{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2af6afce-cc9a-450a-a76e-3ccf16b99d80", "version": 1, "metadata": { "timestamp": "2026-07-25T13:10:38Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "ico-endec", "group": "", "version": "0.1.6", "description": "ICO encoder and decoder library", "purl": "pkg:npm/ico-endec@0.1.6", "bom-ref": "pkg:npm/ico-endec@0.1.6", "author": "Ketchetwahmeegwun T. Southall", "properties": [ { "name": "cdx:npm:scripts", "value": "test, build" } ], "type": "application", "licenses": [ { "license": { "id": "MPL-2.0", "url": "https://opensource.org/licenses/MPL-2.0" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/kettek/ico-endec-js" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "minimist", "version": "1.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup", "version": "2.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a7aebe7db7da51438613ce2c1d700e81f79a61032c96001ace840ca7ffe7951e75f51eb5db5dc43c582b3196b8f23df58cd69c2707b148047543c57f07018a04" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup@2.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup/-/rollup-2.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup@2.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup/-/rollup-2.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fsevents", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "478c03881c19d0ace980e59eb4a0ee83515971886a6275182ad7d962de260f9481cfbeaad0a47843da3b1883da9ac54f1a65b71183cf27474e3a3bf1df695d64" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/fsevents@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fsevents@2.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.1.2.tgz" }, { "name": "cdx:npm:hasInstallScript", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-license", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c5e0ad1cf96e3455093ee4dd08526b74d7c247fdf2117d8ceb9b3f8b8ed29846e5989c5dc5e6b69bdca876220ab5f56859431ba2c7c74dc00b81993ebad6eb84" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-plugin-license@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-license/-/rollup-plugin-license-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-license@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-license/-/rollup-plugin-license-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commenting", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "61e34ae2d6af670b47ee31202b5648357ccb2a6e8365d10c7ec69a89e3ac0803744bcbec63b51eb8edd0eddfccd35f0416013e21e500b8138a90571c059b1464" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commenting@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commenting/-/commenting-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commenting@1.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commenting/-/commenting-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2f06b1c3267bd8b93bbd920db4d36bcb05f466e2f24adadd0ed69b79f64a018e59189855b607739e5b917acc4d98f8ad1344803be3b6eac5931de292236c0c04" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash", "version": "4.17.15", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f3139c447bc28e7a1c752e5ca705d05d5ce69a1e5ee7eb1a136406a1e4266ca9914ba277550a693ce22dd0c9e613ee31959a2e9b2d063c6d03d0c54841b340d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash@4.17.15", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.15", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "magic-string", "version": "0.25.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e02acc4f90ce1d30e4e076039739b0bb815509c21823c81abaf79ab2b742bb620a205389ddfd2fffc3031890832fda03da9a73fc0bf56f4363df8e47f4cf9720" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/magic-string@0.25.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/magic-string/-/magic-string-0.25.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.25.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/magic-string/-/magic-string-0.25.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sourcemap-codec", "version": "1.4.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f4dca4a23579522878960a394a8e5db70f9fd098095f7d0a08d23c830873d89f40d79c03d0c97ab631cac1fe9f4d26ba7c075505d65e34eb3d789ef5a8293cbc" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/sourcemap-codec@1.4.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sourcemap-codec@1.4.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please use @jridgewell/sourcemap-codec instead" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "1.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@1.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@1.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "moment", "version": "2.24.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6d5edffba97642281e04165233feb24cdab83f67cda525a3ff47bb8d0732f3b03c7bba369c07cfff7e3fda4cb9570e01f52e38e84b48868740ce4142711e1d42" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/moment@2.24.