node_modules/q/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 36 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "osenv", "version": "0.0.3", "description": "Look up environment settings specific to different operating systems", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/osenv@0.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/osenv" } ], "type": "library", "bom-ref": "pkg:npm/osenv@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/osenv/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/osenv/package.json" } ], "concludedValue": "node_modules/osenv/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "optimist", "version": "0.6.0", "description": "Light-weight option parsing with an argv hash. No optstrings attached.", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optimist@0.6.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-optimist.git" } ], "type": "library", "bom-ref": "pkg:npm/optimist@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/optimist/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optimist/package.json" } ], "concludedValue": "node_modules/optimist/package.json" } ] } }, { "authors": [ { "name": "J Jordan " } ], "group": "", "name": "open", "version": "0.0.4", "description": "open a file or url in the user's preferred application", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/open@0.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jjrdn/node-open" }, { "type": "vcs", "url": "https://github.com/pwnall/node-open.git" } ], "type": "library", "bom-ref": "pkg:npm/open@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/open/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/open/package.json" } ], "concludedValue": "node_modules/open/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.3.0", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "scope": "optional", "purl": "pkg:npm/oauth-sign@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "2.1.2", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@2.1.2", "type": "library", "bom-ref": "pkg:npm/nopt@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer " } ], "group": "", "name": "node-uuid", "version": "1.4.1", "description": "Rigorous implementation of RFC4122 (v1 and v4) UUIDs.", "scope": "optional", "purl": "pkg:npm/node-uuid@1.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/node-uuid@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/node-uuid/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-uuid/package.json" } ], "concludedValue": "node_modules/node-uuid/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "next-tick", "version": "0.1.0", "description": "Cross environment nextTick polyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/next-tick@0.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/next-tick.git" } ], "type": "framework", "bom-ref": "pkg:npm/next-tick@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/next-tick/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/next-tick/package.json" } ], "concludedValue": "node_modules/next-tick/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "mute-stream", "version": "0.0.3", "description": "Bytes go in, but they don't come out (when muted).", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mute-stream@0.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/mute-stream" } ], "type": "library", "bom-ref": "pkg:npm/mute-stream@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mute-stream/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mute-stream/package.json" } ], "concludedValue": "node_modules/mute-stream/package.json" } ] } }, { "group": "", "name": "mout", "version": "0.7.1", "description": "Modular Utilities", "scope": "optional", "purl": "pkg:npm/mout@0.7.1", "externalReferences": [ { "type": "website", "url": "http://moutjs.com/" }, { "type": "vcs", "url": "git://github.com/mout/mout.git" } ], "type": "library", "bom-ref": "pkg:npm/mout@0.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mout/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mout/package.json" } ], "concludedValue": "node_modules/mout/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "1.12.1", "description": "simple, flexible, fun test framework", "scope": "optional", "purl": "pkg:npm/mocha@1.12.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@1.12.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inherits", "version": "1.0.0", "description": "A tiny simple way to do classic inheritance in js", "scope": "optional", "purl": "pkg:npm/inherits@1.0.0", "type": "library", "bom-ref": "pkg:npm/inherits@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt/node_modules/inherits/package.json" }, { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/inherits/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/findup-sync/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "graceful-fs", "version": "1.2.3", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@1.2.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/grunt/node_modules/graceful-fs/package.json" }, { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/findup-sync/node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.2.1", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/glob/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "sasa+1 " } ], "group": "", "name": "mktemp", "version": "0.3.4", "description": "mktemp command for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mktemp@0.3.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/sasaplus1/mktemp.git" } ], "type": "library", "bom-ref": "pkg:npm/mktemp@0.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/mktemp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mktemp/package.json" } ], "concludedValue": "node_modules/mktemp/package.json" } ] } }, { "authors": [ { "name": "Jonathan Rajavuori " } ], "group": "", "name": "mkpath", "version": "0.1.0", "description": "Make all directories in a path, like mkdir -p", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkpath@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jrajav/mkpath" } ], "type": "library", "bom-ref": "pkg:npm/mkpath@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mkpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkpath/package.json" } ], "concludedValue": "node_modules/mkpath/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.3.5", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.5", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.5", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "0.2.14", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.2.14", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.2.14", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "1.2.11", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "purl": "pkg:npm/mime@1.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-mime" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "memoizee", "version": "0.2.6", "description": "Complete memoize/cache solution. Works with any type and length of function arguments", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/memoizee@0.2.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/memoize.git" } ], "type": "library", "bom-ref": "pkg:npm/memoizee@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/memoizee/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/memoizee/package.json" } ], "concludedValue": "node_modules/memoizee/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "2.3.1", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.3.1", "type": "library", "bom-ref": "pkg:npm/lru-cache@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "0.9.2", "description": "A utility library delivering consistency, customization, performance, and extras.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@0.9.2", "externalReferences": [ { "type": "website", "url": "http://lodash.com" }, { "type": "vcs", "url": "https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@0.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "junk", "version": "0.2.2", "description": "Helps you filter out OS junk files like .DS_Store and Thumbs.db", "scope": "optional", "purl": "pkg:npm/junk@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/junk" }, { "type": "vcs", "url": "git://github.com/sindresorhus/junk.git" } ], "type": "library", "bom-ref": "pkg:npm/junk@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/junk/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/junk/package.json" } ], "concludedValue": "node_modules/junk/package.json" } ] } }, { "authors": [ { "name": "Douglas Crockford (http://crockford.com/)" } ], "group": "", "name": "jsonify", "version": "0.0.0", "description": "JSON without touching any globals", "scope": "optional", "licenses": [ { "license": { "name": "Public Domain", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonify@0.