{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:dd55c319-08da-4f17-9153-b48c85397a92", "version": 1, "metadata": { "timestamp": "2026-07-29T18:29:14Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "estree-walker", "group": "", "version": "0.9.0", "description": "Traverse an ESTree-compliant AST", "purl": "pkg:npm/estree-walker@0.9.0", "bom-ref": "pkg:npm/estree-walker@0.9.0", "author": "Rich Harris", "properties": [ { "name": "cdx:npm:scripts", "value": "prepublishOnly, build-declarations, build, test" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/estree-walker" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json\\nyarn.lock" } ] }, "components": [ { "group": "@types", "name": "estree", "version": "0.0.39", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "118370a776d4fbdf1ca54e250166182fb673fb682bc961f5a9b7434e275577a864891eb07a4b1d6cc69dc9729734f12440585733e8553bd6728289875e9f8023" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/estree@0.0.39", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@0.0.39", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mocha", "version": "5.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d8852028385cdc9ed4ba0f85c4c5eea88c98cc7ee02635c408a7bfc38dc81a04074d28f7227262fb2000ed3db82fd6d03112a25041f1117dfb1b926955418b71" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@5.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-5.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@5.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-5.2.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] }, "tags": [ "test" ] }, { "group": "", "name": "browser-stdout", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "commander", "version": "2.15.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5657d3f45dd5d2ffa3af8cb13dce6083db3adbf7c8556b1dd81936883e37e6e9b536518c61d542abe3237179e162ada270d3a2cc7af590afb94c8e87d07cb46a" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.15.1", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/commander/-/commander-2.15.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.15.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/commander/-/commander-2.15.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "debug", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@3.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@3.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "diff", "version": "3.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "038eaab4581dfa0ee90d98a7a67c22449b716c2d61a607f4bb33f7886f3db1c1e4d00502ec0d531b17f93a288e52ffc931947c18eb7c84bf74d215746cecb9c4" } ], "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/diff@3.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-3.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.5.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-3.5.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "7.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "inherits", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "633c2c83e3da42a502f52466022480f4208261de" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/inherits@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "growl", "version": "1.10.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/growl@1.10.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.10.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "he", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "93410fd21b009735151f8868c2f271f3427e23fd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "supports-color", "version": "5.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ce36978251799e75a9b2ae3bd234afe8ff43c0fbe02e4b9aa5899f0e6dc958e9b4be4353545dad23852b376afa8c7d6a33fb9cfd6b71618d6162803674e2a3e7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@5.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@5.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.4.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "has-flag", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rollup", "version": "0.67.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4f23500b3f7bacab9555bb0a5135dfc088d5ed49635b24d577b71332e13e6aa950ed626c964605e506981a330b47606542d50e3b9080c52567a50e79898a798e" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup@0.67.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup/-/rollup-0.67.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup@0.67.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup/-/rollup-0.67.3.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "@types", "name": "node", "version": "10.12.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f3164461c9026d45602bc120ee57f9232e0238a279b9796720e9de3cdd16530490820cbdb6894cfad0c97fbc0c3a74ff253fd6f710d821a62082dde6455d8ee7" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/node@10.12.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/@types/node/-/node-10.12.