{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:4867dafa-20e9-444d-aa66-de04fa2a4b61", "version": 1, "metadata": { "timestamp": "2026-08-16T06:42:59Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "form-data", "group": "", "version": "4.0.5", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "purl": "pkg:npm/form-data@4.0.5", "bom-ref": "pkg:npm/form-data@4.0.5", "author": "Felix Geisendörfer (http://debuggable.com/)", "properties": [ { "name": "cdx:npm:scripts", "value": "pretest, pretests-only, tests-only, posttests-only, test, posttest, lint, report, ci-lint, ci-test, predebug, debug, browser, check, files, get-version, update-readme, postupdate-readme, restore-readme, prepublish, prepack, postpack, version, postversion" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@eslint\\n@eslint-community\\n@humanwhocodes\\n@ljharb\\n@my-scope\\n@nodelib\\n@types\\n@ungap" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@eslint-community/eslint-utils/package.json\\nnode_modules/@eslint-community/regexpp/package.json\\nnode_modules/@eslint/eslintrc/package.json\\nnode_modules/@eslint/js/package.json\\nnode_modules/@humanwhocodes/config-array/package.json\\nnode_modules/@humanwhocodes/module-importer/package.json\\nnode_modules/@humanwhocodes/object-schema/package.json\\nnode_modules/@ljharb/eslint-config/package.json\\nnode_modules/@ljharb/now/package.json\\nnode_modules/@ljharb/resumer/package.json\\nnode_modules/@ljharb/through/package.json\\nnode_modules/@nodelib/fs.scandir/package.json\\nnode_modules/@nodelib/fs.stat/package.json\\nnode_modules/@nodelib/fs.walk/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/yargs-parser/package.json\\nnode_modules/@types/yargs/package.json\\nnode_modules/@ungap/structured-clone/package.json\\nnode_modules/JSONStream/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn-node/node_modules/acorn/package.json\\nnode_modules/acorn-node/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/ajv/package.json\\nnode_modules/amdefine/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-buffer-byte-length/package.json\\nnode_modules/array.prototype.every/package.json\\nnode_modules/array.prototype.flatmap/package.json\\nnode_modules/arraybuffer.prototype.slice/package.json\\nnode_modules/asn1.js/node_modules/bn.js/package.json\\nnode_modules/asn1.js/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/assert/package.json\\nnode_modules/async-function/package.json\\nnode_modules/async-limiter/package.json\\nnode_modules/async-mutex/package.json\\nnode_modules/async/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/auto-changelog/node_modules/semver/package.json\\nnode_modules/auto-changelog/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/aws4/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/bn.js/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/brorand/package.json\\nnode_modules/browser-pack/package.json\\nnode_modules/browser-resolve/node_modules/resolve/package.json\\nnode_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json\\nnode_modules/browser-resolve/package.json\\nnode_modules/browserify-aes/package.json\\nnode_modules/browserify-cipher/package.json\\nnode_modules/browserify-des/package.json\\nnode_modules/browserify-istanbul/package.json\\nnode_modules/browserify-rsa/package.json\\nnode_modules/browserify-sign/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/browserify/package.json\\nnode_modules/browserify/test/ignore_browser_field/node_modules/a/package.json\\nnode_modules/browserify/test/ignore_browser_field/node_modules/b/package.json\\nnode_modules/browserify/test/ignore_transform_key/node_modules/a/package.json\\nnode_modules/browserify/test/ignore_transform_key/node_modules/evil-transform/package.json\\nnode_modules/browserify/test/pkg_event/package.json\\nnode_modules/buffer-crc32/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/buffer-xor/package.json\\nnode_modules/buffer/package.json\\nnode_modules/builtin-status-codes/package.json\\nnode_modules/cached-path-relative/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/callsites/package.json\\nnode_modules/caseless/package.json\\nnode_modules/chalk/package.json\\nnode_modules/cipher-base/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/clone/package.json\\nnode_modules/co/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/columnify/package.json\\nnode_modules/combine-source-map/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/node_modules/process-nextick-args/package.json\\nnode_modules/concat-stream/node_modules/readable-stream/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/constants-browserify/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/coveralls/node_modules/argparse/package.json\\nnode_modules/coveralls/node_modules/esprima/package.json\\nnode_modules/coveralls/node_modules/har-validator/package.json\\nnode_modules/coveralls/node_modules/js-yaml/package.json\\nnode_modules/coveralls/node_modules/oauth-sign/package.json\\nnode_modules/coveralls/node_modules/punycode/package.json\\nnode_modules/coveralls/node_modules/request/package.json\\nnode_modules/coveralls/node_modules/tough-cookie/package.json\\nnode_modules/coveralls/package.json\\nnode_modules/create-ecdh/node_modules/bn.js/package.json\\nnode_modules/create-ecdh/package.json\\nnode_modules/create-hash/package.json\\nnode_modules/create-hmac/package.json\\nnode_modules/cross-spawn/node_modules/semver/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/dash-ast/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/data-view-buffer/package.json\\nnode_modules/data-view-byte-length/package.json\\nnode_modules/data-view-byte-offset/package.json\\nnode_modules/debug/package.json\\nnode_modules/deep-equal/node_modules/isarray/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/deeply/package.json\\nnode_modules/defaults/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/defined/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/deps-sort/package.json\\nnode_modules/des.js/package.json\\nnode_modules/detective/node_modules/acorn/package.json\\nnode_modules/detective/package.json\\nnode_modules/diffie-hellman/node_modules/bn.js/package.json\\nnode_modules/diffie-hellman/package.json\\nnode_modules/doctrine/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/dotignore/package.json\\nnode_modules/du/node_modules/async/package.json\\nnode_modules/du/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/elliptic/node_modules/bn.js/package.json\\nnode_modules/elliptic/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/envar/package.json\\nnode_modules/es-abstract-get/package.json\\nnode_modules/es-abstract/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-get-iterator/node_modules/isarray/package.json\\nnode_modules/es-get-iterator/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/es-set-tostringtag/package.json\\nnode_modules/es-shim-unscopables/package.json\\nnode_modules/es-to-primitive/package.json\\nnode_modules/es6-promise/package.json\\nnode_modules/es6-promisify/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/escodegen/node_modules/estraverse/package.json\\nnode_modules/escodegen/node_modules/levn/package.json\\nnode_modules/escodegen/node_modules/optionator/package.json\\nnode_modules/escodegen/node_modules/prelude-ls/package.json\\nnode_modules/escodegen/node_modules/source-map/package.json\\nnode_modules/escodegen/node_modules/type-check/package.json\\nnode_modules/escodegen/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/node_modules/cross-spawn/package.json\\nnode_modules/eslint/node_modules/path-key/package.json\\nnode_modules/eslint/node_modules/shebang-command/package.json\\nnode_modules/eslint/node_modules/shebang-regex/package.json\\nnode_modules/eslint/node_modules/which/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/events/package.json\\nnode_modules/evp_bytestokey/package.json\\nnode_modules/extend/package.json\\nnode_modules/extract-zip/node_modules/concat-stream/package.json\\nnode_modules/extract-zip/node_modules/debug/package.json\\nnode_modules/extract-zip/node_modules/ms/package.json\\nnode_modules/extract-zip/node_modules/typedarray/package.json\\nnode_modules/extract-zip/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/fake/package.json\\nnode_modules/far/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/fast-safe-stringify/package.json\\nnode_modules/fastq/package.json\\nnode_modules/fd-slicer/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat-cache/node_modules/rimraf/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/flatted/package.json\\nnode_modules/for-each/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/formidable/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/fstream-ignore/package.json\\nnode_modules/fstream-npm/package.json\\nnode_modules/fstream/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/function.prototype.name/package.json\\nnode_modules/functions-have-names/package.json\\nnode_modules/generator-function/package.json\\nnode_modules/get-assigned-identifiers/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-east-asian-width/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-package-type/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/get-symbol-description/package.json\\nnode_modules/getpass/package.json\\nnode_modules/ghostface/node_modules/ansi-regex/package.json\\nnode_modules/ghostface/node_modules/ansi-styles/package.json\\nnode_modules/ghostface/node_modules/chalk/package.json\\nnode_modules/ghostface/node_modules/escape-string-regexp/package.json\\nnode_modules/ghostface/node_modules/semver/package.json\\nnode_modules/ghostface/node_modules/source-map/package.json\\nnode_modules/ghostface/node_modules/strip-ansi/package.json\\nnode_modules/ghostface/node_modules/supports-color/package.json\\nnode_modules/ghostface/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/globalthis/package.json\\nnode_modules/gopd/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/graphemer/package.json\\nnode_modules/handlebars/node_modules/source-map/package.json\\nnode_modules/handlebars/package.json\\nnode_modules/har-schema/package.json\\nnode_modules/har-validator/node_modules/ajv/package.json\\nnode_modules/har-validator/node_modules/fast-deep-equal/package.json\\nnode_modules/har-validator/node_modules/json-schema-traverse/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/has-ansi/node_modules/ansi-regex/package.json\\nnode_modules/has-ansi/package.json\\nnode_modules/has-bigints/package.json\\nnode_modules/has-dynamic-import/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-proto/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/has/package.json\\nnode_modules/hash-base/package.json\\nnode_modules/hash.js/package.json\\nnode_modules/hasown/package.json\\nnode_modules/hmac-drbg/package.json\\nnode_modules/htmlescape/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/https-browserify/package.json\\nnode_modules/https-proxy-agent/node_modules/debug/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/ignore/package.json\\nnode_modules/import-cwd/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/import-from/node_modules/resolve-from/package.json\\nnode_modules/import-from/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/in-publish/package.json\\nnode_modules/in-publish/test/package.json\\nnode_modules/indexof/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/concat-stream/package.json\\nnode_modules/insert-module-globals/node_modules/typedarray/package.json\\nnode_modules/insert-module-globals/package.json\\nnode_modules/internal-slot/package.json\\nnode_modules/is-arguments/package.json\\nnode_modules/is-array-buffer/package.json\\nnode_modules/is-async-function/package.json\\nnode_modules/is-bigint/package.json\\nnode_modules/is-boolean-object/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/is-data-view/package.json\\nnode_modules/is-date-object/package.json\\nnode_modules/is-document.all/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-finalizationregistry/package.json\\nnode_modules/is-generator-function/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-map/package.json\\nnode_modules/is-negative-zero/package.json\\nnode_modules/is-node-modern/package.json\\nnode_modules/is-number-object/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-set/package.json\\nnode_modules/is-shared-array-buffer/package.json\\nnode_modules/is-string/package.json\\nnode_modules/is-symbol/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/is-weakmap/package.json\\nnode_modules/is-weakref/package.json\\nnode_modules/is-weakset/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/isstream/package.json\\nnode_modules/istanbul/node_modules/argparse/package.json\\nnode_modules/istanbul/node_modules/glob/package.json\\nnode_modules/istanbul/node_modules/has-flag/package.json\\nnode_modules/istanbul/node_modules/js-yaml/node_modules/esprima/package.json\\nnode_modules/istanbul/node_modules/js-yaml/package.json\\nnode_modules/istanbul/node_modules/resolve/package.json\\nnode_modules/istanbul/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json\\nnode_modules/istanbul/node_modules/supports-color/package.json\\nnode_modules/istanbul/package.json\\nnode_modules/js-randomness-predictor/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/json-stable-stringify/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsonify/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/keyv/package.json\\nnode_modules/labeled-stream-splicer/package.json\\nnode_modules/lcov-parse/package.json\\nnode_modules/levn/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.memoize/package.json\\nnode_modules/lodash.merge/package.json\\nnode_modules/log-driver/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/map-limit/node_modules/once/package.json\\nnode_modules/map-limit/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/md5.js/package.json\\nnode_modules/miller-rabin/node_modules/bn.js/package.json\\nnode_modules/miller-rabin/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/minimalistic-assert/package.json\\nnode_modules/minimalistic-crypto-utils/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mock-property/node_modules/isarray/package.json\\nnode_modules/mock-property/package.json\\nnode_modules/module-deps/package.json\\nnode_modules/ms/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/neo-async/package.json\\nnode_modules/nice-try/package.json\\nnode_modules/node-exports-info/package.json\\nnode_modules/nopt/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/obake/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-is/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/object.assign/package.json\\nnode_modules/object.entries/package.json\\nnode_modules/once/package.json\\nnode_modules/oop/package.json\\nnode_modules/optionator/package.json\\nnode_modules/os-browserify/package.json\\nnode_modules/os-shim/package.json\\nnode_modules/own-keys/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/pako/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/parents/package.json\\nnode_modules/parse-asn1/package.json\\nnode_modules/parse-github-url/package.json\\nnode_modules/path-browserify/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-platform/package.json\\nnode_modules/pbkdf2/package.json\\nnode_modules/pend/package.json\\nnode_modules/performance-now/package.json\\nnode_modules/pkgfiles/package.json\\nnode_modules/pkgfiles/test/pkg/package.json\\nnode_modules/pkgresolve/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/pre-commit/node_modules/cross-spawn/package.json\\nnode_modules/pre-commit/node_modules/which/package.json\\nnode_modules/pre-commit/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/pretty-bytes/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process/package.json\\nnode_modules/progress/package.json\\nnode_modules/proxy-from-env/package.json\\nnode_modules/pseudomap/package.json\\nnode_modules/psl/node_modules/punycode/package.json\\nnode_modules/psl/package.json\\nnode_modules/public-encrypt/node_modules/bn.js/package.json\\nnode_modules/public-encrypt/package.json\\nnode_modules/punycode/package.json\\nnode_modules/puppeteer/package.json\\nnode_modules/qs/package.json\\nnode_modules/querystring-es3/package.json\\nnode_modules/queue-microtask/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/randomfill/package.json\\nnode_modules/read-only-stream/package.json\\nnode_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/readable-stream/node_modules/string_decoder/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/reflect.getprototypeof/package.json\\nnode_modules/regexp.prototype.flags/package.json\\nnode_modules/request/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/reusify/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/ripemd160/node_modules/hash-base/package.json\\nnode_modules/ripemd160/package.json\\nnode_modules/run-parallel/package.json\\nnode_modules/safe-array-concat/node_modules/isarray/package.json\\nnode_modules/safe-array-concat/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safe-push-apply/node_modules/isarray/package.json\\nnode_modules/safe-push-apply/package.json\\nnode_