{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:80bca0eb-7813-4c5a-ac11-75ec99f85bfa", "version": 1, "metadata": { "timestamp": "2026-07-24T19:15:31Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "babel-plugin-react-html-attrs", "group": "", "version": "2.1.0", "description": "Babel plugin which transforms HTML attributes in JSX to their React equivalents", "purl": "pkg:npm/babel-plugin-react-html-attrs@2.1.0", "bom-ref": "pkg:npm/babel-plugin-react-html-attrs@2.1.0", "properties": [ { "name": "cdx:npm:scripts", "value": "test" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/insin/babel-plugin-react-html-attrs.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/babel-code-frame/package.json\\nnode_modules/babel-core/package.json\\nnode_modules/babel-generator/package.json\\nnode_modules/babel-helper-builder-react-jsx/package.json\\nnode_modules/babel-helpers/package.json\\nnode_modules/babel-messages/package.json\\nnode_modules/babel-plugin-external-helpers/package.json\\nnode_modules/babel-plugin-syntax-flow/package.json\\nnode_modules/babel-plugin-syntax-jsx/package.json\\nnode_modules/babel-plugin-transform-flow-strip-types/package.json\\nnode_modules/babel-plugin-transform-react-display-name/package.json\\nnode_modules/babel-plugin-transform-react-inline-elements/package.json\\nnode_modules/babel-plugin-transform-react-jsx-self/package.json\\nnode_modules/babel-plugin-transform-react-jsx-source/package.json\\nnode_modules/babel-plugin-transform-react-jsx/package.json\\nnode_modules/babel-preset-flow/package.json\\nnode_modules/babel-preset-react/package.json\\nnode_modules/babel-register/package.json\\nnode_modules/babel-runtime/package.json\\nnode_modules/babel-template/package.json\\nnode_modules/babel-traverse/package.json\\nnode_modules/babel-types/package.json\\nnode_modules/babylon/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/chalk/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-js/package.json\\nnode_modules/debug/package.json\\nnode_modules/detect-indent/package.json\\nnode_modules/diff/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/esutils/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/growl/package.json\\nnode_modules/has-ansi/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/he/package.json\\nnode_modules/home-or-tmp/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/invariant/package.json\\nnode_modules/is-finite/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json5/package.json\\nnode_modules/lodash/package.json\\nnode_modules/loose-envify/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/debug/package.json\\nnode_modules/mocha/node_modules/minimist/package.json\\nnode_modules/mocha/node_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/supports-color/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/once/package.json\\nnode_modules/os-homedir/package.json\\nnode_modules/os-tmpdir/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/private/package.json\\nnode_modules/regenerator-runtime/package.json\\nnode_modules/repeating/package.json\\nnode_modules/slash/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/source-map/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/to-fast-properties/package.json\\nnode_modules/trim-right/package.json\\nnode_modules/wrappy/package.json" } ] }, "components": [ { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "https://github.com/npm/wrappy" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "trim-right", "version": "1.0.1", "description": "Similar to String#trim() but removes only whitespace on the right", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/trim-right@1.0.1", "type": "library", "bom-ref": "pkg:npm/trim-right@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/trim-right/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/trim-right/package.json" } ], "concludedValue": "node_modules/trim-right/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "to-fast-properties", "version": "1.0.3", "description": "Force V8 to use fast properties for an object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/to-fast-properties@1.0.3", "type": "library", "bom-ref": "pkg:npm/to-fast-properties@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/to-fast-properties/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/to-fast-properties/package.json" } ], "concludedValue": "node_modules/to-fast-properties/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "2.0.0", "description": "Detect whether a terminal supports color", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@2.0.0", "type": "library", "bom-ref": "pkg:npm/supports-color@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "3.0.1", "description": "Strip ANSI escape codes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@3.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "source-map-support", "version": "0.4.18", "description": "Fixes stack traces for files with source maps", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/source-map-support@0.4.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.4.18", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "slash", "version": "1.0.0", "description": "Convert Windows backslash paths to slash paths", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/slash@1.0.0", "type": "library", "bom-ref": "pkg:npm/slash@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slash/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slash/package.json" } ], "concludedValue": "node_modules/slash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "repeating", "version": "2.0.1", "description": "Repeat a string - fast", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/repeating@2.0.1", "type": "library", "bom-ref": "pkg:npm/repeating@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/repeating/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/repeating/package.json" } ], "concludedValue": "node_modules/repeating/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "regenerator-runtime", "version": "0.11.1", "description": "Runtime for Regenerator-compiled generator and async functions.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/regenerator-runtime@0.11.