{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:2ebf11eb-3d49-4b53-ac34-02145bb7bc8c", "version": 1, "metadata": { "timestamp": "2026-11-14T11:55:46Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "canvas", "group": "", "version": "2.6.1", "description": "Canvas graphics API backed by Cairo", "purl": "pkg:npm/canvas@2.6.1", "bom-ref": "pkg:npm/canvas@2.6.1", "author": "TJ Holowaychuk ", "properties": [ { "name": "cdx:npm:scripts", "value": "prebenchmark, benchmark, pretest, test, pretest-server, test-server, install, dtslint" }, { "name": "cdx:npm:hasInstallScript", "value": "true" }, { "name": "cdx:npm:risky_scripts", "value": "install" }, { "name": "cdx:npm:gypfile", "value": "true" }, { "name": "cdx:npm:native_addon", "value": "true" }, { "name": "cdx:npm:native_deps", "value": "nan" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Automattic/node-canvas" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@my-scope\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/highlight/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/parsimmon/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/accepts/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn/package.json\\nnode_modules/ajv-keywords/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-escapes/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/aproba/package.json\\nnode_modules/are-we-there-yet/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-flatten/package.json\\nnode_modules/array-includes/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/assert-rejects/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/aws4/package.json\\nnode_modules/babel-code-frame/node_modules/ansi-styles/package.json\\nnode_modules/babel-code-frame/node_modules/chalk/package.json\\nnode_modules/babel-code-frame/node_modules/js-tokens/package.json\\nnode_modules/babel-code-frame/node_modules/supports-color/package.json\\nnode_modules/babel-code-frame/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/body-parser/node_modules/debug/package.json\\nnode_modules/body-parser/node_modules/ms/package.json\\nnode_modules/body-parser/node_modules/qs/package.json\\nnode_modules/body-parser/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/builtin-modules/package.json\\nnode_modules/bytes/package.json\\nnode_modules/caller-path/package.json\\nnode_modules/callsites/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/caseless/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chardet/package.json\\nnode_modules/chownr/package.json\\nnode_modules/circular-json/package.json\\nnode_modules/cli-cursor/package.json\\nnode_modules/cli-width/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/code-point-at/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/console-control-strings/package.json\\nnode_modules/contains-path/package.json\\nnode_modules/content-disposition/package.json\\nnode_modules/content-type/package.json\\nnode_modules/cookie-signature/package.json\\nnode_modules/cookie/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/debug-log/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/decompress-response/package.json\\nnode_modules/deep-extend/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/definitelytyped-header-parser/package.json\\nnode_modules/deglob/node_modules/ignore/package.json\\nnode_modules/deglob/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/delegates/package.json\\nnode_modules/depd/package.json\\nnode_modules/destroy/package.json\\nnode_modules/detect-libc/package.json\\nnode_modules/diff/package.json\\nnode_modules/doctrine/package.json\\nnode_modules/download-file-sync/package.json\\nnode_modules/dts-critic/package.json\\nnode_modules/dtslint/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/ee-first/package.json\\nnode_modules/encodeurl/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es-abstract/package.json\\nnode_modules/es-to-primitive/package.json\\nnode_modules/escape-html/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/eslint-config-standard-jsx/package.json\\nnode_modules/eslint-config-standard/package.json\\nnode_modules/eslint-import-resolver-node/node_modules/debug/package.json\\nnode_modules/eslint-import-resolver-node/node_modules/ms/package.json\\nnode_modules/eslint-import-resolver-node/package.json\\nnode_modules/eslint-module-utils/node_modules/debug/package.json\\nnode_modules/eslint-module-utils/node_modules/ms/package.json\\nnode_modules/eslint-module-utils/package.json\\nnode_modules/eslint-plugin-es/package.json\\nnode_modules/eslint-plugin-import/memo-parser/package.json\\nnode_modules/eslint-plugin-import/node_modules/debug/package.json\\nnode_modules/eslint-plugin-import/node_modules/doctrine/package.json\\nnode_modules/eslint-plugin-import/node_modules/ms/package.json\\nnode_modules/eslint-plugin-import/package.json\\nnode_modules/eslint-plugin-node/package.json\\nnode_modules/eslint-plugin-promise/package.json\\nnode_modules/eslint-plugin-react/package.json\\nnode_modules/eslint-plugin-standard/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-utils/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/node_modules/ansi-regex/package.json\\nnode_modules/eslint/node_modules/strip-ansi/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/etag/package.json\\nnode_modules/execa/package.json\\nnode_modules/express/node_modules/debug/package.json\\nnode_modules/express/node_modules/ms/package.json\\nnode_modules/express/node_modules/qs/package.json\\nnode_modules/express/package.json\\nnode_modules/extend/package.json\\nnode_modules/external-editor/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/figures/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/finalhandler/node_modules/debug/package.json\\nnode_modules/finalhandler/node_modules/ms/package.json\\nnode_modules/finalhandler/package.json\\nnode_modules/find-root/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat-cache/node_modules/rimraf/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/forwarded/package.json\\nnode_modules/fresh/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/fs-minipass/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/functional-red-black-tree/package.json\\nnode_modules/gauge/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-stdin/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/getpass/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/growl/package.json\\nnode_modules/har-schema/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/has-ansi/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-unicode/package.json\\nnode_modules/has/package.json\\nnode_modules/he/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/http-errors/node_modules/inherits/package.json\\nnode_modules/http-errors/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ignore-walk/package.json\\nnode_modules/ignore/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ini/package.json\\nnode_modules/inquirer/node_modules/ansi-regex/package.json\\nnode_modules/inquirer/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/inquirer/node_modules/string-width/package.json\\nnode_modules/inquirer/node_modules/strip-ansi/package.json\\nnode_modules/inquirer/package.json\\nnode_modules/invert-kv/package.json\\nnode_modules/ipaddr.js/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-date-object/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-promise/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-regexp/package.json\\nnode_modules/is-resolvable/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/is-symbol/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/isstream/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/json-parse-better-errors/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/jsx-ast-utils/package.json\\nnode_modules/lcid/package.json\\nnode_modules/levn/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash/package.json\\nnode_modules/loose-envify/package.json\\nnode_modules/map-age-cleaner/package.json\\nnode_modules/media-typer/package.json\\nnode_modules/mem/package.json\\nnode_modules/merge-descriptors/package.json\\nnode_modules/methods/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/mimic-fn/package.json\\nnode_modules/mimic-response/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/minipass/package.json\\nnode_modules/minizlib/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/commander/package.json\\nnode_modules/mocha/node_modules/debug/package.json\\nnode_modules/mocha/node_modules/diff/package.json\\nnode_modules/mocha/node_modules/glob/package.json\\nnode_modules/mocha/node_modules/ms/package.json\\nnode_modules/mocha/node_modules/supports-color/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/mute-stream/package.json\\nnode_modules/nan/package.json\\nnode_modules/nan/tools/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/needle/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/nice-try/package.json\\nnode_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json\\nnode_modules/node-pre-gyp/package.json\\nnode_modules/nopt/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/npm-bundled/package.json\\nnode_modules/npm-packlist/package.json\\nnode_modules/npm-run-path/package.json\\nnode_modules/npmlog/package.json\\nnode_modules/number-is-nan/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/object.assign/package.json\\nnode_modules/on-finished/package.json\\nnode_modules/once/package.json\\nnode_modules/onetime/node_modules/mimic-fn/package.json\\nnode_modules/onetime/package.json\\nnode_modules/optionator/package.json\\nnode_modules/os-homedir/package.json\\nnode_modules/os-locale/package.json\\nnode_modules/os-tmpdir/package.json\\nnode_modules/osenv/package.json\\nnode_modules/p-defer/package.json\\nnode_modules/p-finally/package.json\\nnode_modules/p-is-promise/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-try/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/parseurl/package.json\\nnode_modules/parsimmon/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-is-inside/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-to-regexp/package.json\\nnode_modules/path-type/package.json\\nnode_modules/performance-now/package.json\\nnode_modules/pify/package.json\\nnode_modules/pixelmatch/package.json\\nnode_modules/pkg-conf/node_modules/find-up/package.json\\nnode_modules/pkg-conf/node_modules/load-json-file/package.json\\nnode_modules/pkg-conf/node_modules/locate-path/package.json\\nnode_modules/pkg-conf/node_modules/p-limit/package.json\\nnode_modules/pkg-conf/node_modules/p-locate/package.json\\nnode_modules/pkg-conf/node_modules/p-try/package.json\\nnode_modules/pkg-conf/node_modules/parse-json/package.json\\nnode_modules/pkg-conf/node_modules/pify/package.json\\nnode_modules/pkg-conf/package.json\\nnode_modules/pkg-config/package.json\\nnode_modules/pkg-dir/node_modules/find-up/package.json\\nnode_modules/pkg-dir/node_modules/locate-path/package.json\\nnode_modules/pkg-dir/node_modules/p-limit/package.json\\nnode_modules/pkg-dir/node_modules/p-locate/package.json\\nnode_modules/pkg-dir/node_modules/p-try/package.json\\nnode_modules/pkg-dir/package.json\\nnode_modules/pluralize/package.json\\nnode_modules/pngjs/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/progress/package.json\\nnode_modules/prop-types/package.json\\nnode_modules/proxy-addr/package.json\\nnode_modules/psl/package.json\\nnode_modules/pump/package.json\\nnode_modules/punycode/package.json\\nnode_modules/qs/package.json\\nnode_modules/range-parser/package.json\\nnode_modules/raw-body/package.json\\nnode_modules/rc/node_modules/minimist/package.json\\nnode_modules/rc/package.json\\nnode_modules/react-is/package.json\\nnode_modules/read-pkg-up/node_modules/find-up/package.json\\nnode_modules/read-pkg-up/node_modules/locate-path/package.json\\nnode_modules/read-pkg-up/node_modules/p-limit/package.json\\nnode_modules/read-pkg-up/node_modules/p-locate/package.json\\nnode_modules/read-pkg-up/node_modules/p-try/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/regexpp/package.json\\nnode_modules/request/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/require-main-filename/package.json\\nnode_modules/require-uncached/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/restore-cursor/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/run-async/package.json\\nnode_modules/run-parallel/package.json\\nnode_modules/rxjs/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/sax/package.json\\nnode_modules/semver/package.json\\nnode_modules/send/node_modules/debug/node_modules/ms/package.json\\nnode_modules/send/node_modules/debug/package.json\\nnode_modules/send/node_modules/ms/package.json\\nnode_modules/send/package.json\\nnode_modules/serve-static/package.json\\nnode_modules/set-blocking/package.json\\nnode_modules/setprototypeof/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/simple-concat/package.json\\nnode_modules/simple-get/package.json\\nnode_modules/slice-ansi/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/slice-ansi/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/standard-engine/node_modules/minimist/package.json\\nnode_modules/standard-engine/package.json\\nnode_modules/standard/package.json\\nnode_modules/statuses/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string.prototype.trimleft/package.json\\nnode_modules/string.prototype.trimright/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/strip-eof/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/symbol-observable/package.json\\nnode_modules/table/node_modules/ansi-regex/package.json\\nnode_modules/table/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/table/node_modules/string-width/package.json\\nnode_modules/table/node_modules/strip-ansi/package.json\\nnode_modules/table/package.json\\nnode_modules/tar/package.json\\nnode_modules/text-table/package.json\\nnode_modules/through/package.json\\nnode_modules/tmp/package.json\\nnode_modules/toidentifier/package.json\\nnode_modules/tough-cookie/node_modules/punycode/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/tslib/package.json\\nnode_modules/tslint/package.json\\nnode_modules/tsutils/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/type-check/package.json\\nnode_modules/type-is/package.json\\nnode_modules/typescript/package.json\\nnode_modules/uniq/package.json\\nnode_modules/universalify/package.json\\nnode_modules/unpipe/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/utils-merge/package.json\\nnode_modules/uuid/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/vary/package.json\\nnode_modules/verror/package.json\\nnode_modules/which-module/package.json\\nnode_modules/which/package.json\\nnode_modules/wide-align/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/write/package.json\\nnode_modules/xtend/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json" } ] }, "components": [ { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "11.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs-parser@11.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@11.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "12.0.5", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yargs@12.0.5", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "git+https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@12.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "4.0.0", "description": "Strip ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/strip-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/strip-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "2.1.1", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/string-width#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/string-width.git" } ], "type": "library", "bom-ref": "pkg:npm/string-width@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "2.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git" } ], "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/is-fullwidth-code-point/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/is-fullwidth-code-point/package.json" }, { "name": "SrcFile", "value": "node_modules/slice-ansi/node_modules/is-fullwidth-code-point/package.json" }, { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/is-fullwidth-code-point/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "3.0.0", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-regex#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/table/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/inquirer/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "3.1.1", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@3.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/yallist#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yallist/package.json" } ], "concludedValue": "node_modules/yallist/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "4.0.0", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/y18n@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/y18n.git" } ], "type": "library", "bom-ref": "pkg:npm/y18n@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "xtend", "version": "4.0.2", "description": "extend like a boss", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/xtend" }, { "type": "vcs", "url": "git://github.com/Raynos/xtend.git" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/xtend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/xtend/package.json" } ], "concludedValue": "node_modules/xtend/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "write", "version": "0.2.1", "description": "Write files to disk, creating intermediate directories if they don't exist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/write@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/write" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/write.git" } ], "type": "library", "bom-ref": "pkg:npm/write@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/write/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/write/package.json" } ], "concludedValue": "node_modules/write/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "wrappy", "version": "1.0.2", "description": "Callback wrapping utility", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/wrappy" }, { "type": "vcs", "url": "git+https://github.com/npm/wrappy.git" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/wrappy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrappy/package.json" } ], "concludedValue": "node_modules/wrappy/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "2.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wrap-ansi@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/wrap-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/wrap-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/wrap-ansi@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "wordwrap", "version": "1.0.0", "description": "Wrap those words. Show them at what columns to start and stop.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wordwrap@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-wordwrap#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-wordwrap.git" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wordwrap/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wordwrap/package.json" } ], "concludedValue": "node_modules/wordwrap/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org/)" } ], "group": "", "name": "wide-align", "version": "1.1.3", "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/wide-align@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/wide-align#readme" }, { "type": "vcs", "url": "git+https://github.com/iarna/wide-align.git" } ], "type": "library", "bom-ref": "pkg:npm/wide-align@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wide-align/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wide-align/package.json" } ], "concludedValue": "node_modules/wide-align/package.json" } ] } }, { "authors": [ { "name": "nexdrew" } ], "group": "", "name": "which-module", "version": "2.0.0", "description": "Find the module object for something that was require()d", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which-module@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nexdrew/which-module#readme" }, { "type": "vcs", "url": "git+https://github.com/nexdrew/which-module.git" } ], "type": "library", "bom-ref": "pkg:npm/which-module@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/which-module/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which-module/package.json" } ], "concludedValue": "node_modules/which-module/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "1.3.1", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-which#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "description": "richer JavaScript errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davepacheco/node-verror#readme" }, { "type": "vcs", "url": "git://github.com/davepacheco/node-verror.git" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/verror/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/verror/package.json" } ], "concludedValue": "node_modules/verror/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "vary", "version": "1.1.2", "description": "Manipulate the HTTP Vary header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/vary@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/vary#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/vary.git" } ], "type": "library", "bom-ref": "pkg:npm/vary@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/vary/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/vary/package.json" } ], "concludedValue": "node_modules/vary/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "validate-npm-package-license", "version": "3.0.4", "description": "Give me a string and I'll tell you if it's a valid npm package license string", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/validate-npm-package-license@3.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme" }, { "type": "vcs", "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git" } ], "type": "library", "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/validate-npm-package-license/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/validate-npm-package-license/package.json" } ], "concludedValue": "node_modules/validate-npm-package-license/package.json" } ] } }, { "group": "", "name": "uuid", "version": "3.3.3", "description": "RFC4122 (v1, v4, and v5) UUIDs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uuid@3.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kelektiv/node-uuid#readme" }, { "type": "vcs", "url": "git+https://github.com/kelektiv/node-uuid.git" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/uuid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uuid/package.json" } ], "concludedValue": "node_modules/uuid/package.json" } ] } }, { "authors": [ { "name": "Jared Hanson (http://www.jaredhanson.net/)" } ], "group": "", "name": "utils-merge", "version": "1.0.1", "description": "merge() utility function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/utils-merge@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jaredhanson/utils-merge#readme" }, { "type": "vcs", "url": "git://github.com/jaredhanson/utils-merge.git" } ], "type": "library", "bom-ref": "pkg:npm/utils-merge@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/utils-merge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/utils-merge/package.json" } ], "concludedValue": "node_modules/utils-merge/package.json" } ] } }, { "authors": [ { "name": "Nathan Rajlich (http://n8.io/)" } ], "group": "", "name": "util-deprecate", "version": "1.0.2", "description": "The Node.js `util.deprecate()` function with browser support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/TooTallNate/util-deprecate" }, { "type": "vcs", "url": "git://github.com/TooTallNate/util-deprecate.git" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/util-deprecate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/util-deprecate/package.json" } ], "concludedValue": "node_modules/util-deprecate/package.json" } ] } }, { "authors": [ { "name": "Gary Court " } ], "group": "", "name": "uri-js", "version": "4.2.2", "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uri-js@4.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/garycourt/uri-js" }, { "type": "vcs", "url": "git+ssh://git@github.com/garycourt/uri-js.git" } ], "type": "library", "bom-ref": "pkg:npm/uri-js@4.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/uri-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uri-js/package.json" } ], "concludedValue": "node_modules/uri-js/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "unpipe", "version": "1.0.0", "description": "Unpipe a stream from all destinations", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/unpipe@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stream-utils/unpipe#readme" }, { "type": "vcs", "url": "git+https://github.com/stream-utils/unpipe.git" } ], "type": "library", "bom-ref": "pkg:npm/unpipe@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/unpipe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/unpipe/package.json" } ], "concludedValue": "node_modules/unpipe/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Ryan Zimmerman " } ], "group": "", "name": "universalify", "version": "0.1.2", "description": "Make a callback- or promise-based function support both promises and callbacks.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/universalify@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/RyanZim/universalify#readme" }, { "type": "vcs", "url": "git+https://github.com/RyanZim/universalify.git" } ], "type": "library", "bom-ref": "pkg:npm/universalify@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/universalify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/universalify/package.json" } ], "concludedValue": "node_modules/universalify/package.json" } ] } }, { "authors": [ { "name": "Mikola Lysenko" } ], "group": "", "name": "uniq", "version": "1.0.1", "description": "Removes duplicates from a sorted array in place", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/uniq@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikolalysenko/uniq#readme" }, { "type": "vcs", "url": "git://github.com/mikolalysenko/uniq.git" } ], "type": "library", "bom-ref": "pkg:npm/uniq@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/uniq/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/uniq/package.json" } ], "concludedValue": "node_modules/uniq/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "typescript", "version": "3.7.0-dev.20191006", "description": "TypeScript is a language for application scale JavaScript development", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/typescript@3.7.0-dev.20191006", "externalReferences": [ { "type": "website", "url": "https://www.typescriptlang.org/" }, { "type": "vcs", "url": "git+https://github.com/Microsoft/TypeScript.git" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.7.0-dev.20191006", "properties": [ { "name": "SrcFile", "value": "node_modules/typescript/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/typescript/package.json" } ], "concludedValue": "node_modules/typescript/package.json" } ] } }, { "group": "", "name": "type-is", "version": "1.6.18", "description": "Infer the content-type of a request.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-is@1.6.18", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/type-is#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/type-is.git" } ], "type": "library", "bom-ref": "pkg:npm/type-is@1.6.18", "properties": [ { "name": "SrcFile", "value": "node_modules/type-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-is/package.json" } ], "concludedValue": "node_modules/type-is/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "type-check", "version": "0.3.2", "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/type-check@0.