{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:3ec74d92-9e93-429d-9b17-3909c92e2e25", "version": 1, "metadata": { "timestamp": "2026-08-03T20:44:47Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "formidable", "group": "", "version": "1.2.6", "description": "(DEPRECATED! Install formidable@v2) A node.js module for parsing form data, especially file uploads.", "purl": "pkg:npm/formidable@1.2.6", "bom-ref": "pkg:npm/formidable@1.2.6", "properties": [ { "name": "cdx:npm:scripts", "value": "test, clean" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/node-formidable/formidable" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "gently", "version": "0.8.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bc385db99ec1994dd6a44368e0abeb482b192b2c" } ], "purl": "pkg:npm/gently@0.8.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/gently/-/gently-0.8.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/gently@0.8.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/gently/-/gently-0.8.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "findit", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ac7fe600cd6a32a35672836b74cf6f1dde2e11f8" } ], "purl": "pkg:npm/findit@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/findit/-/findit-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/findit@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/findit/-/findit-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "seq", "version": "0.3.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ae02af3a424793d8ccbf212d69174e0c54dffe38" } ], "purl": "pkg:npm/seq@0.3.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/seq/-/seq-0.3.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/seq@0.3.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/seq/-/seq-0.3.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chainsaw", "version": "0.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "11a05102d1c4c785b6d0415d336d5a3a1612913e" } ], "purl": "pkg:npm/chainsaw@0.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chainsaw/-/chainsaw-0.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chainsaw@0.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chainsaw/-/chainsaw-0.0.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "traverse", "version": "0.3.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "717b8f220cc0bb7b44e40514c22b2e8bbc70d8b9" } ], "purl": "pkg:npm/traverse@0.3.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/traverse/-/traverse-0.3.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.3.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/traverse/-/traverse-0.3.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "hashish", "version": "0.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6d60bc6ffaf711b6afd60e426d077988014e6554" } ], "purl": "pkg:npm/hashish@0.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/hashish/-/hashish-0.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/hashish@0.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/hashish/-/hashish-0.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "traverse", "version": "0.6.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "cbdf560fd7b9af632502fed40f918c157ea97137" } ], "purl": "pkg:npm/traverse@0.6.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/traverse/-/traverse-0.6.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/traverse@0.6.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/traverse/-/traverse-0.6.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "urun", "version": "0.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e0fa856980367d86bf146e180bc3890320ab1d2f" } ], "purl": "pkg:npm/urun@0.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/urun/-/urun-0.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/urun@0.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/urun/-/urun-0.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "utest", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3862e2975309ea5de0940444a6c6ee0179726a16" } ], "purl": "pkg:npm/utest@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/utest/-/utest-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/utest@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/utest/-/utest-0.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "utest", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fc09451fe697b9008d0c432fe0db439d6cf37914" } ], "purl": "pkg:npm/utest@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/utest/-/utest-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/utest@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/utest/-/utest-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "request", "version": "2.88.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "32cbed3ab7c6f5972b3b0016f908be17a1db0f40965c487da2eefbb8e6fb14cd963e1c13eec98cf37dcfcda9e124bb205e337cf48afa5763dccd7367329c0a87" } ], "purl": "pkg:npm/request@2.88.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/request/-/request-2.88.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/request@2.88.