{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:46baa6e6-2cb1-49b9-bfa0-ed77643ecbed",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-04T07:32:01Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "isomorphic-ws",
      "group": "@d-fischer",
      "version": "7.0.2",
      "description": "Isomorphic implementation of WebSocket",
      "purl": "pkg:npm/%40d-fischer/isomorphic-ws@7.0.2",
      "bom-ref": "pkg:npm/@d-fischer/isomorphic-ws@7.0.2",
      "author": "Daniel Fischer <daniel@d-fischer.dev>",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "isomorphic-ws-webpack",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/isomorphic-ws-webpack@1.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/isomorphic-ws-webpack@1.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/d-fischer/isomorphic-ws#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/d-fischer/isomorphic-ws.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "example/webpack/package-lock.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@types",
      "name": "ws",
      "version": "8.18.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e1545e83095840f24506cbe69acc543891743b1354f2ec0df2a4539ed0870957c3bf339d751bdf405b6e22acaad6e7a5ade38c86f7e8a3f056aaa011a4b815e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/ws@8.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/ws/-/ws-8.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ws@8.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/ws/-/ws-8.18.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/ws"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "26.1.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56ee1ae54140f6b208149eeb07f55a69f87d96b090b33a294c2c7a2a315ba174c641b3cd6ac7a1551e531228ad8520c6c9dd43122501ca081366c83c8ee91e22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@26.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/node/-/node-26.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@26.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/node/-/node-26.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "8.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f7ef949c57ad1da26f9890f1487d32dc3a23f190dfdbb87cf91a86e32e18b116e00d68db370bd9781a6ad6a9e8e05d627b05b25c158a53114912d467bc6e965"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/undici-types@8.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/undici-types/-/undici-types-8.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/undici-types/-/undici-types-8.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "8.21.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7874c540a385887ba48acb7bc180dfbd6c966aa90f083117af02438b4002e18b8f6a92440341f59d019f0a4255e211a6f0f3c0115d7754ae5bed6ca417f9a2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ws@8.21.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ws/-/ws-8.21.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ws/-/ws-8.21.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "ws,WebSocket,ws/WebSocket,WebSocketServer,ws/WebSocketServer"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "node.js",
            "line": 3
          },
          {
            "location": "node.mjs",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isomorphic-ws",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c2e00cf22c9c61800afd3a8234c9ae694fbe1ca30890ba2d79d285b1535f0c355e1b333611dd7ebb43480bc1f51548aa4c49bf92d6d4c491d0c8c39400469d2"
        }
      ],
      "purl": "pkg:npm/isomorphic-ws@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isomorphic-ws/-/isomorphic-ws-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isomorphic-ws@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isomorphic-ws/-/isomorphic-ws-4.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "isomorphic-ws"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "example/webpack/app.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "418b25b07e386c7f0eeff5b6f35e6ee43a670a95d6a442b8e0599a1df7cdc20248e0931a49938d80f05339faf1276f665ca6d76a4f8bb09dae0240d362ada9b5"
        }
      ],
      "purl": "pkg:npm/ws@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-4.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "ws,WebSocket,ws/WebSocket,WebSocketServer,ws/WebSocketServer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "node.js",
            "line": 3
          },
          {
            "location": "node.mjs",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-limiter",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e9fee167a283a23be2f6d757993a84b2ce93884cc5f1d6b0484dab98ca41b705160fbbc87451cc6c3cd074e11479be8e13cb3dfe6b2d7bb51e8955ff6acd85a"
        }
      ],
      "purl": "pkg:npm/async-limiter@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-limiter@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ultron",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50811704d79898aa6d587eb3f199ea4de4bc7d5ef8cc6d3f79153d546929cf3f8b20936cf16ff333f2feedcb42911ae06cd9e7474c71c386ca3abd1c5b43743a"
        }
      ],
      "purl": "pkg:npm/ultron@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ultron/-/ultron-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ultron@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ultron/-/ultron-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/undici-types@8.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@26.1.2",
      "dependsOn": [
        "pkg:npm/undici-types@8.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/ws@8.18.1",
      "dependsOn": [
        "pkg:npm/@types/node@26.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ws@8.21.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@d-fischer/isomorphic-ws@7.0.2",
      "dependsOn": [
        "pkg:npm/@types/ws@8.18.1",
        "pkg:npm/ws@8.21.2"
      ]
    },
    {
      "ref": "pkg:npm/isomorphic-ws@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async-limiter@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ultron@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@4.0.0",
      "dependsOn": [
        "pkg:npm/async-limiter@1.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/ultron@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isomorphic-ws-webpack@1.0.0",
      "dependsOn": [
        "pkg:npm/isomorphic-ws@4.0.0",
        "pkg:npm/ws@4.0.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@d-fischer/isomorphic-ws@7.0.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-04T07:32:01Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'isomorphic-ws' with version '7.0.2'. The application also has 1 child modules/components. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from the source files: example/webpack/package-lock.json, package-lock.json."
    }
  ]
}