{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:1c22e820-174d-4076-b143-7f655b44d46d", "version": 1, "metadata": { "timestamp": "2026-07-25T10:53:29Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "golden-fleece", "group": "", "version": "1.0.9", "description": "Parse and manipulate JSON5 strings", "purl": "pkg:npm/golden-fleece@1.0.9", "bom-ref": "pkg:npm/golden-fleece@1.0.9", "properties": [ { "name": "cdx:npm:scripts", "value": "build-declarations, build, fetch_tests, test, prepublishOnly" } ], "type": "application", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/golden-fleece.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@types", "name": "glob", "version": "5.0.33", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "05c0f8cb25b3faa982820698312145d179fb1a43bab60c26dc587d1b193f91098453767b7e54139d594cc8a05436f5d7353082ca3a8ae174f8ff684b775810d8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/glob@5.0.33", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/glob/-/glob-5.0.33.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/glob@5.0.33", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/glob/-/glob-5.0.33.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "minimatch", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ad43bf8f3d742914b203d487a02590f165fd0480b28f98d962ed7fb9c28424a6f82b32d908a31445d61b69d3f5e7b43a665d71d2f1ecad4f99fced179616100f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/minimatch@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/minimatch@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "node", "version": "8.0.53", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e780e6e8dc187a249099107504b5caaf91842e2d3015aa51d67a62f1b9d984472ef3877fc902aa9f0c17439ea16744546d31ba2f99ea0d968dddd801c905d045" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/node@8.0.53", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-8.0.53.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@8.0.53", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-8.0.53.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@types", "name": "mocha", "version": "2.2.44", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "936b564d053c1b8fa248cbea2a2d10f4822c580a7f9fcc737594b8438615225b40a68300d34c050457652679a868ad7fcfb0740b2d323dee86817b5e4a675437" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/mocha@2.2.44", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/mocha/-/mocha-2.2.44.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/mocha@2.2.44", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/mocha/-/mocha-2.2.44.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "benchmark", "version": "2.1.4", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "09f3de31c916425d498cc2ee565a0ebf3c2a5629" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/benchmark@2.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/benchmark/-/benchmark-2.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/benchmark@2.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/benchmark/-/benchmark-2.1.4.tgz" }, { "name": "ImportedModules", "value": "benchmark" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bench/bench.js#7" } ] } }, { "group": "", "name": "lodash", "version": "4.17.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash@4.17.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "platform", "version": "1.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6f0fb17edaaa48f21442b3a975c063130f1c3ebd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/platform@1.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/platform/-/platform-1.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/platform@1.3.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/platform/-/platform-1.3.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chalk", "version": "2.3.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "033e73251d8206e8daa76aea5c668929a3c7c89d08ad48a6bd8357fa7702cbc3c93f896d3864eb1d4228d3ded968bdb331e298a6209da83bd2eb376b4c5a24dd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chalk@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chalk@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz" }, { "name": "ImportedModules", "value": "chalk" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bench/bench.js#10" } ] } }, { "group": "", "name": "ansi-styles", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "36748e98c118b55476255308193cf29d19246b1b62ab5c6714171d403fc39cd0983e810fb1526133df010f26a834e4088bba78a24762dc4dbb78dec641bb14ba" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-convert", "version": "1.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9a319a9c88b0409b24082d7cacf47a3a6ad9e9f9b62dcecf786158c029b2e49df8c02e85d4fcdd18beb178c7e682271f61c34b1ae5450375b35ed203090499c5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-convert@1.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-name", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a7d0558bd89c42f795dd42328f740831ca53bc25" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "4.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "be7a0de484dec5c5cddf8b3d59125044912f635b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@4.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@4.