modules/safe-regex-test/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/set-function-name/package.json\\nnode_modules/set-proto/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shasum-object/package.json\\nnode_modules/shasum/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/side-channel-list/package.json\\nnode_modules/side-channel-map/package.json\\nnode_modules/side-channel-weakmap/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/simple-concat/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spawn-sync/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/stop-iteration-iterator/package.json\\nnode_modules/stream-browserify/package.json\\nnode_modules/stream-combiner2/package.json\\nnode_modules/stream-http/package.json\\nnode_modules/stream-splicer/package.json\\nnode_modules/string-width/node_modules/ansi-regex/package.json\\nnode_modules/string-width/node_modules/strip-ansi/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string.prototype.trim/package.json\\nnode_modules/string.prototype.trimend/package.json\\nnode_modules/string.prototype.trimstart/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/subarg/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json\\nnode_modules/syntax-error/package.json\\nnode_modules/tape/node_modules/resolve/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/tape/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/tape/package.json\\nnode_modules/text-table/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/package.json\\nnode_modules/timers-browserify/package.json\\nnode_modules/to-arraybuffer/package.json\\nnode_modules/to-buffer/node_modules/isarray/package.json\\nnode_modules/to-buffer/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/tslib/package.json\\nnode_modules/tty-browserify/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/type-check/package.json\\nnode_modules/type-fest/package.json\\nnode_modules/typed-array-buffer/package.json\\nnode_modules/typed-array-byte-length/package.json\\nnode_modules/typed-array-byte-offset/package.json\\nnode_modules/typed-array-length/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/typescript/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/umd/package.json\\nnode_modules/unbox-primitive/package.json\\nnode_modules/undeclared-identifiers/package.json\\nnode_modules/undici-types/package.json\\nnode_modules/uri-js/node_modules/punycode/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/url/node_modules/qs/package.json\\nnode_modules/url/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/util/node_modules/inherits/package.json\\nnode_modules/util/package.json\\nnode_modules/uuid/package.json\\nnode_modules/verror/node_modules/core-util-is/package.json\\nnode_modules/verror/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/wcwidth/package.json\\nnode_modules/which-boxed-primitive/package.json\\nnode_modules/which-builtin-type/node_modules/isarray/package.json\\nnode_modules/which-builtin-type/package.json\\nnode_modules/which-collection/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/which/package.json\\nnode_modules/word-wrap/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/node_modules/string-width/package.json\\nnode_modules/wrap-ansi/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/ws/package.json\\nnode_modules/xtend/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yauzl/package.json\\nnode_modules/yocto-queue/package.json\\nnode_modules/z3-solver/package.json" } ] }, "components": [ { "group": "", "name": "z3-solver", "version": "4.16.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/z3-solver@4.16.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Z3Prover/z3/tree/master/src/api/js" } ], "type": "library", "bom-ref": "pkg:npm/z3-solver@4.16.0", "properties": [ { "name": "SrcFile", "value": "node_modules/z3-solver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/z3-solver/package.json" } ], "concludedValue": "node_modules/z3-solver/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "Josh Wolfe " } ], "group": "", "name": "yauzl", "version": "2.10.0", "description": "yet another unzip library for node", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yauzl@2.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thejoshwolfe/yauzl" }, { "type": "vcs", "url": "https://github.com/thejoshwolfe/yauzl.git" } ], "type": "library", "bom-ref": "pkg:npm/yauzl@2.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yauzl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yauzl/package.json" } ], "concludedValue": "node_modules/yauzl/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "22.0.0", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@22.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@22.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "18.1.0", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@18.1.0", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@18.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "2.1.2", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "6.2.6", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@6.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" } ], "type": "library", "bom-ref": "pkg:npm/ws@6.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "9.0.2", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@9.0.2", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@9.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "7.2.0", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@7.2.0", "type": "library", "bom-ref": "pkg:npm/string-width@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.3.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@6.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "1.0.0", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "word-wrap", "version": "1.2.5", "description": "Wrap words to a specified length.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/word-wrap@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/word-wrap" } ], "type": "library", "bom-ref": "pkg:npm/word-wrap@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/word-wrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/word-wrap/package.json" } ], "concludedValue": "node_modules/word-wrap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "which-typed-array", "version": "1.1.22", "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-typed-array@1.1.22", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/which-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/which-typed-array@1.1.22", "properties": [ { "name": "SrcFile", "value": "node_modules/which-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-typed-array/package.json" } ], "concludedValue": "node_modules/which-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "which-collection", "version": "1.0.2", "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-collection@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/which-collection#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/which-collection.git" } ], "type": "library", "bom-ref": "pkg:npm/which-collection@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which-collection/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-collection/package.json" } ], "concludedValue": "node_modules/which-collection/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "which-builtin-type", "version": "1.2.1", "description": "What is the type of this builtin JS value?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-builtin-type@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/which-builtin-type#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/which-builtin-type.git" } ], "type": "library", "bom-ref": "pkg:npm/which-builtin-type@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which-builtin-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-builtin-type/package.json" } ], "concludedValue": "node_modules/which-builtin-type/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "2.0.5", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/which-builtin-type/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/to-buffer/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/safe-push-apply/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/safe-array-concat/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/mock-property/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/es-get-iterator/node_modules/isarray/package.json" }, { "name": "SrcFile", "value": "node_modules/deep-equal/node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/node_modules/isarray/package.json" } ], "concludedValue": "node_modules/deep-equal/node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "which-boxed-primitive", "version": "1.1.1", "description": "Which kind of boxed JS primitive is this?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-boxed-primitive@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/which-boxed-primitive#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/which-boxed-primitive.git" } ], "type": "library", "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which-boxed-primitive/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-boxed-primitive/package.json" } ], "concludedValue": "node_modules/which-boxed-primitive/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.3.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley" } ], "group": "", "name": "wcwidth", "version": "1.0.1", "description": "Port of C's wcwidth() and wcswidth()", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wcwidth@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/timoxley/wcwidth#readme" }, { "type": "vcs", "url": "git+https://github.com/timoxley/wcwidth.git" } ], "type": "library", "bom-ref": "pkg:npm/wcwidth@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/wcwidth/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wcwidth/package.json" } ], "concludedValue": "node_modules/wcwidth/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "vm-browserify", "version": "0.0.4", "description": "vm module for the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vm-browserify@0.0.4", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/vm-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/vm-browserify@0.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/vm-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vm-browserify/package.json" } ], "concludedValue": "node_modules/vm-browserify/package.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "description": "richer JavaScript errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davepacheco/node-verror.git" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/package.json" } ], "concludedValue": "node_modules/verror/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/verror/node_modules/core-util-is/package.json" } ] } }, { "group": "", "name": "uuid", "version": "3.4.0", "description": "RFC4122 (v1, v4, and v5) UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Joyent (http://www.joyent.com)" } ], "group": "", "name": "util", "version": "0.10.4", "description": "Node.JS util module", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.10.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-util" }, { "type": "vcs", "url": "git://github.com/defunctzombie/node-util" } ], "type": "library", "bom-ref": "pkg:npm/util@0.10.4", "properties": [ { "name": "SrcFile", "value": "node_modules/util/package.json" }, { "name": "ImportedModules", "value": "util" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/package.json" } ], "concludedValue": "node_modules/util/package.json" } ], "occurrences": [ { "location": "lib/form_data.js", "line": 4 } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.3", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/util/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/util/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "defunctzombie" } ], "group": "", "name": "url", "version": "0.11.4", "description": "The core `url` packaged standalone for use with Browserify.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/url@0.11.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/defunctzombie/node-url.git" } ], "type": "library", "bom-ref": "pkg:npm/url@0.11.4", "properties": [ { "name": "SrcFile", "value": "node_modules/url/package.json" }, { "name": "ImportedModules", "value": "url" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/package.json" } ], "concludedValue": "node_modules/url/package.json" } ], "occurrences": [ { "location": "lib/form_data.js", "line": 8 } ] } }, { "group": "", "name": "qs", "version": "6.15.3", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.15.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.15.3", "properties": [ { "name": "SrcFile", "value": "node_modules/url/node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/url/node_modules/qs/package.json" } ], "concludedValue": "node_modules/url/node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Gary Court " } ], "group": "", "name": "uri-js", "version": "4.4.1", "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-js@4.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/garycourt/uri-js" }, { "type": "vcs", "url": "http://github.com/garycourt/uri-js" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-js/package.json" } ], "concludedValue": "node_modules/uri-js/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "2.3.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.3.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/node_modules/punycode/package.json" }, { "name": "SrcFile", "value": "node_modules/psl/node_modules/punycode/package.json" }, { "name": "SrcFile", "value": "node_modules/coveralls/node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coveralls/node_modules/punycode/package.json" } ], "concludedValue": "node_modules/coveralls/node_modules/punycode/package.json" } ] } }, { "group": "", "name": "undici-types", "version": "7.18.2", "description": "A stand-alone types package for Undici", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undici-types@7.18.2", "externalReferences": [ { "type": "website", "url": "https://undici.nodejs.org" }, { "type": "vcs", "url": "git+https://github.com/nodejs/undici.git" } ], "type": "library", "bom-ref": "pkg:npm/undici-types@7.18.2", "properties": [ { "name": "SrcFile", "value": "node_modules/undici-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undici-types/package.json" } ], "concludedValue": "node_modules/undici-types/package.json" } ] } }, { "authors": [ { "name": "Renée Kooi " } ], "group": "", "name": "undeclared-identifiers", "version": "1.1.3", "description": "find undeclared identifiers and property accesses in a javascript file.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/undeclared-identifiers@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/goto-bus-stop/undeclared-identifiers" }, { "type": "vcs", "url": "https://github.com/goto-bus-stop/undeclared-identifiers.git" } ], "type": "library", "bom-ref": "pkg:npm/undeclared-identifiers@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/undeclared-identifiers/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/undeclared-identifiers/package.json" } ], "concludedValue": "node_modules/undeclared-identifiers/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "unbox-primitive", "version": "1.1.0", "description": "Unbox a boxed JS primitive value.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unbox-primitive@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/unbox-primitive#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/unbox-primitive.git" } ], "type": "library", "bom-ref": "pkg:npm/unbox-primitive@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unbox-primitive/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unbox-primitive/package.json" } ], "concludedValue": "node_modules/unbox-primitive/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "umd", "version": "3.0.3", "description": "Universal Module Definition for use in automated build systems", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/umd@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/umd.git" } ], "type": "library", "bom-ref": "pkg:npm/umd@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/umd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/umd/package.json" } ], "concludedValue": "node_modules/umd/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "uglify-js", "version": "3.19.3", "description": "JavaScript parser, mangler/compressor and beautifier toolkit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uglify-js@3.19.3", "type": "library", "bom-ref": "pkg:npm/uglify-js@3.19.3", "properties": [ { "name": "SrcFile", "value": "node_modules/uglify-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uglify-js/package.json" } ], "concludedValue": "node_modules/uglify-js/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "typedarray", "version": "0.0.7", "description": "TypedArray polyfill for old browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedarray@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/typedarray" }, { "type": "vcs", "url": "git://github.com/es-shims/typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/typedarray@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typedarray/package.json" } ], "concludedValue": "node_modules/typedarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-length", "version": "1.0.8", "description": "Robustly get the length of a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-length@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-length#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-length.