{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2f3c2907-b089-4ad9-aebe-01dd24f6a418", "version": 1, "metadata": { "timestamp": "2026-07-25T08:30:36Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "file-exists", "group": "", "version": "5.0.1", "description": "Check if filepath exists and is a file", "purl": "pkg:npm/file-exists@5.0.1", "bom-ref": "pkg:npm/file-exists@5.0.1", "author": "Scott Corgan", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/scottcorgan/file-exists" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@tap-format" }, { "name": "cdx:bom:componentSrcFiles", "value": "yarn.lock" } ] }, "components": [ { "group": "@tap-format", "name": "exit", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b58736bc55d30802c012c5adfca51b47040310cd" } ], "purl": "pkg:npm/%40tap-format/exit@0.2.0", "type": "library", "bom-ref": "pkg:npm/@tap-format/exit@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@tap-format", "name": "failures", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "bb6f5edc3bc3c57c62885bc7c214cc7abdfc2a07" } ], "purl": "pkg:npm/%40tap-format/failures@0.2.0", "type": "library", "bom-ref": "pkg:npm/@tap-format/failures@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@tap-format", "name": "parser", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "bdc1d95e694781157593283bb3c3fec132a3115d" } ], "purl": "pkg:npm/%40tap-format/parser@0.2.0", "type": "library", "bom-ref": "pkg:npm/@tap-format/parser@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "parse" ] }, { "group": "@tap-format", "name": "results", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "192d64ac41f146fa2722db1c0a22ed80478f54fd" } ], "purl": "pkg:npm/%40tap-format/results@0.2.0", "type": "library", "bom-ref": "pkg:npm/@tap-format/results@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@tap-format", "name": "spec", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "93f7d2f0dcefe526b4776800b9bd7f80db5aaec7" } ], "purl": "pkg:npm/%40tap-format/spec@0.2.0", "type": "library", "bom-ref": "pkg:npm/@tap-format/spec@0.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ansi-regex", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df" } ], "purl": "pkg:npm/ansi-regex@2.1.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ansi-styles", "version": "2.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b432dd3358b634cf75e1e4664368240533c1ddbe" } ], "purl": "pkg:npm/ansi-styles@2.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@2.2.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "argparse", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86" } ], "purl": "pkg:npm/argparse@1.0.9", "type": "library", "bom-ref": "pkg:npm/argparse@1.0.9", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "async", "version": "2.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "61a29abb6fcc026fea77e56d1c6ec53a795951f4" } ], "purl": "pkg:npm/async@2.6.0", "type": "library", "bom-ref": "pkg:npm/async@2.6.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "purl": "pkg:npm/balanced-match@1.0.0", "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.8", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292" } ], "purl": "pkg:npm/brace-expansion@1.1.8", "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "chalk", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98" } ], "purl": "pkg:npm/chalk@1.1.3", "type": "library", "bom-ref": "pkg:npm/chalk@1.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "purl": "pkg:npm/concat-map@0.0.1", "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "purl": "pkg:npm/core-util-is@1.0.2", "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "deep-equal", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5" } ], "purl": "pkg:npm/deep-equal@1.0.1", "type": "library", "bom-ref": "pkg:npm/deep-equal@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "define-properties", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "83a73f2fea569898fb737193c8f873caf6d45c94" } ], "purl": "pkg:npm/define-properties@1.1.2", "type": "library", "bom-ref": "pkg:npm/define-properties@1.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "defined", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c98d9bcef75674188e110969151199e39b1fa693" } ], "purl": "pkg:npm/defined@1.0.0", "type": "library", "bom-ref": "pkg:npm/defined@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "diff", "version": "2.