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e8207af1cc7b30d446cc70b734b5e8be18f88d51" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "degit", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3932a918f7146cd5b8f5347117805e5d26b18d93ef4b80481bfa15bac95470a25dfcb0ea291fb48afb1eda5d1e6903e3607b144fd94e3ad6245ae3c4dd4e48dd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/degit@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/degit/-/degit-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/degit@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/degit/-/degit-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "home-or-tmp", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "57a8fe24cf33cdd524860a15821ddc25c86671fb" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/home-or-tmp@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/home-or-tmp/-/home-or-tmp-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/home-or-tmp@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/home-or-tmp/-/home-or-tmp-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mri", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5c0a3f29c8ccffbbb1ec941dcec09d71fa32f36a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mri@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mri/-/mri-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mri@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mri/-/mri-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tar", "version": "4.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e2558de2e0045b3c3c687c81531f47597bc7def2051213b2bcddb61df0735a9134ec769305733cb6d49e090a6cc11a393a7e2ade79a662693b4e89a7d2e8546b" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/tar@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tar/-/tar-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tar@4.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tar/-/tar-4.0.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chownr", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e2a75042a9551908bebd25b8523d5f9769d79181" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/chownr@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chownr/-/chownr-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chownr@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chownr/-/chownr-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minipass", "version": "2.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bb5694965c4f254234edc3aacd1eeb786990c660aa947f3cb8822c7fa5d91445a0c3b8172a925d47ee51f58dca103996624748cfdc1766cdc2d2338fc5e8e4fd" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minipass@2.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minipass/-/minipass-2.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minipass@2.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minipass/-/minipass-2.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yallist", "version": "3.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8452b4bb7e83c7c188d8041c1a837c773d6d8bb9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/yallist@3.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yallist/-/yallist-3.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yallist@3.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yallist/-/yallist-3.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minizlib", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b0de14f6d209b4147029bc20161f6a25facf210fc619346bd4c1aa92039e3132f2f3f94cd0571653ffc5aa59d9dd56fb809f8cc61dc53a0d4492589b75a8db69" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minizlib@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minizlib/-/minizlib-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minizlib/-/minizlib-1.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "ImportedModules", "value": "glob" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bench/bench.js#6" }, { "location": "scripts/move-declaration-files.js#2" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@1.1.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json5", "version": "0.5.1", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "1eade7acc012034ad84e2396767ead9fa5495821" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/json5@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json5@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz" }, { "name": "ImportedModules", "value": "json5" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bench/bench.js#11" } ] } }, { "group": "", "name": "locate-character", "version": "2.0.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "854c1ab25d99507c701f3ea74433716da12b584a8496cda0d0c2cd422e71398779e8e502866b482d56c9ab283718a444120a7c78a6de74ce17be9d888ea6b8a9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/locate-character@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/locate-character/-/locate-character-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/locate-character@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/locate-character/-/locate-character-2.0.3.tgz" }, { "name": "ImportedModules", "value": "locate-character,locate,locate-character/locate" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/parse.ts#8" } ] } }, { "group": "", "name": "mocha", "version": "3.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ffa9dad34d4c25612d6311ce57558b7ec991e182329e4504841c33b1bf9f936aa64378aab22db9f25fd0d8c58724c22601c36967c0c475800aef6347a0843d12" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@3.5.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@3.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "browser-stdout", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/browser-stdout@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "2.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9c99094176e12240cb22d6c5146098400fe0f7d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-readlink", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/graceful-readlink@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-readlink@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.6.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e731531ca2ede27d188222427da17821d68ff4fc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@2.6.