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/type-check" }, { "type": "vcs", "url": "git://github.com/gkz/type-check.git" } ], "type": "library", "bom-ref": "pkg:npm/type-check@0.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/type-check/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-check/package.json" } ], "concludedValue": "node_modules/type-check/package.json" } ] } }, { "authors": [ { "name": "TweetNaCl-js contributors" } ], "group": "", "name": "tweetnacl", "version": "0.14.5", "description": "Port of TweetNaCl cryptographic library to JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Unlicense", "url": "https://opensource.org/licenses/Unlicense", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "website", "url": "https://tweetnacl.js.org" }, { "type": "vcs", "url": "git+https://github.com/dchest/tweetnacl-js.git" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "node_modules/tweetnacl/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tweetnacl/package.json" } ], "concludedValue": "node_modules/tweetnacl/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "tunnel-agent", "version": "0.6.0", "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tunnel-agent@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/tunnel-agent#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/tunnel-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tunnel-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tunnel-agent/package.json" } ], "concludedValue": "node_modules/tunnel-agent/package.json" } ] } }, { "authors": [ { "name": "Klaus Meinhardt" } ], "group": "", "name": "tsutils", "version": "2.29.0", "description": "utilities for working with typescript's AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tsutils@2.29.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ajafff/tsutils#readme" }, { "type": "vcs", "url": "git+https://github.com/ajafff/tsutils.git" } ], "type": "library", "bom-ref": "pkg:npm/tsutils@2.29.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tsutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tsutils/package.json" } ], "concludedValue": "node_modules/tsutils/package.json" } ] } }, { "group": "", "name": "tslint", "version": "5.20.0", "description": "An extensible static analysis linter for the TypeScript language", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslint@5.20.0", "externalReferences": [ { "type": "vcs", "url": "https://palantir.github.io/tslint" }, { "type": "vcs", "url": "git+https://github.com/palantir/tslint.git" } ], "type": "library", "bom-ref": "pkg:npm/tslint@5.20.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tslint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tslint/package.json" } ], "concludedValue": "node_modules/tslint/package.json" } ] } }, { "authors": [ { "name": "Microsoft Corp." } ], "group": "", "name": "tslib", "version": "1.10.0", "description": "Runtime library for TypeScript helper functions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tslib@1.10.0", "externalReferences": [ { "type": "website", "url": "http://typescriptlang.org/" }, { "type": "vcs", "url": "git+https://github.com/Microsoft/tslib.git" } ], "type": "library", "bom-ref": "pkg:npm/tslib@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/tslib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tslib/package.json" } ], "concludedValue": "node_modules/tslib/package.json" } ] } }, { "authors": [ { "name": "Jeremy Stashewsky " } ], "group": "", "name": "tough-cookie", "version": "2.4.3", "description": "RFC6265 Cookies and Cookie Jar for node.js", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tough-cookie@2.4.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/salesforce/tough-cookie" }, { "type": "vcs", "url": "git://github.com/salesforce/tough-cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/package.json" } ], "concludedValue": "node_modules/tough-cookie/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "1.4.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@1.4.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "git+https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/tough-cookie/node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tough-cookie/node_modules/punycode/package.json" } ], "concludedValue": "node_modules/tough-cookie/node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "toidentifier", "version": "1.0.0", "description": "Convert a string of words to a JavaScript identifier", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/toidentifier@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/component/toidentifier#readme" }, { "type": "vcs", "url": "git+https://github.com/component/toidentifier.git" } ], "type": "library", "bom-ref": "pkg:npm/toidentifier@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/toidentifier/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/toidentifier/package.json" } ], "concludedValue": "node_modules/toidentifier/package.json" } ] } }, { "authors": [ { "name": "KARASZI István (http://raszi.hu/)" } ], "group": "", "name": "tmp", "version": "0.0.33", "description": "Temporary file and directory creator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tmp@0.0.33", "externalReferences": [ { "type": "vcs", "url": "http://github.com/raszi/node-tmp" }, { "type": "vcs", "url": "git+https://github.com/raszi/node-tmp.git" } ], "type": "library", "bom-ref": "pkg:npm/tmp@0.0.33", "properties": [ { "name": "SrcFile", "value": "node_modules/tmp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tmp/package.json" } ], "concludedValue": "node_modules/tmp/package.json" } ] } }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "through", "version": "2.3.8", "description": "simplified stream construction", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/through" }, { "type": "vcs", "url": "git+https://github.com/dominictarr/through.git" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "node_modules/through/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/through/package.json" } ], "concludedValue": "node_modules/through/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "text-table", "version": "0.2.0", "description": "borderless text tables with alignment", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/text-table@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/text-table" }, { "type": "vcs", "url": "git://github.com/substack/text-table.git" } ], "type": "library", "bom-ref": "pkg:npm/text-table@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/text-table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/text-table/package.json" } ], "concludedValue": "node_modules/text-table/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "tar", "version": "4.4.13", "description": "tar for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/tar@4.4.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-tar#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/node-tar.git" } ], "type": "library", "bom-ref": "pkg:npm/tar@4.4.13", "properties": [ { "name": "SrcFile", "value": "node_modules/tar/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/tar/package.json" } ], "concludedValue": "node_modules/tar/package.json" } ] } }, { "authors": [ { "name": "Gajus Kuizinas (http://gajus.com)" } ], "group": "", "name": "table", "version": "4.0.3", "description": "Formats data into a string table.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/table@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gajus/table#readme" }, { "type": "vcs", "url": "git+https://github.com/gajus/table.git" } ], "type": "library", "bom-ref": "pkg:npm/table@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/table/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/table/package.json" } ], "concludedValue": "node_modules/table/package.json" } ] } }, { "authors": [ { "name": "Ben Lesh " } ], "group": "", "name": "symbol-observable", "version": "1.0.1", "description": "Symbol.observable ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/symbol-observable@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/blesh/symbol-observable#readme" }, { "type": "vcs", "url": "git+https://github.com/blesh/symbol-observable.git" } ], "type": "library", "bom-ref": "pkg:npm/symbol-observable@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/symbol-observable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/symbol-observable/package.json" } ], "concludedValue": "node_modules/symbol-observable/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "5.5.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@5.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "2.0.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-json-comments@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-json-comments#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-json-comments.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-json-comments@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-eof", "version": "1.0.0", "description": "Strip the End-Of-File (EOF) character from a string/buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-eof@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-eof#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-eof.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-eof@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-eof/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-eof/package.json" } ], "concludedValue": "node_modules/strip-eof/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-bom", "version": "3.0.0", "description": "Strip UTF-8 byte order mark (BOM) from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-bom@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/strip-bom#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/strip-bom.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-bom@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-bom/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-bom/package.json" } ], "concludedValue": "node_modules/strip-bom/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "3.0.1", "description": "Strip ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/strip-ansi@3.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/strip-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/strip-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "string_decoder", "version": "1.1.1", "description": "The string_decoder module from Node core", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/string_decoder" }, { "type": "vcs", "url": "git://github.com/nodejs/string_decoder.git" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/string_decoder/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string_decoder/package.json" } ], "concludedValue": "node_modules/string_decoder/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "string.prototype.trimright", "version": "2.1.0", "description": "ES7 spec-compliant String.prototype.trimRight shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string.prototype.trimright@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/String.prototype.trimRight#readme" }, { "type": "vcs", "url": "git://github.com/es-shims/String.prototype.trimRight.git" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trimright@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string.prototype.trimright/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string.prototype.trimright/package.json" } ], "concludedValue": "node_modules/string.prototype.trimright/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "string.prototype.trimleft", "version": "2.1.0", "description": "ES7 spec-compliant String.prototype.trimLeft shim.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string.prototype.trimleft@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/es-shims/String.prototype.trimLeft#readme" }, { "type": "vcs", "url": "git://github.com/es-shims/String.prototype.trimLeft.git" } ], "type": "library", "bom-ref": "pkg:npm/string.prototype.trimleft@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/string.prototype.trimleft/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string.prototype.trimleft/package.json" } ], "concludedValue": "node_modules/string.prototype.trimleft/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "1.0.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/string-width@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/string-width#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/string-width.git" } ], "type": "library", "bom-ref": "pkg:npm/string-width@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "group": "", "name": "statuses", "version": "1.5.0", "description": "HTTP status utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/statuses@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/statuses#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/statuses.git" } ], "type": "library", "bom-ref": "pkg:npm/statuses@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/statuses/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/statuses/package.json" } ], "concludedValue": "node_modules/statuses/package.json" } ] } }, { "authors": [ { "name": "Dan Flettre (http://twitter.com/flettre/)" } ], "group": "", "name": "standard-engine", "version": "9.0.0", "description": "Wrap your standards in a tortilla and cover it in special sauce.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/standard-engine@9.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/flet/standard-engine" }, { "type": "vcs", "url": "git://github.com/flet/standard-engine.git" } ], "type": "library", "bom-ref": "pkg:npm/standard-engine@9.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/standard-engine/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/standard-engine/package.json" } ], "concludedValue": "node_modules/standard-engine/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.0", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/standard-engine/node_modules/minimist/package.json" }, { "name": "SrcFile", "value": "node_modules/rc/node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rc/node_modules/minimist/package.json" } ], "concludedValue": "node_modules/rc/node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org/)" } ], "group": "", "name": "standard", "version": "12.0.1", "description": "JavaScript Standard Style", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/standard@12.0.1", "externalReferences": [ { "type": "website", "url": "https://standardjs.com" }, { "type": "vcs", "url": "git://github.com/standard/standard.git" } ], "type": "library", "bom-ref": "pkg:npm/standard@12.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/standard/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/standard/package.json" } ], "concludedValue": "node_modules/standard/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "sshpk", "version": "1.16.1", "description": "A library for finding and using SSH public keys", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sshpk@1.16.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-sshpk#readme" }, { "type": "vcs", "url": "git+https://github.com/joyent/node-sshpk.git" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.16.1", "properties": [ { "name": "SrcFile", "value": "node_modules/sshpk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sshpk/package.json" } ], "concludedValue": "node_modules/sshpk/package.json" } ] } }, { "authors": [ { "name": "Alexandru Marasteanu (http://alexei.ro/)" } ], "group": "", "name": "sprintf-js", "version": "1.0.3", "description": "JavaScript sprintf implementation", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexei/sprintf.js#readme" }, { "type": "vcs", "url": "git+https://github.com/alexei/sprintf.js.git" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/sprintf-js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sprintf-js/package.json" } ], "concludedValue": "node_modules/sprintf-js/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "spdx-license-ids", "version": "3.0.5", "description": "A list of SPDX license identifiers", "scope": "optional", "licenses": [ { "license": { "id": "CC0-1.0", "url": "https://opensource.org/licenses/CC0-1.0", "properties": [ { "name": "cdx:license:category", "value": "Public Domain" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-license-ids@3.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shinnn/spdx-license-ids#readme" }, { "type": "vcs", "url": "git+https://github.com/shinnn/spdx-license-ids.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-license-ids@3.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-license-ids/package.json" }, { "name": "cdx:license:category", "value": "Public Domain" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-license-ids/package.json" } ], "concludedValue": "node_modules/spdx-license-ids/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (http://kemitchell.com)" } ], "group": "", "name": "spdx-expression-parse", "version": "3.0.0", "description": "parse SPDX license expressions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-expression-parse@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-expression-parse.js#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-expression-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-expression-parse/package.json" } ], "concludedValue": "node_modules/spdx-expression-parse/package.json" } ] } }, { "authors": [ { "name": "The Linux Foundation" } ], "group": "", "name": "spdx-exceptions", "version": "2.2.0", "description": "list of SPDX standard license exceptions", "scope": "optional", "licenses": [ { "license": { "id": "CC-BY-3.0", "url": "https://opensource.org/licenses/CC-BY-3.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-exceptions@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kemitchell/spdx-exceptions.json#readme" }, { "type": "vcs", "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-exceptions@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-exceptions/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-exceptions/package.json" } ], "concludedValue": "node_modules/spdx-exceptions/package.json" } ] } }, { "authors": [ { "name": "Kyle E. Mitchell (https://kemitchell.com)" } ], "group": "", "name": "spdx-correct", "version": "3.1.0", "description": "correct invalid SPDX expressions", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spdx-correct@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jslicense/spdx-correct.js#readme" }, { "type": "vcs", "url": "git+https://github.com/jslicense/spdx-correct.js.git" } ], "type": "library", "bom-ref": "pkg:npm/spdx-correct@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/spdx-correct/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/spdx-correct/package.json" } ], "concludedValue": "node_modules/spdx-correct/package.json" } ] } }, { "authors": [ { "name": "David Caccavella " } ], "group": "", "name": "slice-ansi", "version": "1.0.0", "description": "Slice a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/slice-ansi@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/slice-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/slice-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/slice-ansi@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/slice-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/slice-ansi/package.json" } ], "concludedValue": "node_modules/slice-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "simple-get", "version": "3.1.0", "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-get@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/simple-get" }, { "type": "vcs", "url": "git://github.com/feross/simple-get.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-get@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-get/package.json" }, { "name": "ImportedModules", "value": "simple-get" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-get/package.json" } ], "concludedValue": "node_modules/simple-get/package.json" } ], "occurrences": [ { "location": "lib/image.js", "line": 50 } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "simple-concat", "version": "1.0.0", "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/simple-concat@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/simple-concat" }, { "type": "vcs", "url": "git://github.com/feross/simple-concat.git" } ], "type": "library", "bom-ref": "pkg:npm/simple-concat@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/simple-concat/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/simple-concat/package.json" } ], "concludedValue": "node_modules/simple-concat/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "3.0.2", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/signal-exit@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit" }, { "type": "vcs", "url": "git+https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "1.0.0", "description": "Regular expression for matching a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-regex@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/shebang-regex#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/shebang-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/shebang-regex@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Martensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "1.2.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/shebang-command@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kevva/shebang-command#readme" }, { "type": "vcs", "url": "git+https://github.com/kevva/shebang-command.git" } ], "type": "library", "bom-ref": "pkg:npm/shebang-command@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Wes Todd" } ], "group": "", "name": "setprototypeof", "version": "1.1.1", "description": "A small polyfill for Object.setprototypeof", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/setprototypeof@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/wesleytodd/setprototypeof" }, { "type": "vcs", "url": "git+https://github.com/wesleytodd/setprototypeof.git" } ], "type": "library", "bom-ref": "pkg:npm/setprototypeof@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/setprototypeof/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/setprototypeof/package.json" } ], "concludedValue": "node_modules/setprototypeof/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "set-blocking", "version": "2.0.0", "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/set-blocking@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/set-blocking#readme" }, { "type": "vcs", "url": "git+https://github.com/yargs/set-blocking.git" } ], "type": "library", "bom-ref": "pkg:npm/set-blocking@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/set-blocking/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/set-blocking/package.json" } ], "concludedValue": "node_modules/set-blocking/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "serve-static", "version": "1.14.1", "description": "Serve static files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/serve-static@1.14.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expressjs/serve-static#readme" }, { "type": "vcs", "url": "git+https://github.com/expressjs/serve-static.git" } ], "type": "library", "bom-ref": "pkg:npm/serve-static@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/serve-static/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serve-static/package.json" } ], "concludedValue": "node_modules/serve-static/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "send", "version": "0.17.1", "description": "Better streaming static file server with Range and conditional-GET support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/send@0.17.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/send#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/send.git" } ], "type": "library", "bom-ref": "pkg:npm/send@0.17.1", "properties": [ { "name": "SrcFile", "value": "node_modules/send/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/send/package.json" } ], "concludedValue": "node_modules/send/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.1", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zeit/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/zeit/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/send/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/send/node_modules/ms/package.json" } ], "concludedValue": "node_modules/send/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "2.6.9", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "node_modules/send/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/finalhandler/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/express/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint-plugin-import/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint-module-utils/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint-import-resolver-node/node_modules/debug/package.json" }, { "name": "SrcFile", "value": "node_modules/body-parser/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/node_modules/debug/package.json" } ], "concludedValue": "node_modules/body-parser/node_modules/debug/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "description": "Tiny milisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zeit/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/zeit/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/send/node_modules/debug/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/mocha/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/finalhandler/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/express/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint-plugin-import/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint-module-utils/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/eslint-import-resolver-node/node_modules/ms/package.json" }, { "name": "SrcFile", "value": "node_modules/body-parser/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/node_modules/ms/package.json" } ], "concludedValue": "node_modules/body-parser/node_modules/ms/package.json" } ] } }, { "group": "", "name": "semver", "version": "5.7.1", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@5.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/node-semver#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@5.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "sax", "version": "1.2.4", "description": "An evented streaming XML parser in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/sax@1.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/sax-js#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/sax-js.git" } ], "type": "framework", "bom-ref": "pkg:npm/sax@1.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/sax/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/sax/package.json" } ], "concludedValue": "node_modules/sax/package.json" } ] }, "tags": [ "framework", "xml" ] }, { "authors": [ { "name": "Nikita Skovoroda (https://github.com/ChALkeR)" } ], "group": "", "name": "safer-buffer", "version": "2.1.2", "description": "Modern Buffer API polyfill without footguns", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ChALkeR/safer-buffer#readme" }, { "type": "vcs", "url": "git+https://github.com/ChALkeR/safer-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safer-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safer-buffer/package.json" } ], "concludedValue": "node_modules/safer-buffer/package.json" } ] }, "tags": [ "api" ] }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Ben Lesh " } ], "group": "", "name": "rxjs", "version": "5.5.12", "description": "Reactive Extensions for modern JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rxjs@5.5.12", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ReactiveX/RxJS" }, { "type": "vcs", "url": "git+ssh://git@github.com/ReactiveX/RxJS.git" } ], "type": "library", "bom-ref": "pkg:npm/rxjs@5.5.12", "properties": [ { "name": "SrcFile", "value": "node_modules/rxjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rxjs/package.json" } ], "concludedValue": "node_modules/rxjs/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org/)" } ], "group": "", "name": "run-parallel", "version": "1.1.9", "description": "Run an array of functions in parallel", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-parallel@1.1.