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/moment/-/moment-2.24.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/moment@2.24.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/moment/-/moment-2.24.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-expression-validate", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6f7c327592ccf9373a085bda44304e17d77bea81881cd08b6057876dfb455d45a39df65681a9e60e6bed339b26d5c47025cfd50c130bc861abb0b15dd6f3b16e" } ], "licenses": [ { "expression": "(MIT AND CC-BY-3.0)" } ], "purl": "pkg:npm/spdx-expression-validate@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-expression-validate/-/spdx-expression-validate-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-expression-validate@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-expression-validate/-/spdx-expression-validate-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-expression-parse", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "620e83dd7a510f89243a64e97606d48842452a08491f4ddf882d4e3e597987fd2c3ba9de8768ea443547390e28fcb31e6b4b600a46cc81e6b98a9fdef8c916ca" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-exceptions", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4" } ], "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0" } } ], "purl": "pkg:npm/spdx-exceptions@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-license-ids", "version": "3.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "27e156cd9a329c91171a9855212f97121de41528d95ffd62f6014169641c07efed9a97b6a94b12040069731ab19c0c45762505120017d5b8d8190bc8666a33f5" } ], "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0" } } ], "purl": "pkg:npm/spdx-license-ids@3.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-satisfies", "version": "5.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "fe11a1c21db405e1a6900f8ffe59b4e91bd70fde0976ec0dc6dc7fa17dc1e4294fb75feefe6e4c09a0cda35b55dd8f6568b910aff35175eeb76fd94b32194d7f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/spdx-satisfies@5.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-satisfies/-/spdx-satisfies-5.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-satisfies@5.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-satisfies/-/spdx-satisfies-5.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-compare", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0b598364e5f4867bb47a9f5d7e6ba88b4dfe78e743a33db2bcaefd4716dcad5106d4d3b53e1df9c96d74d831d628de2993cd27c0281e326498e4bdb9544e03f4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/spdx-compare@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-compare/-/spdx-compare-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-compare@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-compare/-/spdx-compare-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "array-find-index", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "df010aa1287e164bbda6f9723b0a96a1ec4187a1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/array-find-index@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/array-find-index@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "spdx-ranges", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "99c76940557b5030202e95c413f8ce32abcae0b0683b4b93420d2ebd751ec26105869899c79c894992131c1f30d596a129d85f66a3f918f10e28bc84ab9a7c5c" } ], "licenses": [ { "expression": "(MIT AND CC-BY-3.0)" } ], "purl": "pkg:npm/spdx-ranges@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/spdx-ranges/-/spdx-ranges-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/spdx-ranges@2.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/spdx-ranges/-/spdx-ranges-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-plugin-terser", "version": "5.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5c63098a14c83b778806c546abb8e235839d0cc6f7a55c6ecd8d2e84e13f14ce31feef67420af7f8c72c8f3a819f741f1c8a4d4999859e9a0a0301c111cb13ee" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-plugin-terser@5.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-terser/-/rollup-plugin-terser-5.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-terser@5.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-terser/-/rollup-plugin-terser-5.3.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated and is no longer maintained. Please use @rollup/plugin-terser" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@babel", "name": "code-frame", "version": "7.8.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6bd831a66757b591089e40921d42432c76550606f5412d2386cb3870f3fddc45bbb3eb82e5b8a4113dadc04177295fbbac36e525c98dbd347b5497a3a9dd82da" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40babel/code-frame@7.8.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.8.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@babel", "name": "highlight", "version": "7.