{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:edde9edc-12ba-4c94-bae8-2853eb724841", "version": 1, "metadata": { "timestamp": "2026-08-16T14:21:13Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "globby", "group": "", "version": "7.1.1", "description": "Extends `glob` with support for multiple patterns and exposes a Promise API", "purl": "pkg:npm/globby@7.1.1", "bom-ref": "pkg:npm/globby@7.1.1", "author": "Sindre Sorhus (sindresorhus.com)", "properties": [ { "name": "cdx:npm:scripts", "value": "bench, test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/array-union/node_modules/array-uniq/package.json\\nnode_modules/array-union/package.json\\nnode_modules/dir-glob/node_modules/path-type/package.json\\nnode_modules/dir-glob/package.json\\nnode_modules/glob/node_modules/fs.realpath/package.json\\nnode_modules/glob/node_modules/inflight/node_modules/wrappy/package.json\\nnode_modules/glob/node_modules/inflight/package.json\\nnode_modules/glob/node_modules/inherits/package.json\\nnode_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/balanced-match/package.json\\nnode_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/concat-map/package.json\\nnode_modules/glob/node_modules/minimatch/node_modules/brace-expansion/package.json\\nnode_modules/glob/node_modules/minimatch/package.json\\nnode_modules/glob/node_modules/once/node_modules/wrappy/package.json\\nnode_modules/glob/node_modules/once/package.json\\nnode_modules/glob/node_modules/path-is-absolute/package.json\\nnode_modules/glob/package.json\\nnode_modules/ignore/package.json\\nnode_modules/pify/package.json\\nnode_modules/slash/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "slash", "version": "1.0.0", "description": "Convert Windows backslash paths to slash paths", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slash@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/slash" }, { "type": "vcs", "url": "git://github.com/sindresorhus/slash" } ], "type": "library", "bom-ref": "pkg:npm/slash@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slash/package.json" }, { "name": "ImportedModules", "value": "slash" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slash/package.json" } ], "concludedValue": "node_modules/slash/package.json" } ], "occurrences": [ { "location": "gitignore.js", "line": 7 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "3.0.0", "description": "Promisify a callback-style function", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pify#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pify.git" } ], "type": "library", "bom-ref": "pkg:npm/pify@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "ImportedModules", "value": "pify" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ], "occurrences": [ { "location": "gitignore.js", "line": 6 }, { "location": "index.js", "line": 4 } ] } }, { "authors": [ { "name": "kael" } ], "group": "", "name": "ignore", "version": "3.3.10", "description": "Ignore is a manager and filter for .gitignore rules.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@3.3.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kaelzhang/node-ignore#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kaelzhang/node-ignore.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore@3.3.10", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore/package.json" }, { "name": "ImportedModules", "value": "ignore" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore/package.json" } ], "concludedValue": "node_modules/ignore/package.json" } ], "occurrences": [ { "location": "gitignore.js", "line": 5 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.2.3", "description": "a little globber", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "ImportedModules", "value": "glob" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ], "occurrences": [ { "location": "gitignore.js", "line": 4 }, { "location": "index.js", "line": 3 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-is-absolute#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/glob/node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/once#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/once.git" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/once/package.json" } ], "concludedValue": "node_modules/glob/node_modules/once/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "git+https://github.com/npm/wrappy.git" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/once/node_modules/wrappy/package.json" }, { "name": "SrcFile", "value": "node_modules/glob/node_modules/inflight/node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/inflight/node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/glob/node_modules/inflight/node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/glob/node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.18", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.18", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-concat-map" }, { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/glob/node_modules/minimatch/node_modules/brace-expansion/node_modules/balanced-match/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/glob/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "git+https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/inflight/package.json" } ], "concludedValue": "node_modules/glob/node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/fs.realpath#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/glob/node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "dir-glob", "version": "2.2.2", "description": "Convert directories to glob compatible strings", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dir-glob@2.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kevva/dir-glob#readme" }, { "type": "vcs", "url": "git+https://github.com/kevva/dir-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/dir-glob@2.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/dir-glob/package.json" }, { "name": "ImportedModules", "value": "dir-glob" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dir-glob/package.json" } ], "concludedValue": "node_modules/dir-glob/package.json" } ], "occurrences": [ { "location": "index.js", "line": 5 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-type", "version": "3.0.0", "description": "Check if a path is a file, directory, or symlink", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-type#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-type.git" } ], "type": "library", "bom-ref": "pkg:npm/path-type@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/dir-glob/node_modules/path-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dir-glob/node_modules/path-type/package.json" } ], "concludedValue": "node_modules/dir-glob/node_modules/path-type/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "array-union", "version": "1.0.2", "description": "Create an array of unique values, in order, from the input arrays", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-union@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/array-union#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/array-union.git" } ], "type": "library", "bom-ref": "pkg:npm/array-union@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/array-union/package.json" }, { "name": "ImportedModules", "value": "array-union" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-union/package.json" } ], "concludedValue": "node_modules/array-union/package.json" } ], "occurrences": [ { "location": "index.js", "line": 2 } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "array-uniq", "version": "1.0.3", "description": "Create an array without duplicates", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-uniq@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/array-uniq#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/array-uniq.git" } ], "type": "library", "bom-ref": "pkg:npm/array-uniq@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/array-union/node_modules/array-uniq/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-union/node_modules/array-uniq/package.json" } ], "concludedValue": "node_modules/array-union/node_modules/array-uniq/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/globby@7.1.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-16T14:21:13Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, August 16, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'globby' with version '7.1.1'." } ] }