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/run-parallel" }, { "type": "vcs", "url": "git://github.com/feross/run-parallel.git" } ], "type": "library", "bom-ref": "pkg:npm/run-parallel@1.1.9", "properties": [ { "name": "SrcFile", "value": "node_modules/run-parallel/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/run-parallel/package.json" } ], "concludedValue": "node_modules/run-parallel/package.json" } ] } }, { "authors": [ { "name": "Simon Boudrias " } ], "group": "", "name": "run-async", "version": "2.3.0", "description": "Utility method to run function either synchronously or asynchronously using the common `this.async()` style.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/run-async@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/SBoudrias/run-async#readme" }, { "type": "vcs", "url": "git+https://github.com/SBoudrias/run-async.git" } ], "type": "library", "bom-ref": "pkg:npm/run-async@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/run-async/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/run-async/package.json" } ], "concludedValue": "node_modules/run-async/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.7.1", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.7.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/rimraf#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/rimraf.git" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "restore-cursor", "version": "2.0.0", "description": "Gracefully restore the CLI cursor on exit", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/restore-cursor@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/restore-cursor#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/restore-cursor.git" } ], "type": "library", "bom-ref": "pkg:npm/restore-cursor@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/restore-cursor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/restore-cursor/package.json" } ], "concludedValue": "node_modules/restore-cursor/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "resolve-from", "version": "1.0.1", "description": "Resolve the path of a module like require.resolve() but from a given path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve-from@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/resolve-from#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/resolve-from.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve-from@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve-from/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve-from/package.json" } ], "concludedValue": "node_modules/resolve-from/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "resolve", "version": "1.12.0", "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/resolve@1.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/browserify/resolve#readme" }, { "type": "vcs", "url": "git://github.com/browserify/resolve.git" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/package.json" } ], "concludedValue": "node_modules/resolve/package.json" } ] } }, { "group": "", "name": "mylib", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mylib@0.0.0", "type": "library", "bom-ref": "pkg:npm/mylib@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" } ] } }, { "group": "", "name": "monorepo-symlink-test", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/monorepo-symlink-test@0.0.0", "type": "library", "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json" } ] } }, { "group": "@my-scope", "name": "package-b", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-b@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" } ] } }, { "group": "@my-scope", "name": "package-a", "version": "0.0.0", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40my-scope/package-a@0.0.0", "type": "library", "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" } ] } }, { "group": "", "name": "invalid main", "version": "", "scope": "optional", "purl": "pkg:npm/invalid%20main", "type": "library", "bom-ref": "pkg:npm/invalid main", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/invalid_main/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json" } ] } }, { "group": "", "name": "browser_field", "version": "", "scope": "optional", "purl": "pkg:npm/browser_field", "type": "library", "bom-ref": "pkg:npm/browser_field", "properties": [ { "name": "SrcFile", "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/resolve/test/resolver/browser_field/package.json" } ], "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "require-uncached", "version": "1.0.3", "description": "Require a module bypassing the cache", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-uncached@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/require-uncached#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/require-uncached.git" } ], "type": "library", "bom-ref": "pkg:npm/require-uncached@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/require-uncached/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-uncached/package.json" } ], "concludedValue": "node_modules/require-uncached/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "require-main-filename", "version": "1.0.1", "description": "shim for require.main.filename() that works in as many environments as possible", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-main-filename@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/require-main-filename#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/require-main-filename.git" } ], "type": "library", "bom-ref": "pkg:npm/require-main-filename@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-main-filename/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-main-filename/package.json" } ], "concludedValue": "node_modules/require-main-filename/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "request", "version": "2.88.0", "description": "Simplified HTTP request client.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/request@2.88.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/request/request#readme" }, { "type": "vcs", "url": "git+https://github.com/request/request.git" } ], "type": "library", "bom-ref": "pkg:npm/request@2.88.0", "properties": [ { "name": "SrcFile", "value": "node_modules/request/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/request/package.json" } ], "concludedValue": "node_modules/request/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima (https://github.com/mysticatea)" } ], "group": "", "name": "regexpp", "version": "2.0.1", "description": "Regular expression parser for ECMAScript 2018.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/regexpp@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/regexpp#readme" }, { "type": "vcs", "url": "git+https://github.com/mysticatea/regexpp.git" } ], "type": "library", "bom-ref": "pkg:npm/regexpp@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/regexpp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/regexpp/package.json" } ], "concludedValue": "node_modules/regexpp/package.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.6", "description": "Streams3, a user-land copy of the stream library from Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/readable-stream@2.3.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/readable-stream#readme" }, { "type": "vcs", "url": "git://github.com/nodejs/readable-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.6", "properties": [ { "name": "SrcFile", "value": "node_modules/readable-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readable-stream/package.json" } ], "concludedValue": "node_modules/readable-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg-up", "version": "2.0.0", "description": "Read the closest package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg-up@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/read-pkg-up#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/read-pkg-up.git" } ], "type": "library", "bom-ref": "pkg:npm/read-pkg-up@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg-up/package.json" } ], "concludedValue": "node_modules/read-pkg-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "1.0.0", "description": "`Promise#try()` ponyfill - Starts a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-try#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-try.git" } ], "type": "library", "bom-ref": "pkg:npm/p-try@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/node_modules/p-try/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-dir/node_modules/p-try/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/p-try/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "2.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-locate#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-locate.git" } ], "type": "library", "bom-ref": "pkg:npm/p-locate@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/node_modules/p-locate/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-dir/node_modules/p-locate/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "1.3.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-limit#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-limit.git" } ], "type": "library", "bom-ref": "pkg:npm/p-limit@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/node_modules/p-limit/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-dir/node_modules/p-limit/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "2.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/locate-path#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/locate-path.git" } ], "type": "library", "bom-ref": "pkg:npm/locate-path@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/node_modules/locate-path/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-dir/node_modules/locate-path/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "2.1.0", "description": "Find a file by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/find-up#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/find-up.git" } ], "type": "library", "bom-ref": "pkg:npm/find-up@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg-up/node_modules/find-up/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-dir/node_modules/find-up/package.json" }, { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/find-up/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "read-pkg", "version": "2.0.0", "description": "Read a package.json file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/read-pkg@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/read-pkg#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/read-pkg.git" } ], "type": "library", "bom-ref": "pkg:npm/read-pkg@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/read-pkg/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/read-pkg/package.json" } ], "concludedValue": "node_modules/read-pkg/package.json" } ] } }, { "group": "", "name": "react-is", "version": "16.10.2", "description": "Brand checking of React Elements.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/react-is@16.10.2", "externalReferences": [ { "type": "website", "url": "https://reactjs.org/" }, { "type": "vcs", "url": "git+https://github.com/facebook/react.git" } ], "type": "framework", "bom-ref": "pkg:npm/react-is@16.10.2", "properties": [ { "name": "SrcFile", "value": "node_modules/react-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/react-is/package.json" } ], "concludedValue": "node_modules/react-is/package.json" } ] }, "tags": [ "framework" ] }, { "authors": [ { "name": "Dominic Tarr (dominictarr.com)" } ], "group": "", "name": "rc", "version": "1.2.8", "description": "hardwired configuration loader", "scope": "optional", "licenses": [ { "expression": "BSD-2-Clause OR MIT OR Apache-2.0" } ], "purl": "pkg:npm/rc@1.2.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dominictarr/rc#readme" }, { "type": "vcs", "url": "git+https://github.com/dominictarr/rc.git" } ], "type": "library", "bom-ref": "pkg:npm/rc@1.2.8", "properties": [ { "name": "SrcFile", "value": "node_modules/rc/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rc/package.json" } ], "concludedValue": "node_modules/rc/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "raw-body", "version": "2.4.0", "description": "Get and validate the raw body of a readable stream.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/raw-body@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stream-utils/raw-body#readme" }, { "type": "vcs", "url": "git+https://github.com/stream-utils/raw-body.git" } ], "type": "library", "bom-ref": "pkg:npm/raw-body@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/raw-body/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/raw-body/package.json" } ], "concludedValue": "node_modules/raw-body/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "range-parser", "version": "1.2.1", "description": "Range header field string parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/range-parser@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/range-parser#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/range-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/range-parser@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/range-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/range-parser/package.json" } ], "concludedValue": "node_modules/range-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "qs", "version": "6.5.2", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "git+https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/qs/package.json" } ], "concludedValue": "node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "punycode", "version": "2.1.1", "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/punycode@2.1.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/punycode" }, { "type": "vcs", "url": "git+https://github.com/bestiejs/punycode.js.git" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/punycode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/punycode/package.json" } ], "concludedValue": "node_modules/punycode/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus Madsen " } ], "group": "", "name": "pump", "version": "3.0.0", "description": "pipe streams together and close all of them if one of them closes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pump@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/pump#readme" }, { "type": "vcs", "url": "git://github.com/mafintosh/pump.git" } ], "type": "library", "bom-ref": "pkg:npm/pump@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pump/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pump/package.json" } ], "concludedValue": "node_modules/pump/package.json" } ] } }, { "authors": [ { "name": "Lupo Montero (https://lupomontero.com/)" } ], "group": "", "name": "psl", "version": "1.4.0", "description": "Domain name parser based on the Public Suffix List", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/psl@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lupomontero/psl#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/lupomontero/psl.git" } ], "type": "library", "bom-ref": "pkg:npm/psl@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/psl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/psl/package.json" } ], "concludedValue": "node_modules/psl/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "proxy-addr", "version": "2.0.5", "description": "Determine address of proxied request", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/proxy-addr@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/proxy-addr#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/proxy-addr.git" } ], "type": "library", "bom-ref": "pkg:npm/proxy-addr@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/proxy-addr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/proxy-addr/package.json" } ], "concludedValue": "node_modules/proxy-addr/package.json" } ] } }, { "group": "", "name": "prop-types", "version": "15.7.2", "description": "Runtime type checking for React props and similar objects.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/prop-types@15.7.2", "externalReferences": [ { "type": "vcs", "url": "https://facebook.github.io/react/" }, { "type": "vcs", "url": "git+https://github.com/facebook/prop-types.git" } ], "type": "library", "bom-ref": "pkg:npm/prop-types@15.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/prop-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prop-types/package.json" } ], "concludedValue": "node_modules/prop-types/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "progress", "version": "2.0.3", "description": "Flexible ascii progress bar", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/progress@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-progress#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/node-progress.git" } ], "type": "library", "bom-ref": "pkg:npm/progress@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/progress/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/progress/package.json" } ], "concludedValue": "node_modules/progress/package.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "description": "process.nextTick but always with args", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/calvinmetcalf/process-nextick-args" }, { "type": "vcs", "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/process-nextick-args/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/process-nextick-args/package.json" } ], "concludedValue": "node_modules/process-nextick-args/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "prelude-ls", "version": "1.1.2", "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.", "scope": "optional", "purl": "pkg:npm/prelude-ls@1.1.2", "externalReferences": [ { "type": "website", "url": "http://preludels.com" }, { "type": "vcs", "url": "git://github.com/gkz/prelude-ls.git" } ], "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/prelude-ls/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/prelude-ls/package.json" } ], "concludedValue": "node_modules/prelude-ls/package.json" } ] } }, { "group": "", "name": "pngjs", "version": "3.4.0", "description": "PNG encoder/decoder in pure JS, supporting any bit size & interlace, async & sync with full test suite.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pngjs@3.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lukeapage/pngjs" }, { "type": "vcs", "url": "git://github.com/lukeapage/pngjs2.git" } ], "type": "library", "bom-ref": "pkg:npm/pngjs@3.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pngjs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pngjs/package.json" } ], "concludedValue": "node_modules/pngjs/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "", "name": "pluralize", "version": "7.0.0", "description": "Pluralize and singularize any word", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pluralize@7.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/blakeembrey/pluralize#readme" }, { "type": "vcs", "url": "git+https://github.com/blakeembrey/pluralize.git" } ], "type": "library", "bom-ref": "pkg:npm/pluralize@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pluralize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pluralize/package.json" } ], "concludedValue": "node_modules/pluralize/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pkg-dir", "version": "2.0.0", "description": "Find the root directory of a Node.js project or npm package", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-dir@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pkg-dir#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pkg-dir.git" } ], "type": "library", "bom-ref": "pkg:npm/pkg-dir@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-dir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-dir/package.json" } ], "concludedValue": "node_modules/pkg-dir/package.json" } ] } }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "pkg-config", "version": "1.1.1", "description": "parse the closest `package.json` and get package specific configurations", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-config@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/pkg-config" }, { "type": "vcs", "url": "git+https://github.com/ahmadnassri/pkg-config.git" } ], "type": "library", "bom-ref": "pkg:npm/pkg-config@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-config/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-config/package.json" } ], "concludedValue": "node_modules/pkg-config/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pkg-conf", "version": "2.1.0", "description": "Get namespaced config from the closest package.json", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pkg-conf@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pkg-conf#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pkg-conf.git" } ], "type": "library", "bom-ref": "pkg:npm/pkg-conf@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-conf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/package.json" } ], "concludedValue": "node_modules/pkg-conf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "3.0.0", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pify#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pify.git" } ], "type": "library", "bom-ref": "pkg:npm/pify@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/pify/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "4.0.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/parse-json#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/parse-json.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-json@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "load-json-file", "version": "4.0.0", "description": "Read and parse a JSON file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/load-json-file@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/load-json-file#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/load-json-file.git" } ], "type": "library", "bom-ref": "pkg:npm/load-json-file@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pkg-conf/node_modules/load-json-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pkg-conf/node_modules/load-json-file/package.json" } ], "concludedValue": "node_modules/pkg-conf/node_modules/load-json-file/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "Vladimir Agafonkin" } ], "group": "", "name": "pixelmatch", "version": "4.0.2", "description": "The smallest and fastest pixel-level image comparison library.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pixelmatch@4.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mapbox/pixelmatch#readme" }, { "type": "vcs", "url": "git+https://github.com/mapbox/pixelmatch.git" } ], "type": "library", "bom-ref": "pkg:npm/pixelmatch@4.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pixelmatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pixelmatch/package.json" } ], "concludedValue": "node_modules/pixelmatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "pify", "version": "2.3.0", "description": "Promisify a callback-style function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/pify@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/pify#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/pify.git" } ], "type": "library", "bom-ref": "pkg:npm/pify@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/pify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pify/package.json" } ], "concludedValue": "node_modules/pify/package.json" } ] } }, { "authors": [ { "name": "Braveg1rl " } ], "group": "", "name": "performance-now", "version": "2.1.0", "description": "Implements performance.now (based on process.hrtime).", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/performance-now@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/braveg1rl/performance-now" }, { "type": "vcs", "url": "git://github.com/braveg1rl/performance-now.git" } ], "type": "library", "bom-ref": "pkg:npm/performance-now@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/performance-now/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/performance-now/package.json" } ], "concludedValue": "node_modules/performance-now/package.json" } ] }, "tags": [ "performance" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-type", "version": "2.0.0", "description": "Check if a path is a file, directory, or symlink", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-type@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-type#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-type.git" } ], "type": "library", "bom-ref": "pkg:npm/path-type@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-type/package.json" } ], "concludedValue": "node_modules/path-type/package.json" } ] } }, { "group": "", "name": "path-to-regexp", "version": "0.1.7", "description": "Express style path to RegExp utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-to-regexp@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/component/path-to-regexp#readme" }, { "type": "vcs", "url": "git+https://github.com/component/path-to-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/path-to-regexp@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/path-to-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-to-regexp/package.json" } ], "concludedValue": "node_modules/path-to-regexp/package.json" } ] } }, { "authors": [ { "name": "Javier Blanco " } ], "group": "", "name": "path-parse", "version": "1.0.6", "description": "Node.js path.parse() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-parse@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jbgutierrez/path-parse#readme" }, { "type": "vcs", "url": "git+https://github.com/jbgutierrez/path-parse.git" } ], "type": "library", "bom-ref": "pkg:npm/path-parse@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/path-parse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-parse/package.json" } ], "concludedValue": "node_modules/path-parse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "2.0.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-key@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-key#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-key.git" } ], "type": "library", "bom-ref": "pkg:npm/path-key@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Domenic Denicola (https://domenic.me)" } ], "group": "", "name": "path-is-inside", "version": "1.0.2", "description": "Tests whether one path is inside another path", "scope": "optional", "licenses": [ { "expression": "WTFPL OR MIT" } ], "purl": "pkg:npm/path-is-inside@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/domenic/path-is-inside#readme" }, { "type": "vcs", "url": "git+https://github.com/domenic/path-is-inside.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-inside@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-inside/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-inside/package.json" } ], "concludedValue": "node_modules/path-is-inside/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-is-absolute", "version": "1.0.1", "description": "Node.js 0.12 path.isAbsolute() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-is-absolute#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-is-absolute.git" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-is-absolute/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-is-absolute/package.json" } ], "concludedValue": "node_modules/path-is-absolute/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "3.