{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:09582cc6-c06b-4db0-9f7a-592e1aa4b9bf", "version": 1, "metadata": { "timestamp": "2026-09-03T22:52:59Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "github-markdown-css", "group": "", "version": "4.0.0", "description": "The minimal amount of CSS to replicate the GitHub Markdown style", "purl": "pkg:npm/github-markdown-css@4.0.0", "bom-ref": "pkg:npm/github-markdown-css@4.0.0", "author": "Sindre Sorhus (https://sindresorhus.com)", "properties": [ { "name": "cdx:npm:scripts", "value": "make" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@my-scope\\n@sindresorhus\\n@szmarczak\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/highlight/package.json\\nnode_modules/@sindresorhus/is/package.json\\nnode_modules/@szmarczak/http-timer/package.json\\nnode_modules/@types/cacheable-request/package.json\\nnode_modules/@types/http-cache-semantics/package.json\\nnode_modules/@types/keyv/package.json\\nnode_modules/@types/minimist/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/normalize-package-data/package.json\\nnode_modules/@types/responselike/package.json\\nnode_modules/abab/package.json\\nnode_modules/acorn-globals/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/array-equal/package.json\\nnode_modules/arrify/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/async-limiter/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/atob/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/aws4/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/boolbase/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-process-hrtime/package.json\\nnode_modules/cacheable-lookup/package.json\\nnode_modules/cacheable-request/package.json\\nnode_modules/camelcase-keys/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/caseless/package.json\\nnode_modules/chalk/package.json\\nnode_modules/cheerio/package.json\\nnode_modules/clone-response/node_modules/mimic-response/package.json\\nnode_modules/clone-response/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/css-select/package.json\\nnode_modules/css-what/package.json\\nnode_modules/css/package.json\\nnode_modules/cssesc/package.json\\nnode_modules/cssom/package.json\\nnode_modules/cssstyle/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/data-urls/package.json\\nnode_modules/decamelize-keys/node_modules/map-obj/package.json\\nnode_modules/decamelize-keys/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/decode-uri-component/package.json\\nnode_modules/decompress-response/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/defer-to-connect/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/dom-serializer/package.json\\nnode_modules/domelementtype/package.json\\nnode_modules/domexception/package.json\\nnode_modules/domhandler/package.json\\nnode_modules/domutils/package.json\\nnode_modules/duplexer3/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/entities/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/escodegen/package.json\\nnode_modules/esprima/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/extend/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/find-up/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/generate-github-markdown-css/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/getpass/package.json\\nnode_modules/glob/package.json\\nnode_modules/got/package.json\\nnode_modules/har-schema/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/hard-rejection/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/html-encoding-sniffer/package.json\\nnode_modules/html-tags/package.json\\nnode_modules/htmlparser2/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/indexes-of/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/is-absolute-url/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-html/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/isstream/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/jsdom/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/json-parse-better-errors/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/keyv/package.json\\nnode_modules/levn/package.json\\nnode_modules/lines-and-columns/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.assignin/package.json\\nnode_modules/lodash.bind/package.json\\nnode_modules/lodash.defaults/package.json\\nnode_modules/lodash.filter/package.json\\nnode_modules/lodash.flatten/package.json\\nnode_modules/lodash.foreach/package.json\\nnode_modules/lodash.map/package.json\\nnode_modules/lodash.merge/package.json\\nnode_modules/lodash.pick/package.json\\nnode_modules/lodash.reduce/package.json\\nnode_modules/lodash.reject/package.json\\nnode_modules/lodash.some/package.json\\nnode_modules/lodash.sortby/package.json\\nnode_modules/lodash/package.json\\nnode_modules/lowercase-keys/package.json\\nnode_modules/map-obj/package.json\\nnode_modules/meow/node_modules/type-fest/package.json\\nnode_modules/meow/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mimic-response/package.json\\nnode_modules/min-indent/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist-options/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/normalize-url/package.json\\nnode_modules/nth-check/package.json\\nnode_modules/nwsapi/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/once/package.json\\nnode_modules/optionator/package.json\\nnode_modules/p-cancelable/package.json\\nnode_modules/p-event/package.json\\nnode_modules/p-finally/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-timeout/package.json\\nnode_modules/p-try/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/parse5/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/performance-now/package.json\\nnode_modules/pify/package.json\\nnode_modules/pn/package.json\\nnode_modules/postcss-selector-parser/package.json\\nnode_modules/postcss/node_modules/supports-color/package.json\\nnode_modules/postcss/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/psl/package.json\\nnode_modules/pump/package.json\\nnode_modules/punycode/package.json\\nnode_modules/qs/package.json\\nnode_modules/quick-lru/package.json\\nnode_modules/read-pkg-up/node_modules/type-fest/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/node_modules/type-fest/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/redent/package.json\\nnode_modules/request-promise-core/package.json\\nnode_modules/request-promise-native/package.json\\nnode_modules/request/package.json\\nnode_modules/resolve-url/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/responselike/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/saxes/package.json\\nnode_modules/semver/package.json\\nnode_modules/source-map-resolve/package.json\\nnode_modules/source-map-url/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/stealthy-require/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-indent/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/symbol-tree/package.json\\nnode_modules/to-readable-stream/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/tr46/package.json\\nnode_modules/trim-newlines/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/type-check/package.json\\nnode_modules/type-fest/package.json\\nnode_modules/uncss/package.json\\nnode_modules/uniq/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/urix/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/uuid/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/verror/package.json\\nnode_modules/w3c-hr-time/package.json\\nnode_modules/w3c-xmlserializer/package.json\\nnode_modules/webidl-conversions/package.json\\nnode_modules/whatwg-encoding/package.json\\nnode_modules/whatwg-mimetype/package.json\\nnode_modules/whatwg-url/package.json\\nnode_modules/word-wrap/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/ws/package.json\\nnode_modules/xml-name-validator/package.json\\nnode_modules/xmlchars/package.json\\nnode_modules/yargs-parser/package.json" } ] }, "components": [ { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "16.1.0", "description": "the mighty option parser used by yargs", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@16.1.0", "type": "library", "bom-ref": "pkg:npm/yargs-parser@16.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Louis-Dominique Dubeau " } ], "group": "", "name": "xmlchars", "version": "2.2.0", "description": "Utilities for determining if characters belong to character classes defined by the XML specs.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xmlchars@2.2.0", "type": "library", "bom-ref": "pkg:npm/xmlchars@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/xmlchars/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xmlchars/package.json" } ], "concludedValue": "node_modules/xmlchars/package.json" } ] }, "tags": [ "xml" ] }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "xml-name-validator", "version": "3.0.0", "description": "Validates whether a string matches the production for an XML name or qualified name", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xml-name-validator@3.0.0", "type": "library", "bom-ref": "pkg:npm/xml-name-validator@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/xml-name-validator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xml-name-validator/package.json" } ], "concludedValue": "node_modules/xml-name-validator/package.json" } ] }, "tags": [ "xml" ] }, { "authors": [ { "name": "Einar Otto Stangvik (http://2x.io)" } ], "group": "", "name": "ws", "version": "6.2.1", "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ws@6.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/websockets/ws" } ], "type": "library", "bom-ref": "pkg:npm/ws@6.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ws/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ws/package.json" } ], "concludedValue": "node_modules/ws/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "word-wrap", "version": "1.2.3", "description": "Wrap words to a specified length.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/word-wrap@1.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/word-wrap" } ], "type": "library", "bom-ref": "pkg:npm/word-wrap@1.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/word-wrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/word-wrap/package.json" } ], "concludedValue": "node_modules/word-wrap/package.json" } ] } }, { "authors": [ { "name": "Sebastian Mayr " } ], "group": "", "name": "whatwg-url", "version": "7.1.0", "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/whatwg-url@7.1.0", "type": "library", "bom-ref": "pkg:npm/whatwg-url@7.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/whatwg-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/whatwg-url/package.json" } ], "concludedValue": "node_modules/whatwg-url/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "whatwg-mimetype", "version": "2.3.0", "description": "Parses, serializes, and manipulates MIME types, according to the WHATWG MIME Sniffing Standard", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/whatwg-mimetype@2.3.0", "type": "library", "bom-ref": "pkg:npm/whatwg-mimetype@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/whatwg-mimetype/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/whatwg-mimetype/package.json" } ], "concludedValue": "node_modules/whatwg-mimetype/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "whatwg-encoding", "version": "1.0.5", "description": "Decode strings according to the WHATWG Encoding Standard", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/whatwg-encoding@1.0.5", "type": "library", "bom-ref": "pkg:npm/whatwg-encoding@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/whatwg-encoding/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/whatwg-encoding/package.json" } ], "concludedValue": "node_modules/whatwg-encoding/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "webidl-conversions", "version": "4.0.2", "description": "Implements the WebIDL algorithms for converting to and from JavaScript values", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/webidl-conversions@4.0.2", "type": "library", "bom-ref": "pkg:npm/webidl-conversions@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/webidl-conversions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/webidl-conversions/package.json" } ], "concludedValue": "node_modules/webidl-conversions/package.json" } ] } }, { "group": "", "name": "w3c-xmlserializer", "version": "1.1.2", "description": "A per-spec XML serializer implementation", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/w3c-xmlserializer@1.1.2", "type": "library", "bom-ref": "pkg:npm/w3c-xmlserializer@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/w3c-xmlserializer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/w3c-xmlserializer/package.json" } ], "concludedValue": "node_modules/w3c-xmlserializer/package.json" } ] }, "tags": [ "xml" ] }, { "authors": [ { "name": "Timothy Gu " } ], "group": "", "name": "w3c-hr-time", "version": "1.0.1", "description": "An implementation of the W3C High Resolution Time Level 2 specification.