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "60eafd0d28ee906e4e8ff0a52c1229521033bf99" } ], "purl": "pkg:npm/diff@2.2.3", "type": "library", "bom-ref": "pkg:npm/diff@2.2.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "duplexer", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1" } ], "purl": "pkg:npm/duplexer@0.1.1", "type": "library", "bom-ref": "pkg:npm/duplexer@0.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "es-abstract", "version": "1.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1ecb36c197842a00d8ee4c2dfd8646bb97d60864" } ], "purl": "pkg:npm/es-abstract@1.10.0", "type": "library", "bom-ref": "pkg:npm/es-abstract@1.10.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "es-to-primitive", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "45355248a88979034b6792e19bb81f2b7975dd0d" } ], "purl": "pkg:npm/es-to-primitive@1.1.1", "type": "library", "bom-ref": "pkg:npm/es-to-primitive@1.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "esprima", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4499eddcd1110e0b218bacf2fa7f7f59f55ca804" } ], "purl": "pkg:npm/esprima@4.0.0", "type": "library", "bom-ref": "pkg:npm/esprima@4.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "figures", "version": "1.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "cbe1e3affcf1cd44b80cadfed28dc793a9701d2e" } ], "purl": "pkg:npm/figures@1.7.0", "type": "library", "bom-ref": "pkg:npm/figures@1.7.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "for-each", "version": "0.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2c40450b9348e97f281322593ba96704b9abd4d4" } ], "purl": "pkg:npm/for-each@0.3.2", "type": "library", "bom-ref": "pkg:npm/for-each@0.3.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "foreach", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0bee005018aeb260d0a3af3ae658dd0136ec1b99" } ], "purl": "pkg:npm/foreach@2.0.5", "type": "library", "bom-ref": "pkg:npm/foreach@2.0.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "purl": "pkg:npm/fs.realpath@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "function-bind", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "a56899d3ea3c9bab874bb9773b7c5ede92f4895d" } ], "purl": "pkg:npm/function-bind@1.1.1", "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "7.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c19c9df9a028702d678612384a6552404c636d15" } ], "purl": "pkg:npm/glob@7.1.2", "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "has-ansi", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91" } ], "purl": "pkg:npm/has-ansi@2.0.0", "type": "library", "bom-ref": "pkg:npm/has-ansi@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "has", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "8461733f538b0837c9361e39a9ab9e9704dc2f28" } ], "purl": "pkg:npm/has@1.0.1", "type": "library", "bom-ref": "pkg:npm/has@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "hirestime", "version": "1.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2d5271ea84356cec3f25da8c56a9402f8fc0a700" } ], "purl": "pkg:npm/hirestime@1.0.7", "type": "library", "bom-ref": "pkg:npm/hirestime@1.0.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "purl": "pkg:npm/inflight@1.0.6", "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "purl": "pkg:npm/inherits@2.0.3", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-callable", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "86eb75392805ddc33af71c92a0eedf74ee7604b2" } ], "purl": "pkg:npm/is-callable@1.1.3", "type": "library", "bom-ref": "pkg:npm/is-callable@1.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-date-object", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16" } ], "purl": "pkg:npm/is-date-object@1.0.1", "type": "library", "bom-ref": "pkg:npm/is-date-object@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-finite", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa" } ], "purl": "pkg:npm/is-finite@1.0.2", "type": "library", "bom-ref": "pkg:npm/is-finite@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-function", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "12cfb98b65b57dd3d193a3121f5f6e2f437602b5" } ], "purl": "pkg:npm/is-function@1.0.1", "type": "library", "bom-ref": "pkg:npm/is-function@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-regex", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5517489b547091b0930e095654ced25ee97e9491" } ], "purl": "pkg:npm/is-regex@1.0.4", "type": "library", "bom-ref": "pkg:npm/is-regex@1.0.