{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:b16a4df1-2a67-4ee6-981e-a9db963e612a", "version": 1, "metadata": { "timestamp": "2026-08-24T10:42:27Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "test-custom-ts-function", "group": "", "version": "1.0.0", "description": "", "purl": "pkg:npm/test-custom-ts-function@1.0.0", "bom-ref": "pkg:npm/test-custom-ts-function@1.0.0", "author": "", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@expo\\n@hapi\\n@sideway\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] }, "components": [ { "group": "@expo", "name": "logger", "version": "1.0.21", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "573f8b1c319651fa300302f5d2704aab1acc62f3b8a9d67c84b29ca9461ce665c1b7e8e6bfb44ffbc7dcb0c21e8c910c5a6602da678ee5e78230b28a84422030" } ], "purl": "pkg:npm/%40expo/logger@1.0.21", "type": "library", "bom-ref": "pkg:npm/@expo/logger@1.0.21", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "ImportedModules", "value": "@expo/logger,bunyan,@expo/logger/bunyan,createLogger,@expo/logger/createLogger,PipeMode,@expo/logger/PipeMode,pipeSpawnOutput,@expo/logger/pipeSpawnOutput" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "occurrences": [ { "location": "dist/cli/cli.js", "line": 7 }, { "location": "dist/scripts/runCustomFunction.js", "line": 6 }, { "location": "dist/utils/shell/spawn.js", "line": 7 }, { "location": "src/BuildStepContext.ts", "line": 2 }, { "location": "src/cli/cli.ts", "line": 2 }, { "location": "src/cli/cli.ts", "line": 11 }, { "location": "src/scripts/runCustomFunction.ts", "line": 1 }, { "location": "src/scripts/runCustomFunction.ts", "line": 27 }, { "location": "src/utils/shell/spawn.ts", "line": 1 }, { "location": "src/utils/shell/spawn.ts", "line": 41 } ] } }, { "group": "@expo", "name": "spawn-async", "version": "1.7.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "41d5a2d7af821c1f4960fee099ad7d395560d01164bd4f33363f468d6a2b608f08bfc154c6338271846e0265f8b3f87dd5ee1eec13ecb2473c712ad9621a3d13" } ], "purl": "pkg:npm/%40expo/spawn-async@1.7.2", "type": "library", "bom-ref": "pkg:npm/@expo/spawn-async@1.7.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "ImportedModules", "value": "@expo/spawn-async,SpawnPromise,@expo/spawn-async/SpawnPromise,SpawnResult,@expo/spawn-async/SpawnResult,SpawnOptions,@expo/spawn-async/SpawnOptions" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "occurrences": [ { "location": "dist/utils/shell/spawn.js", "line": 8 }, { "location": "src/scripts/runCustomFunction.ts", "line": 2 }, { "location": "src/utils/shell/spawn.ts", "line": 6 }, { "location": "src/utils/shell/spawn.ts", "line": 39 } ] } }, { "group": "@expo", "name": "steps", "version": "1.0.25", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "301b49ff7f93e6abd7c669ce5657daa4a94a42cc4f5322a8114680ea52dba669bcc827172446e59e640fff66689001bbf085a3b18979134d848bf027ac8c41f6" } ], "purl": "pkg:npm/%40expo/steps@1.0.25", "type": "library", "bom-ref": "pkg:npm/@expo/steps@1.0.25", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@hapi", "name": "hoek", "version": "9.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fdceab7f85099661e50bd6f905a36fcc0705bfb1d9d901da5740f8fc736505dbc59ef42af11238918761c8f0a5ed78fea16bd3590f2e8e1a92e772c88007ba29" } ], "purl": "pkg:npm/%40hapi/hoek@9.3.0", "type": "library", "bom-ref": "pkg:npm/@hapi/hoek@9.3.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@hapi", "name": "topo", "version": "5.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7e84192898a0ece6f404c01805f70993c77bed0b4e7bb5a8e28c7b7dfd65418a0d3406fa8f0718d6771da32d9ef70419cef372ece0d90982642bc93399c02702" } ], "purl": "pkg:npm/%40hapi/topo@5.1.0", "type": "library", "bom-ref": "pkg:npm/@hapi/topo@5.1.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@sideway", "name": "address", "version": "4.