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/w3c-hr-time@1.0.1", "type": "library", "bom-ref": "pkg:npm/w3c-hr-time@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/w3c-hr-time/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/w3c-hr-time/package.json" } ], "concludedValue": "node_modules/w3c-hr-time/package.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "description": "richer JavaScript errors", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davepacheco/node-verror.git" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/package.json" } ], "concludedValue": "node_modules/verror/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "validate-npm-package-license", "version": "3.0.4", "description": "Give me a string and I'll tell you if it's a valid npm package license string", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-license@3.0.4", "type": "library", "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-license/package.json" } ], "concludedValue": "node_modules/validate-npm-package-license/package.json" } ] } }, { "group": "", "name": "uuid", "version": "3.4.0", "description": "RFC4122 (v1, v4, and v5) UUIDs", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uuidjs/uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "urix", "version": "0.1.0", "description": "Makes Windows-style paths more unix and URI friendly.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/urix@0.1.0", "type": "library", "bom-ref": "pkg:npm/urix@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/urix/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/urix/package.json" } ], "concludedValue": "node_modules/urix/package.json" } ] } }, { "authors": [ { "name": "Gary Court " } ], "group": "", "name": "uri-js", "version": "4.2.2", "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-js@4.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/garycourt/uri-js" }, { "type": "vcs", "url": "http://github.com/garycourt/uri-js" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-js/package.json" } ], "concludedValue": "node_modules/uri-js/package.json" } ] } }, { "authors": [ { "name": "Mikola Lysenko" } ], "group": "", "name": "uniq", "version": "1.0.1", "description": "Removes duplicates from a sorted array in place", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uniq@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/mikolalysenko/uniq.git" } ], "type": "library", "bom-ref": "pkg:npm/uniq@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uniq/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uniq/package.json" } ], "concludedValue": "node_modules/uniq/package.json" } ] } }, { "authors": [ { "name": "Giakki" } ], "group": "", "name": "uncss", "version": "0.17.3", "description": "Remove unused CSS styles", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uncss@0.17.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/uncss/uncss" }, { "type": "vcs", "url": "git+https://github.com/uncss/uncss.git" } ], "type": "library", "bom-ref": "pkg:npm/uncss@0.17.3", "properties": [ { "name": "SrcFile", "value": "node_modules/uncss/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uncss/package.json" } ], "concludedValue": "node_modules/uncss/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "0.10.0", "description": "A collection of essential TypeScript types", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@0.10.0", "type": "library", "bom-ref": "pkg:npm/type-fest@0.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "type-check", "version": "0.3.2", "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-check@0.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/type-check" }, { "type": "vcs", "url": "git://github.com/gkz/type-check.git" } ], "type": "library", "bom-ref": "pkg:npm/type-check@0.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/type-check/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-check/package.json" } ], "concludedValue": "node_modules/type-check/package.json" } ] } }, { "authors": [ { "name": "TweetNaCl-js contributors" } ], "group": "", "name": "tweetnacl", "version": "0.14.5", "description": "Port of TweetNaCl cryptographic library to JavaScript", "licenses": [ { "license": { "id": "Unlicense", "url": "https://opensource.org/licenses/Unlicense", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "website", "url": "https://tweetnacl.js.org" }, { "type": "vcs", "url": "https://github.com/dchest/tweetnacl-js.git" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tweetnacl/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tweetnacl/package.json" } ], "concludedValue": "node_modules/tweetnacl/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.6.0", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel-agent@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "trim-newlines", "version": "3.0.0", "description": "Trim newlines from the start and/or end of a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/trim-newlines@3.0.0", "type": "library", "bom-ref": "pkg:npm/trim-newlines@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/trim-newlines/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/trim-newlines/package.json" } ], "concludedValue": "node_modules/trim-newlines/package.json" } ] } }, { "authors": [ { "name": "Sebastian Mayr " } ], "group": "", "name": "tr46", "version": "1.0.1", "description": "An implementation of the Unicode TR46 spec", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tr46@1.0.1", "type": "library", "bom-ref": "pkg:npm/tr46@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tr46/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tr46/package.json" } ], "concludedValue": "node_modules/tr46/package.json" } ] } }, { "authors": [ { "name": "Jeremy Stashewsky " } ], "group": "", "name": "tough-cookie", "version": "2.5.0", "description": "RFC6265 Cookies and Cookie Jar for node.js", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tough-cookie@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/salesforce/tough-cookie" }, { "type": "vcs", "url": "git://github.com/salesforce/tough-cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/package.json" } ], "concludedValue": "node_modules/tough-cookie/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "to-readable-stream", "version": "2.1.0", "description": "Convert a string/Buffer/Uint8Array to a readable stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/to-readable-stream@2.1.0", "type": "library", "bom-ref": "pkg:npm/to-readable-stream@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/to-readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-readable-stream/package.json" } ], "concludedValue": "node_modules/to-readable-stream/package.json" } ] } }, { "authors": [ { "name": "Joris van der Wel " } ], "group": "", "name": "symbol-tree", "version": "3.2.4", "description": "Turn any collection of objects into its own efficient tree or linked list using Symbol", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/symbol-tree@3.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jsdom/js-symbol-tree#symbol-tree" }, { "type": "vcs", "url": "https://github.com/jsdom/js-symbol-tree.git" } ], "type": "library", "bom-ref": "pkg:npm/symbol-tree@3.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/symbol-tree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/symbol-tree/package.json" } ], "concludedValue": "node_modules/symbol-tree/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "5.5.0", "description": "Detect whether a terminal supports color", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@5.5.0", "type": "library", "bom-ref": "pkg:npm/supports-color@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-indent", "version": "3.0.0", "description": "Strip leading whitespace from each line in a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-indent@3.0.0", "type": "library", "bom-ref": "pkg:npm/strip-indent@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-indent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-indent/package.json" } ], "concludedValue": "node_modules/strip-indent/package.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.3.0", "description": "The string_decoder module from Node core", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Nicolai Kamenzky (https://github.com/analog-nico)" } ], "group": "", "name": "stealthy-require", "version": "1.1.1", "description": "The closest you can get to require something with bypassing the require cache", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/stealthy-require@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/analog-nico/stealthy-require#readme" }, { "type": "vcs", "url": "git+https://github.com/analog-nico/stealthy-require.git" } ], "type": "library", "bom-ref": "pkg:npm/stealthy-require@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/stealthy-require/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/stealthy-require/package.json" } ], "concludedValue": "node_modules/stealthy-require/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "sshpk", "version": "1.16.1", "description": "A library for finding and using SSH public keys", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sshpk@1.16.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-sshpk#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-sshpk.git" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.16.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sshpk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sshpk/package.json" } ], "concludedValue": "node_modules/sshpk/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.5", "description": "A list of SPDX license identifiers", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.5", "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (http://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "3.0.0", "description": "parse SPDX license expressions", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.0", "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.2.0", "description": "list of SPDX standard license exceptions", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.2.0", "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/spdx-exceptions/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-correct", "version": "3.1.0", "description": "correct invalid SPDX expressions", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-correct@3.1.0", "type": "library", "bom-ref": "pkg:npm/spdx-correct@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-correct/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-correct/package.json" } ], "concludedValue": "node_modules/spdx-correct/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "source-map-url", "version": "0.4.0", "description": "Tools for working with sourceMappingURL comments.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-url@0.4.0", "type": "library", "bom-ref": "pkg:npm/source-map-url@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-url/package.json" } ], "concludedValue": "node_modules/source-map-url/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "source-map-resolve", "version": "0.5.3", "description": "Resolve the source map and/or sources for a generated file.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map-resolve@0.5.3", "type": "library", "bom-ref": "pkg:npm/source-map-resolve@0.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-resolve/package.json" } ], "concludedValue": "node_modules/source-map-resolve/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "group": "", "name": "semver", "version": "5.7.1", "description": "The semantic version parser used by npm.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.1", "type": "library", "bom-ref": "pkg:npm/semver@5.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Louis-Dominique Dubeau " } ], "group": "", "name": "saxes", "version": "3.1.11", "description": "An evented streaming XML parser in JavaScript", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/saxes@3.1.11", "type": "framework", "bom-ref": "pkg:npm/saxes@3.