{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2e9c27f5-7251-4aaa-8388-6f5c99d6ee84", "version": 1, "metadata": { "timestamp": "2026-08-04T08:08:36Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "gift", "group": "", "version": "0.6.1", "description": "a Git wrapper library", "purl": "pkg:npm/gift@0.6.1", "bom-ref": "pkg:npm/gift@0.6.1", "author": "sentientwaffle (http://sentientwaffle.github.com/)", "properties": [ { "name": "cdx:npm:scripts", "value": "test, prepublish" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "prepublish" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/notatestuser/gift" }, { "type": "vcs", "url": "https://github.com/notatestuser/gift.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "underscore", "version": "1.8.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "e56b154c5707d6eb7f9248406877f83d5808f1cefef86895729086c4fa2e23a6558eca8f9d20dff21ffc1ed56a734b787f3457c2730aef411c65e02cdcf21d76" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/underscore@1.8.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/underscore@1.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.8.3.tgz" }, { "name": "ImportedModules", "value": "underscore" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "lib/commit.js", "line": 5 }, { "location": "lib/diff.js", "line": 5 }, { "location": "lib/repo.js", "line": 5 }, { "location": "lib/tag.js", "line": 7 }, { "location": "lib/tree.js", "line": 5 } ] } }, { "group": "", "name": "coffee-script", "version": "1.9.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d4e23d7aa91ef2c2672b16beb2c78cc0274da33e1d6249e4d364edcfaac16e0e9906e8eb6e386789c92db66d12f859e5ae3f90eb6468013ba2e6a4958beb0f26" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/coffee-script@1.9.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/coffee-script/-/coffee-script-1.9.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/coffee-script@1.9.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/coffee-script/-/coffee-script-1.9.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/cake, /app/node_modules/.bin/coffee" }, { "name": "cdx:npm:bin", "value": "cake, coffee" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:versionMismatchError", "value": "1.9.1 used instead of 1.9.3" }, { "name": "cdx:npm:deprecated", "value": "CoffeeScript on NPM has moved to \"coffeescript\" (no hyphen)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs-extra", "version": "0.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c9cb5b4ce08718392d8f77a8aecb408d8d19f16b5bce81e528a8946516d7db96f7e019ee206b1d23d1c6d9d60eef69229913943d180985d4b19414610ed119ab" } ], "purl": "pkg:npm/fs-extra@0.9.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fs-extra/-/fs-extra-0.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@0.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fs-extra/-/fs-extra-0.9.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jsonfile", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cab9a8e77e93ac95831cd6259028ed90f4aa367024b7abb593cf4ee57c6be77cdce0391d8a44c713e171e9517bb3225dd7cc6c768db853872c79d02484b83155" } ], "purl": "pkg:npm/jsonfile@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jsonfile/-/jsonfile-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsonfile@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jsonfile/-/jsonfile-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4a49c90b9da86cf7c640f9e32245db980ebee47d7913e7d1f84e22476a10df3cc22db77bfce36e6baf51fc6c3b0209132ec446fabe5fce4b18c167b50204f258" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/mkdirp" }, { "name": "cdx:npm:bin", "value": "mkdirp" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ncp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "97ea49c6e2e5cf0a75d43cbbd8c26008f37021b5ddbfa8a668008b88431bd93203cabe78ab3fa7019783e6a0e525e7ef79a27e47d520e8aba8cc2c51a505ced1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ncp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ncp/-/ncp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ncp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ncp/-/ncp-0.5.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/ncp" }, { "name": "cdx:npm:bin", "value": "ncp" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rimraf", "version": "2.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d7d979e57acaa03b1d40f6622484383c79c57e1a74fbec7e7cb0242feb8e9328a762a243b222b5c26c5428b26e44d8ca9ca625f809ca65c1e6649941edd0e841" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.4.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/rimraf/-/rimraf-2.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/rimraf/-/rimraf-2.4.