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-length@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-length/package.json" } ], "concludedValue": "node_modules/typed-array-length/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-byte-offset", "version": "1.0.4", "description": "Robustly get the byte offset of a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-byte-offset@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-byte-offset#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-byte-offset.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-byte-offset@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-byte-offset/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-byte-offset/package.json" } ], "concludedValue": "node_modules/typed-array-byte-offset/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-byte-length", "version": "1.0.3", "description": "Robustly get the byte length of a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-byte-length@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-byte-length#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-byte-length.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-byte-length@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-byte-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-byte-length/package.json" } ], "concludedValue": "node_modules/typed-array-byte-length/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "typed-array-buffer", "version": "1.0.3", "description": "Get the ArrayBuffer out of a TypedArray, robustly.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typed-array-buffer@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/typed-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/typed-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/typed-array-buffer@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typed-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typed-array-buffer/package.json" } ], "concludedValue": "node_modules/typed-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "0.20.2", "description": "A collection of essential TypeScript types", "scope": "optional", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@0.20.2", "type": "library", "bom-ref": "pkg:npm/type-fest@0.20.2", "properties": [ { "name": "SrcFile", "value": "node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "type-check", "version": "0.4.0", "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-check@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/type-check" }, { "type": "vcs", "url": "git://github.com/gkz/type-check.git" } ], "type": "library", "bom-ref": "pkg:npm/type-check@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-check/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-check/package.json" } ], "concludedValue": "node_modules/type-check/package.json" } ] } }, { "authors": [ { "name": "TweetNaCl-js contributors" } ], "group": "", "name": "tweetnacl", "version": "0.14.5", "description": "Port of TweetNaCl cryptographic library to JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Unlicense", "url": "https://opensource.org/licenses/Unlicense", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "website", "url": "https://tweetnacl.js.org" }, { "type": "vcs", "url": "https://github.com/dchest/tweetnacl-js.git" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tweetnacl/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tweetnacl/package.json" } ], "concludedValue": "node_modules/tweetnacl/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.6.0", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel-agent@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tty-browserify", "version": "0.0.1", "description": "the tty module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tty-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/tty-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/tty-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/tty-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tty-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tty-browserify/package.json" } ], "concludedValue": "node_modules/tty-browserify/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "tslib", "version": "2.8.1", "description": "Runtime library for TypeScript helper functions", "scope": "optional", "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@2.8.1", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/Microsoft/tslib.git" } ], "type": "library", "bom-ref": "pkg:npm/tslib@2.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tslib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tslib/package.json" } ], "concludedValue": "node_modules/tslib/package.json" } ] } }, { "authors": [ { "name": "Jeremy Stashewsky " } ], "group": "", "name": "tough-cookie", "version": "2.3.4", "description": "RFC6265 Cookies and Cookie Jar for node.js", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tough-cookie@2.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/salesforce/tough-cookie" }, { "type": "vcs", "url": "git://github.com/salesforce/tough-cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/package.json" } ], "concludedValue": "node_modules/tough-cookie/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "to-buffer", "version": "1.2.2", "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-buffer@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/to-buffer" }, { "type": "vcs", "url": "https://github.com/browserify/to-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/to-buffer@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/to-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-buffer/package.json" } ], "concludedValue": "node_modules/to-buffer/package.json" } ] } }, { "authors": [ { "name": "John Hiesey" } ], "group": "", "name": "to-arraybuffer", "version": "1.0.1", "description": "Get an ArrayBuffer from a Buffer as fast as possible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-arraybuffer@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jhiesey/to-arraybuffer#readme" }, { "type": "vcs", "url": "git://github.com/jhiesey/to-arraybuffer.git" } ], "type": "library", "bom-ref": "pkg:npm/to-arraybuffer@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/to-arraybuffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-arraybuffer/package.json" } ], "concludedValue": "node_modules/to-arraybuffer/package.json" } ] } }, { "authors": [ { "name": "J. Ryan Stinnett (http://convolv.es/)" } ], "group": "", "name": "timers-browserify", "version": "1.4.2", "description": "timers module for browserify", "scope": "optional", "purl": "pkg:npm/timers-browserify@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jryans/timers-browserify" }, { "type": "vcs", "url": "git://github.com/jryans/timers-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/timers-browserify@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/timers-browserify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/timers-browserify/package.json" } ], "concludedValue": "node_modules/timers-browserify/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg (https://github.com/rvagg)" } ], "group": "", "name": "through2", "version": "2.0.5", "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through2@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/through2.git" } ], "type": "library", "bom-ref": "pkg:npm/through2@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/through2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through2/package.json" } ], "concludedValue": "node_modules/through2/package.json" } ] }, "tags": [ "transform" ] }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through/package.json" } ], "concludedValue": "node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "text-table", "version": "0.2.0", "description": "borderless text tables with alignment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-table@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/text-table" }, { "type": "vcs", "url": "git://github.com/substack/text-table.git" } ], "type": "library", "bom-ref": "pkg:npm/text-table@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/text-table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/text-table/package.json" } ], "concludedValue": "node_modules/text-table/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "tape", "version": "5.10.2", "description": "tap-producing test harness for node and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tape@5.10.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tape-testing/tape" }, { "type": "vcs", "url": "git://github.com/tape-testing/tape.git" } ], "type": "library", "bom-ref": "pkg:npm/tape@5.10.2", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/package.json" } ], "concludedValue": "node_modules/tape/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "2.0.0-next.7", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@2.0.0-next.7", "externalReferences": [ { "type": "vcs", "url": "ssh://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@2.0.0-next.7", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/node_modules/resolve/package.json" } ], "concludedValue": "node_modules/tape/node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "ljharb-monorepo-symlink-test", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid_main", "version": "", "scope": "optional", "purl": "pkg:npm/invalid_main", "type": "library", "bom-ref": "pkg:npm/invalid_main", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/invalid_main/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "false_main", "version": "", "scope": "optional", "purl": "pkg:npm/false_main", "type": "library", "bom-ref": "pkg:npm/false_main", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/false_main/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/false_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/false_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "scope": "optional", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/browser_field/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "group": "", "name": "baz", "version": "", "scope": "optional", "purl": "pkg:npm/baz", "type": "library", "bom-ref": "pkg:npm/baz", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/node_modules/resolve/test/resolver/baz/package.json" }, { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/baz/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "syntax-error", "version": "1.4.0", "description": "detect and report syntax errors in source code strings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/syntax-error@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-syntax-error" }, { "type": "vcs", "url": "git://github.com/substack/node-syntax-error.git" } ], "type": "library", "bom-ref": "pkg:npm/syntax-error@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/syntax-error/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/syntax-error/package.json" } ], "concludedValue": "node_modules/syntax-error/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-preserve-symlinks-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-preserve-symlinks-flag/package.json" } ], "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "subarg", "version": "1.0.0", "description": "parse arguments with recursive contexts", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/subarg@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/subarg" }, { "type": "vcs", "url": "git://github.com/substack/subarg.git" } ], "type": "library", "bom-ref": "pkg:npm/subarg@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/subarg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/subarg/package.json" } ], "concludedValue": "node_modules/subarg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "3.1.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@3.1.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "0.10.31", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/string_decoder" }, { "type": "vcs", "url": "git://github.com/rvagg/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "string.prototype.trimstart", "version": "1.0.8", "description": "ES2019 spec-compliant String.prototype.trimStart shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string.prototype.trimstart@1.0.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/String.prototype.trimStart.git" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/string.prototype.trimstart/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string.prototype.trimstart/package.json" } ], "concludedValue": "node_modules/string.prototype.trimstart/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "string.prototype.trimend", "version": "1.0.10", "description": "ES2019 spec-compliant String.prototype.trimEnd shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string.prototype.trimend@1.0.10", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/String.prototype.trimEnd.git" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trimend@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/string.prototype.trimend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string.prototype.trimend/package.json" } ], "concludedValue": "node_modules/string.prototype.trimend/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "string.prototype.trim", "version": "1.2.11", "description": "ES5 spec-compliant shim for String.prototype.trim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string.prototype.trim@1.2.11", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/String.prototype.trim.git" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trim@1.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/string.prototype.trim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string.prototype.trim/package.json" } ], "concludedValue": "node_modules/string.prototype.trim/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "8.2.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@8.2.2", "type": "library", "bom-ref": "pkg:npm/string-width@8.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-splicer", "version": "2.0.1", "description": "streaming pipeline with a mutable configuration", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-splicer@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/stream-splicer" }, { "type": "vcs", "url": "git://github.com/browserify/stream-splicer.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-splicer@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-splicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-splicer/package.json" } ], "concludedValue": "node_modules/stream-splicer/package.json" } ] } }, { "authors": [ { "name": "John Hiesey" } ], "group": "", "name": "stream-http", "version": "2.8.3", "description": "Streaming http in the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-http@2.8.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jhiesey/stream-http#readme" }, { "type": "vcs", "url": "git://github.com/jhiesey/stream-http.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-http@2.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-http/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-http/package.json" } ], "concludedValue": "node_modules/stream-http/package.json" } ] } }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "stream-combiner2", "version": "1.1.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-combiner2@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/stream-combiner2" }, { "type": "vcs", "url": "git://github.com/substack/stream-combiner2.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner2@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-combiner2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-combiner2/package.json" } ], "concludedValue": "node_modules/stream-combiner2/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "stream-browserify", "version": "2.0.2", "description": "the stream module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stream-browserify@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/stream-browserify" }, { "type": "vcs", "url": "git://github.com/browserify/stream-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/stream-browserify@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/stream-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stream-browserify/package.json" } ], "concludedValue": "node_modules/stream-browserify/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "stop-iteration-iterator", "version": "1.1.0", "description": "Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stop-iteration-iterator@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/stop-iteration-iterator#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/stop-iteration-iterator.git" } ], "type": "library", "bom-ref": "pkg:npm/stop-iteration-iterator@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/stop-iteration-iterator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stop-iteration-iterator/package.json" } ], "concludedValue": "node_modules/stop-iteration-iterator/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "sshpk", "version": "1.18.0", "description": "A library for finding and using SSH public keys", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sshpk@1.18.