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/jsonify.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonify@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonify/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonify/package.json" } ], "concludedValue": "node_modules/jsonify/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.0", "description": "Like JSON.stringify, but doesn't blow up on circular refs", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Anton Kovalyov (http://anton.kovalyov.net/)" } ], "group": "", "name": "jshint", "version": "2.0.1", "description": "Static analysis tool for JavaScript", "scope": "optional", "purl": "pkg:npm/jshint@2.0.1", "externalReferences": [ { "type": "website", "url": "http://jshint.com/" } ], "type": "library", "bom-ref": "pkg:npm/jshint@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jshint/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jshint/package.json" } ], "concludedValue": "node_modules/jshint/package.json" } ] } }, { "authors": [ { "name": "Dervus Grim " } ], "group": "", "name": "js-yaml", "version": "2.0.5", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" }, { "type": "vcs", "url": "git://github.com/nodeca/js-yaml.git" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "michaelficarra" } ], "group": "", "name": "jedediah", "version": "0.1.1", "description": "CLI option parser that behaves as one would expect", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jedediah@0.1.1", "type": "library", "bom-ref": "pkg:npm/jedediah@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jedediah/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jedediah/package.json" } ], "concludedValue": "node_modules/jedediah/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "jade", "version": "0.26.3", "description": "Jade template engine", "scope": "optional", "purl": "pkg:npm/jade@0.26.3", "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jade/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jade/package.json" } ], "concludedValue": "node_modules/jade/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.3.0", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jade/node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jade/node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/jade/node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "intersect", "version": "0.0.3", "description": "Find the intersection of two arrays", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/intersect@0.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/intersect" }, { "type": "vcs", "url": "git://github.com/juliangruber/intersect.git" } ], "type": "library", "bom-ref": "pkg:npm/intersect@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/intersect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/intersect/package.json" } ], "concludedValue": "node_modules/intersect/package.json" } ] } }, { "authors": [ { "name": "Simon Boudrias " } ], "group": "", "name": "inquirer", "version": "0.3.5", "description": "A collection of common interactive command line user interfaces.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inquirer@0.3.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/SBoudrias/Inquirer.js.git" } ], "type": "library", "bom-ref": "pkg:npm/inquirer@0.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/inquirer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inquirer/package.json" } ], "concludedValue": "node_modules/inquirer/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "1.2.1", "description": "A utility library delivering consistency, customization, performance, and extras.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@1.2.1", "externalReferences": [ { "type": "website", "url": "http://lodash.com" }, { "type": "vcs", "url": "https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inquirer/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/inquirer/node_modules/lodash/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "group": "", "name": "indexof", "version": "0.0.1", "description": "Microsoft sucks", "scope": "optional", "purl": "pkg:npm/indexof@0.0.1", "type": "library", "bom-ref": "pkg:npm/indexof@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/indexof/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indexof/package.json" } ], "concludedValue": "node_modules/indexof/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.2.11", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "0.10.0", "description": "Reference implementation of Joyent's HTTP Signature Scheme", "scope": "optional", "purl": "pkg:npm/http-signature@0.10.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@0.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "http-browserify", "version": "1.1.0", "description": "http module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-browserify@1.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/http-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/http-browserify@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-browserify/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-browserify/package.json" } ], "concludedValue": "node_modules/http-browserify/package.json" } ] } }, { "authors": [ { "name": "David Chambers " } ], "group": "", "name": "Base64", "version": "0.2.0", "description": "Base64 encoding and decoding", "scope": "optional", "purl": "pkg:npm/Base64@0.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davidchambers/Base64.js.git" } ], "type": "library", "bom-ref": "pkg:npm/Base64@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-browserify/node_modules/Base64/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-browserify/node_modules/Base64/package.json" } ], "concludedValue": "node_modules/http-browserify/node_modules/Base64/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://bit.ly/dominictarr)" } ], "group": "", "name": "JSONStream", "version": "0.4.3", "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)", "scope": "optional", "purl": "pkg:npm/JSONStream@0.4.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/dominictarr/JSONStream" }, { "type": "vcs", "url": "git://github.com/dominictarr/JSONStream.git" } ], "type": "library", "bom-ref": "pkg:npm/JSONStream@0.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/http-browserify/example/json-stream/node_modules/JSONStream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-browserify/example/json-stream/node_modules/JSONStream/package.json" } ], "concludedValue": "node_modules/http-browserify/example/json-stream/node_modules/JSONStream/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "0.0.4", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@0.0.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/http-browserify/example/json-stream/node_modules/JSONStream/node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-browserify/example/json-stream/node_modules/JSONStream/node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/http-browserify/example/json-stream/node_modules/JSONStream/node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "hooker", "version": "0.2.3", "description": "Monkey-patch (hook) functions for debugging and stuff.", "scope": "optional", "purl": "pkg:npm/hooker@0.2.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/cowboy/javascript-hooker" }, { "type": "vcs", "url": "git://github.com/cowboy/javascript-hooker.git" } ], "type": "library", "bom-ref": "pkg:npm/hooker@0.