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/request/-/request-2.88.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "request has been deprecated, see https://github.com/request/request/issues/3142" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "aws-sign2", "version": "0.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8" } ], "purl": "pkg:npm/aws-sign2@0.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "aws4", "version": "1.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c61d51977e21e858b50c2d9658a7f151356a46c367afa2ec2b3dbe85fc03c502569abc7cf9cef295aa8131c1df975535af676c89f3af297dcb42e2cd67e5d2bc" } ], "purl": "pkg:npm/aws4@1.11.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws4@1.11.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "caseless", "version": "0.12.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b681c21ff84033c826543090689420d187151dc" } ], "purl": "pkg:npm/caseless@0.12.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.12.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "combined-stream", "version": "1.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476" } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "delayed-stream", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619" } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "extend", "version": "3.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "forever-agent", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91" } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "form-data", "version": "2.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125" } ], "purl": "pkg:npm/form-data@2.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/form-data@2.3.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "asynckit", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79" } ], "purl": "pkg:npm/asynckit@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/asynckit@0.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.30", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "72b9a30386cbb51f26f6a2e91ef831482853f97a129598bc2789ff688767df3f767bf538ed9d15ff297e5a1f56d38e868055409a8351fdf99d6d961c4922147a" } ], "purl": "pkg:npm/mime-types@2.1.30", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.30.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.30", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.30.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.47.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "401980fc6db2f887de4b8a24b5eb77a9167e3f990f8422915f15e7404b9d62a51a122a00535fcbab6bacdc3fedd497e8e2113d44440fadb07b2b9b0e73325523" } ], "purl": "pkg:npm/mime-db@1.47.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.47.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.47.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.47.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "har-validator", "version": "5.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9e64f64f49658dbc5d4197eca6c9e8f6182b1b7522afa2ace5a7e2b26eb6a68c6a04ceac0e7304b8f9b34eaf17374384c2a28b2dd8758d0237ab213ae8dcdbdf" } ], "purl": "pkg:npm/har-validator@5.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@5.1.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz" }, { "name": "cdx:npm:deprecated", "value": "this library is no longer supported" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ajv", "version": "6.12.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8f77d52e0bd3a39dbb6a7c98c893864d825b1bebe79d062f1349b99a691cd532be9f1029a6408b3082f4699e1d6e55423681928619be933138654ca4068320e2" } ], "purl": "pkg:npm/ajv@6.12.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ajv@6.12.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-deep-equal", "version": "3.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1" } ], "purl": "pkg:npm/fast-deep-equal@3.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@3.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-json-stable-stringify", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f" } ], "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json-schema-traverse", "version": "0.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756" } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uri-js", "version": "4.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06" } ], "purl": "pkg:npm/uri-js@4.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "punycode", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0" } ], "purl": "pkg:npm/punycode@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "har-schema", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a94c2224ebcac04782a0d9035521f24735b7ec92" } ], "purl": "pkg:npm/har-schema@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/har-schema@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "http-signature", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1" } ], "purl": "pkg:npm/http-signature@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "assert-plus", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525" } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2" } ], "purl": "pkg:npm/jsprim@1.