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/rimraf" }, { "name": "cdx:npm:bin", "value": "rimraf" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Rimraf versions prior to v4 are no longer supported" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "4.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "234ad359429264ac4f4880086aa8525d333f0e2208eb06a67beac40b77050392ea9abf5899d2fbcfa1e3f7e6dd5ad4efa18d52bb8fce88c2e66f7ed8ec9cef25" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@4.5.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-4.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@4.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-4.5.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c8c3865eb7a076003e99eaf880bc8659f8ff831d2fcea997b48637613c5a420e0e65d9381acae088509ffc6f7a91542dfda24327240f0de6ff36d411669d77c6" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inflight/-/inflight-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inflight/-/inflight-1.0.4.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b4f431a64e270634e0bbe7878a35a1817d9dfad13a1d0c8c3d59f36396f5a9e9d3505b3105a2a5cc415417e5d57db4e816e5459bc857f8fcd5f6edcf7b00d9e1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.3.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.3.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e36875776e675ba1bf37b975e8ecf8bea08e2c81686c504ec19ac16250b127f42e4b6a3519d9f53f34a88989dd6e72fdae0188199e909f4f40229ca1ae47a97f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f275aada72d3030774da34ea244c54605483fdf2aae951fd63fa06d9a71c73f91d23457df016a0f1de5ae208b75c7cfbdeb0d66b63ef4edbdc598aae2aa48434" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "2.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "63a4f50deeabe3c0e729fc94990e91701f3c22e94d936adfa84912caa8fef074a827ea95eb0b15e71997b2a308692303843b341032c44e55563ac26ce0ffeb59" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@2.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-2.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@2.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-2.0.8.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8d6d6df642f79225f3a2f1e712060db9832717e8470754e5c8adb0a31df674fad646fc0d109957cf735d07999d8c52b53e89b6daa555be91973768480969af1b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brace-expansion/-/brace-expansion-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brace-expansion/-/brace-expansion-1.1.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "92e460974c3241ada9994cd5572550a74134e29ffff6eec9e878b41ddedfa45d8b7b5c1a51850f98e729e884d734162d05fceef73c3e6931b978b2df6161ddd4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/balanced-match/-/balanced-match-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@0.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/balanced-match/-/balanced-match-0.2.0.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/concat-map/-/concat-map-0.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "1.21.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9e0dabd18acb087b66a7c5bb1f22f34a66dd89db7783523adc784298ea991f8bf31619ad1dc630728026a6c24a2f5e361def4d0361c9a66b33f5a9980f1a19d5" } ], "purl": "pkg:npm/mocha@1.21.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.21.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@1.21.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.21.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha" }, { "name": "cdx:npm:bin", "value": "_mocha, mocha" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Mocha v1.x is no longer supported." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "commander", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "083e39d9f9e4d2343293735f9caf8a911fe150fa07b79a5568a1e882dcb2bf737453841f01a97d5b4feb5cb3a0fef55981029aee376d5f2a4ab356008a9d75b9" } ], "purl": "pkg:npm/commander@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8d1c4547415beb9ee29269ba2231d8df6bff36aa7d35d731e0b0484973dfa60b8d6878792499dbfb1dfba9a94a3d3bb87f13059d5048c841a2ef69a6be5d010b" } ], "purl": "pkg:npm/debug@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "0.6.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fe97377a1ed35a8ad3b5bbd783c8dee06bebbc4a827c7ecf0373fb896d35c8bd84e7714a8b1ce03016908b434e3db309a98df87014af474b59b6695391d506e0" } ], "purl": "pkg:npm/ms@0.6.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-0.6.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@0.6.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-0.6.