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is-symbol", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3cc59f00025194b6ab2e38dbae6689256b660572" } ], "purl": "pkg:npm/is-symbol@1.0.1", "type": "library", "bom-ref": "pkg:npm/is-symbol@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "is", "version": "0.2.7", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "3b34a2c48f359972f35042849193ae7264b63562" } ], "purl": "pkg:npm/is@0.2.7", "type": "library", "bom-ref": "pkg:npm/is@0.2.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "isarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "bb935d48582cba168c06834957a54a3e07124f11" } ], "purl": "pkg:npm/isarray@1.0.0", "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "js-yaml", "version": "3.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2e78441646bd4682e963f22b6e92823c309c62dc" } ], "purl": "pkg:npm/js-yaml@3.10.0", "type": "library", "bom-ref": "pkg:npm/js-yaml@3.10.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash", "version": "4.17.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae" } ], "purl": "pkg:npm/lodash@4.17.4", "type": "library", "bom-ref": "pkg:npm/lodash@4.17.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "5166e286457f03306064be5497e8dbb0c3d32083" } ], "purl": "pkg:npm/minimatch@3.0.4", "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "purl": "pkg:npm/minimist@0.0.8", "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimist", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "a35008b20f41383eec1fb914f4cd5df79a264284" } ], "purl": "pkg:npm/minimist@1.2.0", "type": "library", "bom-ref": "pkg:npm/minimist@1.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "purl": "pkg:npm/mkdirp@0.5.1", "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "node.extend", "version": "1.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "bab04379f7383f4587990c9df07b6a7f65db772b" } ], "purl": "pkg:npm/node.extend@1.0.8", "type": "library", "bom-ref": "pkg:npm/node.extend@1.0.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "node.flow", "version": "1.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "e1c44a82aeca8d78b458a77fb3dc642f2eba2649" } ], "purl": "pkg:npm/node.flow@1.2.3", "type": "library", "bom-ref": "pkg:npm/node.flow@1.2.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "number-is-nan", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "097b602b53422a522c1afb8790318336941a011d" } ], "purl": "pkg:npm/number-is-nan@1.0.1", "type": "library", "bom-ref": "pkg:npm/number-is-nan@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "object-assign", "version": "4.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "2109adc7965887cfc05cbbd442cac8bfbb360863" } ], "purl": "pkg:npm/object-assign@4.1.1", "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "object-inspect", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c82115e4fcc888aea14d64c22e4f17f6a70d5e5a" } ], "purl": "pkg:npm/object-inspect@1.2.2", "type": "library", "bom-ref": "pkg:npm/object-inspect@1.2.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "object-keys", "version": "1.0.11", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c54601778ad560f1142ce0e01bcca8b56d13426d" } ], "purl": "pkg:npm/object-keys@1.0.11", "type": "library", "bom-ref": "pkg:npm/object-keys@1.0.11", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "object-keys", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "28a6aae7428dd2c3a92f3d95f21335dd204e0336" } ], "purl": "pkg:npm/object-keys@0.4.0", "type": "library", "bom-ref": "pkg:npm/object-keys@0.4.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "purl": "pkg:npm/once@1.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "parse-ms", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "56346d4749d78f23430ca0c713850aef91aa361d" } ], "purl": "pkg:npm/parse-ms@1.0.1", "type": "library", "bom-ref": "pkg:npm/parse-ms@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "plur", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "db85c6814f5e5e5a3b49efc28d604fec62975156" } ], "purl": "pkg:npm/plur@1.0.0", "type": "library", "bom-ref": "pkg:npm/plur@1.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "pretty-ms", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4257c256df3fb0b451d6affaab021884126981dc" } ], "purl": "pkg:npm/pretty-ms@2.1.0", "type": "library", "bom-ref": "pkg:npm/pretty-ms@2.