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-sshpk#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-sshpk.git" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/sshpk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sshpk/package.json" } ], "concludedValue": "node_modules/sshpk/package.json" } ] } }, { "authors": [ { "name": "Alexandru Marasteanu (http://alexei.ro/)" } ], "group": "", "name": "sprintf-js", "version": "1.0.3", "description": "JavaScript sprintf implementation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexei/sprintf.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/sprintf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sprintf-js/package.json" } ], "concludedValue": "node_modules/sprintf-js/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "spawn-sync", "version": "1.0.15", "description": "Prollyfill for child_process.spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spawn-sync@1.0.15", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/spawn-sync.git" } ], "type": "library", "bom-ref": "pkg:npm/spawn-sync@1.0.15", "properties": [ { "name": "SrcFile", "value": "node_modules/spawn-sync/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spawn-sync/package.json" } ], "concludedValue": "node_modules/spawn-sync/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "simple-concat", "version": "1.0.1", "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-concat@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/simple-concat" }, { "type": "vcs", "url": "git://github.com/feross/simple-concat.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-concat@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-concat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-concat/package.json" } ], "concludedValue": "node_modules/simple-concat/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-weakmap", "version": "1.0.2", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-weakmap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-weakmap#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-weakmap.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-weakmap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-weakmap/package.json" } ], "concludedValue": "node_modules/side-channel-weakmap/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-map", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a Map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-map@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-map#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-map.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-map@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-map/package.json" } ], "concludedValue": "node_modules/side-channel-map/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel-list", "version": "1.0.1", "description": "Store information about any JS value in a side channel, using a linked list", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel-list@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel-list#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel-list.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel-list@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel-list/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel-list/package.json" } ], "concludedValue": "node_modules/side-channel-list/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "side-channel", "version": "1.1.1", "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/side-channel@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/side-channel#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/side-channel.git" } ], "type": "library", "bom-ref": "pkg:npm/side-channel@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/side-channel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/side-channel/package.json" } ], "concludedValue": "node_modules/side-channel/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "shell-quote", "version": "1.10.0", "description": "quote and parse shell commands", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shell-quote@1.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/shell-quote" }, { "type": "vcs", "url": "http://github.com/ljharb/shell-quote.git" } ], "type": "library", "bom-ref": "pkg:npm/shell-quote@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shell-quote/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shell-quote/package.json" } ], "concludedValue": "node_modules/shell-quote/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "1.0.0", "description": "Regular expression for matching a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@1.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Martensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "1.2.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@1.2.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Renée Kooi " } ], "group": "", "name": "shasum-object", "version": "1.0.1", "description": "get the shasum of a buffer or object", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shasum-object@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/goto-bus-stop/shasum-object" }, { "type": "vcs", "url": "https://github.com/goto-bus-stop/shasum-object.git" } ], "type": "library", "bom-ref": "pkg:npm/shasum-object@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/shasum-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shasum-object/package.json" } ], "concludedValue": "node_modules/shasum-object/package.json" } ] } }, { "authors": [ { "name": "'Dominic Tarr' (http://dominictarr.com)" } ], "group": "", "name": "shasum", "version": "1.0.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shasum@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/shasum" }, { "type": "vcs", "url": "git://github.com/dominictarr/shasum.git" } ], "type": "library", "bom-ref": "pkg:npm/shasum@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/shasum/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shasum/package.json" } ], "concludedValue": "node_modules/shasum/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "sha.js", "version": "2.4.12", "description": "Streamable SHA hashes in pure javascript", "scope": "optional", "licenses": [ { "expression": "MIT AND BSD-3-Clause" } ], "purl": "pkg:npm/sha.js@2.4.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/sha.js" }, { "type": "vcs", "url": "git://github.com/crypto-browserify/sha.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sha.js@2.4.12", "properties": [ { "name": "SrcFile", "value": "node_modules/sha.js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sha.js/package.json" } ], "concludedValue": "node_modules/sha.js/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-proto", "version": "1.0.0", "description": "Robustly set the [[Prototype]] of an object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-proto@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-proto#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-proto.git" } ], "type": "library", "bom-ref": "pkg:npm/set-proto@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-proto/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-proto/package.json" } ], "concludedValue": "node_modules/set-proto/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-name", "version": "2.0.2", "description": "Set a function's name property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-name@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-name#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-name.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-name@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-name/package.json" } ], "concludedValue": "node_modules/set-function-name/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "set-function-length", "version": "1.2.2", "description": "Set a function's length property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-function-length@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/set-function-length#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/set-function-length.git" } ], "type": "library", "bom-ref": "pkg:npm/set-function-length@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/set-function-length/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-function-length/package.json" } ], "concludedValue": "node_modules/set-function-length/package.json" } ] } }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "6.3.1", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@6.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@6.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "safe-regex-test", "version": "1.1.0", "description": "Give a regex, get a robust predicate function that tests it against a string.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-regex-test@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/safe-regex-test#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/safe-regex-test.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-regex-test@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-regex-test/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-regex-test/package.json" } ], "concludedValue": "node_modules/safe-regex-test/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "safe-push-apply", "version": "1.0.0", "description": "Push an array of items into an array, while being robust against prototype modification", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-push-apply@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/safe-push-apply#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/safe-push-apply.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-push-apply@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-push-apply/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-push-apply/package.json" } ], "concludedValue": "node_modules/safe-push-apply/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "safe-array-concat", "version": "1.1.4", "description": "`Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-array-concat@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/safe-array-concat#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/safe-array-concat.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-array-concat@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-array-concat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-array-concat/package.json" } ], "concludedValue": "node_modules/safe-array-concat/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "run-parallel", "version": "1.2.0", "description": "Run an array of functions in parallel", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-parallel@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/run-parallel" }, { "type": "vcs", "url": "git://github.com/feross/run-parallel.git" } ], "type": "library", "bom-ref": "pkg:npm/run-parallel@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/run-parallel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/run-parallel/package.json" } ], "concludedValue": "node_modules/run-parallel/package.json" } ] } }, { "group": "", "name": "ripemd160", "version": "2.0.3", "description": "Compute ripemd160 of bytes or strings.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ripemd160@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/ripemd160" } ], "type": "library", "bom-ref": "pkg:npm/ripemd160@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/package.json" } ], "concludedValue": "node_modules/ripemd160/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "hash-base", "version": "3.1.2", "description": "abstract base class for hash-streams", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hash-base@3.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/hash-base.git" } ], "type": "library", "bom-ref": "pkg:npm/hash-base@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ripemd160/node_modules/hash-base/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ripemd160/node_modules/hash-base/package.json" } ], "concludedValue": "node_modules/ripemd160/node_modules/hash-base/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.7.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.7.1", "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Matteo Collina " } ], "group": "", "name": "reusify", "version": "1.1.0", "description": "Reuse objects and functions with style", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/reusify@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcollina/reusify#readme" }, { "type": "vcs", "url": "git+https://github.com/mcollina/reusify.git" } ], "type": "library", "bom-ref": "pkg:npm/reusify@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/reusify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/reusify/package.json" } ], "concludedValue": "node_modules/reusify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "4.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@4.0.0", "type": "library", "bom-ref": "pkg:npm/resolve-from@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.22.12", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.22.12", "externalReferences": [ { "type": "vcs", "url": "ssh://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.22.12", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.87.0", "description": "Simplified HTTP request client.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request@2.87.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.87.0", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "regexp.prototype.flags", "version": "1.5.4", "description": "ES6 spec-compliant RegExp.prototype.flags shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexp.prototype.flags@1.5.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/RegExp.prototype.flags.git" } ], "type": "library", "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/regexp.prototype.flags/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexp.prototype.flags/package.json" } ], "concludedValue": "node_modules/regexp.prototype.flags/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "reflect.getprototypeof", "version": "1.0.10", "description": "An ES2015 mostly-spec-compliant `Reflect.getPrototypeOf` sham/polyfill/replacement that works in as many engines as possible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/reflect.getprototypeof@1.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/Reflect.getPrototypeOf" }, { "type": "vcs", "url": "git+https://github.com/es-shims/Reflect.getPrototypeOf.git" } ], "type": "library", "bom-ref": "pkg:npm/reflect.getprototypeof@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/reflect.getprototypeof/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/reflect.getprototypeof/package.json" } ], "concludedValue": "node_modules/reflect.getprototypeof/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.8", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.8", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/readable-stream/node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/readable-stream/node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "read-only-stream", "version": "2.0.0", "description": "wrap a readable/writable stream to be read-only", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-only-stream@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/read-only-stream" }, { "type": "vcs", "url": "git://github.com/substack/read-only-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/read-only-stream@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-only-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-only-stream/package.json" } ], "concludedValue": "node_modules/read-only-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "randomfill", "version": "1.0.4", "description": "random fill from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randomfill@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randomfill" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/randomfill.git" } ], "type": "library", "bom-ref": "pkg:npm/randomfill@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/randomfill/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randomfill/package.json" } ], "concludedValue": "node_modules/randomfill/package.json" } ] } }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "queue-microtask", "version": "1.2.3", "description": "fast, tiny `queueMicrotask` shim for modern engines", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/queue-microtask@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/queue-microtask" }, { "type": "vcs", "url": "git://github.com/feross/queue-microtask.git" } ], "type": "library", "bom-ref": "pkg:npm/queue-microtask@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/queue-microtask/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/queue-microtask/package.json" } ], "concludedValue": "node_modules/queue-microtask/package.json" } ] } }, { "authors": [ { "name": "Irakli Gozalishvili " } ], "group": "", "name": "querystring-es3", "version": "0.2.1", "description": "Node's querystring module for all engines. (ES3 compat fork)", "scope": "optional", "purl": "pkg:npm/querystring-es3@0.