{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:116082d8-26d0-491e-bbf5-b827c31bff5b", "version": 1, "metadata": { "timestamp": "2026-08-14T08:28:37Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "is-my-json-valid", "group": "", "version": "2.12.2", "description": "A JSONSchema validator that uses code generation to be extremely fast", "purl": "pkg:npm/is-my-json-valid@2.12.2", "bom-ref": "pkg:npm/is-my-json-valid@2.12.2", "author": "Mathias Buus", "properties": [ { "name": "cdx:npm:scripts", "value": "test" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/is-my-json-valid" }, { "type": "vcs", "url": "https://github.com/mafintosh/is-my-json-valid" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/deep-equal/package.json\\nnode_modules/defined/package.json\\nnode_modules/generate-function/package.json\\nnode_modules/generate-object-property/package.json\\nnode_modules/glob/package.json\\nnode_modules/has/package.json\\nnode_modules/inherits/package.json\\nnode_modules/is-property/package.json\\nnode_modules/jsonpointer/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/resumer/package.json\\nnode_modules/sigmund/package.json\\nnode_modules/tape/package.json\\nnode_modules/through/package.json\\nnode_modules/xtend/package.json" } ] }, "components": [ { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" }, { "type": "vcs", "url": "git://github.com/Raynos/xtend.git" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "ImportedModules", "value": "xtend" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ], "occurrences": [ { "location": "index.js", "line": 4 } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "git+https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through/package.json" } ], "concludedValue": "node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "tape", "version": "2.14.1", "description": "tap-producing test harness for node and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tape@2.14.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/tape" }, { "type": "vcs", "url": "git://github.com/substack/tape.git" } ], "type": "library", "bom-ref": "pkg:npm/tape@2.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tape/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tape/package.json" } ], "concludedValue": "node_modules/tape/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sigmund", "version": "1.0.1", "description": "Quick and dirty signatures for Objects.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sigmund@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/sigmund#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/sigmund.git" } ], "type": "library", "bom-ref": "pkg:npm/sigmund@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sigmund/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sigmund/package.json" } ], "concludedValue": "node_modules/sigmund/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resumer", "version": "0.0.0", "description": "a through stream that starts paused and resumes on the next tick", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resumer@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/resumer" }, { "type": "vcs", "url": "git://github.com/substack/resumer.git" } ], "type": "library", "bom-ref": "pkg:npm/resumer@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resumer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resumer/package.json" } ], "concludedValue": "node_modules/resumer/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.13.4", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/object-inspect" }, { "type": "vcs", "url": "git://github.com/inspect-js/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "0.3.0", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "2.7.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@2.7.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-lru-cache#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@2.7.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Jan Lehnardt " } ], "group": "", "name": "jsonpointer", "version": "2.0.0", "description": "Simple JSON Addressing.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonpointer@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/janl/node-jsonpointer#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/janl/node-jsonpointer.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonpointer@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonpointer/package.json" }, { "name": "ImportedModules", "value": "jsonpointer" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonpointer/package.json" } ], "concludedValue": "node_modules/jsonpointer/package.json" } ], "occurrences": [ { "location": "index.js", "line": 3 } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Mikola Lysenko" } ], "group": "", "name": "is-property", "version": "1.0.2", "description": "Tests if a JSON property can be accessed using . syntax", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-property@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikolalysenko/is-property" }, { "type": "vcs", "url": "git://github.com/mikolalysenko/is-property.git" } ], "type": "library", "bom-ref": "pkg:npm/is-property@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-property/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-property/package.json" } ], "concludedValue": "node_modules/is-property/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Thiago de Arruda " } ], "group": "", "name": "has", "version": "0.0.1", "description": "Object.prototype.hasOwnProperty.call shortcut", "scope": "optional", "purl": "pkg:npm/has@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tarruda/has" }, { "type": "vcs", "url": "git://github.com/tarruda/has.git" } ], "type": "library", "bom-ref": "pkg:npm/has@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/has/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has/package.json" } ], "concludedValue": "node_modules/has/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "3.2.11", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@3.2.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@3.2.11", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus (@mafintosh)" } ], "group": "", "name": "generate-object-property", "version": "1.2.0", "description": "Generate safe JS code that can used to reference a object property", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/generate-object-property@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/generate-object-property" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/generate-object-property.git" } ], "type": "library", "bom-ref": "pkg:npm/generate-object-property@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/generate-object-property/package.json" }, { "name": "ImportedModules", "value": "generate-object-property" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/generate-object-property/package.json" } ], "concludedValue": "node_modules/generate-object-property/package.json" } ], "occurrences": [ { "location": "index.js", "line": 1 } ] } }, { "authors": [ { "name": "Mathias Buus" } ], "group": "", "name": "generate-function", "version": "2.3.1", "description": "Module that helps you write generated functions in Node", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/generate-function@2.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/generate-function" }, { "type": "vcs", "url": "git+https://github.com/mafintosh/generate-function.git" } ], "type": "library", "bom-ref": "pkg:npm/generate-function@2.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/generate-function/package.json" }, { "name": "ImportedModules", "value": "generate-function" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/generate-function/package.json" } ], "concludedValue": "node_modules/generate-function/package.json" } ], "occurrences": [ { "location": "index.js", "line": 2 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "defined", "version": "0.0.0", "description": "return the first argument that is `!== undefined`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/defined@0.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/defined" }, { "type": "vcs", "url": "git://github.com/substack/defined.git" } ], "type": "library", "bom-ref": "pkg:npm/defined@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/defined/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/defined/package.json" } ], "concludedValue": "node_modules/defined/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "deep-equal", "version": "0.2.2", "description": "node's assert.deepEqual algorithm", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-equal@0.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-deep-equal" }, { "type": "vcs", "url": "git+ssh://git@github.com/substack/node-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-equal/package.json" } ], "concludedValue": "node_modules/deep-equal/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/is-my-json-valid@2.12.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-14T08:28:37Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, August 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'is-my-json-valid' with version '2.12.2'." } ] }