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/hooker/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hooker/package.json" } ], "concludedValue": "node_modules/hooker/package.json" } ] } }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "hoek", "version": "0.9.1", "description": "General purpose node utilities", "scope": "optional", "purl": "pkg:npm/hoek@0.9.1", "type": "library", "bom-ref": "pkg:npm/hoek@0.9.1", "properties": [ { "name": "SrcFile", "value": "node_modules/hoek/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hoek/package.json" } ], "concludedValue": "node_modules/hoek/package.json" } ] } }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "hawk", "version": "1.0.0", "description": "HTTP Hawk Authentication Scheme", "scope": "optional", "purl": "pkg:npm/hawk@1.0.0", "type": "library", "bom-ref": "pkg:npm/hawk@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hawk/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hawk/package.json" } ], "concludedValue": "node_modules/hawk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "has-color", "version": "0.1.2", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-color@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-color" }, { "type": "vcs", "url": "git://github.com/sindresorhus/has-color.git" } ], "type": "library", "bom-ref": "pkg:npm/has-color@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/has-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-color/package.json" } ], "concludedValue": "node_modules/has-color/package.json" } ] } }, { "group": "", "name": "handlebars", "version": "1.0.12", "description": "Extension of the Mustache logicless template language", "scope": "optional", "purl": "pkg:npm/handlebars@1.0.12", "externalReferences": [ { "type": "website", "url": "http://www.handlebarsjs.com/" }, { "type": "vcs", "url": "git://github.com/wycats/handlebars.js.git" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@1.0.12", "properties": [ { "name": "SrcFile", "value": "node_modules/handlebars/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/handlebars/package.json" } ], "concludedValue": "node_modules/handlebars/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "Peter Halliday (http://stuffpetedoes.blogspot.nl/)" } ], "group": "", "name": "grunt-mocha-test", "version": "0.6.3", "description": "A grunt task for running server side mocha tests", "scope": "optional", "purl": "pkg:npm/grunt-mocha-test@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pghalliday/grunt-mocha-test" }, { "type": "vcs", "url": "git://github.com/pghalliday/grunt-mocha-test.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-mocha-test@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-mocha-test/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-mocha-test/package.json" } ], "concludedValue": "node_modules/grunt-mocha-test/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Grunt Team (http://gruntjs.com/)" } ], "group": "", "name": "grunt-contrib-jshint", "version": "0.5.4", "description": "Validate files with JSHint.", "scope": "optional", "purl": "pkg:npm/grunt-contrib-jshint@0.5.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gruntjs/grunt-contrib-jshint" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-contrib-jshint.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-contrib-jshint@0.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-contrib-jshint/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-contrib-jshint/package.json" } ], "concludedValue": "node_modules/grunt-contrib-jshint/package.json" } ] } }, { "authors": [ { "name": "Grunt Team" } ], "group": "", "name": "grunt-cli", "version": "0.1.11", "description": "The grunt command line interface.", "scope": "optional", "purl": "pkg:npm/grunt-cli@0.1.11", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt-cli.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt-cli@0.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt-cli/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt-cli/package.json" } ], "concludedValue": "node_modules/grunt-cli/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "grunt", "version": "0.4.2", "description": "The JavaScript Task Runner", "scope": "optional", "purl": "pkg:npm/grunt@0.4.2", "externalReferences": [ { "type": "website", "url": "http://gruntjs.com/" }, { "type": "vcs", "url": "git://github.com/gruntjs/grunt.git" } ], "type": "library", "bom-ref": "pkg:npm/grunt@0.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/package.json" } ], "concludedValue": "node_modules/grunt/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.0.3", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.0.3", "type": "library", "bom-ref": "pkg:npm/rimraf@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/grunt/node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "graceful-fs", "version": "1.1.14", "description": "fs monkey-patching to avoid EMFILE and other problems", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@1.1.14", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/node_modules/rimraf/node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/node_modules/rimraf/node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/grunt/node_modules/rimraf/node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.1.21", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.1.21", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.1.21", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/node_modules/glob/package.json" }, { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/node_modules/glob/package.json" } ], "concludedValue": "node_modules/findup-sync/node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "0.1.22", "description": "Higher-order functions and common patterns for asynchronous code", "scope": "optional", "purl": "pkg:npm/async@0.1.22", "externalReferences": [ { "type": "vcs", "url": "http://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@0.1.22", "properties": [ { "name": "SrcFile", "value": "node_modules/grunt/node_modules/async/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/grunt/node_modules/async/package.json" } ], "concludedValue": "node_modules/grunt/node_modules/async/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "growl", "version": "1.7.0", "description": "Growl unobtrusive notifications", "scope": "optional", "purl": "pkg:npm/growl@1.7.0", "type": "library", "bom-ref": "pkg:npm/growl@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/growl/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/growl/package.json" } ], "concludedValue": "node_modules/growl/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "graceful-fs", "version": "2.0.1", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@2.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.2.8", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "getobject", "version": "0.1.0", "description": "get.and.set.deep.objects.easily = true", "scope": "optional", "purl": "pkg:npm/getobject@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-getobject" }, { "type": "vcs", "url": "git://github.com/cowboy/node-getobject.git" } ], "type": "library", "bom-ref": "pkg:npm/getobject@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/getobject/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getobject/package.json" } ], "concludedValue": "node_modules/getobject/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fstream-ignore", "version": "0.0.7", "description": "A thing for ignoring files based on globs", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fstream-ignore@0.0.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/fstream-ignore.git" } ], "type": "library", "bom-ref": "pkg:npm/fstream-ignore@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/fstream-ignore/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fstream-ignore/package.json" } ], "concludedValue": "node_modules/fstream-ignore/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fstream", "version": "0.1.25", "description": "Advanced file system stream things", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fstream@0.1.25", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/fstream.git" } ], "type": "library", "bom-ref": "pkg:npm/fstream@0.1.25", "properties": [ { "name": "SrcFile", "value": "node_modules/fstream/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fstream/package.json" } ], "concludedValue": "node_modules/fstream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "0.1.2", "description": "A module to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "scope": "optional", "purl": "pkg:npm/form-data@0.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/felixge/node-form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/package.json" } ], "concludedValue": "node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "forever-agent", "version": "0.5.0", "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "purl": "pkg:npm/forever-agent@0.