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/path-exists@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/path-exists#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/path-exists.git" } ], "type": "library", "bom-ref": "pkg:npm/path-exists@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Jeanine Adkisson " } ], "group": "", "name": "parsimmon", "version": "1.13.0", "description": "A monadic LL(infinity) parser combinator library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parsimmon@1.13.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jneen/parsimmon#readme" }, { "type": "vcs", "url": "git+https://github.com/jneen/parsimmon.git" } ], "type": "library", "bom-ref": "pkg:npm/parsimmon@1.13.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parsimmon/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parsimmon/package.json" } ], "concludedValue": "node_modules/parsimmon/package.json" } ] } }, { "group": "", "name": "parseurl", "version": "1.3.3", "description": "parse a url with memoization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parseurl@1.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/parseurl#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/parseurl.git" } ], "type": "library", "bom-ref": "pkg:npm/parseurl@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/parseurl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parseurl/package.json" } ], "concludedValue": "node_modules/parseurl/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "parse-json", "version": "2.2.0", "description": "Parse JSON with more helpful errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/parse-json@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/parse-json#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/parse-json.git" } ], "type": "library", "bom-ref": "pkg:npm/parse-json@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/parse-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/parse-json/package.json" } ], "concludedValue": "node_modules/parse-json/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-try", "version": "2.2.0", "description": "`Start a promise chain", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-try@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-try#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-try.git" } ], "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-try/package.json" } ], "concludedValue": "node_modules/p-try/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "3.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-locate@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-locate#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-locate.git" } ], "type": "library", "bom-ref": "pkg:npm/p-locate@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "2.2.1", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-limit@2.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-limit#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-limit.git" } ], "type": "library", "bom-ref": "pkg:npm/p-limit@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-is-promise", "version": "2.1.0", "description": "Check if something is a promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-is-promise@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-is-promise#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-is-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/p-is-promise@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-is-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-is-promise/package.json" } ], "concludedValue": "node_modules/p-is-promise/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-finally", "version": "1.0.0", "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-finally@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-finally#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-finally.git" } ], "type": "library", "bom-ref": "pkg:npm/p-finally@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-finally/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-finally/package.json" } ], "concludedValue": "node_modules/p-finally/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "p-defer", "version": "1.0.0", "description": "Create a deferred promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/p-defer@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/p-defer#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/p-defer.git" } ], "type": "library", "bom-ref": "pkg:npm/p-defer@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-defer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-defer/package.json" } ], "concludedValue": "node_modules/p-defer/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "osenv", "version": "0.1.5", "description": "Look up environment settings specific to different operating systems", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/osenv@0.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/osenv#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/osenv.git" } ], "type": "library", "bom-ref": "pkg:npm/osenv@0.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/osenv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/osenv/package.json" } ], "concludedValue": "node_modules/osenv/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-tmpdir", "version": "1.0.2", "description": "Node.js os.tmpdir() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-tmpdir@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/os-tmpdir#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/os-tmpdir.git" } ], "type": "library", "bom-ref": "pkg:npm/os-tmpdir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-tmpdir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-tmpdir/package.json" } ], "concludedValue": "node_modules/os-tmpdir/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-locale", "version": "3.1.0", "description": "Get the system locale", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-locale@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/os-locale#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/os-locale.git" } ], "type": "library", "bom-ref": "pkg:npm/os-locale@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/os-locale/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-locale/package.json" } ], "concludedValue": "node_modules/os-locale/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "os-homedir", "version": "1.0.2", "description": "Node.js 4 `os.homedir()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-homedir@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/os-homedir#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/os-homedir.git" } ], "type": "library", "bom-ref": "pkg:npm/os-homedir@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/os-homedir/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/os-homedir/package.json" } ], "concludedValue": "node_modules/os-homedir/package.json" } ] } }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "optionator", "version": "0.8.2", "description": "option parsing and help generation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/optionator@0.8.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/optionator" }, { "type": "vcs", "url": "git://github.com/gkz/optionator.git" } ], "type": "library", "bom-ref": "pkg:npm/optionator@0.8.2", "properties": [ { "name": "SrcFile", "value": "node_modules/optionator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/optionator/package.json" } ], "concludedValue": "node_modules/optionator/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "onetime", "version": "2.0.1", "description": "Ensure a function is only called once", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/onetime@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/onetime#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/onetime.git" } ], "type": "library", "bom-ref": "pkg:npm/onetime@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/onetime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/onetime/package.json" } ], "concludedValue": "node_modules/onetime/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-fn", "version": "1.2.0", "description": "Make a function mimic another one", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-fn@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/mimic-fn#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/mimic-fn.git" } ], "type": "library", "bom-ref": "pkg:npm/mimic-fn@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/onetime/node_modules/mimic-fn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/onetime/node_modules/mimic-fn/package.json" } ], "concludedValue": "node_modules/onetime/node_modules/mimic-fn/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "once", "version": "1.4.0", "description": "Run a function exactly one time", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/once#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/once.git" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/once/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/once/package.json" } ], "concludedValue": "node_modules/once/package.json" } ] } }, { "group": "", "name": "on-finished", "version": "2.3.0", "description": "Execute a callback when a request closes, finishes, or errors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/on-finished@2.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/on-finished#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/on-finished.git" } ], "type": "library", "bom-ref": "pkg:npm/on-finished@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/on-finished/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/on-finished/package.json" } ], "concludedValue": "node_modules/on-finished/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "object.assign", "version": "4.1.0", "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object.assign@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/object.assign#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/object.assign.git" } ], "type": "library", "bom-ref": "pkg:npm/object.assign@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/object.assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object.assign/package.json" } ], "concludedValue": "node_modules/object.assign/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "object-keys", "version": "1.1.1", "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-keys@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/object-keys#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/object-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/object-keys@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-keys/package.json" } ], "concludedValue": "node_modules/object-keys/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.6.0", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-inspect@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/object-inspect" }, { "type": "vcs", "url": "git://github.com/substack/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "object-assign", "version": "4.1.1", "description": "ES2015 `Object.assign()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/object-assign@4.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/object-assign#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/object-assign.git" } ], "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/object-assign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-assign/package.json" } ], "concludedValue": "node_modules/object-assign/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "oauth-sign", "version": "0.9.0", "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/oauth-sign@0.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/oauth-sign#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/oauth-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/oauth-sign/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/oauth-sign/package.json" } ], "concludedValue": "node_modules/oauth-sign/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "number-is-nan", "version": "1.0.1", "description": "ES2015 Number.isNaN() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/number-is-nan@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/number-is-nan#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/number-is-nan.git" } ], "type": "library", "bom-ref": "pkg:npm/number-is-nan@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/number-is-nan/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/number-is-nan/package.json" } ], "concludedValue": "node_modules/number-is-nan/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "npmlog", "version": "4.1.2", "description": "logger for npm", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npmlog@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npmlog#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/npmlog.git" } ], "type": "library", "bom-ref": "pkg:npm/npmlog@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npmlog/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npmlog/package.json" } ], "concludedValue": "node_modules/npmlog/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "npm-run-path", "version": "2.0.2", "description": "Get your PATH prepended with locally installed binaries", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-run-path@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/npm-run-path#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/npm-run-path.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-run-path@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-run-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-run-path/package.json" } ], "concludedValue": "node_modules/npm-run-path/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "npm-packlist", "version": "1.4.4", "description": "Get a list of the files to add from a folder into an npm package", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-packlist@1.4.4", "externalReferences": [ { "type": "website", "url": "https://www.npmjs.com/package/npm-packlist" }, { "type": "vcs", "url": "git+https://github.com/npm/npm-packlist.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-packlist@1.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-packlist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-packlist/package.json" } ], "concludedValue": "node_modules/npm-packlist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "npm-bundled", "version": "1.0.6", "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-bundled@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/npm-bundled#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/npm-bundled.git" } ], "type": "library", "bom-ref": "pkg:npm/npm-bundled@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/npm-bundled/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/npm-bundled/package.json" } ], "concludedValue": "node_modules/npm-bundled/package.json" } ] } }, { "authors": [ { "name": "Meryn Stol " } ], "group": "", "name": "normalize-package-data", "version": "2.5.0", "description": "Normalizes data that can be found in package.json files.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/normalize-package-data@2.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/normalize-package-data#readme" }, { "type": "vcs", "url": "git://github.com/npm/normalize-package-data.git" } ], "type": "library", "bom-ref": "pkg:npm/normalize-package-data@2.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/normalize-package-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/normalize-package-data/package.json" } ], "concludedValue": "node_modules/normalize-package-data/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "nopt", "version": "4.0.1", "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nopt@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/nopt#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/nopt.git" } ], "type": "library", "bom-ref": "pkg:npm/nopt@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/nopt/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nopt/package.json" } ], "concludedValue": "node_modules/nopt/package.json" } ] } }, { "authors": [ { "name": "Dane Springmeyer " } ], "group": "", "name": "node-pre-gyp", "version": "0.11.0", "description": "Node.js native addon binary install tool", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/node-pre-gyp@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mapbox/node-pre-gyp#readme" }, { "type": "vcs", "url": "git://github.com/mapbox/node-pre-gyp.git" } ], "type": "library", "bom-ref": "pkg:npm/node-pre-gyp@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/node-pre-gyp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-pre-gyp/package.json" } ], "concludedValue": "node_modules/node-pre-gyp/package.json" } ] }, "tags": [ "binary" ] }, { "group": "", "name": "nw-pre-gyp-module-test", "version": "0.0.1", "description": "Node-webkit-based module test.", "scope": "optional", "purl": "pkg:npm/nw-pre-gyp-module-test@0.0.1", "type": "library", "bom-ref": "pkg:npm/nw-pre-gyp-module-test@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json" } ], "concludedValue": "node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "nice-try", "version": "1.0.5", "description": "Tries to execute a function and discards any error that occurs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nice-try@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/electerious/nice-try" }, { "type": "vcs", "url": "git+https://github.com/electerious/nice-try.git" } ], "type": "library", "bom-ref": "pkg:npm/nice-try@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/nice-try/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nice-try/package.json" } ], "concludedValue": "node_modules/nice-try/package.json" } ] } }, { "group": "", "name": "negotiator", "version": "0.6.2", "description": "HTTP content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/negotiator@0.6.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/negotiator#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/negotiator.git" } ], "type": "library", "bom-ref": "pkg:npm/negotiator@0.6.2", "properties": [ { "name": "SrcFile", "value": "node_modules/negotiator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/negotiator/package.json" } ], "concludedValue": "node_modules/negotiator/package.json" } ] } }, { "authors": [ { "name": "Tomás Pollak " } ], "group": "", "name": "needle", "version": "2.4.0", "description": "The leanest and most handsome HTTP client in the Nodelands.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/needle@2.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tomas/needle#readme" }, { "type": "vcs", "url": "git+https://github.com/tomas/needle.git" } ], "type": "library", "bom-ref": "pkg:npm/needle@2.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/needle/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/needle/package.json" } ], "concludedValue": "node_modules/needle/package.json" } ] } }, { "authors": [ { "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)" } ], "group": "", "name": "natural-compare", "version": "1.4.0", "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/natural-compare@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/litejs/natural-compare-lite#readme" }, { "type": "vcs", "url": "git://github.com/litejs/natural-compare-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/natural-compare@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/natural-compare/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/natural-compare/package.json" } ], "concludedValue": "node_modules/natural-compare/package.json" } ] } }, { "group": "", "name": "nan", "version": "2.14.0", "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 11 compatibility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/nan@2.14.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodejs/nan#readme" }, { "type": "vcs", "url": "git://github.com/nodejs/nan.git" } ], "type": "library", "bom-ref": "pkg:npm/nan@2.14.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nan/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nan/package.json" } ], "concludedValue": "node_modules/nan/package.json" } ] } }, { "group": "", "name": "1to2", "version": "1.0.0", "description": "NAN 1 -> 2 Migration Script", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/1to2@1.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/nodejs/nan.git" } ], "type": "library", "bom-ref": "pkg:npm/1to2@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/nan/tools/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/nan/tools/package.json" } ], "concludedValue": "node_modules/nan/tools/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "mute-stream", "version": "0.0.7", "description": "Bytes go in, but they don't come out (when muted).", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mute-stream@0.0.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/mute-stream#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/mute-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/mute-stream@0.0.7", "properties": [ { "name": "SrcFile", "value": "node_modules/mute-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mute-stream/package.json" } ], "concludedValue": "node_modules/mute-stream/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.2", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zeit/ms#readme" }, { "type": "vcs", "url": "git+https://github.com/zeit/ms.git" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "5.2.0", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mocha@5.2.0", "externalReferences": [ { "type": "website", "url": "https://mochajs.org" }, { "type": "vcs", "url": "git+https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "5.4.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@5.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@5.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.2", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/glob/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/glob/package.json" } ] } }, { "group": "", "name": "diff", "version": "3.5.0", "description": "A javascript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@3.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff#readme" }, { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/diff/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "3.1.0", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/debug/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.15.1", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.15.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js#readme" }, { "type": "vcs", "url": "git+https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.15.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/commander/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "mkdirp", "version": "0.5.1", "description": "Recursively mkdir, like `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-mkdirp#readme" }, { "type": "vcs", "url": "git+https://github.com/substack/node-mkdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mkdirp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mkdirp/package.json" } ], "concludedValue": "node_modules/mkdirp/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minizlib", "version": "1.3.3", "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minizlib@1.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minizlib#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/minizlib.git" } ], "type": "library", "bom-ref": "pkg:npm/minizlib@1.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minizlib/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minizlib/package.json" } ], "concludedValue": "node_modules/minizlib/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "2.9.0", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minipass@2.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minipass#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/minipass@2.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "0.0.8", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimist/package.json" } ], "concludedValue": "node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "3.0.4", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/minimatch#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-response", "version": "2.0.0", "description": "Mimic a Node.js HTTP response stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-response@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/mimic-response#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/mimic-response.git" } ], "type": "library", "bom-ref": "pkg:npm/mimic-response@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-response/package.json" } ], "concludedValue": "node_modules/mimic-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mimic-fn", "version": "2.1.0", "description": "Make a function mimic another one", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mimic-fn@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/mimic-fn#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/mimic-fn.git" } ], "type": "library", "bom-ref": "pkg:npm/mimic-fn@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mimic-fn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mimic-fn/package.json" } ], "concludedValue": "node_modules/mimic-fn/package.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.24", "description": "The ultimate javascript content-type utility.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-types@2.1.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-types#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-types.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.24", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-types/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-types/package.json" } ], "concludedValue": "node_modules/mime-types/package.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.40.0", "description": "Media Type Database", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime-db@1.40.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/mime-db#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/mime-db.git" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.40.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime-db/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime-db/package.json" } ], "concludedValue": "node_modules/mime-db/package.json" } ] } }, { "authors": [ { "name": "Robert Kieffer (http://github.com/broofa)" } ], "group": "", "name": "mime", "version": "1.6.0", "description": "A comprehensive library for mime-type mapping", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mime@1.