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/saxes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/saxes/package.json" } ], "concludedValue": "node_modules/saxes/package.json" } ] }, "tags": [ "framework", "xml" ] }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.0", "description": "Safer Node.js Buffer API", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "lukechilds" } ], "group": "", "name": "responselike", "version": "2.0.0", "description": "A response-like object for mocking a Node.js HTTP response stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/responselike@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lukechilds/responselike.git" } ], "type": "library", "bom-ref": "pkg:npm/responselike@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/responselike/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/responselike/package.json" } ], "concludedValue": "node_modules/responselike/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "resolve-url", "version": "0.2.1", "description": "Like Node.js’ `path.resolve`/`url.resolve` for the browser.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-url@0.2.1", "type": "library", "bom-ref": "pkg:npm/resolve-url@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-url/package.json" } ], "concludedValue": "node_modules/resolve-url/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.15.1", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.15.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.15.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "monorepo-symlink-test", "version": "0.0.0", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid main", "version": "", "purl": "pkg:npm/invalid%20main", "type": "library", "bom-ref": "pkg:npm/invalid main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "group": "", "name": "baz", "version": "", "purl": "pkg:npm/baz", "type": "library", "bom-ref": "pkg:npm/baz", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/baz/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/baz/package.json" } ] } }, { "authors": [ { "name": "Nicolai Kamenzky (https://github.com/analog-nico)" } ], "group": "", "name": "request-promise-native", "version": "1.0.8", "description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request-promise-native@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request-promise-native#readme" }, { "type": "vcs", "url": "git+https://github.com/request/request-promise-native.git" } ], "type": "library", "bom-ref": "pkg:npm/request-promise-native@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/request-promise-native/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request-promise-native/package.json" } ], "concludedValue": "node_modules/request-promise-native/package.json" } ] }, "tags": [ "native" ] }, { "authors": [ { "name": "Nicolai Kamenzky (https://github.com/analog-nico)" } ], "group": "", "name": "request-promise-core", "version": "1.1.3", "description": "Core Promise support implementation for the simplified HTTP request client 'request'.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request-promise-core@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/promise-core#readme" }, { "type": "vcs", "url": "git+https://github.com/request/promise-core.git" } ], "type": "library", "bom-ref": "pkg:npm/request-promise-core@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/request-promise-core/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request-promise-core/package.json" } ], "concludedValue": "node_modules/request-promise-core/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.88.2", "description": "Simplified HTTP request client.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request@2.88.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.88.2", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "redent", "version": "3.0.0", "description": "Strip redundant indentation and indent the string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/redent@3.0.0", "type": "library", "bom-ref": "pkg:npm/redent@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/redent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/redent/package.json" } ], "concludedValue": "node_modules/redent/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "3.6.0", "description": "Streams3, a user-land copy of the stream library from Node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@3.6.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/readable-stream" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@3.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg-up", "version": "7.0.1", "description": "Read the closest package.json file", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg-up@7.0.1", "type": "library", "bom-ref": "pkg:npm/read-pkg-up@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg-up/package.json" } ], "concludedValue": "node_modules/read-pkg-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "0.8.1", "description": "A collection of essential TypeScript types", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@0.8.1", "type": "library", "bom-ref": "pkg:npm/type-fest@0.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/node_modules/type-fest/package.json" }, { "name": "SrcFile", "value": "node_modules/meow/node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/meow/node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/meow/node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "5.2.0", "description": "Read a package.json file", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@5.2.0", "type": "library", "bom-ref": "pkg:npm/read-pkg@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/read-pkg/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "type-fest", "version": "0.6.0", "description": "A collection of essential TypeScript types", "licenses": [ { "expression": "MIT OR CC0-1.0" } ], "purl": "pkg:npm/type-fest@0.6.0", "type": "library", "bom-ref": "pkg:npm/type-fest@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/node_modules/type-fest/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/node_modules/type-fest/package.json" } ], "concludedValue": "node_modules/read-pkg/node_modules/type-fest/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "quick-lru", "version": "4.0.1", "description": "Simple \"Least Recently Used\" (LRU) cache", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/quick-lru@4.0.1", "type": "library", "bom-ref": "pkg:npm/quick-lru@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/quick-lru/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/quick-lru/package.json" } ], "concludedValue": "node_modules/quick-lru/package.json" } ] } }, { "group": "", "name": "qs", "version": "6.5.2", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "2.1.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.1.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus Madsen " } ], "group": "", "name": "pump", "version": "3.0.0", "description": "pipe streams together and close all of them if one of them closes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pump@3.0.0", "type": "library", "bom-ref": "pkg:npm/pump@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pump/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pump/package.json" } ], "concludedValue": "node_modules/pump/package.json" } ] } }, { "authors": [ { "name": "Lupo Montero (https://lupomontero.com/)" } ], "group": "", "name": "psl", "version": "1.7.0", "description": "Domain name parser based on the Public Suffix List", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/psl@1.7.0", "type": "library", "bom-ref": "pkg:npm/psl@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/psl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/psl/package.json" } ], "concludedValue": "node_modules/psl/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "prelude-ls", "version": "1.1.2", "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.", "purl": "pkg:npm/prelude-ls@1.1.2", "externalReferences": [ { "type": "website", "url": "http://preludels.com" }, { "type": "vcs", "url": "git://github.com/gkz/prelude-ls.git" } ], "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/prelude-ls/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prelude-ls/package.json" } ], "concludedValue": "node_modules/prelude-ls/package.json" } ] } }, { "group": "", "name": "postcss-selector-parser", "version": "6.0.2", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss-selector-parser@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/postcss/postcss-selector-parser" } ], "type": "library", "bom-ref": "pkg:npm/postcss-selector-parser@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss-selector-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss-selector-parser/package.json" } ], "concludedValue": "node_modules/postcss-selector-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Andrey Sitnik " } ], "group": "", "name": "postcss", "version": "7.0.27", "description": "Tool for transforming styles with JS plugins", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/postcss@7.0.27", "externalReferences": [ { "type": "website", "url": "https://postcss.org/" } ], "type": "library", "bom-ref": "pkg:npm/postcss@7.0.27", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/package.json" } ], "concludedValue": "node_modules/postcss/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "6.1.0", "description": "Detect whether a terminal supports color", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@6.1.0", "type": "library", "bom-ref": "pkg:npm/supports-color@6.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/postcss/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/postcss/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/postcss/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "C. Scott Ananian" } ], "group": "", "name": "pn", "version": "1.1.0", "description": "Promisify the node standard library.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pn@1.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/cscott/node-pn" } ], "type": "library", "bom-ref": "pkg:npm/pn@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pn/package.json" } ], "concludedValue": "node_modules/pn/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "pify", "version": "5.0.0", "description": "Promisify a callback-style function", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@5.0.0", "type": "library", "bom-ref": "pkg:npm/pify@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Braveg1rl " } ], "group": "", "name": "performance-now", "version": "2.1.0", "description": "Implements performance.now (based on process.hrtime).", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/performance-now@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/braveg1rl/performance-now" }, { "type": "vcs", "url": "git://github.com/braveg1rl/performance-now.git" } ], "type": "library", "bom-ref": "pkg:npm/performance-now@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/performance-now/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/performance-now/package.json" } ], "concludedValue": "node_modules/performance-now/package.json" } ] }, "tags": [ "performance" ] }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.6", "description": "Node.js path.parse() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Ivan Nikulin (https://github.com/inikulin)" } ], "group": "", "name": "parse5", "version": "5.1.0", "description": "HTML parser and serializer.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse5@5.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inikulin/parse5" }, { "type": "vcs", "url": "git://github.com/inikulin/parse5.git" } ], "type": "library", "bom-ref": "pkg:npm/parse5@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse5/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse5/package.json" } ], "concludedValue": "node_modules/parse5/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "5.0.0", "description": "Parse JSON with more helpful errors", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@5.0.0", "type": "library", "bom-ref": "pkg:npm/parse-json@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "2.2.0", "description": "`Start a promise chain", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@2.2.0", "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-timeout", "version": "2.0.1", "description": "Timeout a promise after a specified amount of time", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-timeout@2.0.1", "type": "library", "bom-ref": "pkg:npm/p-timeout@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/p-timeout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-timeout/package.json" } ], "concludedValue": "node_modules/p-timeout/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "4.1.