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/forever-agent" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/forever-agent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forever-agent/package.json" } ], "concludedValue": "node_modules/forever-agent/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "findup-sync", "version": "0.1.2", "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.", "scope": "optional", "purl": "pkg:npm/findup-sync@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-findup-sync" }, { "type": "vcs", "url": "git://github.com/cowboy/node-findup-sync.git" } ], "type": "library", "bom-ref": "pkg:npm/findup-sync@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/findup-sync/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/package.json" } ], "concludedValue": "node_modules/findup-sync/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "1.0.1", "description": "A utility library delivering consistency, customization, performance, and extras.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@1.0.1", "externalReferences": [ { "type": "website", "url": "http://lodash.com/" }, { "type": "vcs", "url": "https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/findup-sync/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/findup-sync/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/findup-sync/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "\"Cowboy\" Ben Alman (http://benalman.com/)" } ], "group": "", "name": "exit", "version": "0.1.2", "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", "scope": "optional", "purl": "pkg:npm/exit@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cowboy/node-exit" }, { "type": "vcs", "url": "git://github.com/cowboy/node-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/exit@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/exit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/exit/package.json" } ], "concludedValue": "node_modules/exit/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "events-browserify", "version": "0.0.1", "description": "node.js events module for script or browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/events-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/events-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/events-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/events-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/events-browserify/package.json" } ], "concludedValue": "node_modules/events-browserify/package.json" } ] } }, { "authors": [ { "name": "hij1nx http://twitter.com/hij1nx" } ], "group": "", "name": "eventemitter2", "version": "0.4.13", "description": "A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eventemitter2@0.4.13", "type": "library", "bom-ref": "pkg:npm/eventemitter2@0.4.13", "properties": [ { "name": "SrcFile", "value": "node_modules/eventemitter2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eventemitter2/package.json" } ], "concludedValue": "node_modules/eventemitter2/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "event-emitter", "version": "0.2.2", "description": "Cross-environment event emitter", "scope": "optional", "purl": "pkg:npm/event-emitter@0.2.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/event-emitter.git" } ], "type": "library", "bom-ref": "pkg:npm/event-emitter@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/event-emitter/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/event-emitter/package.json" } ], "concludedValue": "node_modules/event-emitter/package.json" } ] }, "tags": [ "event" ] }, { "group": "", "name": "esutils", "version": "1.0.0", "description": "utility box for ECMAScript language tools", "scope": "required", "purl": "pkg:npm/esutils@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Constellation/esutils" }, { "type": "vcs", "url": "http://github.com/Constellation/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" }, { "name": "ImportedModules", "value": "esutils" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ], "occurrences": [ { "location": "escodegen.js", "line": 65 } ] } }, { "group": "", "name": "estraverse", "version": "1.5.0", "description": "ECMAScript JS AST traversal functions", "scope": "required", "purl": "pkg:npm/estraverse@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Constellation/estraverse" }, { "type": "vcs", "url": "http://github.com/Constellation/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" }, { "name": "ImportedModules", "value": "estraverse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ], "occurrences": [ { "location": "escodegen.js", "line": 64 } ] } }, { "group": "", "name": "esshorten", "version": "0.0.2", "description": "Shorten (mangle) names in JavaScript code", "scope": "optional", "purl": "pkg:npm/esshorten@0.0.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/esshorten.git" } ], "type": "library", "bom-ref": "pkg:npm/esshorten@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/esshorten/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esshorten/package.json" } ], "concludedValue": "node_modules/esshorten/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.2.0", "description": "ECMAScript JS AST traversal functions", "scope": "required", "purl": "pkg:npm/estraverse@1.2.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/estraverse.html" }, { "type": "vcs", "url": "http://github.com/Constellation/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/esshorten/node_modules/estraverse/package.json" }, { "name": "ImportedModules", "value": "estraverse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esshorten/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/esshorten/node_modules/estraverse/package.json" } ], "occurrences": [ { "location": "escodegen.js", "line": 64 } ] } }, { "group": "", "name": "esprima", "version": "1.0.4", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "required", "purl": "pkg:npm/esprima@1.0.4", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "http://github.com/ariya/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" }, { "name": "ImportedModules", "value": "esprima" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ], "occurrences": [ { "location": "bin/escodegen.js", "line": 31 }, { "location": "bin/esgenerate.js", "line": 31 }, { "location": "tools/release.js", "line": 32 } ] } }, { "group": "", "name": "esmangle", "version": "0.0.17", "description": "ECMAScript code mangler / minifier", "scope": "optional", "purl": "pkg:npm/esmangle@0.0.17", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/esmangle.html" }, { "type": "vcs", "url": "http://github.com/Constellation/esmangle.git" } ], "type": "library", "bom-ref": "pkg:npm/esmangle@0.0.17", "properties": [ { "name": "SrcFile", "value": "node_modules/esmangle/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esmangle/package.json" } ], "concludedValue": "node_modules/esmangle/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.3.2", "description": "ECMAScript JS AST traversal functions", "scope": "required", "purl": "pkg:npm/estraverse@1.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Constellation/estraverse" }, { "type": "vcs", "url": "http://github.com/Constellation/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/esmangle/node_modules/estraverse/package.json" }, { "name": "ImportedModules", "value": "estraverse" }, { "name": "SrcFile", "value": "node_modules/escope/node_modules/estraverse/package.json" }, { "name": "SrcFile", "value": "node_modules/escodegen/node_modules/estraverse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escodegen/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/escodegen/node_modules/estraverse/package.json" } ], "occurrences": [ { "location": "escodegen.js", "line": 64 } ] } }, { "group": "", "name": "escope", "version": "1.0.1", "description": "ECMAScript scope analyzer", "scope": "optional", "purl": "pkg:npm/escope@1.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/escope.html" }, { "type": "vcs", "url": "http://github.com/Constellation/escope.git" } ], "type": "library", "bom-ref": "pkg:npm/escope@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/escope/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escope/package.json" } ], "concludedValue": "node_modules/escope/package.json" } ] } }, { "group": "", "name": "escodegen", "version": "0.0.28", "description": "ECMAScript code generator", "scope": "required", "purl": "pkg:npm/escodegen@0.0.28", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/escodegen.html" }, { "type": "vcs", "url": "http://github.com/Constellation/escodegen.git" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@0.0.28", "properties": [ { "name": "SrcFile", "value": "node_modules/escodegen/package.json" }, { "name": "ImportedModules", "value": "../escodegen" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escodegen/package.json" } ], "concludedValue": "node_modules/escodegen/package.json" } ], "occurrences": [ { "location": "tools/entry-point.js", "line": 27 } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "es5-ext", "version": "0.9.2", "description": "ECMAScript5 extensions", "scope": "optional", "purl": "pkg:npm/es5-ext@0.9.