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "94964f8a5c57ecea7736fff672f15d9e57a93d70f18b6f70c6d793e7b43deb9a1ce51f6ff3acedc748dfc55ad370193c0b691c3e49036b66784f766c3cf556b1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40babel/highlight@7.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@babel/highlight@7.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@babel", "name": "helper-validator-identifier", "version": "7.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e86f1b40a8ce87ea1fe0f57f4e10e6feb46a954efe206a09ba87e96a05391a5125dbd56fd111aaaadf3a646455f19b92398de8fbcc97979cbbf3648c706ed21f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40babel/helper-validator-identifier@7.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "chalk", "version": "2.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chalk@2.4.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chalk@2.4.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ansi-styles", "version": "3.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@3.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-convert", "version": "1.9.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-convert@1.9.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "color-name", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a7d0558bd89c42f795dd42328f740831ca53bc25" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "5.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@5.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@5.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "js-tokens", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/js-tokens@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "jest-worker", "version": "24.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e753c4e2168c497707a219d231d338d9a9dbbd900d613a8caebe76b5528faaab0f24cce83fa15860356a6a15ff1eb0282842b3dee50fcd2bcab3d037a91e2257" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/jest-worker@24.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-24.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jest-worker@24.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-24.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "merge-stream", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/merge-stream@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/merge-stream@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "6.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a9ed637e6d4c83b36afcd4a1e97136e203d744e115b161f10b52c8c7ffd73650fd8b0ed86501a364d8d837bc466841ba88a740f04b4d156e91d208e7557a7ec1" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@6.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-6.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@6.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-6.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "rollup-pluginutils", "version": "2.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "104a7d3619d493063c6a27fa6f1828bcf1cca0ca0daf616e949ce24e7769b791fd45dc02e3b1921ae208f57c6949dcd518cd065ab34f1d5ea27b52d33493da2d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-pluginutils@2.8.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-2.8.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-pluginutils@2.8.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-2.8.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "estree-walker", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4aa99900d2d64b49a76ada9b49f44fe60f0e5d90b5d85820d48c0db4bb321c3cc98b33915b89210df8cfa8966c7a63d6041daeab29146a1e58a50e9ea6ca82ff" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/estree-walker@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "serialize-javascript", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aecf4e8201141745788d449e7176b3398b0b7eeece18adaa227ddcec83c189f7f3df65e7884a7f4d7f5799cf4b41f2b69d0d90287bd9da8ca0294194d251b88d" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/serialize-javascript@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@2.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-2.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "terser", "version": "4.6.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a9b17fdd43a8d751e082c6ecaa6da13daebe2f8c3b6e4afed3d14db1e11ef31adc543dc03c62c5a84f8ecf564a0318d89c5b23f34acb39f800b49d0b3498ed4c" } ], "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/terser@4.6.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/terser/-/terser-4.6.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/terser@4.6.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/terser/-/terser-4.6.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "2.20.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map-support", "version": "0.5.16", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "79fc8b4490ebebc0fd84104d20f5858e1a45cd4461f8a272910c2f3325b9522673630a05ea5e1830c0c8249132156c560aa7f2c4bcf3ead49f50547e9175ec55" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/source-map-support@0.5.16", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.16.