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@4.1.0", "type": "library", "bom-ref": "pkg:npm/p-locate@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "2.2.2", "description": "Run multiple promise-returning & async functions with limited concurrency", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@2.2.2", "type": "library", "bom-ref": "pkg:npm/p-limit@2.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-finally", "version": "1.0.0", "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-finally@1.0.0", "type": "library", "bom-ref": "pkg:npm/p-finally@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-finally/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-finally/package.json" } ], "concludedValue": "node_modules/p-finally/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-event", "version": "4.1.0", "description": "Promisify an event by waiting for it to be emitted", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-event@4.1.0", "type": "library", "bom-ref": "pkg:npm/p-event@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-event/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-event/package.json" } ], "concludedValue": "node_modules/p-event/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-cancelable", "version": "2.0.0", "description": "Create a promise that can be canceled", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-cancelable@2.0.0", "type": "library", "bom-ref": "pkg:npm/p-cancelable@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-cancelable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-cancelable/package.json" } ], "concludedValue": "node_modules/p-cancelable/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "optionator", "version": "0.8.3", "description": "option parsing and help generation", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optionator@0.8.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/optionator" }, { "type": "vcs", "url": "git://github.com/gkz/optionator.git" } ], "type": "library", "bom-ref": "pkg:npm/optionator@0.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/optionator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optionator/package.json" } ], "concludedValue": "node_modules/optionator/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.9.0", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth-sign@0.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Diego Perini (http://www.iport.it/)" } ], "group": "", "name": "nwsapi", "version": "2.2.0", "description": "Fast CSS Selectors API Engine", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nwsapi@2.2.0", "externalReferences": [ { "type": "website", "url": "http://javascript.nwbox.com/nwsapi/" }, { "type": "vcs", "url": "git://github.com/dperini/nwsapi.git" } ], "type": "library", "bom-ref": "pkg:npm/nwsapi@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nwsapi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nwsapi/package.json" } ], "concludedValue": "node_modules/nwsapi/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "nth-check", "version": "1.0.2", "description": "performant nth-check parser & compiler", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nth-check@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/nth-check" }, { "type": "vcs", "url": "https://github.com/fb55/nth-check" } ], "type": "library", "bom-ref": "pkg:npm/nth-check@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/nth-check/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nth-check/package.json" } ], "concludedValue": "node_modules/nth-check/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "normalize-url", "version": "4.5.0", "description": "Normalize a URL", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-url@4.5.0", "type": "library", "bom-ref": "pkg:npm/normalize-url@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-url/package.json" } ], "concludedValue": "node_modules/normalize-url/package.json" } ] } }, { "authors": [ { "name": "Meryn Stol " } ], "group": "", "name": "normalize-package-data", "version": "2.5.0", "description": "Normalizes data that can be found in package.json files.", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@2.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "Vadim Demedes " } ], "group": "", "name": "minimist-options", "version": "4.0.2", "description": "Pretty options for minimist", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist-options@4.0.2", "type": "library", "bom-ref": "pkg:npm/minimist-options@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist-options/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist-options/package.json" } ], "concludedValue": "node_modules/minimist-options/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.0.4", "description": "a glob matcher in javascript", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "James Kyle (thejameskyle.com)" } ], "group": "", "name": "min-indent", "version": "1.0.0", "description": "Get the shortest leading whitespace from lines in a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/min-indent@1.0.0", "type": "library", "bom-ref": "pkg:npm/min-indent@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/min-indent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/min-indent/package.json" } ], "concludedValue": "node_modules/min-indent/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "2.1.0", "description": "Mimic a Node.js HTTP response stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@2.1.0", "type": "library", "bom-ref": "pkg:npm/mimic-response@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/mimic-response/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.26", "description": "The ultimate javascript content-type utility.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.26", "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.26", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.43.0", "description": "Media Type Database", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.43.0", "type": "library", "bom-ref": "pkg:npm/mime-db@1.43.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "meow", "version": "6.0.1", "description": "CLI app helper", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/meow@6.0.1", "type": "library", "bom-ref": "pkg:npm/meow@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/meow/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/meow/package.json" } ], "concludedValue": "node_modules/meow/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "map-obj", "version": "4.1.0", "description": "Map object keys and values into a new object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/map-obj@4.1.0", "type": "library", "bom-ref": "pkg:npm/map-obj@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/map-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/map-obj/package.json" } ], "concludedValue": "node_modules/map-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "lowercase-keys", "version": "2.0.0", "description": "Lowercase the keys of an object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lowercase-keys@2.0.0", "type": "library", "bom-ref": "pkg:npm/lowercase-keys@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lowercase-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lowercase-keys/package.json" } ], "concludedValue": "node_modules/lowercase-keys/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.sortby", "version": "4.7.0", "description": "The lodash method `_.sortBy` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.sortby@4.7.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.sortby@4.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.sortby/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.sortby/package.json" } ], "concludedValue": "node_modules/lodash.sortby/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.some", "version": "4.6.0", "description": "The lodash method `_.some` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.some@4.6.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.some@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.some/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.some/package.json" } ], "concludedValue": "node_modules/lodash.some/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.reject", "version": "4.6.0", "description": "The lodash method `_.reject` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.reject@4.6.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.reject@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.reject/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.reject/package.json" } ], "concludedValue": "node_modules/lodash.reject/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.reduce", "version": "4.6.0", "description": "The lodash method `_.reduce` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.reduce@4.6.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.reduce@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.reduce/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.reduce/package.json" } ], "concludedValue": "node_modules/lodash.reduce/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.pick", "version": "4.4.0", "description": "The lodash method `_.pick` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.pick@4.4.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.pick@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.pick/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.pick/package.json" } ], "concludedValue": "node_modules/lodash.pick/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash.merge", "version": "4.6.2", "description": "The Lodash method `_.merge` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.merge@4.6.2", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.merge@4.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.merge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.merge/package.json" } ], "concludedValue": "node_modules/lodash.merge/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.map", "version": "4.6.0", "description": "The lodash method `_.map` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.map@4.6.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.map@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.map/package.json" } ], "concludedValue": "node_modules/lodash.map/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.foreach", "version": "4.5.0", "description": "The lodash method `_.forEach` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.foreach@4.5.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.foreach@4.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.foreach/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.foreach/package.json" } ], "concludedValue": "node_modules/lodash.foreach/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.flatten", "version": "4.4.0", "description": "The lodash method `_.flatten` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.flatten@4.4.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.flatten@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.flatten/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.flatten/package.json" } ], "concludedValue": "node_modules/lodash.flatten/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.filter", "version": "4.6.0", "description": "The lodash method `_.filter` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.filter@4.6.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.filter@4.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.filter/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.filter/package.json" } ], "concludedValue": "node_modules/lodash.filter/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.defaults", "version": "4.2.0", "description": "The lodash method `_.defaults` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.defaults@4.2.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.defaults@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.defaults/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.defaults/package.json" } ], "concludedValue": "node_modules/lodash.defaults/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.bind", "version": "4.2.1", "description": "The lodash method `_.bind` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.bind@4.2.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.bind@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.bind/package.json" } ], "concludedValue": "node_modules/lodash.bind/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton (http://allyoucanleet.com/)" } ], "group": "", "name": "lodash.assignin", "version": "4.2.0", "description": "The lodash method `_.assignIn` exported as a module.