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eefc2afab3875568f25f156547be80827be1cbc23dae9ce3a2c4c44af9a135e5ce5dd659075e4597e4c8f71d52887647e49bf6c1319db92c450c86aad26dc353" } ], "purl": "pkg:npm/%40sideway/address@4.1.4", "type": "library", "bom-ref": "pkg:npm/@sideway/address@4.1.4", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@sideway", "name": "formula", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fe9a076492558f1dcbfb3543ea0f4a8077d89dbe38de88bbc0bbbf5caa230ef887cba1ce10e03acf54eb939691d5d19c98f7a724481bdac2b623cd0b792dcc22" } ], "purl": "pkg:npm/%40sideway/formula@3.0.1", "type": "library", "bom-ref": "pkg:npm/@sideway/formula@3.0.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@sideway", "name": "pinpoint", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "44d88ea133e4a6d16d495cd07af63fc96b59c1ffd1c725673f2fce700f4704cdcc9460e704460be41e351f43139f451e73c1e2fb6a94b537c6d9659906631e8d" } ], "purl": "pkg:npm/%40sideway/pinpoint@2.0.0", "type": "library", "bom-ref": "pkg:npm/@sideway/pinpoint@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@types", "name": "bunyan", "version": "1.8.8", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "09b96af98c9d837bbeb068b3da68c78c2e4c3e676363e368e2abc7ac5f815216e5b2649f32fb072db386eb6b4f6e89eca818fab1b5afd4b1dcb287b9270fbf3b" } ], "purl": "pkg:npm/%40types/bunyan@1.8.8", "type": "library", "bom-ref": "pkg:npm/@types/bunyan@1.8.8", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "@types", "name": "node", "version": "20.4.1", "scope": "excluded", "hashes": [ { "alg": "SHA-512", "content": "248cec02f25e03fe6263a63f3b165bbf595471cf1d35213bee56f6827047fbf3c9de5151d4272f8309792569c7024347711b13d136e954eb2230a67517fcb226" } ], "purl": "pkg:npm/%40types/node@20.4.1", "type": "library", "bom-ref": "pkg:npm/@types/node@20.4.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "arg", "version": "5.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d88f214e2ca43dcb9ec9bd0e902e8f1d02036ab3087c33544c25875076e4fac5b59280adfa3ff67fbfea7cf3ca4cebd8cc31f4bc5ddf05e88d6443f23d1d41a" } ], "purl": "pkg:npm/arg@5.0.2", "type": "library", "bom-ref": "pkg:npm/arg@5.0.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" } ], "purl": "pkg:npm/balanced-match@1.0.2", "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "purl": "pkg:npm/brace-expansion@1.1.11", "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "bunyan", "version": "1.8.15", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d2d102592861eb0532b20b9c25c040a187a07f7249a195a26f176a8539bb3873de4f8daa763919dbd40231c2b06e05359221fe6ae4886ac3515cc2d65da7d78a" } ], "purl": "pkg:npm/bunyan@1.8.15", "type": "library", "bom-ref": "pkg:npm/bunyan@1.8.15", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" } ], "purl": "pkg:npm/concat-map@0.0.1", "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "cross-spawn", "version": "7.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8910cf24a50f544343edd1cf3bcae46ce9cfa720f281c0c5b568e9796342832f163f6ad77315cbf13b2445e425e8eac1d86efe509ada82cd6ad7916e75cec6eb" } ], "purl": "pkg:npm/cross-spawn@7.0.3", "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.3", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "dtrace-provider", "version": "0.8.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6fb67b70db473e11fd10984d35b6dea9371707c2c6145661ab53c6804be9787973777e9b85b7535a813f05afd882eaa90529403ca9c0456855961ba708cc1fc6" } ], "purl": "pkg:npm/dtrace-provider@0.8.8", "type": "library", "bom-ref": "pkg:npm/dtrace-provider@0.8.8", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "6.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "30a65e44dc98640555546d6865e2da5a27b5bb0787e349bd019c08c31c8f6d3497e211eb5584b32e0d11a3967947b5ca9085fe09cea80f5aea783267c2c07cfc" } ], "purl": "pkg:npm/glob@6.0.4", "type": "library", "bom-ref": "pkg:npm/glob@6.0.4", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224" } ], "purl": "pkg:npm/inflight@1.0.6", "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "isexe", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23" } ], "purl": "pkg:npm/isexe@2.0.0", "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "joi", "version": "17.