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@types/node@10.12.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/@types/node/-/node-10.12.10.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rollup-plugin-sucrase", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "721740dceaee475147fc820aaf3642a4628b5c0c770ce1e82b6e1120fb6555c70ad306d3a471341e91844180b1b5ed57681d7b36045efdfac5c8a47b838e6ac5" } ], "licenses": [ { "license": { "name": "LIL" } } ], "purl": "pkg:npm/rollup-plugin-sucrase@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-plugin-sucrase/-/rollup-plugin-sucrase-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-plugin-sucrase@2.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-plugin-sucrase/-/rollup-plugin-sucrase-2.1.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "This package has been deprecated and is no longer maintained. Please use @rollup/plugin-sucrase." }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rollup-pluginutils", "version": "2.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "104a7d3619d493063c6a27fa6f1828bcf1cca0ca0daf616e949ce24e7769b791fd45dc02e3b1921ae208f57c6949dcd518cd065ab34f1d5ea27b52d33493da2d" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup-pluginutils@2.8.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-2.8.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rollup-pluginutils@2.8.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rollup-pluginutils/-/rollup-pluginutils-2.8.2.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "estree-walker", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4aa99900d2d64b49a76ada9b49f44fe60f0e5d90b5d85820d48c0db4bb321c3cc98b33915b89210df8cfa8966c7a63d6041daeab29146a1e58a50e9ea6ca82ff" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/estree-walker@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-0.6.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "sucrase", "version": "3.10.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9cc3aceab156c24611c5c2871c38f24260b90a62db1cdd8bc11c961759f68b491bfe9ab4c5c07d335f53758e48bdf723d41b167ecf9acfd19ae41d2d15d139c3" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/sucrase@3.10.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sucrase/-/sucrase-3.10.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sucrase@3.10.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sucrase/-/sucrase-3.10.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "commander", "version": "2.20.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ee3db2fb8d30eb5cf2e980b689136951efcdc21372a17ad8a4732b4ae9da306eb89d19da7fdeb33bf28c411e0ec8dfd49c4e4a2f21019ca1dde1a1b7aec923a5" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.20.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.20.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.20.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lines-and-columns", "version": "1.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1c00c743b433cd0a4e80758f7b64a57440d9ff00" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/lines-and-columns@1.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lines-and-columns@1.1.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.1.6.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "mz", "version": "2.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cfcd4634eee79d830486b1a1f4b7b29a8138f98af45a7e4c70721930ae5c7d00a5f8d0d7d3cb0266051cf7fe8c1e78bd216b852e6d59dc74c25eedb3f5f37ad9" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mz@2.7.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mz@2.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "any-promise", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "abc6afeedcea52e809cdc0376aed3ce39635d17f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/any-promise@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/any-promise@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "object-assign", "version": "4.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2109adc7965887cfc05cbbd442cac8bfbb360863" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/object-assign@4.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/object-assign@4.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "thenify-all", "version": "1.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1a1918d402d8fc3f98fbf234db0bcc8cc10e9726" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/thenify-all@1.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/thenify-all@1.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "thenify", "version": "3.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e69e38a1babe969b0108207978b9f62b88604839" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/thenify@3.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/thenify/-/thenify-3.