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash.assignin@4.2.0", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash.assignin@4.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash.assignin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash.assignin/package.json" } ], "concludedValue": "node_modules/lodash.assignin/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.17.15", "description": "Lodash modular utilities.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.17.15", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.15", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "5.0.0", "description": "Get the first path that exists on disk of multiple paths", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@5.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Brian Donovan " } ], "group": "", "name": "lines-and-columns", "version": "1.1.6", "description": "Maps lines and columns to character offsets and back.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lines-and-columns@1.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eventualbuddha/lines-and-columns#readme" }, { "type": "vcs", "url": "https://github.com/eventualbuddha/lines-and-columns.git" } ], "type": "library", "bom-ref": "pkg:npm/lines-and-columns@1.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/lines-and-columns/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lines-and-columns/package.json" } ], "concludedValue": "node_modules/lines-and-columns/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "levn", "version": "0.3.0", "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/levn@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/levn" }, { "type": "vcs", "url": "git://github.com/gkz/levn.git" } ], "type": "library", "bom-ref": "pkg:npm/levn@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/levn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/levn/package.json" } ], "concludedValue": "node_modules/levn/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "keyv", "version": "4.0.0", "description": "Simple key-value storage with support for multiple backends", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/keyv@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lukechilds/keyv" }, { "type": "vcs", "url": "git+https://github.com/lukechilds/keyv.git" } ], "type": "library", "bom-ref": "pkg:npm/keyv@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/keyv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/keyv/package.json" } ], "concludedValue": "node_modules/keyv/package.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.1", "description": "utilities for primitive JavaScript types", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsprim@1.4.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-jsprim.git" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsprim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsprim/package.json" } ], "concludedValue": "node_modules/jsprim/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.1", "description": "Like JSON.stringify, but doesn't blow up on circular refs.", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/json-stringify-safe" }, { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "json-schema-traverse", "version": "0.4.1", "description": "Traverse JSON Schema passing each schema object to callback", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/json-schema-traverse#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-traverse/package.json" } ], "concludedValue": "node_modules/json-schema-traverse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "json-schema", "version": "0.2.3", "description": "JSON Schema validation and specifications", "purl": "pkg:npm/json-schema@0.2.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kriszyp/json-schema" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema/package.json" } ], "concludedValue": "node_modules/json-schema/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "json-parse-better-errors", "version": "1.0.2", "description": "JSON.parse with context information on error", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-better-errors@1.0.2", "type": "library", "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-better-errors/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (http://dominictarr.com)" } ], "group": "", "name": "json-buffer", "version": "3.0.1", "description": "JSON parse & stringify that supports binary via bops & base64", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-buffer@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/json-buffer" }, { "type": "vcs", "url": "git://github.com/dominictarr/json-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/json-buffer@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-buffer/package.json" } ], "concludedValue": "node_modules/json-buffer/package.json" } ] }, "tags": [ "binary", "parse" ] }, { "group": "", "name": "jsdom", "version": "14.1.0", "description": "A JavaScript implementation of many web standards", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsdom@14.1.0", "type": "library", "bom-ref": "pkg:npm/jsdom@14.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsdom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsdom/package.json" } ], "concludedValue": "node_modules/jsdom/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Tom Wu" } ], "group": "", "name": "jsbn", "version": "0.1.1", "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andyperlitch/jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsbn/package.json" } ], "concludedValue": "node_modules/jsbn/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "4.0.0", "description": "A regex that tokenizes JavaScript.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@4.0.0", "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "isstream", "version": "0.1.2", "description": "Determine if an object is a Stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/isstream" }, { "type": "vcs", "url": "https://github.com/rvagg/isstream.git" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/isstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isstream/package.json" } ], "concludedValue": "node_modules/isstream/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "is-typedarray", "version": "1.0.0", "description": "Detect whether or not an object is a Typed Array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/is-typedarray" }, { "type": "vcs", "url": "git://github.com/hughsk/is-typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typedarray/package.json" } ], "concludedValue": "node_modules/is-typedarray/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "1.1.0", "description": "Check if a value is a plain object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-plain-obj@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "is-html", "version": "1.1.0", "description": "Check if a string is HTML", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-html@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-html@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-html/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-html/package.json" } ], "concludedValue": "node_modules/is-html/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.2.1", "description": "Determines if an object can be used as an array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/is-arrayish/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-absolute-url", "version": "3.0.3", "description": "Check if a URL is absolute", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-absolute-url@3.0.3", "type": "library", "bom-ref": "pkg:npm/is-absolute-url@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-absolute-url/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-absolute-url/package.json" } ], "concludedValue": "node_modules/is-absolute-url/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "indexes-of", "version": "1.0.1", "description": "line String/Array#indexOf but return all the indexes in an array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/indexes-of@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/indexes-of" }, { "type": "vcs", "url": "git://github.com/dominictarr/indexes-of.git" } ], "type": "library", "bom-ref": "pkg:npm/indexes-of@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/indexes-of/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indexes-of/package.json" } ], "concludedValue": "node_modules/indexes-of/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "indent-string", "version": "4.0.0", "description": "Indent each line in a string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/indent-string@4.0.0", "type": "library", "bom-ref": "pkg:npm/indent-string@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/indent-string/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/indent-string/package.json" } ], "concludedValue": "node_modules/indent-string/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.4.24", "description": "Convert character encodings in pure javascript.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.4.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "1.2.0", "description": "Reference implementation of Joyent's HTTP Signature scheme.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-signature@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-http-signature/" }, { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "Kornel Lesiński (https://kornel.ski/)" } ], "group": "", "name": "http-cache-semantics", "version": "4.0.4", "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-cache-semantics@4.0.4", "type": "library", "bom-ref": "pkg:npm/http-cache-semantics@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/http-cache-semantics/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "htmlparser2", "version": "3.10.1", "description": "Fast & forgiving HTML/XML/RSS parser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/htmlparser2@3.10.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/fb55/htmlparser2.git" } ], "type": "library", "bom-ref": "pkg:npm/htmlparser2@3.10.1", "properties": [ { "name": "SrcFile", "value": "node_modules/htmlparser2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/htmlparser2/package.json" } ], "concludedValue": "node_modules/htmlparser2/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "html-tags", "version": "1.2.0", "description": "List of standard HTML tags", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/html-tags@1.2.0", "type": "library", "bom-ref": "pkg:npm/html-tags@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/html-tags/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-tags/package.json" } ], "concludedValue": "node_modules/html-tags/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "html-encoding-sniffer", "version": "1.0.2", "description": "Sniff the encoding from a HTML byte stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/html-encoding-sniffer@1.0.2", "type": "library", "bom-ref": "pkg:npm/html-encoding-sniffer@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/html-encoding-sniffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-encoding-sniffer/package.json" } ], "concludedValue": "node_modules/html-encoding-sniffer/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "hosted-git-info", "version": "2.8.5", "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@2.8.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@2.8.5", "properties": [ { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "3.0.0", "description": "Check if argv has a specific flag", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@3.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "hard-rejection", "version": "2.1.0", "description": "Make unhandled promise rejections fail hard right away instead of the default silent fail", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hard-rejection@2.1.0", "type": "library", "bom-ref": "pkg:npm/hard-rejection@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/hard-rejection/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hard-rejection/package.json" } ], "concludedValue": "node_modules/hard-rejection/package.json" } ] } }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-validator", "version": "5.1.3", "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-validator@5.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/node-har-validator" }, { "type": "vcs", "url": "https://github.com/ahmadnassri/node-har-validator.git" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@5.