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05" } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json-schema", "version": "0.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13" } ], "purl": "pkg:npm/json-schema@0.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3a105ca17053af55d6e270c1f8288682e18da400" } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sshpk", "version": "1.16.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1d75ea554abbfa970a78baaa663ea61c550cbd7b4e26dd6ea14c74f69156eb4d758a74ccc6a23c040f0f33de66cab232c8ac1d9f38dd1632e213a2813d5b4922" } ], "purl": "pkg:npm/sshpk@1.16.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.16.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.16.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.16.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/sshpk-conv, /app/node_modules/.bin/sshpk-sign, /app/node_modules/.bin/sshpk-verify" }, { "name": "cdx:npm:bin", "value": "sshpk-conv, sshpk-sign, sshpk-verify" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "asn1", "version": "0.2.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8f1c334292d08d29965e0c1a09913d373fa09401b4d721754275a06e11b01c8e40e85448118e8856ab478487a91ea23bfe4c84c9011a8010b998110594862f76" } ], "purl": "pkg:npm/asn1@0.2.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "safer-buffer", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6" } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e" } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tweetnacl", "version": "0.14.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5ae68177f192d4456269d108afa93ff8743f4f64" } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "dashdash", "version": "1.14.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0" } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ecc-jsbn", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3a83a904e54353287874c564b7549386849a98c9" } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jsbn", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513" } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "getpass", "version": "0.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa" } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-typedarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a" } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isstream", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a" } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json-stringify-safe", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb" } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "oauth-sign", "version": "0.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365" } ], "purl": "pkg:npm/oauth-sign@0.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "performance-now", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b" } ], "purl": "pkg:npm/performance-now@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/performance-now@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "qs", "version": "6.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318" } ], "purl": "pkg:npm/qs@6.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "safe-buffer", "version": "5.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d" } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tough-cookie", "version": "2.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9e52ec533826d647cb5d25df45931cd4a2c0ba077886a2470d3bdcda10c8c12de66407cc12e31b734dd2ba3305f8611ca5a5ffa9ba1ec9cc3a88ef09c15bf6fa" } ], "purl": "pkg:npm/tough-cookie@2.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "psl", "version": "1.8.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "44874ecf2a1abcafa1035f0e186583a944ec08b86d03b21c67fe8d0ace1f14968704369bfa90c3983201c96151409ab609deebd4ea10c4118a39acedabe86321" } ], "purl": "pkg:npm/psl@1.8.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/psl@1.8.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tunnel-agent", "version": "0.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd" } ], "purl": "pkg:npm/tunnel-agent@0.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uuid", "version": "3.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1e3483470ea0644e4932081cb4705c8d56a4d3cf8a1158522220f31674fd4bd69e826a7ce52fdb45e0554dbe104c5691369b49f64b9868d8676cd10e91b29bfc" } ], "purl": "pkg:npm/uuid@3.