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/broofa/node-mime#readme" }, { "type": "vcs", "url": "git+https://github.com/broofa/node-mime.git" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mime/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mime/package.json" } ], "concludedValue": "node_modules/mime/package.json" } ] } }, { "group": "", "name": "methods", "version": "1.1.2", "description": "HTTP methods that node supports", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/methods@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/methods#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/methods.git" } ], "type": "library", "bom-ref": "pkg:npm/methods@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/methods/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/methods/package.json" } ], "concludedValue": "node_modules/methods/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "merge-descriptors", "version": "1.0.1", "description": "Merge objects using descriptors", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/merge-descriptors@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/component/merge-descriptors#readme" }, { "type": "vcs", "url": "git+https://github.com/component/merge-descriptors.git" } ], "type": "library", "bom-ref": "pkg:npm/merge-descriptors@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/merge-descriptors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/merge-descriptors/package.json" } ], "concludedValue": "node_modules/merge-descriptors/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "mem", "version": "4.3.0", "description": "Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/mem@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/mem#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/mem.git" } ], "type": "library", "bom-ref": "pkg:npm/mem@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/mem/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mem/package.json" } ], "concludedValue": "node_modules/mem/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "media-typer", "version": "0.3.0", "description": "Simple RFC 6838 media type parser and formatter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/media-typer@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/media-typer#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/media-typer.git" } ], "type": "library", "bom-ref": "pkg:npm/media-typer@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/media-typer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/media-typer/package.json" } ], "concludedValue": "node_modules/media-typer/package.json" } ] } }, { "authors": [ { "name": "Sam Verschueren (github.com/SamVerschueren)" } ], "group": "", "name": "map-age-cleaner", "version": "0.1.3", "description": "Automatically cleanup expired items in a Map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/map-age-cleaner@0.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/SamVerschueren/map-age-cleaner#readme" }, { "type": "vcs", "url": "git+https://github.com/SamVerschueren/map-age-cleaner.git" } ], "type": "library", "bom-ref": "pkg:npm/map-age-cleaner@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/map-age-cleaner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/map-age-cleaner/package.json" } ], "concludedValue": "node_modules/map-age-cleaner/package.json" } ] } }, { "authors": [ { "name": "Andres Suarez " } ], "group": "", "name": "loose-envify", "version": "1.4.0", "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/loose-envify@1.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zertosh/loose-envify" }, { "type": "vcs", "url": "git://github.com/zertosh/loose-envify.git" } ], "type": "library", "bom-ref": "pkg:npm/loose-envify@1.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/loose-envify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/loose-envify/package.json" } ], "concludedValue": "node_modules/loose-envify/package.json" } ] } }, { "authors": [ { "name": "John-David Dalton " } ], "group": "", "name": "lodash", "version": "4.17.15", "description": "Lodash modular utilities.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lodash@4.17.15", "externalReferences": [ { "type": "website", "url": "https://lodash.com/" }, { "type": "vcs", "url": "git+https://github.com/lodash/lodash.git" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.15", "properties": [ { "name": "SrcFile", "value": "node_modules/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lodash/package.json" } ], "concludedValue": "node_modules/lodash/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "3.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/locate-path@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/locate-path#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/locate-path.git" } ], "type": "library", "bom-ref": "pkg:npm/locate-path@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "load-json-file", "version": "2.0.0", "description": "Read and parse a JSON file", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/load-json-file@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/load-json-file#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/load-json-file.git" } ], "type": "library", "bom-ref": "pkg:npm/load-json-file@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/load-json-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/load-json-file/package.json" } ], "concludedValue": "node_modules/load-json-file/package.json" } ] }, "tags": [ "json", "parse" ] }, { "authors": [ { "name": "George Zahariev " } ], "group": "", "name": "levn", "version": "0.3.0", "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/levn@0.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/gkz/levn" }, { "type": "vcs", "url": "git://github.com/gkz/levn.git" } ], "type": "library", "bom-ref": "pkg:npm/levn@0.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/levn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/levn/package.json" } ], "concludedValue": "node_modules/levn/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "lcid", "version": "2.0.0", "description": "Mapping between standard locale identifiers and Windows locale identifiers (LCID)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lcid@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/lcid#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/lcid.git" } ], "type": "library", "bom-ref": "pkg:npm/lcid@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/lcid/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lcid/package.json" } ], "concludedValue": "node_modules/lcid/package.json" } ] } }, { "authors": [ { "name": "Ethan Cohen" } ], "group": "", "name": "jsx-ast-utils", "version": "2.2.1", "description": "AST utility module for statically analyzing JSX", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsx-ast-utils@2.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evcohen/jsx-ast-utils#readme" }, { "type": "vcs", "url": "git+https://github.com/evcohen/jsx-ast-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/jsx-ast-utils@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsx-ast-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsx-ast-utils/package.json" } ], "concludedValue": "node_modules/jsx-ast-utils/package.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.1", "description": "utilities for primitive JavaScript types", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsprim@1.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-jsprim#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-jsprim.git" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsprim/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsprim/package.json" } ], "concludedValue": "node_modules/jsprim/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "jsonfile", "version": "4.0.0", "description": "Easily read/write JSON files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsonfile@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-jsonfile#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/jprichardson/node-jsonfile.git" } ], "type": "library", "bom-ref": "pkg:npm/jsonfile@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/jsonfile/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsonfile/package.json" } ], "concludedValue": "node_modules/jsonfile/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "json-stringify-safe", "version": "5.0.1", "description": "Like JSON.stringify, but doesn't blow up on circular refs.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/json-stringify-safe" }, { "type": "vcs", "url": "git://github.com/isaacs/json-stringify-safe.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stringify-safe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stringify-safe/package.json" } ], "concludedValue": "node_modules/json-stringify-safe/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "json-stable-stringify-without-jsonify", "version": "1.0.1", "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/samn/json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/samn/json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-stable-stringify-without-jsonify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-stable-stringify-without-jsonify/package.json" } ], "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "json-schema-traverse", "version": "0.4.1", "description": "Traverse JSON Schema passing each schema object to callback", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-schema-traverse@0.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/json-schema-traverse#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/json-schema-traverse.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema-traverse@0.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema-traverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema-traverse/package.json" } ], "concludedValue": "node_modules/json-schema-traverse/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Kris Zyp" } ], "group": "", "name": "json-schema", "version": "0.2.3", "description": "JSON Schema validation and specifications", "scope": "optional", "purl": "pkg:npm/json-schema@0.2.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kriszyp/json-schema#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kriszyp/json-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/json-schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-schema/package.json" } ], "concludedValue": "node_modules/json-schema/package.json" } ] }, "tags": [ "validation" ] }, { "authors": [ { "name": "Kat Marchán " } ], "group": "", "name": "json-parse-better-errors", "version": "1.0.2", "description": "JSON.parse with context information on error", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json-parse-better-errors@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/zkat/json-parse-better-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/zkat/json-parse-better-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/json-parse-better-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json-parse-better-errors/package.json" } ], "concludedValue": "node_modules/json-parse-better-errors/package.json" } ] } }, { "authors": [ { "name": "Tom Wu" } ], "group": "", "name": "jsbn", "version": "0.1.1", "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/andyperlitch/jsbn#readme" }, { "type": "vcs", "url": "git+https://github.com/andyperlitch/jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jsbn/package.json" } ], "concludedValue": "node_modules/jsbn/package.json" } ] }, "tags": [ "crypto" ] }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "3.13.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-yaml@3.13.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/js-yaml" }, { "type": "vcs", "url": "git+https://github.com/nodeca/js-yaml.git" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.13.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "4.0.0", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@4.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lydell/js-tokens#readme" }, { "type": "vcs", "url": "git+https://github.com/lydell/js-tokens.git" } ], "type": "library", "bom-ref": "pkg:npm/js-tokens@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/js-tokens/package.json" } ] } }, { "authors": [ { "name": "Rod Vagg " } ], "group": "", "name": "isstream", "version": "0.1.2", "description": "Determine if an object is a Stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rvagg/isstream" }, { "type": "vcs", "url": "git+https://github.com/rvagg/isstream.git" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/isstream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isstream/package.json" } ], "concludedValue": "node_modules/isstream/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "isarray", "version": "1.0.0", "description": "Array#isArray for older browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/isarray" }, { "type": "vcs", "url": "git://github.com/juliangruber/isarray.git" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isarray/package.json" } ], "concludedValue": "node_modules/isarray/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughsk.io/)" } ], "group": "", "name": "is-typedarray", "version": "1.0.0", "description": "Detect whether or not an object is a Typed Array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/is-typedarray" }, { "type": "vcs", "url": "git://github.com/hughsk/is-typedarray.git" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-typedarray/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-typedarray/package.json" } ], "concludedValue": "node_modules/is-typedarray/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "is-symbol", "version": "1.0.2", "description": "Determine if a value is an ES6 Symbol or not.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-symbol@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/is-symbol#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/is-symbol.git" } ], "type": "library", "bom-ref": "pkg:npm/is-symbol@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/is-symbol/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-symbol/package.json" } ], "concludedValue": "node_modules/is-symbol/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-stream", "version": "1.1.0", "description": "Check if something is a Node.js stream", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-stream@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-stream#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/is-stream@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-stream/package.json" } ], "concludedValue": "node_modules/is-stream/package.json" } ] } }, { "authors": [ { "name": "Shinnosuke Watanabe (https://github.com/shinnn)" } ], "group": "", "name": "is-resolvable", "version": "1.1.0", "description": "Check if a module ID is resolvable with require()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-resolvable@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/shinnn/is-resolvable#readme" }, { "type": "vcs", "url": "git+https://github.com/shinnn/is-resolvable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-resolvable@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-resolvable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-resolvable/package.json" } ], "concludedValue": "node_modules/is-resolvable/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "is-regexp", "version": "1.0.0", "description": "Check whether a variable is a regular expression", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regexp@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-regexp#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regexp@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regexp/package.json" } ], "concludedValue": "node_modules/is-regexp/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "is-regex", "version": "1.0.4", "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-regex@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/is-regex" }, { "type": "vcs", "url": "git://github.com/ljharb/is-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/is-regex@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-regex/package.json" } ], "concludedValue": "node_modules/is-regex/package.json" } ] } }, { "authors": [ { "name": "ForbesLindesay" } ], "group": "", "name": "is-promise", "version": "2.1.0", "description": "Test whether an object looks like a promises-a+ promise", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-promise@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/then/is-promise#readme" }, { "type": "vcs", "url": "git+https://github.com/then/is-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/is-promise@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-promise/package.json" } ], "concludedValue": "node_modules/is-promise/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "1.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git" } ], "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "is-date-object", "version": "1.0.1", "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-date-object@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/is-date-object#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/is-date-object.git" } ], "type": "library", "bom-ref": "pkg:npm/is-date-object@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-date-object/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-date-object/package.json" } ], "concludedValue": "node_modules/is-date-object/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "is-callable", "version": "1.1.4", "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-callable@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/is-callable#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/is-callable.git" } ], "type": "library", "bom-ref": "pkg:npm/is-callable@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/is-callable/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-callable/package.json" } ], "concludedValue": "node_modules/is-callable/package.json" } ] } }, { "authors": [ { "name": "Qix (http://github.com/qix-)" } ], "group": "", "name": "is-arrayish", "version": "0.2.1", "description": "Determines if an object can be used as an array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/is-arrayish@0.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-is-arrayish#readme" }, { "type": "vcs", "url": "git+https://github.com/qix-/node-is-arrayish.git" } ], "type": "library", "bom-ref": "pkg:npm/is-arrayish@0.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-arrayish/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-arrayish/package.json" } ], "concludedValue": "node_modules/is-arrayish/package.json" } ] } }, { "authors": [ { "name": "whitequark " } ], "group": "", "name": "ipaddr.js", "version": "1.9.0", "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ipaddr.js@1.9.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/whitequark/ipaddr.js#readme" }, { "type": "vcs", "url": "git://github.com/whitequark/ipaddr.js.git" } ], "type": "library", "bom-ref": "pkg:npm/ipaddr.js@1.9.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ipaddr.js/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ipaddr.js/package.json" } ], "concludedValue": "node_modules/ipaddr.js/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "invert-kv", "version": "2.0.0", "description": "Invert the key/value of an object. Example: `{foo: 'bar'}` → `{bar: 'foo'}`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/invert-kv@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/invert-kv#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/invert-kv.git" } ], "type": "library", "bom-ref": "pkg:npm/invert-kv@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/invert-kv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/invert-kv/package.json" } ], "concludedValue": "node_modules/invert-kv/package.json" } ] } }, { "authors": [ { "name": "Simon Boudrias " } ], "group": "", "name": "inquirer", "version": "5.2.0", "description": "A collection of common interactive command line user interfaces.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inquirer@5.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/SBoudrias/Inquirer.js#readme" }, { "type": "vcs", "url": "git+https://github.com/SBoudrias/Inquirer.js.git" } ], "type": "library", "bom-ref": "pkg:npm/inquirer@5.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/inquirer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inquirer/package.json" } ], "concludedValue": "node_modules/inquirer/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "ini", "version": "1.3.5", "description": "An ini encoder/decoder for node", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ini@1.3.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/ini#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/ini.git" } ], "type": "library", "bom-ref": "pkg:npm/ini@1.3.5", "properties": [ { "name": "SrcFile", "value": "node_modules/ini/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ini/package.json" } ], "concludedValue": "node_modules/ini/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inherits/package.json" } ], "concludedValue": "node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "inflight", "version": "1.0.6", "description": "Add callbacks to requests in flight to avoid async duplication", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inflight" }, { "type": "vcs", "url": "git+https://github.com/npm/inflight.git" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/inflight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/inflight/package.json" } ], "concludedValue": "node_modules/inflight/package.json" } ] } }, { "authors": [ { "name": "Jens Taylor (https://github.com/homebrewing)" } ], "group": "", "name": "imurmurhash", "version": "0.1.4", "description": "An incremental implementation of MurmurHash3", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/imurmurhash@0.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jensyt/imurmurhash-js" }, { "type": "vcs", "url": "git+https://github.com/jensyt/imurmurhash-js.git" } ], "type": "library", "bom-ref": "pkg:npm/imurmurhash@0.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/imurmurhash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/imurmurhash/package.json" } ], "concludedValue": "node_modules/imurmurhash/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "ignore-walk", "version": "3.0.2", "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore-walk@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/ignore-walk#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/ignore-walk.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore-walk@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore-walk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore-walk/package.json" } ], "concludedValue": "node_modules/ignore-walk/package.json" } ] } }, { "authors": [ { "name": "kael" } ], "group": "", "name": "ignore", "version": "4.0.6", "description": "Ignore is a manager and filter for .gitignore rules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@4.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kaelzhang/node-ignore#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kaelzhang/node-ignore.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore@4.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/ignore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ignore/package.json" } ], "concludedValue": "node_modules/ignore/package.json" } ] } }, { "authors": [ { "name": "Alexander Shtuchkin " } ], "group": "", "name": "iconv-lite", "version": "0.4.24", "description": "Convert character encodings in pure javascript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/iconv-lite@0.4.24", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ashtuchkin/iconv-lite" }, { "type": "vcs", "url": "git://github.com/ashtuchkin/iconv-lite.git" } ], "type": "library", "bom-ref": "pkg:npm/iconv-lite@0.4.24", "properties": [ { "name": "SrcFile", "value": "node_modules/iconv-lite/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/iconv-lite/package.json" } ], "concludedValue": "node_modules/iconv-lite/package.json" } ] } }, { "authors": [ { "name": "Joyent" }, { "name": " Inc" } ], "group": "", "name": "http-signature", "version": "1.2.0", "description": "Reference implementation of Joyent's HTTP Signature scheme.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-signature@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-http-signature/" }, { "type": "vcs", "url": "git://github.com/joyent/node-http-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/http-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-signature/package.json" } ], "concludedValue": "node_modules/http-signature/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "http-errors", "version": "1.7.2", "description": "Create HTTP error objects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/http-errors@1.7.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/http-errors#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/http-errors.git" } ], "type": "library", "bom-ref": "pkg:npm/http-errors@1.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/http-errors/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-errors/package.json" } ], "concludedValue": "node_modules/http-errors/package.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/inherits#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/inherits.git" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/http-errors/node_modules/inherits/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/http-errors/node_modules/inherits/package.json" } ], "concludedValue": "node_modules/http-errors/node_modules/inherits/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "hosted-git-info", "version": "2.8.4", "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/hosted-git-info@2.8.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/hosted-git-info" }, { "type": "vcs", "url": "git+https://github.com/npm/hosted-git-info.git" } ], "type": "library", "bom-ref": "pkg:npm/hosted-git-info@2.8.4", "properties": [ { "name": "SrcFile", "value": "node_modules/hosted-git-info/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/hosted-git-info/package.json" } ], "concludedValue": "node_modules/hosted-git-info/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.1.1", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "git+https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "has-unicode", "version": "2.0.1", "description": "Try to guess if your terminal supports unicode", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-unicode@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/has-unicode" }, { "type": "vcs", "url": "git+https://github.com/iarna/has-unicode.git" } ], "type": "library", "bom-ref": "pkg:npm/has-unicode@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/has-unicode/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-unicode/package.json" } ], "concludedValue": "node_modules/has-unicode/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "has-symbols", "version": "1.0.0", "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-symbols@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/has-symbols#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/has-symbols.git" } ], "type": "library", "bom-ref": "pkg:npm/has-symbols@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-symbols/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-symbols/package.json" } ], "concludedValue": "node_modules/has-symbols/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "3.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-flag@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-flag#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/has-flag.git" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-ansi", "version": "2.0.0", "description": "Check if a string has ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has-ansi@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/has-ansi#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/has-ansi.git" } ], "type": "library", "bom-ref": "pkg:npm/has-ansi@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-ansi/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-ansi/package.json" } ], "concludedValue": "node_modules/has-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Thiago de Arruda " } ], "group": "", "name": "has", "version": "1.0.3", "description": "Object.prototype.hasOwnProperty.call shortcut", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/has@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tarruda/has" }, { "type": "vcs", "url": "git://github.com/tarruda/has.git" } ], "type": "library", "bom-ref": "pkg:npm/has@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/has/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has/package.json" } ], "concludedValue": "node_modules/has/package.json" } ] } }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-validator", "version": "5.1.3", "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-validator@5.