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/har-validator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-validator/package.json" } ], "concludedValue": "node_modules/har-validator/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-schema", "version": "2.0.0", "description": "JSON Schema for HTTP Archive (HAR)", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-schema@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/har-schema" }, { "type": "vcs", "url": "https://github.com/ahmadnassri/har-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/har-schema@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/har-schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-schema/package.json" } ], "concludedValue": "node_modules/har-schema/package.json" } ] } }, { "group": "", "name": "got", "version": "10.6.0", "description": "Human-friendly and powerful HTTP request library for Node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/got@10.6.0", "type": "library", "bom-ref": "pkg:npm/got@10.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/got/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/got/package.json" } ], "concludedValue": "node_modules/got/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.6", "description": "a little globber", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.6", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Alex Wilson " } ], "group": "", "name": "getpass", "version": "0.1.7", "description": "getpass for node.js", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-getpass.git" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/getpass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getpass/package.json" } ], "concludedValue": "node_modules/getpass/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "5.1.0", "description": "Get a stream as a string, buffer, or array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@5.1.0", "type": "library", "bom-ref": "pkg:npm/get-stream@5.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "generate-github-markdown-css", "version": "4.0.0", "description": "Generate the CSS for github-markdown-css", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/generate-github-markdown-css@4.0.0", "type": "library", "bom-ref": "pkg:npm/generate-github-markdown-css@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/generate-github-markdown-css/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/generate-github-markdown-css/package.json" } ], "concludedValue": "node_modules/generate-github-markdown-css/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "2.3.3", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/form-data@2.3.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/package.json" } ], "concludedValue": "node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "forever-agent", "version": "0.6.1", "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/forever-agent" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/forever-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forever-agent/package.json" } ], "concludedValue": "node_modules/forever-agent/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "4.1.0", "description": "Find a file or directory by walking up parent directories", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@4.1.0", "type": "library", "bom-ref": "pkg:npm/find-up@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Ramesh Nair (http://www.hiddentao.com/)" } ], "group": "", "name": "fast-levenshtein", "version": "2.0.6", "description": "Efficient implementation of Levenshtein algorithm with locale-specific collator support.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-levenshtein@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hiddentao/fast-levenshtein.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-levenshtein@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-levenshtein/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-levenshtein/package.json" } ], "concludedValue": "node_modules/fast-levenshtein/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "fast-json-stable-stringify", "version": "2.1.0", "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-json-stable-stringify/package.json" } ], "concludedValue": "node_modules/fast-json-stable-stringify/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "fast-deep-equal", "version": "3.1.1", "description": "Fast deep equal", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-deep-equal@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-deep-equal#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/fast-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-deep-equal/package.json" } ], "concludedValue": "node_modules/fast-deep-equal/package.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "description": "extended POSIX-style sprintf", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/davepacheco/node-extsprintf.git" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/extsprintf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extsprintf/package.json" } ], "concludedValue": "node_modules/extsprintf/package.json" } ] } }, { "authors": [ { "name": "Stefan Thomas (http://www.justmoon.net)" } ], "group": "", "name": "extend", "version": "3.0.2", "description": "Port of jQuery.extend for node.js and the browser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/justmoon/node-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extend/package.json" } ], "concludedValue": "node_modules/extend/package.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "description": "utility box for ECMAScript language tools", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esutils" }, { "type": "vcs", "url": "http://github.com/estools/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "4.3.0", "description": "ECMAScript JS AST traversal functions", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "http://github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "4.0.1", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ] } }, { "group": "", "name": "escodegen", "version": "1.14.1", "description": "ECMAScript code generator", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escodegen@1.14.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/estools/escodegen" }, { "type": "vcs", "url": "http://github.com/estools/escodegen.git" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/escodegen/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escodegen/package.json" } ], "concludedValue": "node_modules/escodegen/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "group": "", "name": "error-ex", "version": "1.3.2", "description": "Easy error subclassing and stack customization", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-ex@1.3.2", "type": "library", "bom-ref": "pkg:npm/error-ex@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/error-ex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-ex/package.json" } ], "concludedValue": "node_modules/error-ex/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "entities", "version": "1.1.2", "description": "Encode & decode XML/HTML entities with ease", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/entities@1.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/fb55/entities.git" } ], "type": "library", "bom-ref": "pkg:npm/entities@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/entities/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/entities/package.json" } ], "concludedValue": "node_modules/entities/package.json" } ] }, "tags": [ "decode" ] }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "end-of-stream", "version": "1.4.4", "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/end-of-stream@1.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/end-of-stream" }, { "type": "vcs", "url": "git://github.com/mafintosh/end-of-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/end-of-stream@1.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/end-of-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/end-of-stream/package.json" } ], "concludedValue": "node_modules/end-of-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Jeremie Miller (http://jeremie.com/)" } ], "group": "", "name": "ecc-jsbn", "version": "0.1.2", "description": "ECC JS code based on JSBN", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn" }, { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ecc-jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ecc-jsbn/package.json" } ], "concludedValue": "node_modules/ecc-jsbn/package.json" } ] } }, { "authors": [ { "name": "Conrad Pankoff (http://www.fknsrs.biz/)" } ], "group": "", "name": "duplexer3", "version": "0.1.4", "description": "Like duplexer but using streams3", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/duplexer3@0.1.4", "type": "library", "bom-ref": "pkg:npm/duplexer3@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/duplexer3/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/duplexer3/package.json" } ], "concludedValue": "node_modules/duplexer3/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domutils", "version": "1.5.1", "description": "utilities for working with htmlparser2's dom", "purl": "pkg:npm/domutils@1.5.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/FB55/domutils.git" } ], "type": "library", "bom-ref": "pkg:npm/domutils@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/domutils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domutils/package.json" } ], "concludedValue": "node_modules/domutils/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domhandler", "version": "2.4.2", "description": "handler for htmlparser2 that turns pages into a dom", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domhandler@2.4.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/fb55/DomHandler.git" } ], "type": "library", "bom-ref": "pkg:npm/domhandler@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/domhandler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domhandler/package.json" } ], "concludedValue": "node_modules/domhandler/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "domexception", "version": "1.0.1", "description": "An implementation of the DOMException class from browsers", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domexception@1.0.1", "type": "library", "bom-ref": "pkg:npm/domexception@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/domexception/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domexception/package.json" } ], "concludedValue": "node_modules/domexception/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "domelementtype", "version": "1.3.1", "description": "all the types of nodes in htmlparser2's dom", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/domelementtype@1.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/fb55/domelementtype.git" } ], "type": "library", "bom-ref": "pkg:npm/domelementtype@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/domelementtype/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/domelementtype/package.json" } ], "concludedValue": "node_modules/domelementtype/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "dom-serializer", "version": "0.1.1", "description": "render dom nodes to string", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dom-serializer@0.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/cheeriojs/dom-renderer.git" } ], "type": "library", "bom-ref": "pkg:npm/dom-serializer@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dom-serializer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dom-serializer/package.json" } ], "concludedValue": "node_modules/dom-serializer/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "delayed-stream", "version": "1.0.0", "description": "Buffers events from a stream until you are ready to handle them.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-delayed-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-delayed-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delayed-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delayed-stream/package.json" } ], "concludedValue": "node_modules/delayed-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "defer-to-connect", "version": "2.0.0", "description": "The safe way to handle the `connect` socket event", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defer-to-connect@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/defer-to-connect#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/defer-to-connect.git" } ], "type": "library", "bom-ref": "pkg:npm/defer-to-connect@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/defer-to-connect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defer-to-connect/package.json" } ], "concludedValue": "node_modules/defer-to-connect/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "deep-is", "version": "0.1.3", "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-is@0.1.