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/mike-spainhower/querystring.git" } ], "type": "library", "bom-ref": "pkg:npm/querystring-es3@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/querystring-es3/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/querystring-es3/package.json" } ], "concludedValue": "node_modules/querystring-es3/package.json" } ] } }, { "group": "", "name": "qs", "version": "6.5.5", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "The Chromium Authors" } ], "group": "", "name": "puppeteer", "version": "1.20.0", "description": "A high-level API to control headless Chrome over the DevTools Protocol", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/puppeteer@1.20.0", "type": "library", "bom-ref": "pkg:npm/puppeteer@1.20.0", "properties": [ { "name": "SrcFile", "value": "node_modules/puppeteer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/puppeteer/package.json" } ], "concludedValue": "node_modules/puppeteer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.4.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@1.4.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Calvin Metcalf" } ], "group": "", "name": "public-encrypt", "version": "4.0.3", "description": "browserify version of publicEncrypt & privateDecrypt", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/public-encrypt@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/publicEncrypt" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/publicEncrypt.git" } ], "type": "library", "bom-ref": "pkg:npm/public-encrypt@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/public-encrypt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/public-encrypt/package.json" } ], "concludedValue": "node_modules/public-encrypt/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "bn.js", "version": "4.12.5", "description": "Big number implementation in pure javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bn.js@4.12.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/bn.js" } ], "type": "library", "bom-ref": "pkg:npm/bn.js@4.12.5", "properties": [ { "name": "SrcFile", "value": "node_modules/public-encrypt/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/miller-rabin/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/elliptic/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/diffie-hellman/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/create-ecdh/node_modules/bn.js/package.json" }, { "name": "SrcFile", "value": "node_modules/asn1.js/node_modules/bn.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1.js/node_modules/bn.js/package.json" } ], "concludedValue": "node_modules/asn1.js/node_modules/bn.js/package.json" } ] } }, { "authors": [ { "name": "Lupo Montero (https://lupomontero.com/)" } ], "group": "", "name": "psl", "version": "1.15.0", "description": "Domain name parser based on the Public Suffix List", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/psl@1.15.0", "type": "library", "bom-ref": "pkg:npm/psl@1.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/psl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/psl/package.json" } ], "concludedValue": "node_modules/psl/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "pseudomap", "version": "1.0.2", "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pseudomap@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/pseudomap#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/pseudomap.git" } ], "type": "library", "bom-ref": "pkg:npm/pseudomap@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pseudomap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pseudomap/package.json" } ], "concludedValue": "node_modules/pseudomap/package.json" } ] } }, { "authors": [ { "name": "Rob Wu (https://robwu.nl/)" } ], "group": "", "name": "proxy-from-env", "version": "1.1.0", "description": "Offers getProxyForUrl to get the proxy URL for a URL, respecting the *_PROXY (e.g. HTTP_PROXY) and NO_PROXY environment variables.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-from-env@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rob--W/proxy-from-env#readme" }, { "type": "vcs", "url": "https://github.com/Rob--W/proxy-from-env.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-from-env@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-from-env/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-from-env/package.json" } ], "concludedValue": "node_modules/proxy-from-env/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "progress", "version": "2.0.3", "description": "Flexible ascii progress bar", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/progress@2.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/node-progress" } ], "type": "library", "bom-ref": "pkg:npm/progress@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/progress/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/progress/package.json" } ], "concludedValue": "node_modules/progress/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "process", "version": "0.11.10", "description": "process information for node.js and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process@0.11.10", "externalReferences": [ { "type": "vcs", "url": "git://github.com/shtylman/node-process.git" } ], "type": "library", "bom-ref": "pkg:npm/process@0.11.10", "properties": [ { "name": "SrcFile", "value": "node_modules/process/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process/package.json" } ], "concludedValue": "node_modules/process/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pretty-bytes", "version": "4.0.2", "description": "Convert bytes to a human readable string: 1337 → 1.34 kB", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pretty-bytes@4.0.2", "type": "library", "bom-ref": "pkg:npm/pretty-bytes@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pretty-bytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pretty-bytes/package.json" } ], "concludedValue": "node_modules/pretty-bytes/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "prelude-ls", "version": "1.2.1", "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prelude-ls@1.2.1", "externalReferences": [ { "type": "website", "url": "http://preludels.com" }, { "type": "vcs", "url": "git://github.com/gkz/prelude-ls.git" } ], "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/prelude-ls/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prelude-ls/package.json" } ], "concludedValue": "node_modules/prelude-ls/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier " } ], "group": "", "name": "pre-commit", "version": "1.2.2", "description": "Automatically install pre-commit hooks for your npm modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pre-commit@1.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/observing/pre-commit" }, { "type": "vcs", "url": "git://github.com/observing/pre-commit.git" } ], "type": "library", "bom-ref": "pkg:npm/pre-commit@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pre-commit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pre-commit/package.json" } ], "concludedValue": "node_modules/pre-commit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.2.14", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.2.14", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.2.14", "properties": [ { "name": "SrcFile", "value": "node_modules/pre-commit/node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pre-commit/node_modules/which/package.json" } ], "concludedValue": "node_modules/pre-commit/node_modules/which/package.json" } ] } }, { "authors": [ { "name": "IndigoUnited (http://indigounited.com)" } ], "group": "", "name": "cross-spawn", "version": "5.1.0", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@5.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/IndigoUnited/node-cross-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pre-commit/node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pre-commit/node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/pre-commit/node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "possible-typed-array-names", "version": "1.1.0", "description": "A simple list of possible Typed Array names.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/possible-typed-array-names@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/possible-typed-array-names#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/possible-typed-array-names.git" } ], "type": "library", "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/possible-typed-array-names/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/possible-typed-array-names/package.json" } ], "concludedValue": "node_modules/possible-typed-array-names/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley " } ], "group": "", "name": "pkgresolve", "version": "1.1.4", "description": "Resolve a dependency of another package.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkgresolve@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/timoxley/pkgresolve" }, { "type": "vcs", "url": "https://github.com/timoxley/pkgresolve.git" } ], "type": "library", "bom-ref": "pkg:npm/pkgresolve@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/pkgresolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkgresolve/package.json" } ], "concludedValue": "node_modules/pkgresolve/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley " } ], "group": "", "name": "pkgfiles", "version": "2.3.2", "description": "List all files which would be published in a package.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkgfiles@2.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/timoxley/pkgfiles" }, { "type": "vcs", "url": "https://github.com/timoxley/pkgfiles.git" } ], "type": "library", "bom-ref": "pkg:npm/pkgfiles@2.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pkgfiles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkgfiles/package.json" } ], "concludedValue": "node_modules/pkgfiles/package.json" } ] } }, { "authors": [ { "name": "Tim Oxley " } ], "group": "", "name": "pkg", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg@1.0.0", "type": "library", "bom-ref": "pkg:npm/pkg@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkgfiles/test/pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkgfiles/test/pkg/package.json" } ], "concludedValue": "node_modules/pkgfiles/test/pkg/package.json" } ] } }, { "authors": [ { "name": "Braveg1rl " } ], "group": "", "name": "performance-now", "version": "2.1.0", "description": "Implements performance.now (based on process.hrtime).", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/performance-now@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/braveg1rl/performance-now" }, { "type": "vcs", "url": "git://github.com/braveg1rl/performance-now.git" } ], "type": "library", "bom-ref": "pkg:npm/performance-now@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/performance-now/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/performance-now/package.json" } ], "concludedValue": "node_modules/performance-now/package.json" } ] }, "tags": [ "performance" ] }, { "authors": [ { "name": "Andrew Kelley " } ], "group": "", "name": "pend", "version": "1.2.0", "description": "dead-simple optimistic async helper", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pend@1.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/andrewrk/node-pend.git" } ], "type": "library", "bom-ref": "pkg:npm/pend@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pend/package.json" } ], "concludedValue": "node_modules/pend/package.json" } ] } }, { "authors": [ { "name": "Daniel Cousens" } ], "group": "", "name": "pbkdf2", "version": "3.1.6", "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pbkdf2@3.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/pbkdf2" }, { "type": "vcs", "url": "https://github.com/browserify/pbkdf2.git" } ], "type": "library", "bom-ref": "pkg:npm/pbkdf2@3.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/pbkdf2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pbkdf2/package.json" } ], "concludedValue": "node_modules/pbkdf2/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Timothy J Fontaine (http://atxconsulting.com)" } ], "group": "", "name": "path-platform", "version": "0.11.15", "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-platform@0.11.15", "externalReferences": [ { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform" }, { "type": "vcs", "url": "http://github.com/tjfontaine/node-path-platform.git" } ], "type": "library", "bom-ref": "pkg:npm/path-platform@0.11.15", "properties": [ { "name": "SrcFile", "value": "node_modules/path-platform/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-platform/package.json" } ], "concludedValue": "node_modules/path-platform/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.7", "description": "Node.js path.parse() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "2.0.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@2.0.1", "type": "library", "bom-ref": "pkg:npm/path-key@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "path-browserify", "version": "0.0.1", "description": "the path module from node core for browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/path-browserify" }, { "type": "vcs", "url": "git://github.com/substack/path-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/path-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-browserify/package.json" } ], "concludedValue": "node_modules/path-browserify/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "parse-github-url", "version": "1.0.4", "description": "Parse a github URL into an object.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-github-url@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/parse-github-url" } ], "type": "library", "bom-ref": "pkg:npm/parse-github-url@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-github-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-github-url/package.json" } ], "concludedValue": "node_modules/parse-github-url/package.json" } ] } }, { "group": "", "name": "parse-asn1", "version": "5.1.9", "description": "utility library for parsing asn1 files for use with browserify-sign.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-asn1@5.1.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/crypto-browserify/parse-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-asn1@5.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-asn1/package.json" } ], "concludedValue": "node_modules/parse-asn1/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "parents", "version": "1.0.1", "description": "return all the parent directories for a directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parents@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-parents" }, { "type": "vcs", "url": "git://github.com/substack/node-parents.git" } ], "type": "library", "bom-ref": "pkg:npm/parents@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parents/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parents/package.json" } ], "concludedValue": "node_modules/parents/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parent-module", "version": "1.0.1", "description": "Get the path of the parent module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parent-module@1.0.1", "type": "library", "bom-ref": "pkg:npm/parent-module@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/parent-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parent-module/package.json" } ], "concludedValue": "node_modules/parent-module/package.json" } ] } }, { "group": "", "name": "pako", "version": "0.2.9", "description": "zlib port to javascript - fast, modularized, with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pako@0.2.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/pako" } ], "type": "library", "bom-ref": "pkg:npm/pako@0.2.9", "properties": [ { "name": "SrcFile", "value": "node_modules/pako/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pako/package.json" } ], "concludedValue": "node_modules/pako/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "own-keys", "version": "1.0.2", "description": "Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/own-keys@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/own-keys#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/own-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/own-keys@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/own-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/own-keys/package.json" } ], "concludedValue": "node_modules/own-keys/package.json" } ] } }, { "group": "", "name": "os-shim", "version": "0.1.3", "description": "Native OS module API shim for older node.js versions", "scope": "optional", "purl": "pkg:npm/os-shim@0.1.