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c9ce393a4b7cbd0b058a725c93df299027868ff9" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/diff@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.1", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "ImportedModules", "value": "glob" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bench/bench.js#6" }, { "location": "scripts/move-declaration-files.js#2" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/growl@1.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "he", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "93410fd21b009735151f8868c2f271f3427e23fd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json3", "version": "3.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1" } ], "purl": "pkg:npm/json3@3.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json3@3.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please use the native JSON object instead of JSON 3" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.create", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.create@3.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.create@3.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._baseassign", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._baseassign@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._baseassign@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._basecopy", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._basecopy@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._basecopy@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.keys", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.keys@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.keys@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._getnative", "version": "3.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._getnative@3.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._getnative@3.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "native" ] }, { "group": "", "name": "lodash.isarguments", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2f573d85c6a24289ff00663b491c1d338ff3458a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.isarguments@3.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isarguments@3.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.isarray", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash.isarray@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isarray@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._basecreate", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bc661614daa7fc311b7d03bf16806a0213cf821" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._basecreate@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._basecreate@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._isiterateecall", "version": "3.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5203ad7ba425fae842460e696db9cf3e6aac057c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash._isiterateecall@3.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "right-pad", "version": "1.0.1", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "8ca08c2cbb5b55e74dafa96bf7fd1a27d568c8d0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/right-pad@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/right-pad/-/right-pad-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/right-pad@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/right-pad/-/right-pad-1.0.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Use String.prototype.padEnd() instead" }, { "name": "ImportedModules", "value": "right-pad" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "bench/bench.js#9" } ] } }, { "group": "", "name": "rollup", "version": "0.49.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9ffbc7457e0684c23219911044035c48556dbf3f7d6d245b34cba80b7ddaafd7f80958aa7dfc85f569252dbda6c4843a23fb857fbc0312973ae9b5c1144ec5bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup@0.49.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup/-/rollup-0.49.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup@0.49.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup/-/rollup-0.49.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-node-resolve", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8b897c4c3030d5001277b0514b25d2ca09683ee0" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-plugin-node-resolve@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-node-resolve/-/rollup-plugin-node-resolve-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-node-resolve@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-node-resolve/-/rollup-plugin-node-resolve-3.0.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated and is no longer maintained. Please use @rollup/plugin-node-resolve." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "browser-resolve", "version": "1.11.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8ff09b0a2c421718a1051c260b32e48f442938ce" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/browser-resolve@1.11.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/browser-resolve@1.11.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/resolve@1.1.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "builtin-modules", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/builtin-modules@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/builtin-modules@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "is-module", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3258fb69f78c14d5b815d664336b4cffb6441591" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-module@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-module@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "1.