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/thlorenz/deep-is.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-is/package.json" } ], "concludedValue": "node_modules/deep-is/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decompress-response", "version": "5.0.0", "description": "Decompress a HTTP response if needed", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decompress-response@5.0.0", "type": "library", "bom-ref": "pkg:npm/decompress-response@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-response/package.json" } ], "concludedValue": "node_modules/decompress-response/package.json" } ] } }, { "authors": [ { "name": "Sam Verschueren (github.com/SamVerschueren)" } ], "group": "", "name": "decode-uri-component", "version": "0.2.0", "description": "A better decodeURIComponent", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decode-uri-component@0.2.0", "type": "library", "bom-ref": "pkg:npm/decode-uri-component@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decode-uri-component/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decode-uri-component/package.json" } ], "concludedValue": "node_modules/decode-uri-component/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "decamelize-keys", "version": "1.1.0", "description": "Convert object keys from camelCase to lowercase with a custom separator", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize-keys@1.1.0", "type": "library", "bom-ref": "pkg:npm/decamelize-keys@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize-keys/package.json" } ], "concludedValue": "node_modules/decamelize-keys/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "map-obj", "version": "1.0.1", "description": "Map object keys and values into a new object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/map-obj@1.0.1", "type": "library", "bom-ref": "pkg:npm/map-obj@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize-keys/node_modules/map-obj/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize-keys/node_modules/map-obj/package.json" } ], "concludedValue": "node_modules/decamelize-keys/node_modules/map-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me/)" } ], "group": "", "name": "data-urls", "version": "1.1.0", "description": "Parses data: URLs", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/data-urls@1.1.0", "type": "library", "bom-ref": "pkg:npm/data-urls@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/data-urls/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/data-urls/package.json" } ], "concludedValue": "node_modules/data-urls/package.json" } ] } }, { "authors": [ { "name": "Trent Mick (http://trentm.com)" } ], "group": "", "name": "dashdash", "version": "1.14.1", "description": "A light, featureful and explicit option parsing library.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/trentm/node-dashdash.git" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dashdash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dashdash/package.json" } ], "concludedValue": "node_modules/dashdash/package.json" } ] } }, { "group": "", "name": "cssstyle", "version": "1.4.0", "description": "CSSStyleDeclaration Object Model implementation", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cssstyle@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jsakas/CSSStyleDeclaration" } ], "type": "library", "bom-ref": "pkg:npm/cssstyle@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cssstyle/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cssstyle/package.json" } ], "concludedValue": "node_modules/cssstyle/package.json" } ] } }, { "authors": [ { "name": "Nikita Vasilyev " } ], "group": "", "name": "cssom", "version": "0.3.8", "description": "CSS Object Model implementation and CSS parser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cssom@0.3.8", "type": "library", "bom-ref": "pkg:npm/cssom@0.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/cssom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cssom/package.json" } ], "concludedValue": "node_modules/cssom/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "cssesc", "version": "3.0.0", "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cssesc@3.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/cssesc" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/cssesc.git" } ], "type": "library", "bom-ref": "pkg:npm/cssesc@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cssesc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cssesc/package.json" } ], "concludedValue": "node_modules/cssesc/package.json" } ] } }, { "authors": [ { "name": "Felix Böhm (http://feedic.com)" } ], "group": "", "name": "css-what", "version": "2.1.3", "description": "a CSS selector parser", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/css-what@2.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/css-what" } ], "type": "library", "bom-ref": "pkg:npm/css-what@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/css-what/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/css-what/package.json" } ], "concludedValue": "node_modules/css-what/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "css-select", "version": "1.2.0", "description": "a CSS selector compiler/engine", "licenses": [ { "license": { "name": "BSD-like", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/css-select@1.2.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/fb55/css-select.git" } ], "type": "library", "bom-ref": "pkg:npm/css-select@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/css-select/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/css-select/package.json" } ], "concludedValue": "node_modules/css-select/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "css", "version": "2.2.4", "description": "CSS parser / stringifier", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/css@2.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/reworkcss/css.git" } ], "type": "library", "bom-ref": "pkg:npm/css@2.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/css/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/css/package.json" } ], "concludedValue": "node_modules/css/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/core-util-is" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.3", "description": "the complete solution for node.js command-line programs", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "combined-stream", "version": "1.0.8", "description": "A stream that emits multiple other streams one after another.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-combined-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-combined-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/combined-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combined-stream/package.json" } ], "concludedValue": "node_modules/combined-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.3", "description": "A list of color names and its values", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dfcreative/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "1.9.3", "description": "Plain color conversion functions", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@1.9.3", "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "clone-response", "version": "1.0.2", "description": "Clone a Node.js HTTP response stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/clone-response@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lukechilds/clone-response" }, { "type": "vcs", "url": "git+https://github.com/lukechilds/clone-response.git" } ], "type": "library", "bom-ref": "pkg:npm/clone-response@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/clone-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clone-response/package.json" } ], "concludedValue": "node_modules/clone-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "1.0.1", "description": "Mimic a Node.js HTTP response stream", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@1.0.1", "type": "library", "bom-ref": "pkg:npm/mimic-response@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/clone-response/node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/clone-response/node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/clone-response/node_modules/mimic-response/package.json" } ] } }, { "authors": [ { "name": "Matt Mueller (mat.io)" } ], "group": "", "name": "cheerio", "version": "0.22.0", "description": "Tiny, fast, and elegant implementation of core jQuery designed specifically for the server", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cheerio@0.22.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/cheeriojs/cheerio.git" } ], "type": "library", "bom-ref": "pkg:npm/cheerio@0.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cheerio/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cheerio/package.json" } ], "concludedValue": "node_modules/cheerio/package.json" } ] } }, { "group": "", "name": "chalk", "version": "2.4.2", "description": "Terminal string styling done right", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@2.4.2", "type": "library", "bom-ref": "pkg:npm/chalk@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "caseless", "version": "0.12.0", "description": "Caseless object set/get/has, very useful when working with HTTP headers.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caseless@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/caseless" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/caseless/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caseless/package.json" } ], "concludedValue": "node_modules/caseless/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase-keys", "version": "6.1.2", "description": "Convert object keys to camel case", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase-keys@6.1.2", "type": "library", "bom-ref": "pkg:npm/camelcase-keys@6.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase-keys/package.json" } ], "concludedValue": "node_modules/camelcase-keys/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "5.3.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@5.3.1", "type": "library", "bom-ref": "pkg:npm/camelcase@5.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Luke Childs (http://lukechilds.co.uk)" } ], "group": "", "name": "cacheable-request", "version": "7.0.1", "description": "Wrap native HTTP requests with RFC compliant cache support", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacheable-request@7.0.1", "type": "library", "bom-ref": "pkg:npm/cacheable-request@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cacheable-request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacheable-request/package.json" } ], "concludedValue": "node_modules/cacheable-request/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "", "name": "cacheable-lookup", "version": "2.0.0", "description": "A cacheable dns.lookup(…) that respects the TTL", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cacheable-lookup@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/cacheable-lookup#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/cacheable-lookup.git" } ], "type": "library", "bom-ref": "pkg:npm/cacheable-lookup@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cacheable-lookup/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cacheable-lookup/package.json" } ], "concludedValue": "node_modules/cacheable-lookup/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-process-hrtime", "version": "0.1.3", "description": "Shim for process.hrtime in the browser", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-process-hrtime@0.1.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kumavis/browser-process-hrtime.