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "process-nextick-args", "version": "1.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3" } ], "purl": "pkg:npm/process-nextick-args@1.0.7", "type": "library", "bom-ref": "pkg:npm/process-nextick-args@1.0.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ramda", "version": "0.18.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "c6e3c5d4b9ab1f7906727fdeeb039152a85d4db3" } ], "purl": "pkg:npm/ramda@0.18.0", "type": "library", "bom-ref": "pkg:npm/ramda@0.18.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "368f2512d79f9d46fdfc71349ae7878bbc1eb95c" } ], "purl": "pkg:npm/readable-stream@2.3.3", "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "resolve", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" } ], "purl": "pkg:npm/resolve@1.1.7", "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "resumer", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "f1e8f461e4064ba39e82af3cdc2a8c893d076759" } ], "purl": "pkg:npm/resumer@0.0.0", "type": "library", "bom-ref": "pkg:npm/resumer@0.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rmdir", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "4fe0357cb06168c258e73e968093dc4e8a0f3253" } ], "purl": "pkg:npm/rmdir@1.2.0", "type": "library", "bom-ref": "pkg:npm/rmdir@1.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rx-node", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "151240725a79e857360ab06cc626799965e094de" } ], "purl": "pkg:npm/rx-node@1.0.2", "type": "library", "bom-ref": "pkg:npm/rx-node@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rx", "version": "4.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "a5f13ff79ef3b740fe30aa803fb09f98805d4782" } ], "purl": "pkg:npm/rx@4.1.0", "type": "library", "bom-ref": "pkg:npm/rx@4.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "safe-buffer", "version": "5.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "893312af69b2123def71f57889001671eeb2c853" } ], "purl": "pkg:npm/safe-buffer@5.1.1", "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "split", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "605bd9be303aa59fb35f9229fbea0ddec9ea07d9" } ], "purl": "pkg:npm/split@1.0.1", "type": "library", "bom-ref": "pkg:npm/split@1.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "sprintf-js", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "04e6926f662895354f3dd015203633b857297e2c" } ], "purl": "pkg:npm/sprintf-js@1.0.3", "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "string.prototype.trim", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "d04de2c89e137f4d7d206f086b5ed2fae6be8cea" } ], "purl": "pkg:npm/string.prototype.trim@1.1.2", "type": "library", "bom-ref": "pkg:npm/string.prototype.trim@1.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "string_decoder", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0fc67d7c141825de94282dd536bec6b9bce860ab" } ], "purl": "pkg:npm/string_decoder@1.0.3", "type": "library", "bom-ref": "pkg:npm/string_decoder@1.0.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "strip-ansi", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf" } ], "purl": "pkg:npm/strip-ansi@3.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "supports-color", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "535d045ce6b6363fa40117084629995e9df324c7" } ], "purl": "pkg:npm/supports-color@2.0.0", "type": "library", "bom-ref": "pkg:npm/supports-color@2.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "tape", "version": "4.6.3", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "637e77581e9ab2ce17577e9bd4ce4f575806d8b6" } ], "purl": "pkg:npm/tape@4.6.3", "type": "library", "bom-ref": "pkg:npm/tape@4.6.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "through", "version": "2.3.8", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5" } ], "purl": "pkg:npm/through@2.3.8", "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "util-deprecate", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf" } ], "purl": "pkg:npm/util-deprecate@1.0.2", "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-256", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "purl": "pkg:npm/wrappy@1.0.2", "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@tap-format/exit@0.2.0", "dependsOn": [ "pkg:npm/ramda@0.18.0", "pkg:npm/rx@4.1.0" ] }, { "ref": "pkg:npm/@tap-format/failures@0.2.0", "dependsOn": [ "pkg:npm/chalk@1.1.3", "pkg:npm/diff@2.2.3", "pkg:npm/figures@1.7.0", "pkg:npm/ramda@0.18.0", "pkg:npm/rx@4.1.0" ] }, { "ref": "pkg:npm/@tap-format/parser@0.2.0", "dependsOn": [ "pkg:npm/duplexer@0.1.1", "pkg:npm/js-yaml@3.10.0", "pkg:npm/ramda@0.18.0", "pkg:npm/readable-stream@2.3.3", "pkg:npm/rx-node@1.0.2", "pkg:npm/rx@4.1.0", "pkg:npm/split@1.0.1" ] }, { "ref": "pkg:npm/@tap-format/results@0.2.0", "dependsOn": [ "pkg:npm/chalk@1.1.3", "pkg:npm/hirestime@1.0.7", "pkg:npm/pretty-ms@2.1.0", "pkg:npm/rx@4.1.0" ] }, { "ref": "pkg:npm/@tap-format/spec@0.2.0", "dependsOn": [ "pkg:npm/@tap-format/exit@0.2.0", "pkg:npm/@tap-format/failures@0.2.0", "pkg:npm/@tap-format/parser@0.2.0", "pkg:npm/@tap-format/results@0.2.0", "pkg:npm/chalk@1.1.3", "pkg:npm/figures@1.7.0", "pkg:npm/rx@4.1.0" ] }, { "ref": "pkg:npm/ansi-regex@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/ansi-styles@2.2.1", "dependsOn": [] }, { "ref": "pkg:npm/argparse@1.0.9", "dependsOn": [ "pkg:npm/sprintf-js@1.0.3" ] }, { "ref": "pkg:npm/async@2.6.0", "dependsOn": [ "pkg:npm/lodash@4.17.4" ] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.8", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/chalk@1.1.3", "dependsOn": [ "pkg:npm/ansi-styles@2.2.1", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/has-ansi@2.0.0", "pkg:npm/strip-ansi@3.0.1", "pkg:npm/supports-color@2.0.0" ] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/deep-equal@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/define-properties@1.1.2", "dependsOn": [ "pkg:npm/foreach@2.0.5", "pkg:npm/object-keys@1.0.11" ] }, { "ref": "pkg:npm/defined@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/diff@2.2.3", "dependsOn": [] }, { "ref": "pkg:npm/duplexer@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/es-abstract@1.10.0", "dependsOn": [ "pkg:npm/es-to-primitive@1.1.1", "pkg:npm/function-bind@1.1.1", "pkg:npm/has@1.0.1", "pkg:npm/is-callable@1.1.3", "pkg:npm/is-regex@1.0.4" ] }, { "ref": "pkg:npm/es-to-primitive@1.1.1", "dependsOn": [ "pkg:npm/is-callable@1.1.3", "pkg:npm/is-date-object@1.0.1", "pkg:npm/is-symbol@1.0.1" ] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/esprima@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/figures@1.7.0", "dependsOn": [ "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/object-assign@4.1.1" ] }, { "ref": "pkg:npm/for-each@0.3.2", "dependsOn": [ "pkg:npm/is-function@1.0.1" ] }, { "ref": "pkg:npm/foreach@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/function-bind@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.2", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/has-ansi@2.0.0", "dependsOn": [ "pkg:npm/ansi-regex@2.1.1" ] }, { "ref": "pkg:npm/has@1.0.1", "dependsOn": [ "pkg:npm/function-bind@1.1.1" ] }, { "ref": "pkg:npm/hirestime@1.0.7", "dependsOn": [] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/is-callable@1.1.3", "dependsOn": [] }, { "ref": "pkg:npm/is-date-object@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/is-finite@1.0.2", "dependsOn": [ "pkg:npm/number-is-nan@1.0.1" ] }, { "ref": "pkg:npm/is-function@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/is-regex@1.0.4", "dependsOn": [ "pkg:npm/has@1.0.1" ] }, { "ref": "pkg:npm/is-symbol@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/is@0.2.7", "dependsOn": [] }, { "ref": "pkg:npm/isarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/js-yaml@3.10.0", "dependsOn": [ "pkg:npm/argparse@1.0.9", "pkg:npm/esprima@4.0.0" ] }, { "ref": "pkg:npm/lodash@4.17.4", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.8" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/minimist@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/node.extend@1.0.8", "dependsOn": [ "pkg:npm/is@0.2.7", "pkg:npm/object-keys@0.4.0" ] }, { "ref": "pkg:npm/node.flow@1.2.3", "dependsOn": [ "pkg:npm/node.extend@1.0.8" ] }, { "ref": "pkg:npm/number-is-nan@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/object-assign@4.1.1", "dependsOn": [] }, { "ref": "pkg:npm/object-inspect@1.2.2", "dependsOn": [] }, { "ref": "pkg:npm/object-keys@1.0.11", "dependsOn": [] }, { "ref": "pkg:npm/object-keys@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/parse-ms@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/plur@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/pretty-ms@2.1.0", "dependsOn": [ "pkg:npm/is-finite@1.0.2", "pkg:npm/parse-ms@1.0.1", "pkg:npm/plur@1.0.0" ] }, { "ref": "pkg:npm/process-nextick-args@1.0.7", "dependsOn": [] }, { "ref": "pkg:npm/ramda@0.18.0", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@2.3.3", "dependsOn": [ "pkg:npm/core-util-is@1.0.2", "pkg:npm/inherits@2.0.3", "pkg:npm/isarray@1.0.0", "pkg:npm/process-nextick-args@1.0.7", "pkg:npm/safe-buffer@5.1.1", "pkg:npm/string_decoder@1.0.3", "pkg:npm/util-deprecate@1.0.2" ] }, { "ref": "pkg:npm/resolve@1.1.7", "dependsOn": [] }, { "ref": "pkg:npm/resumer@0.0.0", "dependsOn": [ "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/rmdir@1.2.0", "dependsOn": [ "pkg:npm/node.flow@1.2.3" ] }, { "ref": "pkg:npm/rx-node@1.0.2", "dependsOn": [ "pkg:npm/rx@4.1.0" ] }, { "ref": "pkg:npm/rx@4.1.0", "dependsOn": [] }, { "ref": "pkg:npm/safe-buffer@5.1.1", "dependsOn": [] }, { "ref": "pkg:npm/split@1.0.1", "dependsOn": [ "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/sprintf-js@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/string.prototype.trim@1.1.2", "dependsOn": [ "pkg:npm/define-properties@1.1.2", "pkg:npm/es-abstract@1.10.0", "pkg:npm/function-bind@1.1.1" ] }, { "ref": "pkg:npm/string_decoder@1.0.3", "dependsOn": [ "pkg:npm/safe-buffer@5.1.1" ] }, { "ref": "pkg:npm/strip-ansi@3.0.1", "dependsOn": [ "pkg:npm/ansi-regex@2.1.1" ] }, { "ref": "pkg:npm/supports-color@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/tape@4.6.3", "dependsOn": [ "pkg:npm/deep-equal@1.0.1", "pkg:npm/defined@1.0.0", "pkg:npm/for-each@0.3.2", "pkg:npm/function-bind@1.1.1", "pkg:npm/glob@7.1.2", "pkg:npm/has@1.0.1", "pkg:npm/inherits@2.0.3", "pkg:npm/minimist@1.2.0", "pkg:npm/object-inspect@1.2.2", "pkg:npm/resolve@1.1.7", "pkg:npm/resumer@0.0.0", "pkg:npm/string.prototype.trim@1.1.2", "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/through@2.3.8", "dependsOn": [] }, { "ref": "pkg:npm/util-deprecate@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/file-exists@5.0.1", "dependsOn": [ "pkg:npm/@tap-format/exit@0.2.0", "pkg:npm/@tap-format/failures@0.2.0", "pkg:npm/@tap-format/parser@0.2.0", "pkg:npm/@tap-format/results@0.2.0", "pkg:npm/@tap-format/spec@0.2.0", "pkg:npm/ansi-regex@2.1.1", "pkg:npm/ansi-styles@2.2.1", "pkg:npm/argparse@1.0.9", "pkg:npm/async@2.6.0", "pkg:npm/balanced-match@1.0.0", "pkg:npm/brace-expansion@1.1.8", "pkg:npm/chalk@1.1.3", "pkg:npm/concat-map@0.0.1", "pkg:npm/core-util-is@1.0.2", "pkg:npm/deep-equal@1.0.1", "pkg:npm/define-properties@1.1.2", "pkg:npm/defined@1.0.0", "pkg:npm/diff@2.2.3", "pkg:npm/duplexer@0.1.1", "pkg:npm/es-abstract@1.10.0", "pkg:npm/es-to-primitive@1.1.1", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/esprima@4.0.0", "pkg:npm/figures@1.7.0", "pkg:npm/for-each@0.3.2", "pkg:npm/foreach@2.0.5", "pkg:npm/fs.realpath@1.0.0", "pkg:npm/function-bind@1.1.1", "pkg:npm/glob@7.1.2", "pkg:npm/has-ansi@2.0.0", "pkg:npm/has@1.0.1", "pkg:npm/hirestime@1.0.7", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/is-callable@1.1.3", "pkg:npm/is-date-object@1.0.1", "pkg:npm/is-finite@1.0.2", "pkg:npm/is-function@1.0.1", "pkg:npm/is-regex@1.0.4", "pkg:npm/is-symbol@1.0.1", "pkg:npm/is@0.2.7", "pkg:npm/isarray@1.0.0", "pkg:npm/js-yaml@3.10.0", "pkg:npm/lodash@4.17.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/minimist@0.0.8", "pkg:npm/minimist@1.2.0", "pkg:npm/mkdirp@0.5.1", "pkg:npm/node.extend@1.0.8", "pkg:npm/node.flow@1.2.3", "pkg:npm/number-is-nan@1.0.1", "pkg:npm/object-assign@4.1.1", "pkg:npm/object-inspect@1.2.2", "pkg:npm/object-keys@0.4.0", "pkg:npm/object-keys@1.0.11", "pkg:npm/once@1.4.0", "pkg:npm/parse-ms@1.0.1", "pkg:npm/path-is-absolute@1.0.1", "pkg:npm/plur@1.0.0", "pkg:npm/pretty-ms@2.1.0", "pkg:npm/process-nextick-args@1.0.7", "pkg:npm/ramda@0.18.0", "pkg:npm/readable-stream@2.3.3", "pkg:npm/resolve@1.1.7", "pkg:npm/resumer@0.0.0", "pkg:npm/rmdir@1.2.0", "pkg:npm/rx-node@1.0.2", "pkg:npm/rx@4.1.0", "pkg:npm/safe-buffer@5.1.1", "pkg:npm/split@1.0.1", "pkg:npm/sprintf-js@1.0.3", "pkg:npm/string.prototype.trim@1.1.2", "pkg:npm/string_decoder@1.0.3", "pkg:npm/strip-ansi@3.0.1", "pkg:npm/supports-color@2.0.0", "pkg:npm/tape@4.6.3", "pkg:npm/through@2.3.8", "pkg:npm/util-deprecate@1.0.2", "pkg:npm/wrappy@1.0.2" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/file-exists@5.0.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-25T08:30:36Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'file-exists' with version '5.0.1'. The package type in this SBOM is npm with a single purl namespace '@tap-format' described under components. The components were identified from the source files: yarn.lock." } ] }