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/es5-ext.git" } ], "type": "library", "bom-ref": "pkg:npm/es5-ext@0.9.2", "properties": [ { "name": "SrcFile", "value": "node_modules/es5-ext/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es5-ext/package.json" } ], "concludedValue": "node_modules/es5-ext/package.json" } ] } }, { "group": "", "name": "diff", "version": "1.0.2", "description": "A javascript text diff implementation.", "scope": "optional", "purl": "pkg:npm/diff@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "delayed-stream", "version": "0.0.5", "description": "Buffers events from a stream until you are ready to handle them.", "scope": "optional", "purl": "pkg:npm/delayed-stream@0.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-delayed-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-delayed-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@0.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/delayed-stream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delayed-stream/package.json" } ], "concludedValue": "node_modules/delayed-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "defined", "version": "0.0.0", "description": "return the first argument that is `!== undefined`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defined@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/defined" }, { "type": "vcs", "url": "git://github.com/substack/defined.git" } ], "type": "library", "bom-ref": "pkg:npm/defined@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/defined/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defined/package.json" } ], "concludedValue": "node_modules/defined/package.json" } ] } }, { "authors": [ { "name": "Viacheslav Lotsmanov " } ], "group": "", "name": "deep-extend", "version": "0.2.6", "description": "Recursive object extending.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-extend@0.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unclechu/node-deep-extend" }, { "type": "vcs", "url": "git://github.com/unclechu/node-deep-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-extend@0.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-extend/package.json" } ], "concludedValue": "node_modules/deep-extend/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "0.0.0", "description": "node's assert.deepEqual algorithm", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@0.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/deep-equal/package.json" } ] } }, { "authors": [ { "name": "The Bower authors" } ], "group": "", "name": "decompress-zip", "version": "0.0.4", "description": "A library for reading data from zip files", "scope": "optional", "purl": "pkg:npm/decompress-zip@0.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bower/decompress-zip.git" } ], "type": "library", "bom-ref": "pkg:npm/decompress-zip@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-zip/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-zip/package.json" } ], "concludedValue": "node_modules/decompress-zip/package.json" } ] } }, { "authors": [ { "name": "Sam Roberts " } ], "group": "", "name": "debuglog", "version": "0.0.2", "description": "backport of util.debuglog from node v0.11", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debuglog@0.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sam-github/node-debuglog.git" } ], "type": "library", "bom-ref": "pkg:npm/debuglog@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/debuglog/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debuglog/package.json" } ], "concludedValue": "node_modules/debuglog/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "0.7.4", "description": "small debugging utility", "scope": "optional", "purl": "pkg:npm/debug@0.7.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@0.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Steven Levithan" } ], "group": "", "name": "dateformat", "version": "1.0.2-1.2.3", "description": "A node.js package for Steven Levithan's excellent dateFormat() function.", "scope": "optional", "purl": "pkg:npm/dateformat@1.0.2-1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-dateformat" } ], "type": "library", "bom-ref": "pkg:npm/dateformat@1.0.2-1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/dateformat/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dateformat/package.json" } ], "concludedValue": "node_modules/dateformat/package.json" } ] } }, { "authors": [ { "name": "Robert Mustacchi " } ], "group": "", "name": "ctype", "version": "0.5.2", "description": "read and write binary structures and data types", "scope": "optional", "purl": "pkg:npm/ctype@0.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rmustacc/node-ctype" } ], "type": "library", "bom-ref": "pkg:npm/ctype@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ctype/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ctype/package.json" } ], "concludedValue": "node_modules/ctype/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "Michael Ficarra" } ], "group": "", "name": "cscodegen", "version": "0.1.0", "description": "CoffeeScript code generator", "scope": "optional", "purl": "pkg:npm/cscodegen@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/michaelficarra/cscodegen" }, { "type": "vcs", "url": "git://github.com/michaelficarra/cscodegen.git" } ], "type": "library", "bom-ref": "pkg:npm/cscodegen@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cscodegen/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cscodegen/package.json" } ], "concludedValue": "node_modules/cscodegen/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "crypto-browserify", "version": "2.1.0", "description": "partial implementation of crypto for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/crypto-browserify@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/crypto-browserify" }, { "type": "vcs", "url": "git://github.com/dominictarr/crypto-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/crypto-browserify@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/crypto-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypto-browserify/package.json" } ], "concludedValue": "node_modules/crypto-browserify/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "cryptiles", "version": "0.2.2", "description": "General purpose crypto utilities", "scope": "optional", "purl": "pkg:npm/cryptiles@0.2.2", "type": "library", "bom-ref": "pkg:npm/cryptiles@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/cryptiles/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cryptiles/package.json" } ], "concludedValue": "node_modules/cryptiles/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Paul Vorbach (http://vorb.de)" } ], "group": "", "name": "crypt", "version": "0.0.1", "description": "utilities for encryption and hashing", "scope": "optional", "purl": "pkg:npm/crypt@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/pvorb/node-crypt.git" } ], "type": "library", "bom-ref": "pkg:npm/crypt@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/crypt/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/crypt/package.json" } ], "concludedValue": "node_modules/crypt/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.1", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "cookie-jar", "version": "0.3.0", "description": "Cookie Jar. Originally pulled form tobi, maintained as vendor in request, now a standalone module.", "scope": "optional", "purl": "pkg:npm/cookie-jar@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/cookie-jar" } ], "type": "library", "bom-ref": "pkg:npm/cookie-jar@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie-jar/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie-jar/package.json" } ], "concludedValue": "node_modules/cookie-jar/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "console-browserify", "version": "0.1.6", "description": "Emulate console for all the browsers", "scope": "optional", "purl": "pkg:npm/console-browserify@0.