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "860a121ab737a63cc03c734183e2a715c2b61f09474ecfd8ac0194afaaa04d5519997bf55045d79746d934128c03d7ee77a95160574f1b3d315f1c9c3f39a68b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/resolve@1.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-parse", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-parse@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-typescript", "version": "0.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2ff7eecc21cf6bb2b43fc27e5b688952ce71924a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-plugin-typescript@0.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-typescript/-/rollup-plugin-typescript-0.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-typescript@0.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-typescript/-/rollup-plugin-typescript-0.8.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated and is no longer maintained. Please use @rollup/plugin-typescript." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "compare-versions", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1edc1f93687fd97a325c59f55e45a07db106aca6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/compare-versions@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/compare-versions/-/compare-versions-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/compare-versions@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/compare-versions/-/compare-versions-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "object-assign", "version": "4.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2109adc7965887cfc05cbbd442cac8bfbb360863" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/object-assign@4.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-pluginutils", "version": "1.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1e156e778f94b7255bfa1b3d0178be8f5c552408" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-pluginutils@1.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-1.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-pluginutils@1.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-1.5.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "estree-walker", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bdafe8095383d8414d5dc2ecf4c9173b6db9412e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/estree-walker@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@0.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tippex", "version": "2.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a2fd5b7087d7cbfb20c9806a6c16108c2c0fafda" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tippex@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tippex/-/tippex-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tippex@2.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tippex/-/tippex-2.3.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "1.8.10", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b475d6e0dff0bf50f296e5ca6ef9fbb5c7320f1e" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@1.8.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-1.8.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@1.8.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-1.8.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-virtual", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1c24c1a55f0cc0fe6537366b1c3da6a15c47213a07535124ce4286563e99d0372051fc6bc6b6667908ab41e2f3db2867909a918f0895cb02bd092f230d86a4af" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-plugin-virtual@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-virtual/-/rollup-plugin-virtual-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-virtual@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-virtual/-/rollup-plugin-virtual-1.0.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated and is no longer maintained. Please use @rollup/plugin-virtual." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sander", "version": "0.6.0", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "af1624cd7fb6dfad98ebef565319f920078da925" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/sander@0.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sander/-/sander-0.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sander@0.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sander/-/sander-0.6.0.tgz" }, { "name": "ImportedModules", "value": "sander" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "scripts/move-declaration-files.js#1" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/graceful-fs@4.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rimraf", "version": "2.6.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "96b79ec0b2bf0658219b1b5f1f7e986158358bc20071ee1323ba1aa3be48d60db8e7ee8172da935508813f761427d0ba0d039726691847d5fd7c22ed08e25ce7" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/rimraf@2.6.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.6.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Rimraf versions prior to v4 are no longer supported" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ts-node", "version": "3.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c13c6a3024e30be1180dd53038fc209289d4bf69" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ts-node@3.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ts-node/-/ts-node-3.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ts-node@3.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ts-node/-/ts-node-3.