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "22d93fafe5780f1d15ddced12c5751875d883a3c929b6fd618f32e6c14fdd9c42f45f61984f3365b485995cb638fbda2112f23b110b0a7b4bf7119960672789f" } ], "purl": "pkg:npm/joi@17.9.2", "type": "library", "bom-ref": "pkg:npm/joi@17.9.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "lodash.get", "version": "4.4.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "cfe530fef2eecba8107bc71f685583ee9d3056ff1f265de66f35e1df7452fb4a16db0bd4aa2457890ebd80b5922e9801e7feac53eafa065411d0c0482da76a4d" } ], "purl": "pkg:npm/lodash.get@4.4.2", "type": "library", "bom-ref": "pkg:npm/lodash.get@4.4.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "ImportedModules", "value": "lodash.get" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "occurrences": [ { "location": "dist/utils/jsepEval.js", "line": 14 }, { "location": "dist/utils/template.js", "line": 18 }, { "location": "src/utils/jsepEval.ts", "line": 9 }, { "location": "src/utils/jsepEval.ts", "line": 165 }, { "location": "src/utils/jsepEval.ts", "line": 169 }, { "location": "src/utils/template.ts", "line": 2 }, { "location": "src/utils/template.ts", "line": 57 } ] } }, { "group": "", "name": "minimatch", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" } ], "purl": "pkg:npm/minimatch@3.1.2", "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "minimist", "version": "1.2.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308" } ], "purl": "pkg:npm/minimist@1.2.8", "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027" } ], "purl": "pkg:npm/mkdirp@0.5.6", "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "moment", "version": "2.29.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e4b0bd48ec6349cd8717abced82cae4c3362bc4768cf622fc892468fa5fc0c9d1e1727eccc4d1088477e897981bd43f7587c528c51ffbc8b00d04374d1c82bf3" } ], "purl": "pkg:npm/moment@2.29.4", "type": "library", "bom-ref": "pkg:npm/moment@2.29.4", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "mv", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6adfd99dd4b2df110627c8b4ca000b87caeef6acbb8165b572691aa81376f4998c948bccfff3043bdcb5b24fdabf1bb09cf71f8647a390bb2e3f11fcd41ae44a" } ], "purl": "pkg:npm/mv@2.1.1", "type": "library", "bom-ref": "pkg:npm/mv@2.1.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "nan", "version": "2.17.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d994e0b65d2726c3b42900a3129c5c22be43f98bfdd299538ad66df4905f42f5490d2e6c78c97714ebec877fbd0a86165dfff597939a673cc5ea70e6e1c6a069" } ], "purl": "pkg:npm/nan@2.17.0", "type": "library", "bom-ref": "pkg:npm/nan@2.17.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "ncp", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cc874652b3d11535042d4bebdc699ceca6764b0fe1d4f89533401ffe81c1eb38275758a4a927d193e4ceb9f8bbf5a1d8096dcd88e5e6af504fe6759bce88cb68" } ], "purl": "pkg:npm/ncp@2.0.0", "type": "library", "bom-ref": "pkg:npm/ncp@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb" } ], "purl": "pkg:npm/once@1.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "path-key", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9" } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "rimraf", "version": "2.4.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "279c67c53caa6a2c34e898cc7edabb2fda2e038e3c770fc4edd2a08643fd5a928dbb098044d360f8693cfeee6bc9bf4dfd8a36fb3dcc0b0baa14affea8f38f7d" } ], "purl": "pkg:npm/rimraf@2.4.5", "type": "library", "bom-ref": "pkg:npm/rimraf@2.4.5", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "safe-json-stringify", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "807f1e8769d9b9d3d03ba4f2b4ebdbc67ba16013af0c104b5b9dadcf9aba5f9f2525c77fb649aa151fb967d69d4bc689b544525d64e15b2ff126d2708b112bbe" } ], "purl": "pkg:npm/safe-json-stringify@1.2.0", "type": "library", "bom-ref": "pkg:npm/safe-json-stringify@1.2.