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/console-browserify" } ], "type": "library", "bom-ref": "pkg:npm/console-browserify@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/console-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/console-browserify/package.json" } ], "concludedValue": "node_modules/console-browserify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "configstore", "version": "0.1.7", "description": "Easily load and persist config without having to think about where and how", "scope": "optional", "purl": "pkg:npm/configstore@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yeoman/configstore" }, { "type": "vcs", "url": "git://github.com/yeoman/configstore.git" } ], "type": "library", "bom-ref": "pkg:npm/configstore@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/configstore/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/configstore/package.json" } ], "concludedValue": "node_modules/configstore/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash", "version": "2.4.1", "description": "A utility library delivering consistency, customization, performance, & extras.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@2.4.1", "externalReferences": [ { "type": "website", "url": "http://lodash.com/" }, { "type": "vcs", "url": "https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@2.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/configstore/node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/configstore/node_modules/lodash/package.json" } ], "concludedValue": "node_modules/configstore/node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Dervus Grim " } ], "group": "", "name": "js-yaml", "version": "2.1.3", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@2.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" }, { "type": "vcs", "url": "git://github.com/nodeca/js-yaml.git" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/configstore/node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/configstore/node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/configstore/node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Michael Ficarra " } ], "group": "", "name": "commonjs-everywhere", "version": "0.8.1", "description": "CommonJS browser bundler with aliasing, extensibility, and source maps from the minified JS bundle", "scope": "optional", "purl": "pkg:npm/commonjs-everywhere@0.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/michaelficarra/commonjs-everywhere" }, { "type": "vcs", "url": "git://github.com/michaelficarra/commonjs-everywhere.git" } ], "type": "library", "bom-ref": "pkg:npm/commonjs-everywhere@0.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commonjs-everywhere/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commonjs-everywhere/package.json" } ], "concludedValue": "node_modules/commonjs-everywhere/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "0.0.4", "description": "ECMAScript JS AST traversal functions", "scope": "required", "purl": "pkg:npm/estraverse@0.0.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/Constellation/estraverse.html" }, { "type": "vcs", "url": "http://github.com/Constellation/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/commonjs-everywhere/node_modules/estraverse/package.json" }, { "name": "ImportedModules", "value": "estraverse" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commonjs-everywhere/node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/commonjs-everywhere/node_modules/estraverse/package.json" } ], "occurrences": [ { "location": "escodegen.js", "line": 64 } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "0.6.1", "description": "the complete solution for node.js command-line programs", "scope": "optional", "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "combined-stream", "version": "0.0.4", "description": "A stream that emits multiple other streams one after another.", "scope": "optional", "purl": "pkg:npm/combined-stream@0.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-combined-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-combined-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/combined-stream/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combined-stream/package.json" } ], "concludedValue": "node_modules/combined-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Marak Squires" } ], "group": "", "name": "colors", "version": "0.6.2", "description": "get colors in your node.js console like what", "scope": "optional", "purl": "pkg:npm/colors@0.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Marak/colors.js" }, { "type": "vcs", "url": "http://github.com/Marak/colors.js.git" } ], "type": "library", "bom-ref": "pkg:npm/colors@0.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/colors/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/colors/package.json" } ], "concludedValue": "node_modules/colors/package.json" } ] } }, { "authors": [ { "name": "Michael Ficarra" } ], "group": "", "name": "coffee-script-redux", "version": "2.0.0-beta5", "description": "Unfancy JavaScript", "scope": "optional", "licenses": [ { "license": { "name": "3-clause BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/coffee-script-redux@2.0.0-beta5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/michaelficarra/CoffeeScriptRedux" }, { "type": "vcs", "url": "git://github.com/michaelficarra/CoffeeScriptRedux.git" } ], "type": "library", "bom-ref": "pkg:npm/coffee-script-redux@2.0.0-beta5", "properties": [ { "name": "SrcFile", "value": "node_modules/coffee-script-redux/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coffee-script-redux/package.json" } ], "concludedValue": "node_modules/coffee-script-redux/package.json" } ] } }, { "authors": [ { "name": "Jeremy Ashkenas" } ], "group": "", "name": "coffee-script", "version": "1.3.3", "description": "Unfancy JavaScript", "scope": "optional", "purl": "pkg:npm/coffee-script@1.3.3", "externalReferences": [ { "type": "website", "url": "http://coffeescript.org" }, { "type": "vcs", "url": "git://github.com/jashkenas/coffee-script.git" } ], "type": "library", "bom-ref": "pkg:npm/coffee-script@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/coffee-script/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coffee-script/package.json" } ], "concludedValue": "node_modules/coffee-script/package.json" } ] } }, { "authors": [ { "name": "Mariusz Nowak (http://www.medikoo.com/)" } ], "group": "", "name": "cli-color", "version": "0.2.3", "description": "Colors, formatting and other tools for the console", "scope": "optional", "purl": "pkg:npm/cli-color@0.2.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/medikoo/cli-color.git" } ], "type": "library", "bom-ref": "pkg:npm/cli-color@0.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-color/package.json" } ], "concludedValue": "node_modules/cli-color/package.json" } ] }, "tags": [ "tools" ] }, { "authors": [ { "name": "Chris O'Hara " } ], "group": "", "name": "cli", "version": "0.4.5", "description": "A tool for rapidly building command line apps", "scope": "optional", "purl": "pkg:npm/cli@0.4.5", "externalReferences": [ { "type": "vcs", "url": "http://github.com/chriso/cli" }, { "type": "vcs", "url": "http://github.com/chriso/cli.git" } ], "type": "library", "bom-ref": "pkg:npm/cli@0.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/cli/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli/package.json" } ], "concludedValue": "node_modules/cli/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chmodr", "version": "0.1.0", "description": "like `chmod -R`", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chmodr@0.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/chmodr.git" } ], "type": "library", "bom-ref": "pkg:npm/chmodr@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chmodr/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chmodr/package.json" } ], "concludedValue": "node_modules/chmodr/package.json" } ] } }, { "authors": [ { "name": "Paul Vorbach (http://vorb.de)" } ], "group": "", "name": "charenc", "version": "0.0.1", "description": "character encoding utilities", "scope": "optional", "purl": "pkg:npm/charenc@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/pvorb/node-charenc.git" } ], "type": "library", "bom-ref": "pkg:npm/charenc@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/charenc/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/charenc/package.json" } ], "concludedValue": "node_modules/charenc/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "chalk", "version": "0.2.1", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/chalk" }, { "type": "vcs", "url": "git://github.com/sindresorhus/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "chainsaw", "version": "0.1.0", "description": "Build chainable fluent interfaces the easy way... with a freakin' chainsaw!", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chainsaw@0.1.