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "arrify", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "898508da2226f380df904728456849c1501a4b0d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/arrify@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/arrify@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "make-error", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "52ad3a339ccf10ce62b4040b708fe707244b8b96" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/make-error@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/make-error/-/make-error-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/make-error@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/make-error/-/make-error-1.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a35008b20f41383eec1fb914f4cd5df79a264284" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map-support", "version": "0.4.18", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b6bcb4fc9ab13cb17d9ce8ef4ad6bbb55a277643f97708322c38d5a323039668ee813da5459d4e7ecad84e409dda19039c94ca45b3bf465de8ae6f2f96c5336c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/source-map-support@0.4.18", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.4.18", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.5.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tsconfig", "version": "6.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6b0e8376003d7af1864f8df8f89dd0059ffcd032" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tsconfig@6.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tsconfig/-/tsconfig-6.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tsconfig@6.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tsconfig/-/tsconfig-6.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-bom", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-bom@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-bom@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "strip-json-comments", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3c531942e908c2697c0ec344858c286c7ca0a60a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-json-comments@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@2.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "v8flags", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dce8fc379c17d9f2c9e9ed78d89ce00052b1b76b" } ], "purl": "pkg:npm/v8flags@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/v8flags/-/v8flags-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/v8flags@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/v8flags/-/v8flags-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "homedir-polyfill", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4c2bbc8a758998feebf5ed68580f76d46768b4bc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/homedir-polyfill@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/homedir-polyfill@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "parse-passwd", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6d5b934a456993b23d37f40a382d6f1666a8e5c6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/parse-passwd@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/parse-passwd@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "yn", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e5adabc8acf408f6385fc76495684c88e6af689a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yn@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yn/-/yn-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yn@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yn/-/yn-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "2.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ef39cdea27abac0b500242d6726ab90e0c846631" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@2.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-2.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@2.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-2.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@types/minimatch@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/@types/node@8.0.53", "dependsOn": [] }, { "ref": "pkg:npm/@types/glob@5.0.33", "dependsOn": [ "pkg:npm/@types/minimatch@3.0.1", "pkg:npm/@types/node@8.0.53" ] }, { "ref": "pkg:npm/@types/mocha@2.2.44", "dependsOn": [] }, { "ref": "pkg:npm/lodash@4.17.4", "dependsOn": [] }, { "ref": "pkg:npm/platform@1.3.4", "dependsOn": [] }, { "ref": "pkg:npm/benchmark@2.1.4", "dependsOn": [ "pkg:npm/lodash@4.17.4", "pkg:npm/platform@1.3.4" ] }, { "ref": "pkg:npm/color-name@1.1.3", "dependsOn": [] }, { "ref": "pkg:npm/color-convert@1.9.1", "dependsOn": [ "pkg:npm/color-name@1.1.3" ] }, { "ref": "pkg:npm/ansi-styles@3.2.0", "dependsOn": [ "pkg:npm/color-convert@1.9.1" ] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@4.5.0", "dependsOn": [ "pkg:npm/has-flag@2.0.0" ] }, { "ref": "pkg:npm/chalk@2.3.0", "dependsOn": [ "pkg:npm/ansi-styles@3.2.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/supports-color@4.5.0" ] }, { "ref": "pkg:npm/home-or-tmp@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/mri@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/chownr@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/yallist@3.0.2", "dependsOn": [] }, { "ref": "pkg:npm/minipass@2.2.1", "dependsOn": [ "pkg:npm/yallist@3.0.2" ] }, { "ref": "pkg:npm/minizlib@1.0.4", "dependsOn": [ "pkg:npm/minipass@2.2.1" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/tar@4.0.2", "dependsOn": [ "pkg:npm/chownr@1.0.1", "pkg:npm/minipass@2.2.1", "pkg:npm/minizlib@1.0.4", "pkg:npm/mkdirp@0.5.1", "pkg:npm/yallist@3.0.2" ] }, { "ref": "pkg:npm/degit@2.0.1", "dependsOn": [ "pkg:npm/chalk@2.3.0", "pkg:npm/home-or-tmp@3.0.0", "pkg:npm/mri@1.1.0", "pkg:npm/tar@4.0.2" ] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.8", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.8" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.2", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/json5@0.5.1", "dependsOn": [] }, { "ref": "pkg:npm/locate-character@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/browser-stdout@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/graceful-readlink@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.9.0", "dependsOn": [ "pkg:npm/graceful-readlink@1.0.1" ] }, { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.6.8", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/diff@3.2.