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/thenify@3.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/thenify/-/thenify-3.3.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "pirates", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5ae36a2d36cc237b667de7f64cac654260222c72ad16196c0999cf229bafd8ec3444354ef257f2d4ea5fe0d53394c5cb8cf97e31e9fb02e55d5fa4c0facfae18" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/pirates@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/pirates/-/pirates-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/pirates@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/pirates/-/pirates-4.0.1.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "node-modules-regexp", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8d9dbe28964a4ac5712e9131642107c71e90ec40" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/node-modules-regexp@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/node-modules-regexp/-/node-modules-regexp-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/node-modules-regexp@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/node-modules-regexp/-/node-modules-regexp-1.0.0.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "sander", "version": "0.6.0", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "af1624cd7fb6dfad98ebef565319f920078da925" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/sander@0.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sander/-/sander-0.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sander@0.6.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sander/-/sander-0.6.0.tgz" }, { "name": "ImportedModules", "value": "sander" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "scripts/move-type-declarations.js#1" } ] } }, { "group": "", "name": "graceful-fs", "version": "4.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "208b6c76c79ad7d0682c2ec42f2d77ab588914d99dee87d91f9f97fe926bf74fe74683c45f40c9a357470db82d6163a126170280c0d33b0f38459ef6aba941f9" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/graceful-fs@4.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-fs@4.2.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.2.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rimraf", "version": "2.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/rimraf@2.7.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "Rimraf versions prior to v4 are no longer supported" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "glob", "version": "7.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8642cf7a97a19a72a4e35a541a6dec631a05b3fba6bab61f60909eadb5c4c85216700cefa62a40815901aaa4fd44128c1a39eaea432ec98c216ba72cc5b88cd4" } ], "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@7.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.4.tgz" }, { "name": "cdx:npm:deprecated", "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "tiny-glob", "version": "0.2.6", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "03b7b032a3eed41e4f5b00b79bb295800bbde828792c0d30e129c437f2db0d1123fe0003d273d66e845b9fc6283fd212657a9e34094cbca48aa04ba171f2b73f" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/tiny-glob@0.2.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tiny-glob/-/tiny-glob-0.2.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tiny-glob@0.2.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tiny-glob/-/tiny-glob-0.2.6.tgz" }, { "name": "ImportedModules", "value": "tiny-glob/sync" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "scripts/move-type-declarations.js#2" } ] } }, { "group": "", "name": "globalyzer", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2de82e5566b180737430d6d60ba6258cd3331e4ac29f2f5fce398451d9c5d6443bc004c50f5447151a80d6ac5a5f6b60c4610d95cc6339f968a41c23dd86625c" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/globalyzer@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/globalyzer/-/globalyzer-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/globalyzer@0.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/globalyzer/-/globalyzer-0.1.4.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "globrex", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b872606f000cc0d15fe662ecb7b2162cd835e31d4291eaa09496ff2b77688b8770eaad88bc002633f63cd647afcbcdf03fe4acb7e9eeb454d838683777596cc6" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/globrex@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/globrex/-/globrex-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/globrex@0.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/globrex/-/globrex-0.1.2.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "typescript", "version": "3.6.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "37b6dc7892f50ad450d91886d0040c135de4b11ec38ae421fd07a1b9b61c821cefdb4b6787e3109d022e25d7539ac6ea623f9dced721ca47a6cf4cc5ce5bdd43" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/typescript@3.6.