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-chainsaw.git" } ], "type": "library", "bom-ref": "pkg:npm/chainsaw@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/chainsaw/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chainsaw/package.json" } ], "concludedValue": "node_modules/chainsaw/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "chai", "version": "1.7.2", "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chai@1.7.2", "externalReferences": [ { "type": "website", "url": "http://chaijs.com" }, { "type": "vcs", "url": "https://github.com/chaijs/chai" } ], "type": "framework", "bom-ref": "pkg:npm/chai@1.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chai/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chai/package.json" } ], "concludedValue": "node_modules/chai/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "cardinal", "version": "0.4.4", "description": "Syntax highlights JavaScript code with ANSI colors to be printed to the terminal.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cardinal@0.4.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/thlorenz/cardinal.git" } ], "type": "library", "bom-ref": "pkg:npm/cardinal@0.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/cardinal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cardinal/package.json" } ], "concludedValue": "node_modules/cardinal/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "buffers", "version": "0.1.1", "description": "Treat a collection of Buffers as a single contiguous partially mutable Buffer.", "scope": "optional", "purl": "pkg:npm/buffers@0.1.1", "type": "library", "bom-ref": "pkg:npm/buffers@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/buffers/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffers/package.json" } ], "concludedValue": "node_modules/buffers/package.json" } ] } }, { "authors": [ { "name": "Romain Beauxis " } ], "group": "", "name": "buffer-browserify", "version": "0.2.2", "description": "buffer module compatibility for browserify", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/buffer-browserify@0.2.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/toots/buffer-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/buffer-browserify@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer-browserify/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer-browserify/package.json" } ], "concludedValue": "node_modules/buffer-browserify/package.json" } ] } }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower-registry-client", "version": "0.1.6", "description": "Provides easy interaction with the Bower registry.", "scope": "optional", "purl": "pkg:npm/bower-registry-client@0.1.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bower/registry-client.git" } ], "type": "library", "bom-ref": "pkg:npm/bower-registry-client@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-registry-client/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-registry-client/package.json" } ], "concludedValue": "node_modules/bower-registry-client/package.json" } ] } }, { "group": "", "name": "mout", "version": "0.6.0", "description": "Modular Utilities", "scope": "optional", "purl": "pkg:npm/mout@0.6.0", "externalReferences": [ { "type": "website", "url": "http://moutjs.com/" }, { "type": "vcs", "url": "git://github.com/mout/mout.git" } ], "type": "library", "bom-ref": "pkg:npm/mout@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-registry-client/node_modules/mout/package.json" }, { "name": "SrcFile", "value": "node_modules/bower-config/node_modules/mout/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-config/node_modules/mout/package.json" } ], "concludedValue": "node_modules/bower-config/node_modules/mout/package.json" } ] } }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower-config", "version": "0.4.5", "description": "The Bower config reader and writer.", "scope": "optional", "purl": "pkg:npm/bower-config@0.4.5", "externalReferences": [ { "type": "website", "url": "http://bower.io" }, { "type": "vcs", "url": "git://github.com/bower/config.git" } ], "type": "library", "bom-ref": "pkg:npm/bower-config@0.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-registry-client/node_modules/bower-config/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-registry-client/node_modules/bower-config/package.json" } ], "concludedValue": "node_modules/bower-registry-client/node_modules/bower-config/package.json" } ] } }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower-logger", "version": "0.2.2", "description": "The logger used in the various architecture components of Bower.", "scope": "optional", "purl": "pkg:npm/bower-logger@0.2.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bower/logger.git" } ], "type": "library", "bom-ref": "pkg:npm/bower-logger@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-logger/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-logger/package.json" } ], "concludedValue": "node_modules/bower-logger/package.json" } ] } }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower-json", "version": "0.4.0", "description": "Read bower.json files with semantics, normalisation, defaults and validation.", "scope": "optional", "purl": "pkg:npm/bower-json@0.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bower/json.git" } ], "type": "library", "bom-ref": "pkg:npm/bower-json@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-json/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-json/package.json" } ], "concludedValue": "node_modules/bower-json/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower-endpoint-parser", "version": "0.2.1", "description": "Little module that helps with endpoints parsing.", "scope": "optional", "purl": "pkg:npm/bower-endpoint-parser@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bower/endpoint-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/bower-endpoint-parser@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-endpoint-parser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-endpoint-parser/package.json" } ], "concludedValue": "node_modules/bower-endpoint-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower-config", "version": "0.5.0", "description": "The Bower config reader and writer.", "scope": "optional", "purl": "pkg:npm/bower-config@0.5.0", "externalReferences": [ { "type": "website", "url": "http://bower.io" }, { "type": "vcs", "url": "git://github.com/bower/config.git" } ], "type": "library", "bom-ref": "pkg:npm/bower-config@0.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bower-config/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower-config/package.json" } ], "concludedValue": "node_modules/bower-config/package.json" } ] } }, { "authors": [ { "name": "Twitter" } ], "group": "", "name": "bower", "version": "1.2.8", "description": "The browser package manager.", "scope": "required", "purl": "pkg:npm/bower@1.2.8", "externalReferences": [ { "type": "website", "url": "http://bower.io" }, { "type": "vcs", "url": "git://github.com/bower/bower.git" } ], "type": "library", "bom-ref": "pkg:npm/bower@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/bower/package.json" }, { "name": "ImportedModules", "value": "bower" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bower/package.json" } ], "concludedValue": "node_modules/bower/package.json" } ], "occurrences": [ { "location": "tools/release.js", "line": 33 } ] } }, { "authors": [ { "name": "Chris Dickinson " } ], "group": "", "name": "bops", "version": "0.1.1", "description": "buffer operations", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bops@0.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/chrisdickinson/bops.git" } ], "type": "library", "bom-ref": "pkg:npm/bops@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/bops/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bops/package.json" } ], "concludedValue": "node_modules/bops/package.json" } ] } }, { "authors": [ { "name": "Eran Hammer (http://hueniverse.com)" } ], "group": "", "name": "boom", "version": "0.4.2", "description": "HTTP-friendly error objects", "scope": "optional", "purl": "pkg:npm/boom@0.4.2", "type": "library", "bom-ref": "pkg:npm/boom@0.