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/facebook/regenerator/tree/master/packages/regenerator-runtime" } ], "type": "library", "bom-ref": "pkg:npm/regenerator-runtime@0.11.1", "properties": [ { "name": "SrcFile", "value": "node_modules/regenerator-runtime/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regenerator-runtime/package.json" } ], "concludedValue": "node_modules/regenerator-runtime/package.json" } ] } }, { "authors": [ { "name": "Ben Newman " } ], "group": "", "name": "private", "version": "0.1.8", "description": "Utility for associating truly private state with any JavaScript object", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/private@0.1.8", "externalReferences": [ { "type": "vcs", "url": "http://github.com/benjamn/private" }, { "type": "vcs", "url": "git://github.com/benjamn/private.git" } ], "type": "library", "bom-ref": "pkg:npm/private@0.1.8", "properties": [ { "name": "SrcFile", "value": "node_modules/private/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/private/package.json" } ], "concludedValue": "node_modules/private/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-tmpdir", "version": "1.0.2", "description": "Node.js os.tmpdir() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/os-tmpdir@1.0.2", "type": "library", "bom-ref": "pkg:npm/os-tmpdir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-tmpdir/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-tmpdir/package.json" } ], "concludedValue": "node_modules/os-tmpdir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-homedir", "version": "1.0.2", "description": "Node.js 4 `os.homedir()` ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/os-homedir@1.0.2", "type": "library", "bom-ref": "pkg:npm/os-homedir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-homedir/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-homedir/package.json" } ], "concludedValue": "node_modules/os-homedir/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/once" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ms@2.0.0", "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "4.1.0", "description": "simple, flexible, fun test framework", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@4.1.0", "externalReferences": [ { "type": "website", "url": "https://mochajs.org" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "4.4.0", "description": "Detect whether a terminal supports color", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@4.4.0", "type": "library", "bom-ref": "pkg:npm/supports-color@4.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/supports-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.1", "description": "Recursively mkdir, like `mkdir -p`", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/mkdirp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.8", "description": "parse argument options", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/minimist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/minimist/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "3.1.0", "description": "small debugging utility", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@3.1.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/debug/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.6", "description": "Recursively mkdir, like `mkdir -p`", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.8", "description": "parse argument options", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/minimistjs/minimist" }, { "type": "vcs", "url": "git://github.com/minimistjs/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.1.5", "description": "a glob matcher in javascript", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@3.1.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Andres Suarez " } ], "group": "", "name": "loose-envify", "version": "1.4.0", "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/loose-envify@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zertosh/loose-envify" }, { "type": "vcs", "url": "git://github.com/zertosh/loose-envify.git" } ], "type": "library", "bom-ref": "pkg:npm/loose-envify@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/loose-envify/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loose-envify/package.json" } ], "concludedValue": "node_modules/loose-envify/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.18.1", "description": "Lodash modular utilities.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lodash@4.18.1", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.18.1", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Aseem Kishore " } ], "group": "", "name": "json5", "version": "0.5.1", "description": "JSON for the ES5 era.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/json5@0.5.1", "externalReferences": [ { "type": "website", "url": "http://json5.org/" }, { "type": "vcs", "url": "https://github.com/aseemk/json5.git" } ], "type": "library", "bom-ref": "pkg:npm/json5@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json5/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json5/package.json" } ], "concludedValue": "node_modules/json5/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "jsesc", "version": "1.3.0", "description": "A JavaScript library for escaping JavaScript strings while generating the shortest possible valid output.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/jsesc@1.3.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/jsesc" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/jsesc.git" } ], "type": "library", "bom-ref": "pkg:npm/jsesc@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsesc/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsesc/package.json" } ], "concludedValue": "node_modules/jsesc/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "3.0.2", "description": "A regex that tokenizes JavaScript.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/js-tokens@3.0.2", "type": "library", "bom-ref": "pkg:npm/js-tokens@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-finite", "version": "1.1.0", "description": "ES2015 Number.isFinite() ponyfill", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-finite@1.1.0", "type": "library", "bom-ref": "pkg:npm/is-finite@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-finite/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-finite/package.json" } ], "concludedValue": "node_modules/is-finite/package.json" } ] } }, { "authors": [ { "name": "Andres Suarez " } ], "group": "", "name": "invariant", "version": "2.2.4", "description": "invariant", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/invariant@2.2.4", "type": "library", "bom-ref": "pkg:npm/invariant@2.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/invariant/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/invariant/package.json" } ], "concludedValue": "node_modules/invariant/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.4", "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "home-or-tmp", "version": "2.0.0", "description": "Get the user home directory with fallback to the system temp directory", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/home-or-tmp@2.0.0", "type": "library", "bom-ref": "pkg:npm/home-or-tmp@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/home-or-tmp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/home-or-tmp/package.json" } ], "concludedValue": "node_modules/home-or-tmp/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.1.1", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "2.0.0", "description": "Check if argv has a specific flag", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@2.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-ansi", "version": "2.0.0", "description": "Check if a string has ANSI escape codes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-ansi@2.0.0", "type": "library", "bom-ref": "pkg:npm/has-ansi@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-ansi/package.json" } ], "concludedValue": "node_modules/has-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "growl", "version": "1.10.3", "description": "Growl unobtrusive notifications", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/growl@1.10.