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/node-har-validator" }, { "type": "vcs", "url": "git+https://github.com/ahmadnassri/node-har-validator.git" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@5.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/har-validator/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-validator/package.json" } ], "concludedValue": "node_modules/har-validator/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Ahmad Nassri (https://www.ahmadnassri.com/)" } ], "group": "", "name": "har-schema", "version": "2.0.0", "description": "JSON Schema for HTTP Archive (HAR)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/har-schema@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ahmadnassri/har-schema" }, { "type": "vcs", "url": "git+https://github.com/ahmadnassri/har-schema.git" } ], "type": "library", "bom-ref": "pkg:npm/har-schema@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/har-schema/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/har-schema/package.json" } ], "concludedValue": "node_modules/har-schema/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "growl", "version": "1.10.5", "description": "Growl unobtrusive notifications", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/growl@1.10.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/node-growl#readme" }, { "type": "vcs", "url": "git://github.com/tj/node-growl.git" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.10.5", "properties": [ { "name": "SrcFile", "value": "node_modules/growl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/growl/package.json" } ], "concludedValue": "node_modules/growl/package.json" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.2", "description": "A drop-in replacement for fs, making various improvements.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/graceful-fs@4.2.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-graceful-fs#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/node-graceful-fs.git" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/graceful-fs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/graceful-fs/package.json" } ], "concludedValue": "node_modules/graceful-fs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "globals", "version": "11.12.0", "description": "Global identifiers from different JavaScript environments", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/globals@11.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/globals#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/globals.git" } ], "type": "library", "bom-ref": "pkg:npm/globals@11.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/globals/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/globals/package.json" } ], "concludedValue": "node_modules/globals/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "7.1.4", "description": "a little globber", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/glob@7.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/node-glob#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Alex Wilson " } ], "group": "", "name": "getpass", "version": "0.1.7", "description": "getpass for node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/arekinath/node-getpass#readme" }, { "type": "vcs", "url": "git+https://github.com/arekinath/node-getpass.git" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "node_modules/getpass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/getpass/package.json" } ], "concludedValue": "node_modules/getpass/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "get-stream", "version": "4.1.0", "description": "Get a stream as a string, buffer, or array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stream@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/get-stream#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/get-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/get-stream@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stream/package.json" } ], "concludedValue": "node_modules/get-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "get-stdin", "version": "6.0.0", "description": "Get stdin as a string or buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-stdin@6.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/get-stdin#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/get-stdin.git" } ], "type": "library", "bom-ref": "pkg:npm/get-stdin@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/get-stdin/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-stdin/package.json" } ], "concludedValue": "node_modules/get-stdin/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "1.0.3", "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/get-caller-file@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "gauge", "version": "2.7.4", "description": "A terminal based horizontal guage", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gauge@2.7.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/gauge" }, { "type": "vcs", "url": "git+https://github.com/iarna/gauge.git" } ], "type": "library", "bom-ref": "pkg:npm/gauge@2.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/gauge/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gauge/package.json" } ], "concludedValue": "node_modules/gauge/package.json" } ] } }, { "authors": [ { "name": "Mikola Lysenko" } ], "group": "", "name": "functional-red-black-tree", "version": "1.0.1", "description": "A fully persistent balanced binary search tree", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/functional-red-black-tree@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikolalysenko/functional-red-black-tree#readme" }, { "type": "vcs", "url": "git://github.com/mikolalysenko/functional-red-black-tree.git" } ], "type": "library", "bom-ref": "pkg:npm/functional-red-black-tree@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/functional-red-black-tree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/functional-red-black-tree/package.json" } ], "concludedValue": "node_modules/functional-red-black-tree/package.json" } ] }, "tags": [ "binary" ] }, { "authors": [ { "name": "Raynos " } ], "group": "", "name": "function-bind", "version": "1.1.1", "description": "Implementation of Function.prototype.bind", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/function-bind@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Raynos/function-bind" }, { "type": "vcs", "url": "git://github.com/Raynos/function-bind.git" } ], "type": "library", "bom-ref": "pkg:npm/function-bind@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/function-bind/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/function-bind/package.json" } ], "concludedValue": "node_modules/function-bind/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs.realpath", "version": "1.0.0", "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/fs.realpath#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/fs.realpath.git" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fs.realpath/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs.realpath/package.json" } ], "concludedValue": "node_modules/fs.realpath/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "fs-minipass", "version": "1.2.7", "description": "fs read and write streams based on minipass", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-minipass@1.2.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/npm/fs-minipass#readme" }, { "type": "vcs", "url": "git+https://github.com/npm/fs-minipass.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-minipass@1.2.7", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-minipass/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-minipass/package.json" } ], "concludedValue": "node_modules/fs-minipass/package.json" } ] } }, { "authors": [ { "name": "JP Richardson " } ], "group": "", "name": "fs-extra", "version": "6.0.1", "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fs-extra@6.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jprichardson/node-fs-extra" }, { "type": "vcs", "url": "git+https://github.com/jprichardson/node-fs-extra.git" } ], "type": "library", "bom-ref": "pkg:npm/fs-extra@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fs-extra/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fs-extra/package.json" } ], "concludedValue": "node_modules/fs-extra/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "fresh", "version": "0.5.2", "description": "HTTP response freshness testing", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fresh@0.5.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/fresh#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/fresh.git" } ], "type": "library", "bom-ref": "pkg:npm/fresh@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/fresh/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fresh/package.json" } ], "concludedValue": "node_modules/fresh/package.json" } ] } }, { "group": "", "name": "forwarded", "version": "0.1.2", "description": "Parse HTTP X-Forwarded-For header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forwarded@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/forwarded#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/forwarded.git" } ], "type": "library", "bom-ref": "pkg:npm/forwarded@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/forwarded/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forwarded/package.json" } ], "concludedValue": "node_modules/forwarded/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "form-data", "version": "2.3.3", "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/form-data@2.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/form-data/form-data#readme" }, { "type": "vcs", "url": "git://github.com/form-data/form-data.git" } ], "type": "library", "bom-ref": "pkg:npm/form-data@2.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/form-data/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/form-data/package.json" } ], "concludedValue": "node_modules/form-data/package.json" } ] }, "tags": [ "web" ] }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "forever-agent", "version": "0.6.1", "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/forever-agent#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/forever-agent.git" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/forever-agent/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/forever-agent/package.json" } ], "concludedValue": "node_modules/forever-agent/package.json" } ] }, "tags": [ "socket" ] }, { "authors": [ { "name": "Roy Riojas (http://royriojas.com)" } ], "group": "", "name": "flat-cache", "version": "1.3.4", "description": "A stupidly simple key/value storage using files to persist some data", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/flat-cache@1.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/royriojas/flat-cache#readme" }, { "type": "vcs", "url": "git+https://github.com/royriojas/flat-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/flat-cache@1.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/flat-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat-cache/package.json" } ], "concludedValue": "node_modules/flat-cache/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "rimraf", "version": "2.6.3", "description": "A deep deletion module for node (like `rm -rf`)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/rimraf@2.6.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/rimraf#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/rimraf.git" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.6.3", "properties": [ { "name": "SrcFile", "value": "node_modules/flat-cache/node_modules/rimraf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat-cache/node_modules/rimraf/package.json" } ], "concludedValue": "node_modules/flat-cache/node_modules/rimraf/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "3.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-up@3.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/find-up#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/find-up.git" } ], "type": "library", "bom-ref": "pkg:npm/find-up@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "jsdnxx" } ], "group": "", "name": "find-root", "version": "1.1.0", "description": "find the closest package.json", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/find-root@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/js-n/find-root#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/js-n/find-root.git" } ], "type": "library", "bom-ref": "pkg:npm/find-root@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-root/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-root/package.json" } ], "concludedValue": "node_modules/find-root/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "finalhandler", "version": "1.1.2", "description": "Node.js final http responder", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/finalhandler@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/finalhandler#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/finalhandler.git" } ], "type": "library", "bom-ref": "pkg:npm/finalhandler@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/finalhandler/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/finalhandler/package.json" } ], "concludedValue": "node_modules/finalhandler/package.json" } ] } }, { "authors": [ { "name": "Roy Riojas (http://royriojas.com)" } ], "group": "", "name": "file-entry-cache", "version": "2.0.0", "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/file-entry-cache@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/royriojas/file-entry-cache#readme" }, { "type": "vcs", "url": "git+https://github.com/royriojas/file-entry-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/file-entry-cache@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/file-entry-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/file-entry-cache/package.json" } ], "concludedValue": "node_modules/file-entry-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "figures", "version": "2.0.0", "description": "Unicode symbols with Windows CMD fallbacks", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/figures@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/figures#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/figures.git" } ], "type": "library", "bom-ref": "pkg:npm/figures@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/figures/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/figures/package.json" } ], "concludedValue": "node_modules/figures/package.json" } ] } }, { "authors": [ { "name": "Ramesh Nair (http://www.hiddentao.com/)" } ], "group": "", "name": "fast-levenshtein", "version": "2.0.6", "description": "Efficient implementation of Levenshtein algorithm with locale-specific collator support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-levenshtein@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hiddentao/fast-levenshtein#readme" }, { "type": "vcs", "url": "git+https://github.com/hiddentao/fast-levenshtein.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-levenshtein@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-levenshtein/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-levenshtein/package.json" } ], "concludedValue": "node_modules/fast-levenshtein/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "fast-json-stable-stringify", "version": "2.0.0", "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-json-stable-stringify@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-json-stable-stringify" }, { "type": "vcs", "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-json-stable-stringify/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-json-stable-stringify/package.json" } ], "concludedValue": "node_modules/fast-json-stable-stringify/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "fast-deep-equal", "version": "2.0.1", "description": "Fast deep equal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/fast-deep-equal@2.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/fast-deep-equal#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/fast-deep-equal.git" } ], "type": "library", "bom-ref": "pkg:npm/fast-deep-equal@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/fast-deep-equal/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fast-deep-equal/package.json" } ], "concludedValue": "node_modules/fast-deep-equal/package.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "description": "extended POSIX-style sprintf", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/davepacheco/node-extsprintf#readme" }, { "type": "vcs", "url": "git://github.com/davepacheco/node-extsprintf.git" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/extsprintf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extsprintf/package.json" } ], "concludedValue": "node_modules/extsprintf/package.json" } ] } }, { "authors": [ { "name": "Kevin Gravier (https://mrkmg.com)" } ], "group": "", "name": "external-editor", "version": "2.2.0", "description": "Edit a string with the users preferred text editor using $VISUAL or $ENVIRONMENT", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/external-editor@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mrkmg/node-external-editor#readme" }, { "type": "vcs", "url": "git+https://github.com/mrkmg/node-external-editor.git" } ], "type": "library", "bom-ref": "pkg:npm/external-editor@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/external-editor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/external-editor/package.json" } ], "concludedValue": "node_modules/external-editor/package.json" } ] } }, { "authors": [ { "name": "Stefan Thomas (http://www.justmoon.net)" } ], "group": "", "name": "extend", "version": "3.0.2", "description": "Port of jQuery.extend for node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/justmoon/node-extend#readme" }, { "type": "vcs", "url": "git+https://github.com/justmoon/node-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/extend/package.json" } ], "concludedValue": "node_modules/extend/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "express", "version": "4.17.1", "description": "Fast, unopinionated, minimalist web framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/express@4.17.1", "externalReferences": [ { "type": "website", "url": "http://expressjs.com/" }, { "type": "vcs", "url": "git+https://github.com/expressjs/express.git" } ], "type": "framework", "bom-ref": "pkg:npm/express@4.17.1", "properties": [ { "name": "SrcFile", "value": "node_modules/express/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/express/package.json" } ], "concludedValue": "node_modules/express/package.json" } ] }, "tags": [ "framework", "web" ] }, { "group": "", "name": "qs", "version": "6.7.0", "description": "A querystring parser that supports nesting and arrays, with a depth limit", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/qs@6.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/qs" }, { "type": "vcs", "url": "git+https://github.com/ljharb/qs.git" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/express/node_modules/qs/package.json" }, { "name": "SrcFile", "value": "node_modules/body-parser/node_modules/qs/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/node_modules/qs/package.json" } ], "concludedValue": "node_modules/body-parser/node_modules/qs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "execa", "version": "1.0.0", "description": "A better `child_process`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/execa@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/execa#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/execa.git" } ], "type": "library", "bom-ref": "pkg:npm/execa@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/execa/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/execa/package.json" } ], "concludedValue": "node_modules/execa/package.json" } ] } }, { "group": "", "name": "etag", "version": "1.8.1", "description": "Create simple HTTP ETags", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/etag@1.8.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/etag#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/etag.git" } ], "type": "library", "bom-ref": "pkg:npm/etag@1.8.1", "properties": [ { "name": "SrcFile", "value": "node_modules/etag/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/etag/package.json" } ], "concludedValue": "node_modules/etag/package.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "description": "utility box for ECMAScript language tools", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esutils" }, { "type": "vcs", "url": "git+ssh://git@github.com/estools/esutils.git" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/esutils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esutils/package.json" } ], "concludedValue": "node_modules/esutils/package.json" } ] } }, { "group": "", "name": "estraverse", "version": "4.3.0", "description": "ECMAScript JS AST traversal functions", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/estraverse@4.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/estraverse" }, { "type": "vcs", "url": "git+ssh://git@github.com/estools/estraverse.git" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/estraverse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estraverse/package.json" } ], "concludedValue": "node_modules/estraverse/package.json" } ] } }, { "group": "", "name": "esrecurse", "version": "4.2.1", "description": "ECMAScript AST recursive visitor", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esrecurse@4.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/estools/esrecurse" }, { "type": "vcs", "url": "git+https://github.com/estools/esrecurse.git" } ], "type": "library", "bom-ref": "pkg:npm/esrecurse@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esrecurse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esrecurse/package.json" } ], "concludedValue": "node_modules/esrecurse/package.json" } ] } }, { "authors": [ { "name": "Joel Feenstra " } ], "group": "", "name": "esquery", "version": "1.0.1", "description": "A query library for ECMAScript AST using a CSS selector like query language.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esquery@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jrfeenst/esquery#readme" }, { "type": "vcs", "url": "git+https://github.com/jrfeenst/esquery.git" } ], "type": "library", "bom-ref": "pkg:npm/esquery@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esquery/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esquery/package.json" } ], "concludedValue": "node_modules/esquery/package.json" } ] } }, { "authors": [ { "name": "Ariya Hidayat " } ], "group": "", "name": "esprima", "version": "4.0.1", "description": "ECMAScript parsing infrastructure for multipurpose analysis", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "website", "url": "http://esprima.org" }, { "type": "vcs", "url": "git+https://github.com/jquery/esprima.git" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/esprima/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/esprima/package.json" } ], "concludedValue": "node_modules/esprima/package.json" } ] } }, { "authors": [ { "name": "Nicholas C. Zakas " } ], "group": "", "name": "espree", "version": "4.1.0", "description": "An Esprima-compatible JavaScript parser built on Acorn", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/espree@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/espree" }, { "type": "vcs", "url": "git+https://github.com/eslint/espree.git" } ], "type": "library", "bom-ref": "pkg:npm/espree@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/espree/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/espree/package.json" } ], "concludedValue": "node_modules/espree/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima (https://github.com/mysticatea)" } ], "group": "", "name": "eslint-visitor-keys", "version": "1.1.0", "description": "Constants and utilities about visitor keys to traverse AST.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-visitor-keys@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/eslint-visitor-keys#readme" }, { "type": "vcs", "url": "git+https://github.com/eslint/eslint-visitor-keys.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-visitor-keys@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-visitor-keys/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-visitor-keys/package.json" } ], "concludedValue": "node_modules/eslint-visitor-keys/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima" } ], "group": "", "name": "eslint-utils", "version": "1.4.2", "description": "Utilities for ESLint plugins.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-utils@1.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/eslint-utils#readme" }, { "type": "vcs", "url": "git+https://github.com/mysticatea/eslint-utils.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-utils@1.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-utils/package.json" } ], "concludedValue": "node_modules/eslint-utils/package.json" } ] }, "tags": [ "plugins" ] }, { "group": "", "name": "eslint-scope", "version": "4.0.3", "description": "ECMAScript scope analyzer for ESLint", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-scope@4.0.3", "externalReferences": [ { "type": "vcs", "url": "http://github.com/eslint/eslint-scope" }, { "type": "vcs", "url": "git+https://github.com/eslint/eslint-scope.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-scope@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-scope/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-scope/package.json" } ], "concludedValue": "node_modules/eslint-scope/package.json" } ] } }, { "authors": [ { "name": "Jamund Ferguson " } ], "group": "", "name": "eslint-plugin-standard", "version": "4.0.1", "description": "ESlint Plugin for the Standard Linter", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-plugin-standard@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/standard/eslint-plugin-standard#readme" }, { "type": "vcs", "url": "git+https://github.com/standard/eslint-plugin-standard.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-standard@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-standard/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-standard/package.json" } ], "concludedValue": "node_modules/eslint-plugin-standard/package.json" } ] } }, { "authors": [ { "name": "Yannick Croissant " } ], "group": "", "name": "eslint-plugin-react", "version": "7.11.1", "description": "React specific linting rules for ESLint", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-plugin-react@7.11.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yannickcr/eslint-plugin-react" }, { "type": "vcs", "url": "git+https://github.com/yannickcr/eslint-plugin-react.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-react@7.11.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-react/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-react/package.json" } ], "concludedValue": "node_modules/eslint-plugin-react/package.json" } ] } }, { "authors": [ { "name": "jden " } ], "group": "", "name": "eslint-plugin-promise", "version": "4.0.1", "description": "Enforce best practices for JavaScript promises", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-plugin-promise@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/xjamundx/eslint-plugin-promise#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/xjamundx/eslint-plugin-promise.