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/h2non/node-os-shim" }, { "type": "vcs", "url": "https://github.com/h2non/node-os-shim.git" } ], "type": "library", "bom-ref": "pkg:npm/os-shim@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/os-shim/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-shim/package.json" } ], "concludedValue": "node_modules/os-shim/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Drew Young" } ], "group": "", "name": "os-browserify", "version": "0.1.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-browserify@0.1.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/drewyoung1/os-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/os-browserify@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-browserify/package.json" } ], "concludedValue": "node_modules/os-browserify/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "optionator", "version": "0.9.4", "description": "option parsing and help generation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optionator@0.9.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/optionator" }, { "type": "vcs", "url": "git://github.com/gkz/optionator.git" } ], "type": "library", "bom-ref": "pkg:npm/optionator@0.9.4", "properties": [ { "name": "SrcFile", "value": "node_modules/optionator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optionator/package.json" } ], "concludedValue": "node_modules/optionator/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "oop", "version": "0.0.3", "description": "Simple & light-weight oop.", "scope": "optional", "purl": "pkg:npm/oop@0.0.3", "type": "library", "bom-ref": "pkg:npm/oop@0.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/oop/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oop/package.json" } ], "concludedValue": "node_modules/oop/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object.entries", "version": "1.1.9", "description": "ES2017 spec-compliant Object.entries shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.entries@1.1.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/es-shims/Object.entries.git" } ], "type": "library", "bom-ref": "pkg:npm/object.entries@1.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/object.entries/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.entries/package.json" } ], "concludedValue": "node_modules/object.entries/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object.assign", "version": "4.1.7", "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.assign@4.1.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object.assign.git" } ], "type": "library", "bom-ref": "pkg:npm/object.assign@4.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/object.assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.assign/package.json" } ], "concludedValue": "node_modules/object.assign/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "object-keys", "version": "1.1.1", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object-is", "version": "1.1.6", "description": "ES2015-compliant shim for Object.is - differentiates between -0 and +0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-is@1.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/object-is" }, { "type": "vcs", "url": "git://github.com/es-shims/object-is.git" } ], "type": "library", "bom-ref": "pkg:npm/object-is@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/object-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-is/package.json" } ], "concludedValue": "node_modules/object-is/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.13.4", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/object-inspect" }, { "type": "vcs", "url": "git://github.com/inspect-js/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "authors": [ { "name": "Alex Indigo " } ], "group": "", "name": "obake", "version": "0.1.2", "description": "Pipe javascript into phantomjs, print the output, writing test coverage to disk along the way", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/obake@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexindigo/obake#readme" }, { "type": "vcs", "url": "git+https://github.com/alexindigo/obake.git" } ], "type": "library", "bom-ref": "pkg:npm/obake@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/obake/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/obake/package.json" } ], "concludedValue": "node_modules/obake/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.8.2", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth-sign@0.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "3.0.6", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@3.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@3.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "node-exports-info", "version": "1.6.2", "description": "Info about node `exports` field support: version ranges, categories, etc.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-exports-info@1.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/node-exports-info#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/node-exports-info.git" } ], "type": "library", "bom-ref": "pkg:npm/node-exports-info@1.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/node-exports-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-exports-info/package.json" } ], "concludedValue": "node_modules/node-exports-info/package.json" } ] } }, { "group": "", "name": "nice-try", "version": "1.0.5", "description": "Tries to execute a function and discards any error that occurs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nice-try@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/electerious/nice-try" }, { "type": "vcs", "url": "https://github.com/electerious/nice-try.git" } ], "type": "library", "bom-ref": "pkg:npm/nice-try@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/nice-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nice-try/package.json" } ], "concludedValue": "node_modules/nice-try/package.json" } ] } }, { "group": "", "name": "neo-async", "version": "2.6.2", "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/neo-async@2.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/suguru03/neo-async" } ], "type": "library", "bom-ref": "pkg:npm/neo-async@2.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/neo-async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/neo-async/package.json" } ], "concludedValue": "node_modules/neo-async/package.json" } ] } }, { "authors": [ { "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)" } ], "group": "", "name": "natural-compare", "version": "1.4.0", "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/natural-compare@1.4.0", "type": "library", "bom-ref": "pkg:npm/natural-compare@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/natural-compare/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/natural-compare/package.json" } ], "concludedValue": "node_modules/natural-compare/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "module-deps", "version": "4.1.1", "description": "walk the dependency graph to generate json output that can be fed into browser-pack", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/module-deps@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/module-deps" }, { "type": "vcs", "url": "git://github.com/substack/module-deps.git" } ], "type": "library", "bom-ref": "pkg:npm/module-deps@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/module-deps/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/module-deps/package.json" } ], "concludedValue": "node_modules/module-deps/package.json" } ] }, "tags": [ "graph", "json" ] }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "mock-property", "version": "1.1.2", "description": "Given an object and a property, replaces a property descriptor (or deletes it), and returns a thunk to restore it.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mock-property@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/mock-property#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/mock-property.git" } ], "type": "library", "bom-ref": "pkg:npm/mock-property@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/mock-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mock-property/package.json" } ], "concludedValue": "node_modules/mock-property/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.6", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "minimalistic-crypto-utils", "version": "1.0.1", "description": "Minimalistic tools for JS crypto modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/minimalistic-crypto-utils#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minimalistic-crypto-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimalistic-crypto-utils/package.json" } ], "concludedValue": "node_modules/minimalistic-crypto-utils/package.json" } ] }, "tags": [ "crypto", "tools" ] }, { "group": "", "name": "minimalistic-assert", "version": "1.0.1", "description": "minimalistic-assert ===", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimalistic-assert@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/minimalistic-assert" }, { "type": "vcs", "url": "https://github.com/calvinmetcalf/minimalistic-assert.git" } ], "type": "library", "bom-ref": "pkg:npm/minimalistic-assert@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/minimalistic-assert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimalistic-assert/package.json" } ], "concludedValue": "node_modules/minimalistic-assert/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "description": "The ultimate javascript content-type utility.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.35", "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "ImportedModules", "value": "mime-types" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ], "occurrences": [ { "location": "lib/form_data.js", "line": 12 } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.52.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "2.6.0", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime@2.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/mime" } ], "type": "library", "bom-ref": "pkg:npm/mime@2.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "authors": [ { "name": "Fedor Indutny " } ], "group": "", "name": "miller-rabin", "version": "4.0.1", "description": "Miller Rabin algorithm for primality test", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/miller-rabin@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/indutny/miller-rabin" } ], "type": "library", "bom-ref": "pkg:npm/miller-rabin@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/miller-rabin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/miller-rabin/package.json" } ], "concludedValue": "node_modules/miller-rabin/package.json" } ] } }, { "authors": [ { "name": "Kirill Fomichev (https://github.com/fanatid)" } ], "group": "", "name": "md5.js", "version": "1.3.5", "description": "node style md5 on pure JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/md5.js@1.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/md5.js" }, { "type": "vcs", "url": "https://github.com/crypto-browserify/md5.js.git" } ], "type": "library", "bom-ref": "pkg:npm/md5.js@1.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/md5.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/md5.js/package.json" } ], "concludedValue": "node_modules/md5.js/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "math-intrinsics", "version": "1.1.0", "description": "ES Math-related intrinsics and helpers, robustly cached.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/math-intrinsics@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/math-intrinsics#readme" }, { "type": "vcs", "url": "git+https://github.com/es-shims/math-intrinsics.git" } ], "type": "library", "bom-ref": "pkg:npm/math-intrinsics@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/math-intrinsics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/math-intrinsics/package.json" } ], "concludedValue": "node_modules/math-intrinsics/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "map-limit", "version": "0.0.1", "description": "async.mapLimit's functionality available as a standalone npm module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/map-limit@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/map-limit" }, { "type": "vcs", "url": "git://github.com/hughsk/map-limit" } ], "type": "library", "bom-ref": "pkg:npm/map-limit@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/map-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/map-limit/package.json" } ], "concludedValue": "node_modules/map-limit/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.3.3", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.3.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/map-limit/node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/map-limit/node_modules/once/package.json" } ], "concludedValue": "node_modules/map-limit/node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "4.1.5", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@4.1.5", "type": "library", "bom-ref": "pkg:npm/lru-cache@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Gregg Caines" } ], "group": "", "name": "log-driver", "version": "1.2.7", "description": "log-driver is a simple logging framework for logging to stdout", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/log-driver@1.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/cainus/logdriver" }, { "type": "vcs", "url": "git://github.com/cainus/logdriver.git" } ], "type": "framework", "bom-ref": "pkg:npm/log-driver@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/log-driver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/log-driver/package.json" } ], "concludedValue": "node_modules/log-driver/package.json" } ] }, "tags": [ "framework", "logging" ] }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash.merge", "version": "4.6.2", "description": "The Lodash method `_.merge` exported as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.merge@4.6.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.merge@4.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.merge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.merge/package.json" } ], "concludedValue": "node_modules/lodash.merge/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.memoize", "version": "3.0.4", "description": "The modern build of lodash’s `_.memoize` as a module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.memoize@3.0.4", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.memoize@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.memoize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.memoize/package.json" } ], "concludedValue": "node_modules/lodash.memoize/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "levn", "version": "0.4.1", "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/levn@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/levn" }, { "type": "vcs", "url": "git://github.com/gkz/levn.git" } ], "type": "library", "bom-ref": "pkg:npm/levn@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/levn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/levn/package.json" } ], "concludedValue": "node_modules/levn/package.json" } ] } }, { "authors": [ { "name": "Dav Glass " } ], "group": "", "name": "lcov-parse", "version": "1.0.0", "description": "Parse lcov results files and return JSON", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lcov-parse@1.0.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/davglass/lcov-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/lcov-parse@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lcov-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lcov-parse/package.json" } ], "concludedValue": "node_modules/lcov-parse/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "labeled-stream-splicer", "version": "2.0.2", "description": "stream splicer with labels", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/labeled-stream-splicer@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/labeled-stream-splicer" }, { "type": "vcs", "url": "git://github.com/browserify/labeled-stream-splicer.git" } ], "type": "library", "bom-ref": "pkg:npm/labeled-stream-splicer@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/labeled-stream-splicer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/labeled-stream-splicer/package.json" } ], "concludedValue": "node_modules/labeled-stream-splicer/package.json" } ] } }, { "authors": [ { "name": "Jared Wray (http://jaredwray.com)" } ], "group": "", "name": "keyv", "version": "4.5.4", "description": "Simple key-value storage with support for multiple backends", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/keyv@4.5.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jaredwray/keyv" }, { "type": "vcs", "url": "git+https://github.com/jaredwray/keyv.git" } ], "type": "library", "bom-ref": "pkg:npm/keyv@4.5.4", "properties": [ { "name": "SrcFile", "value": "node_modules/keyv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/keyv/package.json" } ], "concludedValue": "node_modules/keyv/package.