{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:0efc327d-60b8-41b3-b29f-839ad86095b6", "version": 1, "metadata": { "timestamp": "2026-08-22T11:36:45Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "get-uri", "group": "", "version": "7.0.0", "description": "Returns a `stream.Readable` from a URI string", "purl": "pkg:npm/get-uri@7.0.0", "bom-ref": "pkg:npm/get-uri@7.0.0", "author": "Nathan Rajlich (http://n8.io/)", "properties": [ { "name": "cdx:npm:scripts", "value": "build, test, lint, pack" }, { "name": "cdx:npm:buildScripts", "value": "build, pack" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@types/debug/package.json\\nnode_modules/@types/ftpd/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/async-listen/package.json\\nnode_modules/basic-ftp/package.json\\nnode_modules/data-uri-to-buffer/package.json\\nnode_modules/debug/package.json\\nnode_modules/ftpd/package.json\\nnode_modules/st/package.json\\nnode_modules/tsconfig/package.json\\nnode_modules/typescript/package.json" } ] }, "components": [ { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "5.9.3", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@5.9.3", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "https://github.com/microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@5.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "group": "", "name": "tsconfig", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsconfig@0.0.0", "type": "library", "bom-ref": "pkg:npm/tsconfig@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsconfig/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsconfig/package.json" } ], "concludedValue": "node_modules/tsconfig/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "st", "version": "3.0.3", "description": "A module for serving static files. Does etags, caching, etc.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/st@3.0.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/st" } ], "type": "library", "bom-ref": "pkg:npm/st@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/st/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/st/package.json" } ], "concludedValue": "node_modules/st/package.json" } ] } }, { "group": "", "name": "ftpd", "version": "0.2.16", "description": "Node FTP Server", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ftpd@0.2.16", "type": "library", "bom-ref": "pkg:npm/ftpd@0.2.16", "properties": [ { "name": "SrcFile", "value": "node_modules/ftpd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ftpd/package.json" } ], "concludedValue": "node_modules/ftpd/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "dist/data.js", "line": 1 }, { "location": "dist/data.js", "line": 6 }, { "location": "dist/file.js", "line": 1 }, { "location": "dist/file.js", "line": 6 }, { "location": "dist/ftp.js", "line": 4 }, { "location": "dist/ftp.js", "line": 7 }, { "location": "dist/http.js", "line": 4 }, { "location": "dist/http.js", "line": 8 }, { "location": "dist/index.js", "line": 1 }, { "location": "dist/index.js", "line": 8 }, { "location": "src/data.ts", "line": 1 }, { "location": "src/data.ts", "line": 8 }, { "location": "src/file.ts", "line": 2 }, { "location": "src/file.ts", "line": 9 }, { "location": "src/ftp.ts", "line": 4 }, { "location": "src/ftp.ts", "line": 9 }, { "location": "src/http.ts", "line": 5 }, { "location": "src/http.ts", "line": 11 }, { "location": "src/index.ts", "line": 1 }, { "location": "src/index.ts", "line": 11 } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "data-uri-to-buffer", "version": "7.0.0", "description": "Create an ArrayBuffer instance from a Data URI string", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/data-uri-to-buffer@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/proxy-agents.git" } ], "type": "library", "bom-ref": "pkg:npm/data-uri-to-buffer@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/data-uri-to-buffer/package.json" }, { "name": "ImportedModules", "value": "data-uri-to-buffer,dataUriToBuffer,data-uri-to-buffer/dataUriToBuffer" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/data-uri-to-buffer/package.json" } ], "concludedValue": "node_modules/data-uri-to-buffer/package.json" } ], "occurrences": [ { "location": "dist/data.js", "line": 4 }, { "location": "dist/data.js", "line": 32 }, { "location": "src/data.ts", "line": 4 }, { "location": "src/data.ts", "line": 45 } ] } }, { "authors": [ { "name": "Patrick Juchli " } ], "group": "", "name": "basic-ftp", "version": "5.2.0", "description": "FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/basic-ftp@5.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/patrickjuchli/basic-ftp.git" } ], "type": "library", "bom-ref": "pkg:npm/basic-ftp@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/basic-ftp/package.json" }, { "name": "ImportedModules", "value": "basic-ftp,Client,basic-ftp/Client,AccessOptions,basic-ftp/AccessOptions" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/basic-ftp/package.json" } ], "concludedValue": "node_modules/basic-ftp/package.json" } ], "occurrences": [ { "location": "dist/ftp.js", "line": 1 }, { "location": "src/ftp.ts", "line": 1 } ] } }, { "group": "", "name": "async-listen", "version": "3.1.0", "description": "`net.Server#listen()` helper that returns a Promise for async / await", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/async-listen@3.1.0", "type": "library", "bom-ref": "pkg:npm/async-listen@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/async-listen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/async-listen/package.json" } ], "concludedValue": "node_modules/async-listen/package.json" } ] } }, { "group": "@types", "name": "node", "version": "22.19.15", "description": "TypeScript definitions for node", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@22.19.15", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@22.19.15", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "group": "@types", "name": "ftpd", "version": "0.2.40", "description": "TypeScript definitions for ftpd", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/ftpd@0.2.40", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ftpd" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/ftpd@0.2.40", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/ftpd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/ftpd/package.json" } ], "concludedValue": "node_modules/@types/ftpd/package.json" } ] } }, { "group": "@types", "name": "debug", "version": "4.1.12", "description": "TypeScript definitions for debug", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/debug@4.1.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/debug@4.1.12", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/debug/package.json" } ], "concludedValue": "node_modules/@types/debug/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/get-uri@7.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-22T11:36:45Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, August 22, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'get-uri' with version '7.0.0'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 11 source files." } ] }