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/uuid" }, { "name": "cdx:npm:bin", "value": "uuid" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/gently@0.8.0", "dependsOn": [] }, { "ref": "pkg:npm/traverse@0.3.9", "dependsOn": [] }, { "ref": "pkg:npm/chainsaw@0.0.9", "dependsOn": [ "pkg:npm/traverse@0.3.9" ] }, { "ref": "pkg:npm/traverse@0.6.6", "dependsOn": [] }, { "ref": "pkg:npm/hashish@0.0.4", "dependsOn": [ "pkg:npm/traverse@0.6.6" ] }, { "ref": "pkg:npm/seq@0.3.5", "dependsOn": [ "pkg:npm/chainsaw@0.0.9", "pkg:npm/hashish@0.0.4" ] }, { "ref": "pkg:npm/findit@0.1.2", "dependsOn": [ "pkg:npm/seq@0.3.5" ] }, { "ref": "pkg:npm/utest@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/urun@0.0.6", "dependsOn": [ "pkg:npm/utest@0.0.2" ] }, { "ref": "pkg:npm/utest@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/aws-sign2@0.7.0", "dependsOn": [] }, { "ref": "pkg:npm/aws4@1.11.0", "dependsOn": [] }, { "ref": "pkg:npm/caseless@0.12.0", "dependsOn": [] }, { "ref": "pkg:npm/delayed-stream@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/combined-stream@1.0.8", "dependsOn": [ "pkg:npm/delayed-stream@1.0.0" ] }, { "ref": "pkg:npm/extend@3.0.2", "dependsOn": [] }, { "ref": "pkg:npm/forever-agent@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/asynckit@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-db@1.47.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-types@2.1.30", "dependsOn": [ "pkg:npm/mime-db@1.47.0" ] }, { "ref": "pkg:npm/form-data@2.3.3", "dependsOn": [ "pkg:npm/asynckit@0.4.0", "pkg:npm/combined-stream@1.0.8", "pkg:npm/mime-types@2.1.30" ] }, { "ref": "pkg:npm/fast-deep-equal@3.1.3", "dependsOn": [] }, { "ref": "pkg:npm/fast-json-stable-stringify@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/json-schema-traverse@0.4.1", "dependsOn": [] }, { "ref": "pkg:npm/punycode@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/uri-js@4.4.1", "dependsOn": [ "pkg:npm/punycode@2.1.1" ] }, { "ref": "pkg:npm/ajv@6.12.6", "dependsOn": [ "pkg:npm/fast-deep-equal@3.1.3", "pkg:npm/fast-json-stable-stringify@2.1.0", "pkg:npm/json-schema-traverse@0.4.1", "pkg:npm/uri-js@4.4.1" ] }, { "ref": "pkg:npm/har-schema@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/har-validator@5.1.5", "dependsOn": [ "pkg:npm/ajv@6.12.6", "pkg:npm/har-schema@2.0.0" ] }, { "ref": "pkg:npm/assert-plus@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/extsprintf@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/json-schema@0.2.3", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/verror@1.10.0", "dependsOn": [ "pkg:npm/assert-plus@1.0.0", "pkg:npm/core-util-is@1.0.2", "pkg:npm/extsprintf@1.3.0" ] }, { "ref": "pkg:npm/jsprim@1.4.1", "dependsOn": [ "pkg:npm/assert-plus@1.0.0", "pkg:npm/extsprintf@1.3.0", "pkg:npm/json-schema@0.2.3", "pkg:npm/verror@1.10.0" ] }, { "ref": "pkg:npm/safer-buffer@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/asn1@0.2.4", "dependsOn": [ "pkg:npm/safer-buffer@2.1.2" ] }, { "ref": "pkg:npm/tweetnacl@0.14.5", "dependsOn": [] }, { "ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "dependsOn": [ "pkg:npm/tweetnacl@0.14.5" ] }, { "ref": "pkg:npm/dashdash@1.14.1", "dependsOn": [ "pkg:npm/assert-plus@1.0.0" ] }, { "ref": "pkg:npm/jsbn@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/ecc-jsbn@0.1.2", "dependsOn": [ "pkg:npm/jsbn@0.1.1", "pkg:npm/safer-buffer@2.1.2" ] }, { "ref": "pkg:npm/getpass@0.1.7", "dependsOn": [ "pkg:npm/assert-plus@1.0.0" ] }, { "ref": "pkg:npm/sshpk@1.16.1", "dependsOn": [ "pkg:npm/asn1@0.2.4", "pkg:npm/assert-plus@1.0.0", "pkg:npm/bcrypt-pbkdf@1.0.2", "pkg:npm/dashdash@1.14.1", "pkg:npm/ecc-jsbn@0.1.2", "pkg:npm/getpass@0.1.7", "pkg:npm/jsbn@0.1.1", "pkg:npm/safer-buffer@2.1.2", "pkg:npm/tweetnacl@0.14.5" ] }, { "ref": "pkg:npm/http-signature@1.2.0", "dependsOn": [ "pkg:npm/assert-plus@1.0.0", "pkg:npm/jsprim@1.4.1", "pkg:npm/sshpk@1.16.1" ] }, { "ref": "pkg:npm/is-typedarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isstream@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/json-stringify-safe@5.0.1", "dependsOn": [] }, { "ref": "pkg:npm/oauth-sign@0.9.0", "dependsOn": [] }, { "ref": "pkg:npm/performance-now@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/qs@6.5.2", "dependsOn": [] }, { "ref": "pkg:npm/safe-buffer@5.2.1", "dependsOn": [] }, { "ref": "pkg:npm/psl@1.8.0", "dependsOn": [] }, { "ref": "pkg:npm/tough-cookie@2.5.0", "dependsOn": [ "pkg:npm/psl@1.8.0", "pkg:npm/punycode@2.1.1" ] }, { "ref": "pkg:npm/tunnel-agent@0.6.0", "dependsOn": [ "pkg:npm/safe-buffer@5.2.1" ] }, { "ref": "pkg:npm/uuid@3.4.0", "dependsOn": [] }, { "ref": "pkg:npm/request@2.88.2", "dependsOn": [ "pkg:npm/aws-sign2@0.7.0", "pkg:npm/aws4@1.11.0", "pkg:npm/caseless@0.12.0", "pkg:npm/combined-stream@1.0.8", "pkg:npm/extend@3.0.2", "pkg:npm/forever-agent@0.6.1", "pkg:npm/form-data@2.3.3", "pkg:npm/har-validator@5.1.5", "pkg:npm/http-signature@1.2.0", "pkg:npm/is-typedarray@1.0.0", "pkg:npm/isstream@0.1.2", "pkg:npm/json-stringify-safe@5.0.1", "pkg:npm/mime-types@2.1.30", "pkg:npm/oauth-sign@0.9.0", "pkg:npm/performance-now@2.1.0", "pkg:npm/qs@6.5.2", "pkg:npm/safe-buffer@5.2.1", "pkg:npm/tough-cookie@2.5.0", "pkg:npm/tunnel-agent@0.6.0", "pkg:npm/uuid@3.4.0" ] }, { "ref": "pkg:npm/formidable@1.2.6", "dependsOn": [ "pkg:npm/findit@0.1.2", "pkg:npm/gently@0.8.0", "pkg:npm/hashish@0.0.4", "pkg:npm/request@2.88.2", "pkg:npm/urun@0.0.6", "pkg:npm/utest@0.0.8" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/formidable@1.2.6" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-03T20:44:47Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 3, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'formidable' with version '1.2.6'." } ] }