{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:de6a8002-d0a9-4f5e-8902-1b74c4dc806d", "version": 1, "metadata": { "timestamp": "2026-07-28T16:40:33Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "eventemitter3", "group": "", "version": "5.0.4", "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.", "purl": "pkg:npm/eventemitter3@5.0.4", "bom-ref": "pkg:npm/eventemitter3@5.0.4", "author": "Arnout Kazemier", "properties": [ { "name": "cdx:npm:scripts", "value": "rollup, benchmark, test, test-esm, prepublishOnly" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "externalReferences": [ { "type": "vcs", "url": "git://github.com/primus/eventemitter3.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@bcoe\\n@isaacs\\n@istanbuljs\\n@jridgewell\\n@pkgjs\\n@rollup\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@bcoe/v8-coverage/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@istanbuljs/schema/package.json\\nnode_modules/@jridgewell/gen-mapping/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/source-map/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/@rollup/plugin-commonjs/package.json\\nnode_modules/@rollup/plugin-terser/package.json\\nnode_modules/@rollup/pluginutils/package.json\\nnode_modules/@rollup/rollup-linux-x64-gnu/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/istanbul-lib-coverage/package.json\\nnode_modules/acorn/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/package.json\\nnode_modules/assume/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/c8/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/node_modules/wrap-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/commander/package.json\\nnode_modules/commondir/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/deep-eql/package.json\\nnode_modules/diff/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/estree-walker/package.json\\nnode_modules/fdir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat/package.json\\nnode_modules/fn.name/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/glob/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/he/package.json\\nnode_modules/html-escaper/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-node/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-reference/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isexe/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/left-pad/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/log-symbols/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/magic-string/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minipass/package.json\\nnode_modules/mocha/node_modules/supports-color/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/propget/package.json\\nnode_modules/pruddy-error/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/rollup/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/smob/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/source-map/package.json\\nnode_modules/string-width-cjs/node_modules/ansi-regex/package.json\\nnode_modules/string-width-cjs/node_modules/emoji-regex/package.json\\nnode_modules/string-width-cjs/node_modules/strip-ansi/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/terser/bin/package.json\\nnode_modules/terser/dist/package.json\\nnode_modules/terser/package.json\\nnode_modules/test-exclude/node_modules/balanced-match/package.json\\nnode_modules/test-exclude/node_modules/brace-expansion/package.json\\nnode_modules/test-exclude/node_modules/minimatch/package.json\\nnode_modules/test-exclude/package.json\\nnode_modules/type-detect/package.json\\nnode_modules/v8-to-istanbul/package.json\\nnode_modules/which/package.json\\nnode_modules/workerpool/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/string-width/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs-unparser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/emoji-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json" } ] }, "components": [ { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "yocto-queue", "version": "0.1.0", "description": "Tiny queue data structure", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yocto-queue@0.1.0", "type": "library", "bom-ref": "pkg:npm/yocto-queue@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yocto-queue/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yocto-queue/package.json" } ], "concludedValue": "node_modules/yocto-queue/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "yargs-unparser", "version": "2.0.0", "description": "Converts back a yargs argv object to its original array form", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yargs-unparser@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-unparser" } ], "type": "library", "bom-ref": "pkg:npm/yargs-unparser@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-unparser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-unparser/package.json" } ], "concludedValue": "node_modules/yargs-unparser/package.json" } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "yargs-parser", "version": "21.1.1", "description": "the mighty option parser used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/yargs-parser@21.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/yargs-parser.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs-parser@21.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs-parser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs-parser/package.json" } ], "concludedValue": "node_modules/yargs-parser/package.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "17.7.2", "description": "yargs the modern, pirate-themed, successor to optimist.