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-process-hrtime@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-process-hrtime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-process-hrtime/package.json" } ], "concludedValue": "node_modules/browser-process-hrtime/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.11", "description": "Brace expansion as known from sh/bash", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Felix Boehm " } ], "group": "", "name": "boolbase", "version": "1.0.0", "description": "two functions: One that returns true, one that returns false", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/boolbase@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/fb55/boolbase" }, { "type": "vcs", "url": "https://github.com/fb55/boolbase" } ], "type": "library", "bom-ref": "pkg:npm/boolbase@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/boolbase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/boolbase/package.json" } ], "concludedValue": "node_modules/boolbase/package.json" } ] } }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-bcrypt-pbkdf.git" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bcrypt-pbkdf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bcrypt-pbkdf/package.json" } ], "concludedValue": "node_modules/bcrypt-pbkdf/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.0", "description": "Match balanced character pairs, like \"{\" and \"}\"", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Michael Hart (http://github.com/mhart)" } ], "group": "", "name": "aws4", "version": "1.9.1", "description": "Signs and prepares requests using AWS Signature Version 4", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws4@1.9.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mhart/aws4.git" } ], "type": "library", "bom-ref": "pkg:npm/aws4@1.9.1", "properties": [ { "name": "SrcFile", "value": "node_modules/aws4/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws4/package.json" } ], "concludedValue": "node_modules/aws4/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "aws-sign2", "version": "0.7.0", "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-sign2@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/aws-sign" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws-sign2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws-sign2/package.json" } ], "concludedValue": "node_modules/aws-sign2/package.json" } ] } }, { "authors": [ { "name": "AJ ONeal (https://coolaj86.com)" } ], "group": "", "name": "atob", "version": "2.1.2", "description": "atob for Node.JS and Linux / Mac / Windows CLI (it's a one-liner)", "licenses": [ { "expression": "MIT OR Apache-2.0" } ], "purl": "pkg:npm/atob@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://git.coolaj86.com/coolaj86/atob.js.git" }, { "type": "vcs", "url": "git://git.coolaj86.com/coolaj86/atob.js.git" } ], "type": "library", "bom-ref": "pkg:npm/atob@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/atob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/atob/package.json" } ], "concludedValue": "node_modules/atob/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Alex Indigo " } ], "group": "", "name": "asynckit", "version": "0.4.0", "description": "Minimal async jobs utility library, with streams support", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asynckit@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexindigo/asynckit#readme" }, { "type": "vcs", "url": "git+https://github.com/alexindigo/asynckit.git" } ], "type": "library", "bom-ref": "pkg:npm/asynckit@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/asynckit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asynckit/package.json" } ], "concludedValue": "node_modules/asynckit/package.json" } ] } }, { "authors": [ { "name": "Samuel Reed " } ], "group": "", "name": "assert-plus", "version": "1.0.0", "description": "Extra assertions on top of node's assert module", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcavage/node-assert-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-plus/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Joyent (joyent.com)" } ], "group": "", "name": "asn1", "version": "0.2.4", "description": "Contains parsers and serializers for ASN.1 (currently BER only)", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asn1@0.2.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/joyent/node-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1/package.json" } ], "concludedValue": "node_modules/asn1/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "arrify", "version": "1.0.1", "description": "Convert a value to an array", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/arrify@1.0.1", "type": "library", "bom-ref": "pkg:npm/arrify@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/arrify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/arrify/package.json" } ], "concludedValue": "node_modules/arrify/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "array-equal", "version": "1.0.0", "description": "check if two arrays are equal", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-equal@1.0.0", "type": "library", "bom-ref": "pkg:npm/array-equal@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/array-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-equal/package.json" } ], "concludedValue": "node_modules/array-equal/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "3.2.1", "description": "ANSI escape codes for styling strings in the terminal", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@3.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv", "version": "6.11.0", "description": "Another JSON Schema Validator", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@6.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/ajv" }, { "type": "vcs", "url": "https://github.com/epoberezkin/ajv.git" } ], "type": "library", "bom-ref": "pkg:npm/ajv@6.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv/package.json" } ], "concludedValue": "node_modules/ajv/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "acorn-walk", "version": "6.2.0", "description": "ECMAScript (ESTree) AST walker", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-walk@6.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-walk@6.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-walk/package.json" } ], "concludedValue": "node_modules/acorn-walk/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "acorn-globals", "version": "4.3.4", "description": "Detect global variables in JavaScript using acorn", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-globals@4.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ForbesLindesay/acorn-globals.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-globals@4.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-globals/package.json" } ], "concludedValue": "node_modules/acorn-globals/package.json" } ] } }, { "group": "", "name": "acorn", "version": "6.4.0", "description": "ECMAScript parser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@6.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@6.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "authors": [ { "name": "Jeff Carpenter " } ], "group": "", "name": "abab", "version": "2.0.3", "description": "WHATWG spec-compliant implementations of window.atob and window.btoa.", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abab@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jsdom/abab#readme" }, { "type": "vcs", "url": "git+https://github.com/jsdom/abab.git" } ], "type": "library", "bom-ref": "pkg:npm/abab@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/abab/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abab/package.json" } ], "concludedValue": "node_modules/abab/package.json" } ] } }, { "group": "@types", "name": "responselike", "version": "1.0.0", "description": "TypeScript definitions for responselike", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/responselike@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/responselike@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/responselike/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/responselike/package.json" } ], "concludedValue": "node_modules/@types/responselike/package.json" } ] } }, { "group": "@types", "name": "normalize-package-data", "version": "2.4.0", "description": "TypeScript definitions for normalize-package-data", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/normalize-package-data@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/normalize-package-data@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/normalize-package-data/package.json" } ], "concludedValue": "node_modules/@types/normalize-package-data/package.json" } ] } }, { "group": "@types", "name": "node", "version": "13.7.4", "description": "TypeScript definitions for Node.js", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@13.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@13.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "Bart van der Schoor " }, { "name": " Necroskillz " }, { "name": " kamranayub " } ], "group": "@types", "name": "minimist", "version": "1.2.0", "description": "TypeScript definitions for minimist", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/minimist@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/minimist@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/minimist/package.json" } ], "concludedValue": "node_modules/@types/minimist/package.json" } ] } }, { "group": "@types", "name": "keyv", "version": "3.1.1", "description": "TypeScript definitions for keyv", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/keyv@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/keyv@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/keyv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/keyv/package.json" } ], "concludedValue": "node_modules/@types/keyv/package.json" } ] } }, { "group": "@types", "name": "http-cache-semantics", "version": "4.0.0", "description": "TypeScript definitions for http-cache-semantics", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/http-cache-semantics@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/http-cache-semantics@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/http-cache-semantics/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/http-cache-semantics/package.json" } ], "concludedValue": "node_modules/@types/http-cache-semantics/package.json" } ] } }, { "group": "@types", "name": "cacheable-request", "version": "6.0.1", "description": "TypeScript definitions for cacheable-request", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/cacheable-request@6.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/cacheable-request@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/cacheable-request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/cacheable-request/package.json" } ], "concludedValue": "node_modules/@types/cacheable-request/package.json" } ] } }, { "authors": [ { "name": "Szymon Marczak" } ], "group": "@szmarczak", "name": "http-timer", "version": "4.0.5", "description": "Timings for HTTP requests", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40szmarczak/http-timer@4.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/szmarczak/http-timer#readme" }, { "type": "vcs", "url": "git+https://github.com/szmarczak/http-timer.git" } ], "type": "library", "bom-ref": "pkg:npm/@szmarczak/http-timer@4.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@szmarczak/http-timer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@szmarczak/http-timer/package.json" } ], "concludedValue": "node_modules/@szmarczak/http-timer/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "@sindresorhus", "name": "is", "version": "2.1.0", "description": "Type check values", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40sindresorhus/is@2.1.0", "type": "library", "bom-ref": "pkg:npm/@sindresorhus/is@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@sindresorhus/is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@sindresorhus/is/package.json" } ], "concludedValue": "node_modules/@sindresorhus/is/package.json" } ] } }, { "authors": [ { "name": "suchipi " } ], "group": "@babel", "name": "highlight", "version": "7.8.3", "description": "Syntax highlight JavaScript strings for output in terminals.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/highlight@7.8.3", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/highlight@7.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/highlight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/highlight/package.json" } ], "concludedValue": "node_modules/@babel/highlight/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "code-frame", "version": "7.8.3", "description": "Generate errors that contain a code frame that point to source locations.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.8.3", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.8.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/github-markdown-css@4.0.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-03T22:52:59Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 3, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'github-markdown-css' with version '4.0.0'. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from 244 source files." } ] }