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/boom/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/boom/package.json" } ], "concludedValue": "node_modules/boom/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "block-stream", "version": "0.0.7", "description": "a stream of blocks", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/block-stream@0.0.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/block-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/block-stream@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/block-stream/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/block-stream/package.json" } ], "concludedValue": "node_modules/block-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "binary", "version": "0.3.0", "description": "Unpack multibyte binary values from buffers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/binary@0.3.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-binary.git" } ], "type": "library", "bom-ref": "pkg:npm/binary@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/binary/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/binary/package.json" } ], "concludedValue": "node_modules/binary/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "T. Jameson Little " } ], "group": "", "name": "base64-js", "version": "0.0.2", "description": "Base64 encoding/decoding in pure JS", "scope": "optional", "purl": "pkg:npm/base64-js@0.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/beatgammit/deflate-js.git" } ], "type": "library", "bom-ref": "pkg:npm/base64-js@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/base64-js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/base64-js/package.json" } ], "concludedValue": "node_modules/base64-js/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "aws-sign", "version": "0.3.0", "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", "scope": "optional", "purl": "pkg:npm/aws-sign@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/aws-sign" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws-sign/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws-sign/package.json" } ], "concludedValue": "node_modules/aws-sign/package.json" } ] } }, { "authors": [ { "name": "Caolan McMahon" } ], "group": "", "name": "async", "version": "0.2.9", "description": "Higher-order functions and common patterns for asynchronous code", "scope": "optional", "purl": "pkg:npm/async@0.2.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/caolan/async.git" } ], "type": "library", "bom-ref": "pkg:npm/async@0.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/async/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async/package.json" } ], "concludedValue": "node_modules/async/package.json" } ] } }, { "authors": [ { "name": "Jake Luer (http://qualiancy.com)" } ], "group": "", "name": "assertion-error", "version": "1.0.0", "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assertion-error@1.0.0", "type": "framework", "bom-ref": "pkg:npm/assertion-error@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assertion-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assertion-error/package.json" } ], "concludedValue": "node_modules/assertion-error/package.json" } ] }, "tags": [ "framework", "test", "validation" ] }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "assert-plus", "version": "0.1.2", "description": "Extra assertions on top of node's assert module", "scope": "optional", "purl": "pkg:npm/assert-plus@0.1.2", "type": "library", "bom-ref": "pkg:npm/assert-plus@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-plus/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "asn1", "version": "0.1.11", "description": "Contains parsers and serializers for ASN.1 (currently BER only)", "scope": "optional", "purl": "pkg:npm/asn1@0.1.11", "externalReferences": [ { "type": "vcs", "url": "git://github.com/mcavage/node-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1/package.json" } ], "concludedValue": "node_modules/asn1/package.json" } ] } }, { "group": "", "name": "argparse", "version": "0.1.15", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@0.1.15", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/argparse" }, { "type": "vcs", "url": "git://github.com/nodeca/argparse.git" } ], "type": "library", "bom-ref": "pkg:npm/argparse@0.1.15", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "group": "", "name": "underscore.string", "version": "2.3.3", "description": "String manipulation extensions for Underscore.js javascript library.", "scope": "optional", "purl": "pkg:npm/underscore.string@2.3.3", "externalReferences": [ { "type": "vcs", "url": "http://epeli.github.com/underscore.string/" }, { "type": "vcs", "url": "https://github.com/epeli/underscore.string.git" } ], "type": "library", "bom-ref": "pkg:npm/underscore.string@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/node_modules/underscore.string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/node_modules/underscore.string/package.json" } ], "concludedValue": "node_modules/argparse/node_modules/underscore.string/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "archy", "version": "0.0.2", "description": "render nested hierarchies `npm ls` style with unicode pipes", "scope": "optional", "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/archy@0.0.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-archy.git" } ], "type": "library", "bom-ref": "pkg:npm/archy@0.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/archy/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/archy/package.json" } ], "concludedValue": "node_modules/archy/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "ansicolors", "version": "0.2.1", "description": "Functions that surround a string with ansicolor codes so it prints in color.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansicolors@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/thlorenz/ansicolors.git" } ], "type": "library", "bom-ref": "pkg:npm/ansicolors@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansicolors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansicolors/package.json" } ], "concludedValue": "node_modules/ansicolors/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "0.2.0", "description": "ANSI escape codes for colorizing strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/ansi-styles" }, { "type": "vcs", "url": "git://github.com/sindresorhus/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "abbrev", "version": "1.0.4", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.0.4", "type": "library", "bom-ref": "pkg:npm/abbrev@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } }, { "authors": [ { "name": "Michael Ficarra" } ], "group": "", "name": "StringScanner", "version": "0.0.3", "description": "StringScanner performs lexical scanning operations on a string.", "scope": "optional", "purl": "pkg:npm/StringScanner@0.0.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/michaelficarra/cjs-string-scanner" }, { "type": "vcs", "url": "git://github.com/michaelficarra/cjs-string-scanner.git" } ], "type": "library", "bom-ref": "pkg:npm/StringScanner@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/StringScanner/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/StringScanner/package.json" } ], "concludedValue": "node_modules/StringScanner/package.json" } ] } }, { "authors": [ { "name": "Paul Vorbach (http://vorb.de)" } ], "group": "", "name": "MD5", "version": "1.0.3", "description": "native js function for hashing messages with MD5", "scope": "optional", "purl": "pkg:npm/MD5@1.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/pvorb/node-md5.git" } ], "type": "library", "bom-ref": "pkg:npm/MD5@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/MD5/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/MD5/package.json" } ], "concludedValue": "node_modules/MD5/package.json" } ] } }, { "authors": [ { "name": "David Chambers " } ], "group": "", "name": "Base64", "version": "0.1.4", "description": "Base64 encoding and decoding", "scope": "optional", "purl": "pkg:npm/Base64@0.1.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davidchambers/Base64.js.git" } ], "type": "library", "bom-ref": "pkg:npm/Base64@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/Base64/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/Base64/package.json" } ], "concludedValue": "node_modules/Base64/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/escodegen@1.1.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-21T16:22:45Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'escodegen' with version '1.1.0'." } ] }