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/tj/node-growl.git" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.10.3", "properties": [ { "name": "SrcFile", "value": "node_modules/growl/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/growl/package.json" } ], "concludedValue": "node_modules/growl/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "globals", "version": "9.18.0", "description": "Global identifiers from different JavaScript environments", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/globals@9.18.0", "type": "library", "bom-ref": "pkg:npm/globals@9.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/globals/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globals/package.json" } ], "concludedValue": "node_modules/globals/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.2", "description": "a little globber", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "description": "utility box for ECMAScript language tools", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esutils" }, { "type": "vcs", "url": "http://github.com/estools/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "group": "", "name": "diff", "version": "3.3.1", "description": "A javascript text diff implementation.", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/diff@3.3.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "detect-indent", "version": "4.0.0", "description": "Detect the indentation of code", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/detect-indent@4.0.0", "type": "library", "bom-ref": "pkg:npm/detect-indent@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-indent/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-indent/package.json" } ], "concludedValue": "node_modules/detect-indent/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "group": "", "name": "core-js", "version": "2.6.12", "description": "Standard library", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/core-js@2.6.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zloirock/core-js.git" } ], "type": "library", "bom-ref": "pkg:npm/core-js@2.6.12", "properties": [ { "name": "SrcFile", "value": "node_modules/core-js/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-js/package.json" } ], "concludedValue": "node_modules/core-js/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.9.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/convert-source-map@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.11.0", "description": "the complete solution for node.js command-line programs", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "group": "", "name": "chalk", "version": "1.1.3", "description": "Terminal string styling done right. Much color.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chalk@1.1.3", "type": "library", "bom-ref": "pkg:npm/chalk@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.0", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/browser-stdout@1.3.0", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.14", "description": "Brace expansion as known from sh/bash", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@1.1.14", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.14", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babylon", "version": "6.18.0", "description": "A JavaScript parser", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babylon@6.18.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babylon@6.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babylon/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babylon/package.json" } ], "concludedValue": "node_modules/babylon/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-types", "version": "6.26.0", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-types@6.26.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-types@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-types/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-types/package.json" } ], "concludedValue": "node_modules/babel-types/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-traverse", "version": "6.26.0", "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-traverse@6.26.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-traverse@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-traverse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-traverse/package.json" } ], "concludedValue": "node_modules/babel-traverse/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-template", "version": "6.26.0", "description": "Generate an AST from a string template.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-template@6.26.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-template@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-template/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-template/package.json" } ], "concludedValue": "node_modules/babel-template/package.json" } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-runtime", "version": "6.26.0", "description": "babel selfContained runtime", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-runtime@6.26.0", "type": "library", "bom-ref": "pkg:npm/babel-runtime@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-runtime/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-runtime/package.json" } ], "concludedValue": "node_modules/babel-runtime/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-register", "version": "6.26.0", "description": "babel require hook", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-register@6.26.0", "type": "library", "bom-ref": "pkg:npm/babel-register@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-register/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-register/package.json" } ], "concludedValue": "node_modules/babel-register/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-preset-react", "version": "6.24.1", "description": "Babel preset for all React plugins.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-preset-react@6.24.1", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-preset-react@6.24.1", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-preset-react/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-preset-react/package.json" } ], "concludedValue": "node_modules/babel-preset-react/package.json" } ] }, "tags": [ "plugins" ] }, { "authors": [ { "name": "James Kyle " } ], "group": "", "name": "babel-preset-flow", "version": "6.23.0", "description": "Babel preset for all Flow plugins.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-preset-flow@6.23.0", "type": "library", "bom-ref": "pkg:npm/babel-preset-flow@6.23.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-preset-flow/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-preset-flow/package.json" } ], "concludedValue": "node_modules/babel-preset-flow/package.json" } ] }, "tags": [ "plugins" ] }, { "group": "", "name": "babel-plugin-transform-react-jsx-source", "version": "6.22.0", "description": "Add a __source prop to all JSX Elements", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-transform-react-jsx-source/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-transform-react-jsx-source/package.json" } ], "concludedValue": "node_modules/babel-plugin-transform-react-jsx-source/package.json" } ] } }, { "group": "", "name": "babel-plugin-transform-react-jsx-self", "version": "6.22.0", "description": "Add a __self prop to all JSX Elements", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-transform-react-jsx-self/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-transform-react-jsx-self/package.json" } ], "concludedValue": "node_modules/babel-plugin-transform-react-jsx-self/package.json" } ] } }, { "group": "", "name": "babel-plugin-transform-react-jsx", "version": "6.24.1", "description": "Turn JSX into React function calls", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1", "type": "library", "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-transform-react-jsx/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-transform-react-jsx/package.json" } ], "concludedValue": "node_modules/babel-plugin-transform-react-jsx/package.json" } ] } }, { "group": "", "name": "babel-plugin-transform-react-inline-elements", "version": "6.22.0", "description": "Turn JSX elements into exploded React objects", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-transform-react-inline-elements@6.22.