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/yargs@17.7.2", "externalReferences": [ { "type": "website", "url": "https://yargs.js.org/" }, { "type": "vcs", "url": "https://github.com/yargs/yargs.git" } ], "type": "library", "bom-ref": "pkg:npm/yargs@17.7.2", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/yargs/package.json" } ], "concludedValue": "node_modules/yargs/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "6.0.1", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "4.2.3", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/string-width/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/string-width/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/string-width/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "8.0.0", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/emoji-regex@8.0.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "5.0.1", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/yargs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "y18n", "version": "5.0.8", "description": "the bare-bones internationalization library used by yargs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/y18n@5.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yargs/y18n" } ], "type": "library", "bom-ref": "pkg:npm/y18n@5.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/y18n/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/y18n/package.json" } ], "concludedValue": "node_modules/y18n/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "7.0.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/wrap-ansi@7.0.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi-cjs/package.json" }, { "name": "SrcFile", "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/cliui/node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "wrap-ansi", "version": "8.1.0", "description": "Wordwrap a string with ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/wrap-ansi@8.1.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@8.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/package.json" } ], "concludedValue": "node_modules/wrap-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "6.2.3", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@6.2.3", "type": "library", "bom-ref": "pkg:npm/ansi-styles@6.2.3", "properties": [ { "name": "SrcFile", "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Jos de Jong (https://github.com/josdejong)" } ], "group": "", "name": "workerpool", "version": "9.3.4", "description": "Offload tasks to a pool of workers on node.js and in the browser", "scope": "optional", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0" } } ], "purl": "pkg:npm/workerpool@9.3.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/josdejong/workerpool" }, { "type": "vcs", "url": "git://github.com/josdejong/workerpool.git" } ], "type": "library", "bom-ref": "pkg:npm/workerpool@9.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/workerpool/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/workerpool/package.json" } ], "concludedValue": "node_modules/workerpool/package.json" } ] }, "tags": [ "pool" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "which", "version": "2.0.2", "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/which@2.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-which.git" } ], "type": "library", "bom-ref": "pkg:npm/which@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/which/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/which/package.json" } ], "concludedValue": "node_modules/which/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "v8-to-istanbul", "version": "9.3.0", "description": "convert from v8 coverage format to istanbul's format", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/v8-to-istanbul@9.3.0", "type": "library", "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/v8-to-istanbul/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/v8-to-istanbul/package.json" } ], "concludedValue": "node_modules/v8-to-istanbul/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Jake Luer (http://alogicalparadox.com)" } ], "group": "", "name": "type-detect", "version": "4.1.0", "description": "Improved typeof detection for node.js and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/type-detect@4.1.0", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/chaijs/type-detect.git" } ], "type": "library", "bom-ref": "pkg:npm/type-detect@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/type-detect/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/type-detect/package.json" } ], "concludedValue": "node_modules/type-detect/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "test-exclude", "version": "7.0.2", "description": "test for inclusion or exclusion of paths using globs", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/test-exclude@7.0.2", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/test-exclude.git" } ], "type": "library", "bom-ref": "pkg:npm/test-exclude@7.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/package.json" } ], "concludedValue": "node_modules/test-exclude/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "10.2.5", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/minimatch@10.2.5", "type": "library", "bom-ref": "pkg:npm/minimatch@10.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/node_modules/minimatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/test-exclude/node_modules/minimatch/package.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "5.0.5", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@5.0.5", "externalReferences": [ { "type": "vcs", "url": "git+ssh://git@github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@5.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/node_modules/brace-expansion/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/test-exclude/node_modules/brace-expansion/package.json" } ] } }, { "group": "", "name": "balanced-match", "version": "4.0.4", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@4.0.4", "externalReferences": [ { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/test-exclude/node_modules/balanced-match/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/test-exclude/node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/test-exclude/node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Mihai Bazon (http://lisperator.net/)" } ], "group": "", "name": "terser", "version": "5.46.2", "description": "JavaScript parser, mangler/compressor and beautifier toolkit for ES6+", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/terser@5.46.2", "externalReferences": [ { "type": "website", "url": "https://terser.org" } ], "type": "library", "bom-ref": "pkg:npm/terser@5.46.2", "properties": [ { "name": "SrcFile", "value": "node_modules/terser/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser/package.json" } ], "concludedValue": "node_modules/terser/package.json" } ] } }, { "group": "", "name": "dist", "version": "1.0.0", "description": "A package to hold the Terser dist bundle as commonjs while keeping the rest of it ESM. Nothing to see here.