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d7311bef7bde9971695267e1ddfb2d6b8607cf797079bc57bda5a63db16ff5aa6e8d00560e792b3c32d72d0b35819a3844258c0ec4fcf6bd0f7ffcfcff4d9318" } ], "purl": "pkg:npm/diff@1.0.8", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "710a5489dedb7535271629fc4bb06735d3a4fbf783a9098a80200d4b277f8c086b284bf152fafd550f176735e23ad7acb7c34b7e4dc5481673c2f7a664d43a56" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "85c8ff353516bfe0b731baab55bf45f9a1fa96f4f010725dc767e807196b56ae61eb313c05fbb8a6fe02000a9b0dc66bc3ff4093996c457958f40a3cfc5d13bb" } ], "licenses": [ { "license": { "id": "0BSD", "url": "https://opensource.org/licenses/0BSD", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "0.2.14", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.2.14", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.2.14", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "2.6.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6b4ec18935e15855011f4697390c96f78a75dc54c37dbc68b715a83e6b9a52e340a81437917ce093b5da9c6880931e63f71d4c04e337623cdfe527a59baf43e8" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.6.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.6.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.6.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.6.5.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sigmund", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1eaeb5b2faa15c705363cd0ab2e2eb22d27d03460fd4f49e892e21862efb35c3d07fe17ec9a80e4a486e85974d0fb35f01ca479b8f7914a51399173283317438" } ], "purl": "pkg:npm/growl@1.8.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.8.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jade", "version": "0.26.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a4937bf3507163cca8e90977aef888d77990fe40e4e351476e6e0987b474c3c2f00ed994e43134d5adaa6db39096cf726f26bca1ff82966698de66b09ea59dc" } ], "purl": "pkg:npm/jade@0.26.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.26.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jade@0.26.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.26.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/.bin/jade" }, { "name": "cdx:npm:bin", "value": "jade" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d1f2f272997550c4c65f6e7b851b2efdaacbfdc51b72f40ce3330ac2f2efcd7b5f75ecc8578ca8b4f4b6758b649c5f8d9847d64a808417afa18fd5cb9bfea113" } ], "purl": "pkg:npm/commander@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "387b1d51c54043aa4eb60e49616a42068f56fc6c9256ec2f3fd86e791316ed4aac842d2d6dfccbbfcc23c924cf9b7b5f519ff6d4213d135a496a0380f753f17b" } ], "licenses": [ { "license": { "name": "MIT/X11", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c638cd1b2fabcb5961b4829caf63d3ea89376acce141f82b503a783992c769c811805985e9747d5c238955c5e55464289c8a9770ad43bea80a29038f5981927f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/node_modules/mocha/node_modules/.bin/mkdirp" }, { "name": "cdx:npm:bin", "value": "mkdirp" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "should", "version": "4.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "dbd7a6aface6356a20d457f2b3bfc5d33424cb3695300179a0bc2cf316d5f881eb0e22880cbf48d40bb468167232bd03248a7f6849a2c6bd5076e12c8abb88fe" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/should@4.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should/-/should-4.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/should@4.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should/-/should-4.0.4.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sinon", "version": "1.15.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0d643b24cf76f97ad98f799f20977a716e5ae47aaa006963f53c6eaa2cc0eca1da3b18f0f95f93d42b3e26bfc51385bb03a7611e380c9db54bf4f73490be762b" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sinon@1.15.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sinon/-/sinon-1.15.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sinon@1.15.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sinon/-/sinon-1.15.4.tgz" }, { "name": "cdx:npm:deprecated", "value": "16.1.1" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "formatio", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "70f87b8acea4dddf2d21487ea675d7b806c3fee8525c682a2cfc3452b629bf995f749f8c30c4a3c78d09369a8fed3a29f4db76e58a265848919a41db3af90268" } ], "purl": "pkg:npm/formatio@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/formatio/-/formatio-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/formatio@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/formatio/-/formatio-1.1.