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.5.16", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.16.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "buffer-from", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/buffer-from@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/buffer-from@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/minimist@1.2.5", "dependsOn": [] }, { "ref": "pkg:npm/fsevents@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/rollup@2.3.2", "dependsOn": [ "pkg:npm/fsevents@2.1.2" ] }, { "ref": "pkg:npm/commenting@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.6", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/lodash@4.17.15", "dependsOn": [] }, { "ref": "pkg:npm/sourcemap-codec@1.4.8", "dependsOn": [] }, { "ref": "pkg:npm/magic-string@0.25.7", "dependsOn": [ "pkg:npm/sourcemap-codec@1.4.8" ] }, { "ref": "pkg:npm/mkdirp@1.0.4", "dependsOn": [] }, { "ref": "pkg:npm/moment@2.24.0", "dependsOn": [] }, { "ref": "pkg:npm/spdx-exceptions@2.3.0", "dependsOn": [] }, { "ref": "pkg:npm/spdx-license-ids@3.0.5", "dependsOn": [] }, { "ref": "pkg:npm/spdx-expression-parse@3.0.0", "dependsOn": [ "pkg:npm/spdx-exceptions@2.3.0", "pkg:npm/spdx-license-ids@3.0.5" ] }, { "ref": "pkg:npm/spdx-expression-validate@2.0.0", "dependsOn": [ "pkg:npm/spdx-expression-parse@3.0.0" ] }, { "ref": "pkg:npm/array-find-index@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/spdx-ranges@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/spdx-compare@1.0.0", "dependsOn": [ "pkg:npm/array-find-index@1.0.2", "pkg:npm/spdx-expression-parse@3.0.0", "pkg:npm/spdx-ranges@2.1.1" ] }, { "ref": "pkg:npm/spdx-satisfies@5.0.0", "dependsOn": [ "pkg:npm/spdx-compare@1.0.0", "pkg:npm/spdx-expression-parse@3.0.0", "pkg:npm/spdx-ranges@2.1.1" ] }, { "ref": "pkg:npm/rollup-plugin-license@2.0.0", "dependsOn": [ "pkg:npm/commenting@1.1.0", "pkg:npm/glob@7.1.6", "pkg:npm/lodash@4.17.15", "pkg:npm/magic-string@0.25.7", "pkg:npm/mkdirp@1.0.4", "pkg:npm/moment@2.24.0", "pkg:npm/rollup@2.3.2", "pkg:npm/spdx-expression-validate@2.0.0", "pkg:npm/spdx-satisfies@5.0.0" ] }, { "ref": "pkg:npm/@babel/helper-validator-identifier@7.9.0", "dependsOn": [] }, { "ref": "pkg:npm/color-name@1.1.3", "dependsOn": [] }, { "ref": "pkg:npm/color-convert@1.9.3", "dependsOn": [ "pkg:npm/color-name@1.1.3" ] }, { "ref": "pkg:npm/ansi-styles@3.2.1", "dependsOn": [ "pkg:npm/color-convert@1.9.3" ] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@5.5.0", "dependsOn": [ "pkg:npm/has-flag@3.0.0" ] }, { "ref": "pkg:npm/chalk@2.4.2", "dependsOn": [ "pkg:npm/ansi-styles@3.2.1", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/supports-color@5.5.0" ] }, { "ref": "pkg:npm/js-tokens@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/@babel/highlight@7.9.0", "dependsOn": [ "pkg:npm/@babel/helper-validator-identifier@7.9.0", "pkg:npm/chalk@2.4.2", "pkg:npm/js-tokens@4.0.0" ] }, { "ref": "pkg:npm/@babel/code-frame@7.8.3", "dependsOn": [ "pkg:npm/@babel/highlight@7.9.0" ] }, { "ref": "pkg:npm/merge-stream@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@6.1.0", "dependsOn": [ "pkg:npm/has-flag@3.0.0" ] }, { "ref": "pkg:npm/jest-worker@24.9.0", "dependsOn": [ "pkg:npm/merge-stream@2.0.0", "pkg:npm/supports-color@6.1.0" ] }, { "ref": "pkg:npm/estree-walker@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/rollup-pluginutils@2.8.2", "dependsOn": [ "pkg:npm/estree-walker@0.6.1" ] }, { "ref": "pkg:npm/serialize-javascript@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.20.3", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/buffer-from@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/source-map-support@0.5.16", "dependsOn": [ "pkg:npm/buffer-from@1.1.1", "pkg:npm/source-map@0.6.1" ] }, { "ref": "pkg:npm/terser@4.6.10", "dependsOn": [ "pkg:npm/commander@2.20.3", "pkg:npm/source-map-support@0.5.16", "pkg:npm/source-map@0.6.1" ] }, { "ref": "pkg:npm/rollup-plugin-terser@5.3.0", "dependsOn": [ "pkg:npm/@babel/code-frame@7.8.3", "pkg:npm/jest-worker@24.9.0", "pkg:npm/rollup-pluginutils@2.8.2", "pkg:npm/rollup@2.3.2", "pkg:npm/serialize-javascript@2.1.2", "pkg:npm/terser@4.6.10" ] }, { "ref": "pkg:npm/ico-endec@0.1.6", "dependsOn": [ "pkg:npm/minimist@1.2.5", "pkg:npm/rollup-plugin-license@2.0.0", "pkg:npm/rollup-plugin-terser@5.3.0", "pkg:npm/rollup@2.3.2" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/ico-endec@0.1.6" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-25T13:10:38Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ico-endec' with version '0.1.6'. The package type in this SBOM is npm with a single purl namespace '@babel' described under components. The components were identified from the source files: package-lock.json." } ] }