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-promise@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-promise/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-promise/package.json" } ], "concludedValue": "node_modules/eslint-plugin-promise/package.json" } ] } }, { "authors": [ { "name": "Toru Nagashima" } ], "group": "", "name": "eslint-plugin-node", "version": "7.0.1", "description": "Additional ESLint's rules for Node.js", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-plugin-node@7.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/eslint-plugin-node#readme" }, { "type": "vcs", "url": "git+https://github.com/mysticatea/eslint-plugin-node.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-node@7.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-node/package.json" } ], "concludedValue": "node_modules/eslint-plugin-node/package.json" } ] } }, { "authors": [ { "name": "Ben Mosher " } ], "group": "", "name": "eslint-plugin-import", "version": "2.14.0", "description": "Import with sanity.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-plugin-import@2.14.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/benmosher/eslint-plugin-import" }, { "type": "vcs", "url": "git+https://github.com/benmosher/eslint-plugin-import.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-import@2.14.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-import/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-import/package.json" } ], "concludedValue": "node_modules/eslint-plugin-import/package.json" } ] } }, { "group": "", "name": "doctrine", "version": "1.5.0", "description": "JSDoc parser", "scope": "optional", "purl": "pkg:npm/doctrine@1.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/doctrine" }, { "type": "vcs", "url": "git+https://github.com/eslint/doctrine.git" } ], "type": "library", "bom-ref": "pkg:npm/doctrine@1.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-import/node_modules/doctrine/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-import/node_modules/doctrine/package.json" } ], "concludedValue": "node_modules/eslint-plugin-import/node_modules/doctrine/package.json" } ] } }, { "authors": [ { "name": "Ben Mosher (me@benmosher.com)" } ], "group": "", "name": "memo-parser", "version": "0.2.0", "description": "Memoizing wrapper for any ESLint-compatible parser module.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/memo-parser@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/benmosher/eslint-plugin-import#readme" }, { "type": "vcs", "url": "git+https://github.com/benmosher/eslint-plugin-import.git" } ], "type": "library", "bom-ref": "pkg:npm/memo-parser@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-import/memo-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-import/memo-parser/package.json" } ], "concludedValue": "node_modules/eslint-plugin-import/memo-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Toru Nagashima (https://github.com/mysticatea)" } ], "group": "", "name": "eslint-plugin-es", "version": "1.4.1", "description": "ESLint plugin about ECMAScript syntactic features.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-plugin-es@1.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mysticatea/eslint-plugin-es#readme" }, { "type": "vcs", "url": "git+https://github.com/mysticatea/eslint-plugin-es.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-plugin-es@1.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-plugin-es/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-plugin-es/package.json" } ], "concludedValue": "node_modules/eslint-plugin-es/package.json" } ] } }, { "authors": [ { "name": "Ben Mosher " } ], "group": "", "name": "eslint-module-utils", "version": "2.4.1", "description": "Core utilities to support eslint-plugin-import and other module-related plugins.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-module-utils@2.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/benmosher/eslint-plugin-import#readme" }, { "type": "vcs", "url": "git+https://github.com/benmosher/eslint-plugin-import.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-module-utils@2.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-module-utils/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-module-utils/package.json" } ], "concludedValue": "node_modules/eslint-module-utils/package.json" } ] }, "tags": [ "plugins" ] }, { "authors": [ { "name": "Ben Mosher (me@benmosher.com)" } ], "group": "", "name": "eslint-import-resolver-node", "version": "0.3.2", "description": "Node default behavior import resolution plugin for eslint-plugin-import.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-import-resolver-node@0.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/benmosher/eslint-plugin-import" }, { "type": "vcs", "url": "git+https://github.com/benmosher/eslint-plugin-import.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-import-resolver-node@0.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-import-resolver-node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-import-resolver-node/package.json" } ], "concludedValue": "node_modules/eslint-import-resolver-node/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "eslint-config-standard-jsx", "version": "6.0.2", "description": "JavaScript Standard Style JSX support - ESLint Shareable Config", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-config-standard-jsx@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/standard/eslint-config-standard-jsx" }, { "type": "vcs", "url": "git://github.com/standard/eslint-config-standard-jsx.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-config-standard-jsx@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-config-standard-jsx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-config-standard-jsx/package.json" } ], "concludedValue": "node_modules/eslint-config-standard-jsx/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "eslint-config-standard", "version": "12.0.0", "description": "JavaScript Standard Style - ESLint Shareable Config", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint-config-standard@12.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/standard/eslint-config-standard" }, { "type": "vcs", "url": "git://github.com/standard/eslint-config-standard.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint-config-standard@12.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint-config-standard/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint-config-standard/package.json" } ], "concludedValue": "node_modules/eslint-config-standard/package.json" } ] } }, { "authors": [ { "name": "Nicholas C. Zakas " } ], "group": "", "name": "eslint", "version": "5.4.0", "description": "An AST-based pattern checker for JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/eslint@5.4.0", "externalReferences": [ { "type": "website", "url": "https://eslint.org" }, { "type": "vcs", "url": "git+https://github.com/eslint/eslint.git" } ], "type": "library", "bom-ref": "pkg:npm/eslint@5.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eslint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eslint/package.json" } ], "concludedValue": "node_modules/eslint/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "1.0.5", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/escape-string-regexp#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/escape-string-regexp.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "group": "", "name": "escape-html", "version": "1.0.3", "description": "Escape string for use in HTML", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/escape-html@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/component/escape-html#readme" }, { "type": "vcs", "url": "git+https://github.com/component/escape-html.git" } ], "type": "library", "bom-ref": "pkg:npm/escape-html@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-html/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-html/package.json" } ], "concludedValue": "node_modules/escape-html/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "es-to-primitive", "version": "1.2.0", "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-to-primitive@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-to-primitive#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/es-to-primitive.git" } ], "type": "library", "bom-ref": "pkg:npm/es-to-primitive@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-to-primitive/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-to-primitive/package.json" } ], "concludedValue": "node_modules/es-to-primitive/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "es-abstract", "version": "1.15.0", "description": "ECMAScript spec abstract operations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/es-abstract@1.15.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/es-abstract#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/es-abstract.git" } ], "type": "library", "bom-ref": "pkg:npm/es-abstract@1.15.0", "properties": [ { "name": "SrcFile", "value": "node_modules/es-abstract/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/es-abstract/package.json" } ], "concludedValue": "node_modules/es-abstract/package.json" } ] } }, { "group": "", "name": "error-ex", "version": "1.3.2", "description": "Easy error subclassing and stack customization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/error-ex@1.3.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/qix-/node-error-ex#readme" }, { "type": "vcs", "url": "git+https://github.com/qix-/node-error-ex.git" } ], "type": "library", "bom-ref": "pkg:npm/error-ex@1.3.2", "properties": [ { "name": "SrcFile", "value": "node_modules/error-ex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/error-ex/package.json" } ], "concludedValue": "node_modules/error-ex/package.json" } ] } }, { "authors": [ { "name": "Mathias Buus " } ], "group": "", "name": "end-of-stream", "version": "1.4.4", "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/end-of-stream@1.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mafintosh/end-of-stream" }, { "type": "vcs", "url": "git://github.com/mafintosh/end-of-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/end-of-stream@1.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/end-of-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/end-of-stream/package.json" } ], "concludedValue": "node_modules/end-of-stream/package.json" } ] }, "tags": [ "stream" ] }, { "group": "", "name": "encodeurl", "version": "1.0.2", "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/encodeurl@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pillarjs/encodeurl#readme" }, { "type": "vcs", "url": "git+https://github.com/pillarjs/encodeurl.git" } ], "type": "library", "bom-ref": "pkg:npm/encodeurl@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/encodeurl/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/encodeurl/package.json" } ], "concludedValue": "node_modules/encodeurl/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "ee-first", "version": "1.1.1", "description": "return the first event in a set of ee/event pairs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ee-first@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonathanong/ee-first#readme" }, { "type": "vcs", "url": "git+https://github.com/jonathanong/ee-first.git" } ], "type": "library", "bom-ref": "pkg:npm/ee-first@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ee-first/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ee-first/package.json" } ], "concludedValue": "node_modules/ee-first/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Jeremie Miller (http://jeremie.com/)" } ], "group": "", "name": "ecc-jsbn", "version": "0.1.2", "description": "ECC JS code based on JSBN", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/quartzjer/ecc-jsbn" }, { "type": "vcs", "url": "git+https://github.com/quartzjer/ecc-jsbn.git" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ecc-jsbn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ecc-jsbn/package.json" } ], "concludedValue": "node_modules/ecc-jsbn/package.json" } ] } }, { "group": "", "name": "dtslint", "version": "0.5.9", "description": "Runs tests on TypeScript definition files", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dtslint@0.5.9", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Microsoft/dtslint#readme" }, { "type": "vcs", "url": "git+https://github.com/Microsoft/dtslint.git" } ], "type": "library", "bom-ref": "pkg:npm/dtslint@0.5.9", "properties": [ { "name": "SrcFile", "value": "node_modules/dtslint/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dtslint/package.json" } ], "concludedValue": "node_modules/dtslint/package.json" } ] } }, { "authors": [ { "name": "Nathan Shively-Sanders" } ], "group": "", "name": "dts-critic", "version": "1.2.0", "description": "Checks a new .d.ts against the Javascript source and tells you what problems it has", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dts-critic@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sandersn/dts-critic#readme" }, { "type": "vcs", "url": "git+https://github.com/sandersn/dts-critic.git" } ], "type": "library", "bom-ref": "pkg:npm/dts-critic@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/dts-critic/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dts-critic/package.json" } ], "concludedValue": "node_modules/dts-critic/package.json" } ] } }, { "authors": [ { "name": "vjeux" } ], "group": "", "name": "download-file-sync", "version": "1.0.4", "description": "Does exactly what you expects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/download-file-sync@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/vjeux/download-file-sync#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/vjeux/download-file-sync.git" } ], "type": "library", "bom-ref": "pkg:npm/download-file-sync@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/download-file-sync/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/download-file-sync/package.json" } ], "concludedValue": "node_modules/download-file-sync/package.json" } ] } }, { "group": "", "name": "doctrine", "version": "2.1.0", "description": "JSDoc parser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/doctrine@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/eslint/doctrine" }, { "type": "vcs", "url": "git+https://github.com/eslint/doctrine.git" } ], "type": "library", "bom-ref": "pkg:npm/doctrine@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/doctrine/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/doctrine/package.json" } ], "concludedValue": "node_modules/doctrine/package.json" } ] } }, { "group": "", "name": "diff", "version": "4.0.1", "description": "A javascript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/diff@4.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kpdecker/jsdiff#readme" }, { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@4.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Lovell Fuller " } ], "group": "", "name": "detect-libc", "version": "1.0.3", "description": "Node.js module to detect the C standard library (libc) implementation family and version", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/detect-libc@1.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lovell/detect-libc#readme" }, { "type": "vcs", "url": "git://github.com/lovell/detect-libc.git" } ], "type": "library", "bom-ref": "pkg:npm/detect-libc@1.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/detect-libc/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/detect-libc/package.json" } ], "concludedValue": "node_modules/detect-libc/package.json" } ] } }, { "authors": [ { "name": "Jonathan Ong (http://jongleberry.com)" } ], "group": "", "name": "destroy", "version": "1.0.4", "description": "destroy a stream if possible", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/destroy@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stream-utils/destroy#readme" }, { "type": "vcs", "url": "git+https://github.com/stream-utils/destroy.git" } ], "type": "library", "bom-ref": "pkg:npm/destroy@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/destroy/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/destroy/package.json" } ], "concludedValue": "node_modules/destroy/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "depd", "version": "1.1.2", "description": "Deprecate all the things", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/depd@1.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dougwilson/nodejs-depd#readme" }, { "type": "vcs", "url": "git+https://github.com/dougwilson/nodejs-depd.git" } ], "type": "library", "bom-ref": "pkg:npm/depd@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/depd/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/depd/package.json" } ], "concludedValue": "node_modules/depd/package.json" } ] } }, { "group": "", "name": "delegates", "version": "1.0.0", "description": "delegate methods and accessors to another property", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delegates@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-delegates#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/node-delegates.git" } ], "type": "library", "bom-ref": "pkg:npm/delegates@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delegates/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delegates/package.json" } ], "concludedValue": "node_modules/delegates/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "delayed-stream", "version": "1.0.0", "description": "Buffers events from a stream until you are ready to handle them.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-delayed-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-delayed-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/delayed-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/delayed-stream/package.json" } ], "concludedValue": "node_modules/delayed-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "Dan Flettre " } ], "group": "", "name": "deglob", "version": "2.1.1", "description": "Take a list of glob patterns and return an array of file locations, respecting `.gitignore` and allowing for ignore patterns via `package.json`.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deglob@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/flet/deglob" }, { "type": "vcs", "url": "git+https://github.com/flet/deglob.git" } ], "type": "library", "bom-ref": "pkg:npm/deglob@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/deglob/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deglob/package.json" } ], "concludedValue": "node_modules/deglob/package.json" } ] } }, { "authors": [ { "name": "kael" } ], "group": "", "name": "ignore", "version": "3.3.10", "description": "Ignore is a manager and filter for .gitignore rules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ignore@3.3.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kaelzhang/node-ignore#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kaelzhang/node-ignore.git" } ], "type": "library", "bom-ref": "pkg:npm/ignore@3.3.10", "properties": [ { "name": "SrcFile", "value": "node_modules/deglob/node_modules/ignore/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deglob/node_modules/ignore/package.json" } ], "concludedValue": "node_modules/deglob/node_modules/ignore/package.json" } ] } }, { "authors": [ { "name": "Nathan Shively-Sanders (http://github.com/Microsoft/definitelytyped-header-parser)" } ], "group": "", "name": "definitelytyped-header-parser", "version": "1.2.0", "description": "This library parses headers of [DefinitelyTyped](https://github.com/DefinitelyTyped/DefinitelyTyped) types.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/definitelytyped-header-parser@1.2.0", "type": "library", "bom-ref": "pkg:npm/definitelytyped-header-parser@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/definitelytyped-header-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/definitelytyped-header-parser/package.json" } ], "concludedValue": "node_modules/definitelytyped-header-parser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Jordan Harband" } ], "group": "", "name": "define-properties", "version": "1.1.3", "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/define-properties@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/define-properties#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/define-properties.git" } ], "type": "library", "bom-ref": "pkg:npm/define-properties@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/define-properties/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/define-properties/package.json" } ], "concludedValue": "node_modules/define-properties/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "deep-is", "version": "0.1.3", "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-is@0.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/deep-is#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/thlorenz/deep-is.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-is/package.json" } ], "concludedValue": "node_modules/deep-is/package.json" } ] } }, { "authors": [ { "name": "Viacheslav Lotsmanov " } ], "group": "", "name": "deep-extend", "version": "0.6.0", "description": "Recursive object extending", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/deep-extend@0.6.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/unclechu/node-deep-extend" }, { "type": "vcs", "url": "git://github.com/unclechu/node-deep-extend.git" } ], "type": "library", "bom-ref": "pkg:npm/deep-extend@0.6.0", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-extend/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-extend/package.json" } ], "concludedValue": "node_modules/deep-extend/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decompress-response", "version": "4.2.1", "description": "Decompress a HTTP response if needed", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decompress-response@4.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/decompress-response#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/decompress-response.git" } ], "type": "library", "bom-ref": "pkg:npm/decompress-response@4.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/decompress-response/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decompress-response/package.json" } ], "concludedValue": "node_modules/decompress-response/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "1.2.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/decamelize@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/decamelize#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/decamelize.git" } ], "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "debug-log", "version": "1.0.1", "description": "Node.js 0.12 util.debuglog() ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug-log@1.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/debug-log#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/debug-log.git" } ], "type": "library", "bom-ref": "pkg:npm/debug-log@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/debug-log/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug-log/package.json" } ], "concludedValue": "node_modules/debug-log/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "3.2.6", "description": "small debugging utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@3.2.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/debug#readme" }, { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.2.6", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "Trent Mick (http://trentm.com)" } ], "group": "", "name": "dashdash", "version": "1.14.1", "description": "A light, featureful and explicit option parsing library.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/trentm/node-dashdash#readme" }, { "type": "vcs", "url": "git://github.com/trentm/node-dashdash.git" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "node_modules/dashdash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/dashdash/package.json" } ], "concludedValue": "node_modules/dashdash/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "6.0.5", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cross-spawn@6.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" }, { "type": "vcs", "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@6.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "core-util-is", "version": "1.0.2", "description": "The `util.is*` functions introduced in Node v0.12.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/core-util-is#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/core-util-is.git" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/core-util-is/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/core-util-is/package.json" } ], "concludedValue": "node_modules/core-util-is/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "cookie-signature", "version": "1.0.6", "description": "Sign and unsign cookies", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cookie-signature@1.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/node-cookie-signature#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/node-cookie-signature.git" } ], "type": "library", "bom-ref": "pkg:npm/cookie-signature@1.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie-signature/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie-signature/package.json" } ], "concludedValue": "node_modules/cookie-signature/package.json" } ] } }, { "authors": [ { "name": "Roman Shtylman " } ], "group": "", "name": "cookie", "version": "0.4.0", "description": "HTTP server cookie parsing and serialization", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cookie@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/cookie#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/cookie.git" } ], "type": "library", "bom-ref": "pkg:npm/cookie@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cookie/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cookie/package.json" } ], "concludedValue": "node_modules/cookie/package.json" } ] } }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "content-type", "version": "1.0.4", "description": "Create and parse HTTP Content-Type header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/content-type@1.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/content-type#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/content-type.git" } ], "type": "library", "bom-ref": "pkg:npm/content-type@1.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/content-type/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/content-type/package.json" } ], "concludedValue": "node_modules/content-type/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Douglas Christopher Wilson " } ], "group": "", "name": "content-disposition", "version": "0.5.3", "description": "Create and parse Content-Disposition header", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/content-disposition@0.5.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/content-disposition#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/content-disposition.git" } ], "type": "library", "bom-ref": "pkg:npm/content-disposition@0.5.3", "properties": [ { "name": "SrcFile", "value": "node_modules/content-disposition/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/content-disposition/package.json" } ], "concludedValue": "node_modules/content-disposition/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "contains-path", "version": "0.1.0", "description": "Return true if a file path contains the given path.