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "shebang-command", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c" } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "shebang-regex", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4" } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "this-file", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "21d307d5b5245497498ccee8f2ff3732fe10bd53dd900a1fbabdb449397605bc3db8cbae4bf6d3fcf65446411d66ccbd5c2ff56575a0675c082fd9efa2e19a12" } ], "purl": "pkg:npm/this-file@2.0.3", "type": "library", "bom-ref": "pkg:npm/this-file@2.0.3", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "typescript", "version": "5.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cda582a33459e832c4580585ad50f3d47e85557cd449f4f2e4550c5ac42553c626e493fd78ee31913211385090be141feb5cfa3bf1baba0c374a0027bef9be1c" } ], "purl": "pkg:npm/typescript@5.1.6", "type": "library", "bom-ref": "pkg:npm/typescript@5.1.6", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "uuid", "version": "9.0.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3177124deadf3dae2eab2cd2b5b4684e0b795c87b7c79fb8dbeab5b03bb2dd1e4c0e4eba51174b30e65ee5a3d7fd241dfa4b98021d0574ffe93b6f08910c937a" } ], "purl": "pkg:npm/uuid@9.0.0", "type": "library", "bom-ref": "pkg:npm/uuid@9.0.0", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "ImportedModules", "value": "uuid,uuid/v4" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "occurrences": [ { "location": "dist/BuildStepContext.js", "line": 10 }, { "location": "dist/BuildTemporaryFiles.js", "line": 12 }, { "location": "src/BuildStepContext.ts", "line": 6 }, { "location": "src/BuildStepContext.ts", "line": 64 }, { "location": "src/BuildTemporaryFiles.ts", "line": 3 }, { "location": "src/BuildTemporaryFiles.ts", "line": 14 } ] } }, { "group": "", "name": "which", "version": "2.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c" } ], "purl": "pkg:npm/which@2.0.2", "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71" } ], "purl": "pkg:npm/wrappy@1.0.2", "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ] } }, { "group": "", "name": "yaml", "version": "2.3.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "d9e1d67e36a85e04c10b68cd3352d179feb65506b4ba6b6f4620d293a1d2cd6ed1bd2e58b6469b26bc182cb10a58173c6b95363d3482b3e7498d44c97651ec59" } ], "purl": "pkg:npm/yaml@2.3.1", "type": "library", "bom-ref": "pkg:npm/yaml@2.3.1", "properties": [ { "name": "SrcFile", "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" }, { "name": "ExportedModules", "value": "yaml" }, { "name": "ImportedModules", "value": "yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "concludedValue": "src/__tests__/fixtures/my-custom-ts-function/yarn.lock" } ], "occurrences": [ { "location": "dist/errors.js", "line": 18 }, { "location": "src/errors.ts", "line": 20 } ] } } ], "dependencies": [ { "ref": "pkg:npm/@expo/logger@1.0.21", "dependsOn": [ "pkg:npm/@types/bunyan@1.8.8", "pkg:npm/bunyan@1.8.15" ] }, { "ref": "pkg:npm/@expo/spawn-async@1.7.2", "dependsOn": [ "pkg:npm/cross-spawn@7.0.3" ] }, { "ref": "pkg:npm/@expo/steps@1.0.25", "dependsOn": [ "pkg:npm/@expo/logger@1.0.21", "pkg:npm/@expo/spawn-async@1.7.2", "pkg:npm/arg@5.0.2", "pkg:npm/joi@17.9.2", "pkg:npm/lodash.get@4.4.2", "pkg:npm/this-file@2.0.3", "pkg:npm/uuid@9.0.0", "pkg:npm/yaml@2.3.1" ] }, { "ref": "pkg:npm/@hapi/hoek@9.3.0", "dependsOn": [] }, { "ref": "pkg:npm/@hapi/topo@5.1.0", "dependsOn": [ "pkg:npm/@hapi/hoek@9.3.0" ] }, { "ref": "pkg:npm/@sideway/address@4.1.4", "dependsOn": [ "pkg:npm/@hapi/hoek@9.3.0" ] }, { "ref": "pkg:npm/@sideway/formula@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/@sideway/pinpoint@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@types/bunyan@1.8.8", "dependsOn": [ "pkg:npm/@types/node@20.4.1" ] }, { "ref": "pkg:npm/@types/node@20.4.1", "dependsOn": [] }, { "ref": "pkg:npm/arg@5.0.2", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.2", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/bunyan@1.8.15", "dependsOn": [ "pkg:npm/dtrace-provider@0.8.8", "pkg:npm/moment@2.29.4", "pkg:npm/mv@2.1.1", "pkg:npm/safe-json-stringify@1.2.0" ] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/cross-spawn@7.0.3", "dependsOn": [ "pkg:npm/path-key@3.1.1", "pkg:npm/shebang-command@2.0.0", "pkg:npm/which@2.0.2" ] }, { "ref": "pkg:npm/dtrace-provider@0.8.8", "dependsOn": [ "pkg:npm/nan@2.17.0" ] }, { "ref": "pkg:npm/glob@6.0.4", "dependsOn": [ "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.1.2", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/isexe@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/joi@17.9.2", "dependsOn": [ "pkg:npm/@hapi/hoek@9.3.0", "pkg:npm/@hapi/topo@5.1.0", "pkg:npm/@sideway/address@4.1.4", "pkg:npm/@sideway/formula@3.0.1", "pkg:npm/@sideway/pinpoint@2.0.0" ] }, { "ref": "pkg:npm/lodash.get@4.4.2", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@3.1.2", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/minimist@1.2.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.6", "dependsOn": [ "pkg:npm/minimist@1.2.8" ] }, { "ref": "pkg:npm/moment@2.29.4", "dependsOn": [] }, { "ref": "pkg:npm/mv@2.1.1", "dependsOn": [ "pkg:npm/mkdirp@0.5.6", "pkg:npm/ncp@2.0.0", "pkg:npm/rimraf@2.4.5" ] }, { "ref": "pkg:npm/nan@2.17.0", "dependsOn": [] }, { "ref": "pkg:npm/ncp@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/path-key@3.1.1", "dependsOn": [] }, { "ref": "pkg:npm/rimraf@2.4.5", "dependsOn": [ "pkg:npm/glob@6.0.4" ] }, { "ref": "pkg:npm/safe-json-stringify@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/shebang-command@2.0.0", "dependsOn": [ "pkg:npm/shebang-regex@3.0.0" ] }, { "ref": "pkg:npm/shebang-regex@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/this-file@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/typescript@5.1.6", "dependsOn": [] }, { "ref": "pkg:npm/uuid@9.0.0", "dependsOn": [] }, { "ref": "pkg:npm/which@2.0.2", "dependsOn": [ "pkg:npm/isexe@2.0.0" ] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/yaml@2.3.1", "dependsOn": [] }, { "ref": "pkg:npm/test-custom-ts-function@1.0.0", "dependsOn": [ "pkg:npm/@expo/logger@1.0.21", "pkg:npm/@expo/spawn-async@1.7.2", "pkg:npm/@expo/steps@1.0.25", "pkg:npm/@hapi/hoek@9.3.0", "pkg:npm/@hapi/topo@5.1.0", "pkg:npm/@sideway/address@4.1.4", "pkg:npm/@sideway/formula@3.0.1", "pkg:npm/@sideway/pinpoint@2.0.0", "pkg:npm/@types/bunyan@1.8.8", "pkg:npm/@types/node@20.4.1", "pkg:npm/arg@5.0.2", "pkg:npm/balanced-match@1.0.2", "pkg:npm/brace-expansion@1.1.11", "pkg:npm/bunyan@1.8.15", "pkg:npm/concat-map@0.0.1", "pkg:npm/cross-spawn@7.0.3", "pkg:npm/dtrace-provider@0.8.8", "pkg:npm/glob@6.0.4", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/isexe@2.0.0", "pkg:npm/joi@17.9.2", "pkg:npm/lodash.get@4.4.2", "pkg:npm/minimatch@3.1.2", "pkg:npm/minimist@1.2.8", "pkg:npm/mkdirp@0.5.6", "pkg:npm/moment@2.29.4", "pkg:npm/mv@2.1.1", "pkg:npm/nan@2.17.0", "pkg:npm/ncp@2.0.0", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1", "pkg:npm/path-key@3.1.1", "pkg:npm/rimraf@2.4.5", "pkg:npm/safe-json-stringify@1.2.0", "pkg:npm/shebang-command@2.0.0", "pkg:npm/shebang-regex@3.0.0", "pkg:npm/this-file@2.0.3", "pkg:npm/typescript@5.1.6", "pkg:npm/uuid@9.0.0", "pkg:npm/which@2.0.2", "pkg:npm/wrappy@1.0.2", "pkg:npm/yaml@2.3.1" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/test-custom-ts-function@1.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-24T10:42:27Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'test-custom-ts-function' with version '1.0.0'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: src/__tests__/fixtures/my-custom-ts-function/yarn.lock." } ] }