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-transform-react-inline-elements@6.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-transform-react-inline-elements/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-transform-react-inline-elements/package.json" } ], "concludedValue": "node_modules/babel-plugin-transform-react-inline-elements/package.json" } ] } }, { "group": "", "name": "babel-plugin-transform-react-display-name", "version": "6.25.0", "description": "Add displayName to React.createClass calls", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-transform-react-display-name/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-transform-react-display-name/package.json" } ], "concludedValue": "node_modules/babel-plugin-transform-react-display-name/package.json" } ] } }, { "group": "", "name": "babel-plugin-transform-flow-strip-types", "version": "6.22.0", "description": "Strip flow type annotations from your output code.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-transform-flow-strip-types/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-transform-flow-strip-types/package.json" } ], "concludedValue": "node_modules/babel-plugin-transform-flow-strip-types/package.json" } ] } }, { "group": "", "name": "babel-plugin-syntax-jsx", "version": "6.18.0", "description": "Allow parsing of jsx", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-syntax-jsx@6.18.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-syntax-jsx@6.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-syntax-jsx/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-syntax-jsx/package.json" } ], "concludedValue": "node_modules/babel-plugin-syntax-jsx/package.json" } ] } }, { "group": "", "name": "babel-plugin-syntax-flow", "version": "6.18.0", "description": "Allow parsing of the flow syntax", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-syntax-flow@6.18.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-syntax-flow@6.18.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-syntax-flow/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-syntax-flow/package.json" } ], "concludedValue": "node_modules/babel-plugin-syntax-flow/package.json" } ] } }, { "group": "", "name": "babel-plugin-external-helpers", "version": "6.22.0", "description": "This plugin contains helper functions that’ll be placed at the top of the generated code", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-plugin-external-helpers@6.22.0", "type": "library", "bom-ref": "pkg:npm/babel-plugin-external-helpers@6.22.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-plugin-external-helpers/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-plugin-external-helpers/package.json" } ], "concludedValue": "node_modules/babel-plugin-external-helpers/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-messages", "version": "6.23.0", "description": "Collection of debug messages used by Babel.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-messages@6.23.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-messages@6.23.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-messages/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-messages/package.json" } ], "concludedValue": "node_modules/babel-messages/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-helpers", "version": "6.24.1", "description": "Collection of helper functions used by Babel transforms.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-helpers@6.24.1", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-helpers@6.24.1", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-helpers/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-helpers/package.json" } ], "concludedValue": "node_modules/babel-helpers/package.json" } ] } }, { "group": "", "name": "babel-helper-builder-react-jsx", "version": "6.26.0", "description": "Helper function to build react jsx", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-helper-builder-react-jsx@6.26.0", "type": "library", "bom-ref": "pkg:npm/babel-helper-builder-react-jsx@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-helper-builder-react-jsx/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-helper-builder-react-jsx/package.json" } ], "concludedValue": "node_modules/babel-helper-builder-react-jsx/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-generator", "version": "6.26.1", "description": "Turns an AST into code.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-generator@6.26.1", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-generator@6.26.1", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-generator/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-generator/package.json" } ], "concludedValue": "node_modules/babel-generator/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-core", "version": "6.26.3", "description": "Babel compiler core.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-core@6.26.3", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-core@6.26.3", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-core/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-core/package.json" } ], "concludedValue": "node_modules/babel-core/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-code-frame", "version": "6.26.0", "description": "Generate errors that contain a code frame that point to source locations.", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/babel-code-frame@6.26.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" } ], "type": "library", "bom-ref": "pkg:npm/babel-code-frame@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-code-frame/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-code-frame/package.json" } ], "concludedValue": "node_modules/babel-code-frame/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "2.2.1", "description": "ANSI escape codes for styling strings in the terminal", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@2.2.1", "type": "library", "bom-ref": "pkg:npm/ansi-styles@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "2.1.1", "description": "Regular expression for matching ANSI escape codes", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-regex@2.1.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/babel-plugin-react-html-attrs@2.1.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-24T19:15:31Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'babel-plugin-react-html-attrs' with version '2.1.0'." } ] }