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/contains-path@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jonschlinkert/contains-path" }, { "type": "vcs", "url": "git+https://github.com/jonschlinkert/contains-path.git" } ], "type": "library", "bom-ref": "pkg:npm/contains-path@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/contains-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/contains-path/package.json" } ], "concludedValue": "node_modules/contains-path/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org/)" } ], "group": "", "name": "console-control-strings", "version": "1.1.0", "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/console-control-strings@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/console-control-strings#readme" }, { "type": "vcs", "url": "git+https://github.com/iarna/console-control-strings.git" } ], "type": "library", "bom-ref": "pkg:npm/console-control-strings@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/console-control-strings/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/console-control-strings/package.json" } ], "concludedValue": "node_modules/console-control-strings/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "concat-map", "version": "0.0.1", "description": "concatenative mapdashery", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/node-concat-map#readme" }, { "type": "vcs", "url": "git://github.com/substack/node-concat-map.git" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/concat-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/concat-map/package.json" } ], "concludedValue": "node_modules/concat-map/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.1", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/commander@2.20.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js#readme" }, { "type": "vcs", "url": "git+https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "Felix Geisendörfer (http://debuggable.com/)" } ], "group": "", "name": "combined-stream", "version": "1.0.8", "description": "A stream that emits multiple other streams one after another.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/felixge/node-combined-stream" }, { "type": "vcs", "url": "git://github.com/felixge/node-combined-stream.git" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/combined-stream/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/combined-stream/package.json" } ], "concludedValue": "node_modules/combined-stream/package.json" } ] }, "tags": [ "stream" ] }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.3", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-name@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/dfcreative/color-name" }, { "type": "vcs", "url": "git+ssh://git@github.com/dfcreative/color-name.git" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "1.9.3", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/color-convert@1.9.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Qix-/color-convert#readme" }, { "type": "vcs", "url": "git+https://github.com/Qix-/color-convert.git" } ], "type": "library", "bom-ref": "pkg:npm/color-convert@1.9.3", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "code-point-at", "version": "1.1.0", "description": "ES2015 `String#codePointAt()` ponyfill", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/code-point-at@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/code-point-at#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/code-point-at.git" } ], "type": "library", "bom-ref": "pkg:npm/code-point-at@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/code-point-at/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/code-point-at/package.json" } ], "concludedValue": "node_modules/code-point-at/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "4.1.0", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cliui@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/cliui#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/yargs/cliui.git" } ], "type": "library", "bom-ref": "pkg:npm/cliui@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Ilya Radchenko " } ], "group": "", "name": "cli-width", "version": "2.2.0", "description": "Get stdout window width, with two fallbacks, tty and then a default.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-width@2.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/knownasilya/cli-width" }, { "type": "vcs", "url": "git+ssh://git@github.com/knownasilya/cli-width.git" } ], "type": "library", "bom-ref": "pkg:npm/cli-width@2.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-width/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-width/package.json" } ], "concludedValue": "node_modules/cli-width/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "cli-cursor", "version": "2.1.0", "description": "Toggle the CLI cursor", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/cli-cursor@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/cli-cursor#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/cli-cursor.git" } ], "type": "library", "bom-ref": "pkg:npm/cli-cursor@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/cli-cursor/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cli-cursor/package.json" } ], "concludedValue": "node_modules/cli-cursor/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Andrea Giammarchi (http://webreflection.blogspot.com/)" } ], "group": "", "name": "circular-json", "version": "0.3.3", "description": "JSON does not handle circular references. This version does", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/circular-json@0.3.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/circular-json" }, { "type": "vcs", "url": "git://github.com/WebReflection/circular-json.git" } ], "type": "library", "bom-ref": "pkg:npm/circular-json@0.3.3", "properties": [ { "name": "SrcFile", "value": "node_modules/circular-json/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/circular-json/package.json" } ], "concludedValue": "node_modules/circular-json/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "chownr", "version": "1.1.3", "description": "like `chown -R`", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chownr@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/chownr#readme" }, { "type": "vcs", "url": "git://github.com/isaacs/chownr.git" } ], "type": "library", "bom-ref": "pkg:npm/chownr@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chownr/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chownr/package.json" } ], "concludedValue": "node_modules/chownr/package.json" } ] } }, { "authors": [ { "name": "Dmitry Shirokov " } ], "group": "", "name": "chardet", "version": "0.4.2", "description": "Character detector", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chardet@0.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/runk/node-chardet" }, { "type": "vcs", "url": "git+ssh://git@github.com/runk/node-chardet.git" } ], "type": "library", "bom-ref": "pkg:npm/chardet@0.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chardet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chardet/package.json" } ], "concludedValue": "node_modules/chardet/package.json" } ] } }, { "group": "", "name": "chalk", "version": "2.4.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@2.4.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/chalk#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@2.4.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers " } ], "group": "", "name": "caseless", "version": "0.12.0", "description": "Caseless object set/get/has, very useful when working with HTTP headers.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caseless@0.12.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/caseless#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/caseless.git" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.12.0", "properties": [ { "name": "SrcFile", "value": "node_modules/caseless/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caseless/package.json" } ], "concludedValue": "node_modules/caseless/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "5.3.1", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/camelcase@5.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/camelcase#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/camelcase.git" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@5.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "callsites", "version": "0.2.0", "description": "Get callsites from the V8 stack trace API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/callsites@0.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/callsites#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/callsites.git" } ], "type": "library", "bom-ref": "pkg:npm/callsites@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/callsites/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/callsites/package.json" } ], "concludedValue": "node_modules/callsites/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (http://sindresorhus.com)" } ], "group": "", "name": "caller-path", "version": "0.1.0", "description": "Get the path of the caller module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/caller-path@0.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/caller-path#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/caller-path.git" } ], "type": "library", "bom-ref": "pkg:npm/caller-path@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/caller-path/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/caller-path/package.json" } ], "concludedValue": "node_modules/caller-path/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk (http://tjholowaychuk.com)" } ], "group": "", "name": "bytes", "version": "3.1.0", "description": "Utility to parse a string bytes to bytes and vice-versa", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bytes@3.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/visionmedia/bytes.js#readme" }, { "type": "vcs", "url": "git+https://github.com/visionmedia/bytes.js.git" } ], "type": "library", "bom-ref": "pkg:npm/bytes@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/bytes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bytes/package.json" } ], "concludedValue": "node_modules/bytes/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "builtin-modules", "version": "1.1.1", "description": "List of the Node.js builtin modules", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/builtin-modules@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/builtin-modules#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/builtin-modules.git" } ], "type": "library", "bom-ref": "pkg:npm/builtin-modules@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/builtin-modules/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/builtin-modules/package.json" } ], "concludedValue": "node_modules/builtin-modules/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "description": "`process.stdout` in your browser.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/kumavis/browser-stdout#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "1.1.11", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "body-parser", "version": "1.19.0", "description": "Node.js body parsing middleware", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/body-parser@1.19.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/expressjs/body-parser#readme" }, { "type": "vcs", "url": "git+https://github.com/expressjs/body-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/body-parser@1.19.0", "properties": [ { "name": "SrcFile", "value": "node_modules/body-parser/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/body-parser/package.json" } ], "concludedValue": "node_modules/body-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-bcrypt-pbkdf.git" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/bcrypt-pbkdf/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/bcrypt-pbkdf/package.json" } ], "concludedValue": "node_modules/bcrypt-pbkdf/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.0", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "", "name": "babel-code-frame", "version": "6.26.0", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/babel-code-frame@6.26.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" }, { "type": "vcs", "url": "https://github.com/babel/babel/tree/master/packages/babel-code-frame" } ], "type": "library", "bom-ref": "pkg:npm/babel-code-frame@6.26.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-code-frame/package.json" } ], "concludedValue": "node_modules/babel-code-frame/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "2.0.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/supports-color@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/supports-color#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/supports-color.git" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-code-frame/node_modules/supports-color/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-code-frame/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/babel-code-frame/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Simon Lydell" } ], "group": "", "name": "js-tokens", "version": "3.0.2", "description": "A regex that tokenizes JavaScript.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/js-tokens@3.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/lydell/js-tokens#readme" }, { "type": "vcs", "url": "git+https://github.com/lydell/js-tokens.git" } ], "type": "library", "bom-ref": "pkg:npm/js-tokens@3.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-code-frame/node_modules/js-tokens/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-code-frame/node_modules/js-tokens/package.json" } ], "concludedValue": "node_modules/babel-code-frame/node_modules/js-tokens/package.json" } ] } }, { "group": "", "name": "chalk", "version": "1.1.3", "description": "Terminal string styling done right. Much color.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/chalk@1.1.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/chalk#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/chalk.git" } ], "type": "library", "bom-ref": "pkg:npm/chalk@1.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-code-frame/node_modules/chalk/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-code-frame/node_modules/chalk/package.json" } ], "concludedValue": "node_modules/babel-code-frame/node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "2.2.1", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@2.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-styles#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@2.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/babel-code-frame/node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/babel-code-frame/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/babel-code-frame/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Michael Hart (http://github.com/mhart)" } ], "group": "", "name": "aws4", "version": "1.8.0", "description": "Signs and prepares requests using AWS Signature Version 4", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws4@1.8.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mhart/aws4#readme" }, { "type": "vcs", "url": "git+https://github.com/mhart/aws4.git" } ], "type": "library", "bom-ref": "pkg:npm/aws4@1.8.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws4/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws4/package.json" } ], "concludedValue": "node_modules/aws4/package.json" } ] } }, { "authors": [ { "name": "Mikeal Rogers (http://www.futurealoof.com)" } ], "group": "", "name": "aws-sign2", "version": "0.7.0", "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aws-sign2@0.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mikeal/aws-sign#readme" }, { "type": "vcs", "url": "git+https://github.com/mikeal/aws-sign.git" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aws-sign2/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aws-sign2/package.json" } ], "concludedValue": "node_modules/aws-sign2/package.json" } ] } }, { "authors": [ { "name": "Alex Indigo " } ], "group": "", "name": "asynckit", "version": "0.4.0", "description": "Minimal async jobs utility library, with streams support", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asynckit@0.4.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/alexindigo/asynckit#readme" }, { "type": "vcs", "url": "git+https://github.com/alexindigo/asynckit.git" } ], "type": "library", "bom-ref": "pkg:npm/asynckit@0.4.0", "properties": [ { "name": "SrcFile", "value": "node_modules/asynckit/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asynckit/package.json" } ], "concludedValue": "node_modules/asynckit/package.json" } ] } }, { "group": "", "name": "assert-rejects", "version": "1.0.0", "description": "Assert that a promise eventually rejects", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-rejects@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/LinusU/assert-rejects#readme" }, { "type": "vcs", "url": "git+https://github.com/LinusU/assert-rejects.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-rejects@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-rejects/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-rejects/package.json" } ], "concludedValue": "node_modules/assert-rejects/package.json" } ] } }, { "authors": [ { "name": "Mark Cavage " } ], "group": "", "name": "assert-plus", "version": "1.0.0", "description": "Extra assertions on top of node's assert module", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mcavage/node-assert-plus#readme" }, { "type": "vcs", "url": "git+https://github.com/mcavage/node-assert-plus.git" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assert-plus/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assert-plus/package.json" } ], "concludedValue": "node_modules/assert-plus/package.json" } ] } }, { "authors": [ { "name": "Joyent (joyent.com)" } ], "group": "", "name": "asn1", "version": "0.2.4", "description": "Contains parsers and serializers for ASN.1 (currently BER only)", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/asn1@0.2.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/joyent/node-asn1#readme" }, { "type": "vcs", "url": "git://github.com/joyent/node-asn1.git" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.4", "properties": [ { "name": "SrcFile", "value": "node_modules/asn1/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/asn1/package.json" } ], "concludedValue": "node_modules/asn1/package.json" } ] } }, { "authors": [ { "name": "Jordan Harband (http://ljharb.codes)" } ], "group": "", "name": "array-includes", "version": "3.0.3", "description": "An ES7/ES2016 spec-compliant `Array.prototype.includes` shim/polyfill/replacement that works as far down as ES3.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-includes@3.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/ljharb/array-includes#readme" }, { "type": "vcs", "url": "git://github.com/ljharb/array-includes.git" } ], "type": "library", "bom-ref": "pkg:npm/array-includes@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/array-includes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-includes/package.json" } ], "concludedValue": "node_modules/array-includes/package.json" } ] } }, { "authors": [ { "name": "Blake Embrey (http://blakeembrey.me)" } ], "group": "", "name": "array-flatten", "version": "1.1.1", "description": "Flatten an array of nested arrays into a single flat array", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/array-flatten@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/blakeembrey/array-flatten" }, { "type": "vcs", "url": "git://github.com/blakeembrey/array-flatten.git" } ], "type": "library", "bom-ref": "pkg:npm/array-flatten@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/array-flatten/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/array-flatten/package.json" } ], "concludedValue": "node_modules/array-flatten/package.json" } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/argparse@1.0.10", "externalReferences": [ { "type": "vcs", "url": "https://github.com/nodeca/argparse#readme" }, { "type": "vcs", "url": "git+https://github.com/nodeca/argparse.git" } ], "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] }, "tags": [ "cli" ] }, { "authors": [ { "name": "Rebecca Turner (http://re-becca.org)" } ], "group": "", "name": "are-we-there-yet", "version": "1.1.5", "description": "Keep track of the overall completion of many disparate processes", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/are-we-there-yet@1.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/are-we-there-yet" }, { "type": "vcs", "url": "git+https://github.com/iarna/are-we-there-yet.git" } ], "type": "library", "bom-ref": "pkg:npm/are-we-there-yet@1.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/are-we-there-yet/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/are-we-there-yet/package.json" } ], "concludedValue": "node_modules/are-we-there-yet/package.json" } ] } }, { "authors": [ { "name": "Rebecca Turner " } ], "group": "", "name": "aproba", "version": "1.2.0", "description": "A ridiculously light-weight argument validator (now browser friendly)", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/aproba@1.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/iarna/aproba" }, { "type": "vcs", "url": "git+https://github.com/iarna/aproba.git" } ], "type": "library", "bom-ref": "pkg:npm/aproba@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/aproba/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/aproba/package.json" } ], "concludedValue": "node_modules/aproba/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "3.2.1", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-styles@3.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-styles#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-styles.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@3.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "2.1.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-regex@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/chalk/ansi-regex#readme" }, { "type": "vcs", "url": "git+https://github.com/chalk/ansi-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-escapes", "version": "3.2.0", "description": "ANSI escape codes for manipulating the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ansi-escapes@3.2.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/sindresorhus/ansi-escapes#readme" }, { "type": "vcs", "url": "git+https://github.com/sindresorhus/ansi-escapes.git" } ], "type": "library", "bom-ref": "pkg:npm/ansi-escapes@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-escapes/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-escapes/package.json" } ], "concludedValue": "node_modules/ansi-escapes/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv-keywords", "version": "3.4.1", "description": "Custom JSON-Schema keywords for Ajv validator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv-keywords@3.4.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/ajv-keywords#readme" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/ajv-keywords.git" } ], "type": "library", "bom-ref": "pkg:npm/ajv-keywords@3.4.1", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv-keywords/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv-keywords/package.json" } ], "concludedValue": "node_modules/ajv-keywords/package.json" } ] } }, { "authors": [ { "name": "Evgeny Poberezkin" } ], "group": "", "name": "ajv", "version": "6.10.2", "description": "Another JSON Schema Validator", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ajv@6.10.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/epoberezkin/ajv" }, { "type": "vcs", "url": "git+https://github.com/epoberezkin/ajv.git" } ], "type": "library", "bom-ref": "pkg:npm/ajv@6.10.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ajv/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ajv/package.json" } ], "concludedValue": "node_modules/ajv/package.json" } ] }, "tags": [ "json" ] }, { "group": "", "name": "acorn-jsx", "version": "5.0.2", "description": "Alternative, faster React.js JSX parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn-jsx@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/RReverser/acorn-jsx" }, { "type": "vcs", "url": "git+https://github.com/RReverser/acorn-jsx.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn-jsx@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn-jsx/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn-jsx/package.json" } ], "concludedValue": "node_modules/acorn-jsx/package.json" } ] } }, { "group": "", "name": "acorn", "version": "6.3.0", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/acorn@6.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "git+https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "group": "", "name": "accepts", "version": "1.3.7", "description": "Higher-level content negotiation", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/accepts@1.3.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jshttp/accepts#readme" }, { "type": "vcs", "url": "git+https://github.com/jshttp/accepts.git" } ], "type": "library", "bom-ref": "pkg:npm/accepts@1.3.7", "properties": [ { "name": "SrcFile", "value": "node_modules/accepts/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/accepts/package.json" } ], "concludedValue": "node_modules/accepts/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "abbrev", "version": "1.1.1", "description": "Like ruby's abbrev module, but in js", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/abbrev@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/abbrev-js#readme" }, { "type": "vcs", "url": "git+ssh://git@github.com/isaacs/abbrev-js.git" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/abbrev/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/abbrev/package.json" } ], "concludedValue": "node_modules/abbrev/package.json" } ] } }, { "group": "@types", "name": "parsimmon", "version": "1.10.0", "description": "TypeScript definitions for Parsimmon", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/parsimmon@1.10.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" }, { "type": "vcs", "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/parsimmon@1.10.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/parsimmon/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/parsimmon/package.json" } ], "concludedValue": "node_modules/@types/parsimmon/package.json" } ] } }, { "group": "@types", "name": "node", "version": "10.14.20", "description": "TypeScript definitions for Node.js", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/node@10.14.20", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme" }, { "type": "vcs", "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@10.14.20", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/node/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/node/package.json" } ], "concludedValue": "node_modules/@types/node/package.json" } ] } }, { "authors": [ { "name": "suchipi " } ], "group": "@babel", "name": "highlight", "version": "7.5.0", "description": "Syntax highlight JavaScript strings for output in terminals.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/highlight@7.5.0", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" }, { "type": "vcs", "url": "https://github.com/babel/babel/tree/master/packages/babel-highlight" } ], "type": "library", "bom-ref": "pkg:npm/@babel/highlight@7.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/highlight/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/highlight/package.json" } ], "concludedValue": "node_modules/@babel/highlight/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "code-frame", "version": "7.5.5", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.5.5", "externalReferences": [ { "type": "website", "url": "https://babeljs.io/" }, { "type": "vcs", "url": "https://github.com/babel/babel/tree/master/packages/babel-code-frame" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/canvas@2.6.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.9.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-11-14T11:55:47Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, November 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'canvas' with version '2.6.1'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 438 source files." } ] }