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.2", "description": "utilities for primitive JavaScript types", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsprim@1.4.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-jsprim.git" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/jsprim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsprim/package.json" } ], "concludedValue": "node_modules/jsprim/package.json" } ] } }, { "authors": [ { "name": "Tim Caswell " } ], "group": "", "name": "jsonparse", "version": "1.3.1", "description": "This is a pure-js JSON streaming parser for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonparse@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/creationix/jsonparse.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonparse@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonparse/package.json" } ], "concludedValue": "node_modules/jsonparse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Douglas Crockford (https://crockford.com/)" } ], "group": "", "name": "jsonify", "version": "0.0.1", "description": "JSON without touching any globals", "scope": "optional", "licenses": [ { "license": { "name": "Public Domain", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/jsonify.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonify/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonify/package.json" } ], "concludedValue": "node_modules/jsonify/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.1", "description": "Like JSON.stringify, but doesn't blow up on circular refs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/json-stringify-safe" }, { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "json-stable-stringify-without-jsonify", "version": "1.0.1", "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/samn/json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/samn/json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stable-stringify-without-jsonify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stable-stringify-without-jsonify/package.json" } ], "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "json-stable-stringify", "version": "0.0.1", "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stable-stringify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/substack/json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stable-stringify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stable-stringify/package.json" } ], "concludedValue": "node_modules/json-stable-stringify/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "json-schema-traverse", "version": "0.4.1", "description": "Traverse JSON Schema passing each schema object to callback", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/json-schema-traverse#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-traverse/package.json" } ], "concludedValue": "node_modules/json-schema-traverse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "json-schema", "version": "0.4.0", "description": "JSON Schema validation and specifications", "scope": "optional", "licenses": [ { "expression": "AFL-2.1 OR BSD-3-Clause" } ], "purl": "pkg:npm/json-schema@0.4.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kriszyp/json-schema" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema/package.json" } ], "concludedValue": "node_modules/json-schema/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Dominic Tarr (http://dominictarr.com)" } ], "group": "", "name": "json-buffer", "version": "3.0.1", "description": "JSON parse & stringify that supports binary via bops & base64", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-buffer@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/json-buffer" }, { "type": "vcs", "url": "git://github.com/dominictarr/json-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/json-buffer@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-buffer/package.json" } ], "concludedValue": "node_modules/json-buffer/package.json" } ] }, "tags": [ "binary", "parse" ] }, { "authors": [ { "name": "Tom Wu" } ], "group": "", "name": "jsbn", "version": "0.1.1", "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andyperlitch/jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsbn/package.json" } ], "concludedValue": "node_modules/jsbn/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "4.3.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@4.3.1", "type": "library", "bom-ref": "pkg:npm/js-yaml@4.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Matt Oestreich" } ], "group": "", "name": "js-randomness-predictor", "version": "1.5.6", "description": "Predict Math.random output in Node, Chrome, and Firefox", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-randomness-predictor@1.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/matthewoestreich/js-randomness-predictor#readme" }, { "type": "vcs", "url": "git+https://github.com/matthewoestreich/js-randomness-predictor.git" } ], "type": "library", "bom-ref": "pkg:npm/js-randomness-predictor@1.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/js-randomness-predictor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-randomness-predictor/package.json" } ], "concludedValue": "node_modules/js-randomness-predictor/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul", "version": "0.4.5", "description": "Yet another JS code coverage tool that computes statement, line, function and branch coverage with module loader hooks to transparently add coverage when running tests. Supports all JS coverage use cases including unit tests, server side functional tests and browser tests. Built for scale", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/istanbul@0.4.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/gotwarlost/istanbul.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul@0.4.5", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul/package.json" } ], "concludedValue": "node_modules/istanbul/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "3.2.3", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@3.2.3", "type": "library", "bom-ref": "pkg:npm/supports-color@3.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/istanbul/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.1.7", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.1.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/resolve/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-resolve/node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/node_modules/resolve/package.json" } ], "concludedValue": "node_modules/browser-resolve/node_modules/resolve/package.json" } ] } }, { "group": "", "name": "deep", "version": "1.2.3", "scope": "optional", "purl": "pkg:npm/deep@1.2.3", "type": "library", "bom-ref": "pkg:npm/deep@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" }, { "name": "SrcFile", "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ], "concludedValue": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "3.15.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@3.15.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.15.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/js-yaml/package.json" }, { "name": "SrcFile", "value": "node_modules/coveralls/node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coveralls/node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/coveralls/node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "4.0.1", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/js-yaml/node_modules/esprima/package.json" }, { "name": "SrcFile", "value": "node_modules/coveralls/node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coveralls/node_modules/esprima/package.json" } ], "concludedValue": "node_modules/coveralls/node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "1.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@1.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul/node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/istanbul/node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "5.0.15", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@5.0.15", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@5.0.15", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul/node_modules/glob/package.json" } ], "concludedValue": "node_modules/istanbul/node_modules/glob/package.json" } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@1.0.10", "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul/node_modules/argparse/package.json" }, { "name": "SrcFile", "value": "node_modules/coveralls/node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/coveralls/node_modules/argparse/package.json" } ], "concludedValue": "node_modules/coveralls/node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "isstream", "version": "0.1.2", "description": "Determine if an object is a Stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/isstream" }, { "type": "vcs", "url": "https://github.com/rvagg/isstream.git" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/isstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isstream/package.json" } ], "concludedValue": "node_modules/isstream/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-weakset", "version": "2.0.4", "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-weakset@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-weakset#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-weakset.git" } ], "type": "library", "bom-ref": "pkg:npm/is-weakset@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-weakset/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-weakset/package.json" } ], "concludedValue": "node_modules/is-weakset/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-weakref", "version": "1.1.1", "description": "Is this value a JS WeakRef? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-weakref@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-weakref#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-weakref.git" } ], "type": "library", "bom-ref": "pkg:npm/is-weakref@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-weakref/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-weakref/package.json" } ], "concludedValue": "node_modules/is-weakref/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-weakmap", "version": "2.0.2", "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-weakmap@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-weakmap#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-weakmap.git" } ], "type": "library", "bom-ref": "pkg:npm/is-weakmap@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-weakmap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-weakmap/package.json" } ], "concludedValue": "node_modules/is-weakmap/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "is-typedarray", "version": "1.0.0", "description": "Detect whether or not an object is a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/is-typedarray" }, { "type": "vcs", "url": "git://github.com/hughsk/is-typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typedarray/package.json" } ], "concludedValue": "node_modules/is-typedarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-typed-array", "version": "1.1.15", "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typed-array@1.1.15", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-typed-array.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typed-array@1.1.15", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typed-array/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typed-array/package.json" } ], "concludedValue": "node_modules/is-typed-array/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-symbol", "version": "1.1.1", "description": "Determine if a value is an ES6 Symbol or not.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-symbol@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-symbol.git" } ], "type": "library", "bom-ref": "pkg:npm/is-symbol@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-symbol/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-symbol/package.json" } ], "concludedValue": "node_modules/is-symbol/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-string", "version": "1.1.1", "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-string@1.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-string.git" } ], "type": "library", "bom-ref": "pkg:npm/is-string@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-string/package.json" } ], "concludedValue": "node_modules/is-string/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-shared-array-buffer", "version": "1.0.4", "description": "Is this value a JS SharedArrayBuffer?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-shared-array-buffer@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-shared-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-shared-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-shared-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-shared-array-buffer/package.json" } ], "concludedValue": "node_modules/is-shared-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-set", "version": "2.0.3", "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-set@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-set#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-set.git" } ], "type": "library", "bom-ref": "pkg:npm/is-set@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-set/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-set/package.json" } ], "concludedValue": "node_modules/is-set/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-regex", "version": "1.2.1", "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regex@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-regex" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regex/package.json" } ], "concludedValue": "node_modules/is-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "3.0.3", "description": "Check if a path is inside another path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-path-inside@3.0.3", "type": "library", "bom-ref": "pkg:npm/is-path-inside@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-number-object", "version": "1.1.1", "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-number-object@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-number-object#readme" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-number-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-number-object@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-number-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-number-object/package.json" } ], "concludedValue": "node_modules/is-number-object/package.json" } ] } }, { "authors": [ { "name": "Alex Indigo " } ], "group": "", "name": "is-node-modern", "version": "1.0.0", "description": "Detects if node is modern, with helpful command line tools", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-node-modern@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexindigo/is-node-modern#readme" }, { "type": "vcs", "url": "git+https://github.com/alexindigo/is-node-modern.git" } ], "type": "library", "bom-ref": "pkg:npm/is-node-modern@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-node-modern/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-node-modern/package.json" } ], "concludedValue": "node_modules/is-node-modern/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-negative-zero", "version": "2.0.3", "description": "Is this value negative zero? === will lie to you", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-negative-zero@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-negative-zero" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-negative-zero.git" } ], "type": "library", "bom-ref": "pkg:npm/is-negative-zero@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-negative-zero/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-negative-zero/package.json" } ], "concludedValue": "node_modules/is-negative-zero/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-map", "version": "2.0.3", "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-map@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-map#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-map.git" } ], "type": "library", "bom-ref": "pkg:npm/is-map@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-map/package.json" } ], "concludedValue": "node_modules/is-map/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-glob", "version": "4.0.3", "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-glob@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/is-glob" } ], "type": "library", "bom-ref": "pkg:npm/is-glob@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-glob/package.json" } ], "concludedValue": "node_modules/is-glob/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-generator-function", "version": "1.1.2", "description": "Determine if a function is a native generator function.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-generator-function@1.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-generator-function.git" } ], "type": "library", "bom-ref": "pkg:npm/is-generator-function@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-generator-function/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-generator-function/package.json" } ], "concludedValue": "node_modules/is-generator-function/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-finalizationregistry", "version": "1.1.1", "description": "Is this value a JS FinalizationRegistry? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-finalizationregistry@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-finalizationregistry#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-finalizationregistry.git" } ], "type": "library", "bom-ref": "pkg:npm/is-finalizationregistry@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-finalizationregistry/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-finalizationregistry/package.json" } ], "concludedValue": "node_modules/is-finalizationregistry/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "is-extglob", "version": "2.1.1", "description": "Returns true if a string has an extglob.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-extglob@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/is-extglob" } ], "type": "library", "bom-ref": "pkg:npm/is-extglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-extglob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-extglob/package.json" } ], "concludedValue": "node_modules/is-extglob/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-document.all", "version": "1.0.0", "description": "Is this value `document.all`, i.e. an object with the [[IsHTMLDDA]] internal slot?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-document.all@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-document.all#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-document.all.git" } ], "type": "library", "bom-ref": "pkg:npm/is-document.all@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-document.all/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-document.all/package.json" } ], "concludedValue": "node_modules/is-document.all/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "is-date-object", "version": "1.1.0", "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-date-object@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-date-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-date-object@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-date-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-date-object/package.json" } ], "concludedValue": "node_modules/is-date-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-data-view", "version": "1.0.2", "description": "Is this value a JS DataView? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-data-view@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-data-view#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-data-view.git" } ], "type": "library", "bom-ref": "pkg:npm/is-data-view@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-data-view/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-data-view/package.json" } ], "concludedValue": "node_modules/is-data-view/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-core-module", "version": "2.16.2", "description": "Is this specifier a node.js core module?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-core-module@2.16.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-core-module" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-core-module.git" } ], "type": "library", "bom-ref": "pkg:npm/is-core-module@2.16.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-core-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-core-module/package.json" } ], "concludedValue": "node_modules/is-core-module/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-callable", "version": "1.2.7", "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-callable@1.2.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-callable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/is-callable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-callable/package.json" } ], "concludedValue": "node_modules/is-callable/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "is-buffer", "version": "1.1.6", "description": "Determine if an object is a Buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-buffer@1.1.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/is-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/is-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-buffer/package.json" } ], "concludedValue": "node_modules/is-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-boolean-object", "version": "1.2.2", "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-boolean-object@1.2.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-boolean-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-boolean-object@1.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-boolean-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-boolean-object/package.json" } ], "concludedValue": "node_modules/is-boolean-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-bigint", "version": "1.1.0", "description": "Is this value an ES BigInt?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-bigint@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-bigint#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-bigint.git" } ], "type": "library", "bom-ref": "pkg:npm/is-bigint@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-bigint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-bigint/package.json" } ], "concludedValue": "node_modules/is-bigint/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-async-function", "version": "2.1.1", "description": "Determine if a function is a native async function.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-async-function@2.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/inspect-js/is-async-function.git" } ], "type": "library", "bom-ref": "pkg:npm/is-async-function@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-async-function/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-async-function/package.json" } ], "concludedValue": "node_modules/is-async-function/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "is-array-buffer", "version": "3.0.5", "description": "Is this value a JS ArrayBuffer?", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-array-buffer@3.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-array-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/inspect-js/is-array-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-array-buffer@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/is-array-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-array-buffer/package.json" } ], "concludedValue": "node_modules/is-array-buffer/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-arguments", "version": "1.2.0", "description": "Is this an arguments object? It's a harder question than you think.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arguments@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/is-arguments" }, { "type": "vcs", "url": "git://github.com/inspect-js/is-arguments.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arguments@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arguments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arguments/package.json" } ], "concludedValue": "node_modules/is-arguments/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband " } ], "group": "", "name": "internal-slot", "version": "1.1.0", "description": "ES spec-like internal slots", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/internal-slot@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/internal-slot#readme" }, { "type": "vcs", "url": "git+https://github.com/ljharb/internal-slot.git" } ], "type": "library", "bom-ref": "pkg:npm/internal-slot@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/internal-slot/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/internal-slot/package.json" } ], "concludedValue": "node_modules/internal-slot/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "insert-module-globals", "version": "7.2.1", "description": "insert implicit module globals into a module-deps stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/insert-module-globals@7.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/insert-module-globals" }, { "type": "vcs", "url": "git://github.com/browserify/insert-module-globals.git" } ], "type": "library", "bom-ref": "pkg:npm/insert-module-globals@7.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/insert-module-globals/package.json" } ], "concludedValue": "node_modules/insert-module-globals/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "typedarray", "version": "0.0.6", "description": "TypedArray polyfill for old browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typedarray@0.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/typedarray" }, { "type": "vcs", "url": "git://github.com/substack/typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/typedarray@0.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/typedarray/package.json" }, { "name": "SrcFile", "value": "node_modules/extract-zip/node_modules/typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extract-zip/node_modules/typedarray/package.json" } ], "concludedValue": "node_modules/extract-zip/node_modules/typedarray/package.json" } ] } }, { "authors": [ { "name": "Max Ogden " } ], "group": "", "name": "concat-stream", "version": "1.6.2", "description": "writable stream that concatenates strings or binary data and calls a callback with the result", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-stream@1.6.2", "externalReferences": [ { "type": "vcs", "url": "http://github.com/maxogden/concat-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-stream@1.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/insert-module-globals/node_modules/concat-stream/package.json" }, { "name": "SrcFile", "value": "node_modules/extract-zip/node_modules/concat-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extract-zip/node_modules/concat-stream/package.json" } ], "concludedValue": "node_modules/extract-zip/node_modules/concat-stream/package.json" } ] }, "tags": [ "binary", "stream" ] }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "inline-source-map", "version": "0.6.3", "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inline-source-map@0.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/inline-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/inline-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/inline-source-map@0.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/inline-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inline-source-map/package.json" } ], "concludedValue": "node_modules/inline-source-map/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "group": "", "name": "indexof", "version": "0.0.1", "description": "Microsoft sucks", "scope": "optional", "purl": "pkg:npm/indexof@0.0.1", "type": "library", "bom-ref": "pkg:npm/indexof@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/indexof/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indexof/package.json" } ], "concludedValue": "node_modules/indexof/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "in-publish", "version": "2.0.1", "description": "Detect if we were run as a result of `npm publish`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/in-publish@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/in-publish" }, { "type": "vcs", "url": "https://github.com/iarna/in-publish" } ], "type": "library", "bom-ref": "pkg:npm/in-publish@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/in-publish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/in-publish/package.json" } ], "concludedValue": "node_modules/in-publish/package.json" } ] } }, { "group": "", "name": "test", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/test@1.0.0", "type": "library", "bom-ref": "pkg:npm/test@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/in-publish/test/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/in-publish/test/package.json" } ], "concludedValue": "node_modules/in-publish/test/package.json" } ] } }, { "authors": [ { "name": "Jens Taylor (https://github.com/homebrewing)" } ], "group": "", "name": "imurmurhash", "version": "0.1.4", "description": "An incremental implementation of MurmurHash3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/imurmurhash@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" }, { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" } ], "type": "library", "bom-ref": "pkg:npm/imurmurhash@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/imurmurhash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/imurmurhash/package.json" } ], "concludedValue": "node_modules/imurmurhash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "import-from", "version": "3.0.0", "description": "Import a module like with `require()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-from@3.0.0", "type": "library", "bom-ref": "pkg:npm/import-from@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-from/package.json" } ], "concludedValue": "node_modules/import-from/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "5.0.0", "description": "Resolve the path of a module like `require.resolve()` but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@5.0.0", "type": "library", "bom-ref": "pkg:npm/resolve-from@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-from/node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-from/node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/import-from/node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "import-fresh", "version": "3.3.1", "description": "Import a module while bypassing the cache", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-fresh@3.3.1", "type": "library", "bom-ref": "pkg:npm/import-fresh@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/import-fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-fresh/package.json" } ], "concludedValue": "node_modules/import-fresh/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "import-cwd", "version": "3.0.0", "description": "Import a module like with `require()` but from the current working directory", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/import-cwd@3.0.0", "type": "library", "bom-ref": "pkg:npm/import-cwd@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/import-cwd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/import-cwd/package.json" } ], "concludedValue": "node_modules/import-cwd/package.json" } ] } }, { "authors": [ { "name": "kael" } ], "group": "", "name": "ignore", "version": "5.3.2", "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@5.3.2", "type": "library", "bom-ref": "pkg:npm/ignore@5.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore/package.json" } ], "concludedValue": "node_modules/ignore/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "ieee754", "version": "1.2.1", "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ieee754@1.2.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/ieee754.git" } ], "type": "library", "bom-ref": "pkg:npm/ieee754@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ieee754/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ieee754/package.json" } ], "concludedValue": "node_modules/ieee754/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "https-proxy-agent", "version": "2.2.4", "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-proxy-agent@2.2.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/TooTallNate/node-https-proxy-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@2.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/https-proxy-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-proxy-agent/package.json" } ], "concludedValue": "node_modules/https-proxy-agent/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "3.2.7", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@3.2.7", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/https-proxy-agent/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-proxy-agent/node_modules/debug/package.json" } ], "concludedValue": "node_modules/https-proxy-agent/node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "https-browserify", "version": "0.0.1", "description": "https module compatability for browserify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/https-browserify@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/https-browserify" }, { "type": "vcs", "url": "git://github.com/substack/https-browserify.git" } ], "type": "library", "bom-ref": "pkg:npm/https-browserify@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/https-browserify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/https-browserify/package.json" } ], "concludedValue": "node_modules/https-browserify/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "1.2.0", "description": "Reference implementation of Joyent's HTTP Signature scheme.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-signature@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-http-signature/" }, { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "Andres Suarez " } ], "group": "", "name": "htmlescape", "version": "1.1.1", "description": "Properly escape JSON for usage as an object literal inside of a `