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package is unmaintained. Use @sinonjs/formatio instead" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "samsam", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8952fb2e26e9337b65e2b40fc1e3975eb9a319e831c76edf9533a3404643dcf5dee2864d173bb3e928b89a095e2bf25653f8720afb55d35454a2f8ef044a439b" } ], "purl": "pkg:npm/samsam@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/samsam/-/samsam-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/samsam@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/samsam/-/samsam-1.1.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated in favour of @sinonjs/samsam" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lolex", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c0666b177025016c46da3fba372cadb59fd45715bca3f17eab4d48506b9fd8f884200506f5abffbe9052e534074d0b733e63c90780995a3c32191e02e1a5fcdf" } ], "purl": "pkg:npm/lolex@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lolex/-/lolex-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lolex@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lolex/-/lolex-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "util", "version": "0.10.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e4a8877ec9a4a9a72e2a391191d57b4ac7c327610688fb0af76b3632135263472b6b18d374a4eda8ab096825a9e0b5b7dd967438f52fd563bf4c5bcd411890c5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util@0.10.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/util/-/util-0.10.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/util@0.10.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/util/-/util-0.10.3.tgz" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/underscore@1.8.3", "dependsOn": [] }, { "ref": "pkg:npm/coffee-script@1.9.3", "dependsOn": [] }, { "ref": "pkg:npm/jsonfile@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/ncp@0.5.1", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/once@1.3.2", "dependsOn": [ "pkg:npm/wrappy@1.0.1" ] }, { "ref": "pkg:npm/inflight@1.0.4", "dependsOn": [ "pkg:npm/once@1.3.2", "pkg:npm/wrappy@1.0.1" ] }, { "ref": "pkg:npm/inherits@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@0.2.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.0", "dependsOn": [ "pkg:npm/balanced-match@0.2.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@2.0.8", "dependsOn": [ "pkg:npm/brace-expansion@1.1.0" ] }, { "ref": "pkg:npm/glob@4.5.3", "dependsOn": [ "pkg:npm/inflight@1.0.4", "pkg:npm/inherits@2.0.1", "pkg:npm/minimatch@2.0.8", "pkg:npm/once@1.3.2" ] }, { "ref": "pkg:npm/rimraf@2.4.1", "dependsOn": [ "pkg:npm/glob@4.5.3" ] }, { "ref": "pkg:npm/fs-extra@0.9.1", "dependsOn": [ "pkg:npm/jsonfile@1.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/ncp@0.5.1", "pkg:npm/rimraf@2.4.1" ] }, { "ref": "pkg:npm/commander@2.3.0", "dependsOn": [] }, { "ref": "pkg:npm/ms@0.6.2", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.0.0", "dependsOn": [ "pkg:npm/ms@0.6.2" ] }, { "ref": "pkg:npm/diff@1.0.8", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@2.6.5", "dependsOn": [] }, { "ref": "pkg:npm/sigmund@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@0.2.14", "dependsOn": [ "pkg:npm/lru-cache@2.6.5", "pkg:npm/sigmund@1.0.1" ] }, { "ref": "pkg:npm/glob@3.2.3", "dependsOn": [ "pkg:npm/graceful-fs@2.0.3", "pkg:npm/inherits@2.0.1", "pkg:npm/minimatch@0.2.14" ] }, { "ref": "pkg:npm/growl@1.8.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.3.0", "dependsOn": [] }, { "ref": "pkg:npm/jade@0.26.3", "dependsOn": [ "pkg:npm/commander@0.6.1", "pkg:npm/mkdirp@0.3.0" ] }, { "ref": "pkg:npm/mkdirp@0.5.0", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/mocha@1.21.5", "dependsOn": [ "pkg:npm/commander@2.3.0", "pkg:npm/debug@2.0.0", "pkg:npm/diff@1.0.8", "pkg:npm/escape-string-regexp@1.0.2", "pkg:npm/glob@3.2.3", "pkg:npm/growl@1.8.1", "pkg:npm/jade@0.26.3", "pkg:npm/mkdirp@0.5.0" ] }, { "ref": "pkg:npm/should@4.0.4", "dependsOn": [] }, { "ref": "pkg:npm/samsam@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/formatio@1.1.1", "dependsOn": [ "pkg:npm/samsam@1.1.2" ] }, { "ref": "pkg:npm/lolex@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/util@0.10.3", "dependsOn": [ "pkg:npm/inherits@2.0.1" ] }, { "ref": "pkg:npm/sinon@1.15.4", "dependsOn": [ "pkg:npm/formatio@1.1.1", "pkg:npm/lolex@1.1.0", "pkg:npm/samsam@1.1.2", "pkg:npm/util@0.10.3" ] }, { "ref": "pkg:npm/gift@0.6.1", "dependsOn": [ "pkg:npm/coffee-script@1.9.3", "pkg:npm/fs-extra@0.9.1", "pkg:npm/mocha@1.21.5", "pkg:npm/should@4.0.4", "pkg:npm/sinon@1.15.4", "pkg:npm/underscore@1.8.3" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/gift@0.6.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-04T08:08:37Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'gift' with version '0.6.1'." } ] }