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.1", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/he@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/json3@3.3.2", "dependsOn": [] }, { "ref": "pkg:npm/lodash._basecopy@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._getnative@3.9.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarguments@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarray@3.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lodash.keys@3.1.2", "dependsOn": [ "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4" ] }, { "ref": "pkg:npm/lodash._baseassign@3.2.0", "dependsOn": [ "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash.keys@3.1.2" ] }, { "ref": "pkg:npm/lodash._basecreate@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lodash._isiterateecall@3.0.9", "dependsOn": [] }, { "ref": "pkg:npm/lodash.create@3.1.1", "dependsOn": [ "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._isiterateecall@3.0.9" ] }, { "ref": "pkg:npm/has-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@3.1.2", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/mocha@3.5.3", "dependsOn": [ "pkg:npm/browser-stdout@1.3.0", "pkg:npm/commander@2.9.0", "pkg:npm/debug@2.6.8", "pkg:npm/diff@3.2.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.1.1", "pkg:npm/growl@1.9.2", "pkg:npm/he@1.1.1", "pkg:npm/json3@3.3.2", "pkg:npm/lodash.create@3.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@3.1.2" ] }, { "ref": "pkg:npm/right-pad@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/rollup@0.49.3", "dependsOn": [] }, { "ref": "pkg:npm/resolve@1.1.7", "dependsOn": [] }, { "ref": "pkg:npm/browser-resolve@1.11.2", "dependsOn": [ "pkg:npm/resolve@1.1.7" ] }, { "ref": "pkg:npm/builtin-modules@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/is-module@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/path-parse@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/resolve@1.5.0", "dependsOn": [ "pkg:npm/path-parse@1.0.5" ] }, { "ref": "pkg:npm/rollup-plugin-node-resolve@3.0.0", "dependsOn": [ "pkg:npm/browser-resolve@1.11.2", "pkg:npm/builtin-modules@1.1.1", "pkg:npm/is-module@1.0.0", "pkg:npm/resolve@1.5.0" ] }, { "ref": "pkg:npm/compare-versions@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/object-assign@4.1.1", "dependsOn": [] }, { "ref": "pkg:npm/estree-walker@0.2.1", "dependsOn": [] }, { "ref": "pkg:npm/rollup-pluginutils@1.5.2", "dependsOn": [ "pkg:npm/estree-walker@0.2.1", "pkg:npm/minimatch@3.0.4" ] }, { "ref": "pkg:npm/tippex@2.3.1", "dependsOn": [] }, { "ref": "pkg:npm/typescript@1.8.10", "dependsOn": [] }, { "ref": "pkg:npm/rollup-plugin-typescript@0.8.1", "dependsOn": [ "pkg:npm/compare-versions@2.0.1", "pkg:npm/object-assign@4.1.1", "pkg:npm/rollup-pluginutils@1.5.2", "pkg:npm/tippex@2.3.1", "pkg:npm/typescript@1.8.10" ] }, { "ref": "pkg:npm/rollup-plugin-virtual@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/graceful-fs@4.1.11", "dependsOn": [] }, { "ref": "pkg:npm/rimraf@2.6.2", "dependsOn": [ "pkg:npm/glob@7.1.2" ] }, { "ref": "pkg:npm/sander@0.6.0", "dependsOn": [ "pkg:npm/graceful-fs@4.1.11", "pkg:npm/mkdirp@0.5.1", "pkg:npm/rimraf@2.6.2" ] }, { "ref": "pkg:npm/arrify@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/make-error@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/minimist@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.5.7", "dependsOn": [] }, { "ref": "pkg:npm/source-map-support@0.4.18", "dependsOn": [ "pkg:npm/source-map@0.5.7" ] }, { "ref": "pkg:npm/strip-bom@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/strip-json-comments@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/tsconfig@6.0.0", "dependsOn": [ "pkg:npm/strip-bom@3.0.0", "pkg:npm/strip-json-comments@2.0.1" ] }, { "ref": "pkg:npm/parse-passwd@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/homedir-polyfill@1.0.1", "dependsOn": [ "pkg:npm/parse-passwd@1.0.0" ] }, { "ref": "pkg:npm/v8flags@3.0.1", "dependsOn": [ "pkg:npm/homedir-polyfill@1.0.1" ] }, { "ref": "pkg:npm/yn@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/ts-node@3.3.0", "dependsOn": [ "pkg:npm/arrify@1.0.1", "pkg:npm/chalk@2.3.0", "pkg:npm/diff@3.2.0", "pkg:npm/make-error@1.3.0", "pkg:npm/minimist@1.2.0", "pkg:npm/mkdirp@0.5.1", "pkg:npm/source-map-support@0.4.18", "pkg:npm/tsconfig@6.0.0", "pkg:npm/v8flags@3.0.1", "pkg:npm/yn@2.0.0" ] }, { "ref": "pkg:npm/typescript@2.6.1", "dependsOn": [] }, { "ref": "pkg:npm/golden-fleece@1.0.9", "dependsOn": [ "pkg:npm/@types/glob@5.0.33", "pkg:npm/@types/mocha@2.2.44", "pkg:npm/@types/node@8.0.53", "pkg:npm/benchmark@2.1.4", "pkg:npm/chalk@2.3.0", "pkg:npm/degit@2.0.1", "pkg:npm/glob@7.1.2", "pkg:npm/json5@0.5.1", "pkg:npm/locate-character@2.0.3", "pkg:npm/mocha@3.5.3", "pkg:npm/right-pad@1.0.1", "pkg:npm/rollup-plugin-node-resolve@3.0.0", "pkg:npm/rollup-plugin-typescript@0.8.1", "pkg:npm/rollup-plugin-virtual@1.0.1", "pkg:npm/rollup@0.49.3", "pkg:npm/sander@0.6.0", "pkg:npm/ts-node@3.3.0", "pkg:npm/typescript@2.6.1" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/golden-fleece@1.0.9" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-25T10:53:29Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'golden-fleece' with version '1.0.9'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from the source files: package-lock.json." } ] }