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-3.6.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.6.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-3.6.3.tgz" }, { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/@types/estree@0.0.39", "dependsOn": [] }, { "ref": "pkg:npm/browser-stdout@1.3.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.15.1", "dependsOn": [] }, { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@3.1.0", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/diff@3.5.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.2", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/growl@1.10.5", "dependsOn": [] }, { "ref": "pkg:npm/he@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/has-flag@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@5.4.0", "dependsOn": [ "pkg:npm/has-flag@3.0.0" ] }, { "ref": "pkg:npm/mocha@5.2.0", "dependsOn": [ "pkg:npm/browser-stdout@1.3.1", "pkg:npm/commander@2.15.1", "pkg:npm/debug@3.1.0", "pkg:npm/diff@3.5.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.1.2", "pkg:npm/growl@1.10.5", "pkg:npm/he@1.1.1", "pkg:npm/minimatch@3.0.4", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@5.4.0" ] }, { "ref": "pkg:npm/@types/node@10.12.10", "dependsOn": [] }, { "ref": "pkg:npm/rollup@0.67.3", "dependsOn": [ "pkg:npm/@types/estree@0.0.39", "pkg:npm/@types/node@10.12.10" ] }, { "ref": "pkg:npm/estree-walker@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/rollup-pluginutils@2.8.2", "dependsOn": [ "pkg:npm/estree-walker@0.6.1" ] }, { "ref": "pkg:npm/commander@2.20.0", "dependsOn": [] }, { "ref": "pkg:npm/lines-and-columns@1.1.6", "dependsOn": [] }, { "ref": "pkg:npm/any-promise@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/object-assign@4.1.1", "dependsOn": [] }, { "ref": "pkg:npm/thenify@3.3.0", "dependsOn": [ "pkg:npm/any-promise@1.3.0" ] }, { "ref": "pkg:npm/thenify-all@1.6.0", "dependsOn": [ "pkg:npm/thenify@3.3.0" ] }, { "ref": "pkg:npm/mz@2.7.0", "dependsOn": [ "pkg:npm/any-promise@1.3.0", "pkg:npm/object-assign@4.1.1", "pkg:npm/thenify-all@1.6.0" ] }, { "ref": "pkg:npm/node-modules-regexp@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/pirates@4.0.1", "dependsOn": [ "pkg:npm/node-modules-regexp@1.0.0" ] }, { "ref": "pkg:npm/sucrase@3.10.1", "dependsOn": [ "pkg:npm/commander@2.20.0", "pkg:npm/lines-and-columns@1.1.6", "pkg:npm/mz@2.7.0", "pkg:npm/pirates@4.0.1" ] }, { "ref": "pkg:npm/rollup-plugin-sucrase@2.1.0", "dependsOn": [ "pkg:npm/rollup-pluginutils@2.8.2", "pkg:npm/sucrase@3.10.1" ] }, { "ref": "pkg:npm/graceful-fs@4.2.2", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.4", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/rimraf@2.7.1", "dependsOn": [ "pkg:npm/glob@7.1.4" ] }, { "ref": "pkg:npm/sander@0.6.0", "dependsOn": [ "pkg:npm/graceful-fs@4.2.2", "pkg:npm/mkdirp@0.5.1", "pkg:npm/rimraf@2.7.1" ] }, { "ref": "pkg:npm/globalyzer@0.1.4", "dependsOn": [] }, { "ref": "pkg:npm/globrex@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/tiny-glob@0.2.6", "dependsOn": [ "pkg:npm/globalyzer@0.1.4", "pkg:npm/globrex@0.1.2" ] }, { "ref": "pkg:npm/typescript@3.6.3", "dependsOn": [] }, { "ref": "pkg:npm/estree-walker@0.9.0", "dependsOn": [ "pkg:npm/@types/estree@0.0.39", "pkg:npm/@types/node@10.12.10", "pkg:npm/any-promise@1.3.0", "pkg:npm/balanced-match@1.0.0", "pkg:npm/brace-expansion@1.1.11", "pkg:npm/browser-stdout@1.3.1", "pkg:npm/commander@2.15.1", "pkg:npm/commander@2.20.0", "pkg:npm/concat-map@0.0.1", "pkg:npm/debug@3.1.0", "pkg:npm/diff@3.5.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/estree-walker@0.6.1", "pkg:npm/fs.realpath@1.0.0", "pkg:npm/glob@7.1.2", "pkg:npm/glob@7.1.4", "pkg:npm/globalyzer@0.1.4", "pkg:npm/globrex@0.1.2", "pkg:npm/graceful-fs@4.2.2", "pkg:npm/growl@1.10.5", "pkg:npm/has-flag@3.0.0", "pkg:npm/he@1.1.1", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.3", "pkg:npm/lines-and-columns@1.1.6", "pkg:npm/minimatch@3.0.4", "pkg:npm/minimist@0.0.8", "pkg:npm/mkdirp@0.5.1", "pkg:npm/mocha@5.2.0", "pkg:npm/ms@2.0.0", "pkg:npm/mz@2.7.0", "pkg:npm/node-modules-regexp@1.0.0", "pkg:npm/object-assign@4.1.1", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1", "pkg:npm/pirates@4.0.1", "pkg:npm/rimraf@2.7.1", "pkg:npm/rollup-plugin-sucrase@2.1.0", "pkg:npm/rollup-pluginutils@2.8.2", "pkg:npm/rollup@0.67.3", "pkg:npm/sander@0.6.0", "pkg:npm/sucrase@3.10.1", "pkg:npm/supports-color@5.4.0", "pkg:npm/thenify-all@1.6.0", "pkg:npm/thenify@3.3.0", "pkg:npm/tiny-glob@0.2.6", "pkg:npm/typescript@3.6.3", "pkg:npm/wrappy@1.0.2" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/estree-walker@0.9.0" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-29T18:29:14Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'estree-walker' with version '0.9.0'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from the source files: package-lock.json, yarn.lock." } ] }