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/dist@1.0.0", "type": "library", "bom-ref": "pkg:npm/dist@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/terser/dist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser/dist/package.json" } ], "concludedValue": "node_modules/terser/dist/package.json" } ] }, "tags": [ "bundle", "rest" ] }, { "group": "", "name": "bin", "version": "1.0.0", "description": "A package to hold the Terser bin bundle as commonjs while keeping the rest of it ESM.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-2-Clause", "url": "https://opensource.org/licenses/BSD-2-Clause" } } ], "purl": "pkg:npm/bin@1.0.0", "type": "library", "bom-ref": "pkg:npm/bin@1.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/terser/bin/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/terser/bin/package.json" } ], "concludedValue": "node_modules/terser/bin/package.json" } ] }, "tags": [ "bundle", "rest" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "7.2.0", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/supports-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-json-comments", "version": "3.1.1", "description": "Strip comments from JSON. Lets you use comments in your JSON files!", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-json-comments@3.1.1", "type": "library", "bom-ref": "pkg:npm/strip-json-comments@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-json-comments/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-json-comments/package.json" } ], "concludedValue": "node_modules/strip-json-comments/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "strip-ansi", "version": "7.2.0", "description": "Strip ANSI escape codes from a string", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/strip-ansi@7.2.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@7.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/strip-ansi/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/strip-ansi/package.json" } ], "concludedValue": "node_modules/strip-ansi/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "string-width", "version": "5.1.2", "description": "Get the visual width of a string - the number of columns required to display it", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/string-width@5.1.2", "type": "library", "bom-ref": "pkg:npm/string-width@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/string-width/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/string-width/package.json" } ], "concludedValue": "node_modules/string-width/package.json" } ] } }, { "group": "", "name": "source-map-support", "version": "0.5.21", "description": "Fixes stack traces for files with source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/source-map-support@0.5.21", "externalReferences": [ { "type": "vcs", "url": "https://github.com/evanw/node-source-map-support" } ], "type": "library", "bom-ref": "pkg:npm/source-map-support@0.5.21", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map-support/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map-support/package.json" } ], "concludedValue": "node_modules/source-map-support/package.json" } ] } }, { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.6.1", "description": "Generates and consumes source maps", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ] } }, { "authors": [ { "name": "Peter Placzek (https://github.com/tada5hi)" } ], "group": "", "name": "smob", "version": "1.6.1", "description": "Zero dependency library to safe merge objects.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/smob@1.6.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Tada5hi/smob#readme" }, { "type": "vcs", "url": "git+https://github.com/Tada5hi/smob.git" } ], "type": "library", "bom-ref": "pkg:npm/smob@1.6.1", "properties": [ { "name": "SrcFile", "value": "node_modules/smob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/smob/package.json" } ], "concludedValue": "node_modules/smob/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "signal-exit", "version": "4.1.0", "description": "when you want to fire an event no matter how a process exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/signal-exit@4.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tapjs/signal-exit.git" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/signal-exit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/signal-exit/package.json" } ], "concludedValue": "node_modules/signal-exit/package.json" } ] }, "tags": [ "event" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "shebang-regex", "version": "3.0.0", "description": "Regular expression for matching a shebang line", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/shebang-regex@3.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-regex/package.json" } ], "concludedValue": "node_modules/shebang-regex/package.json" } ] } }, { "authors": [ { "name": "Kevin Mårtensson (github.com/kevva)" } ], "group": "", "name": "shebang-command", "version": "2.0.0", "description": "Get the command from a shebang", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/shebang-command@2.0.0", "type": "library", "bom-ref": "pkg:npm/shebang-command@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/shebang-command/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/shebang-command/package.json" } ], "concludedValue": "node_modules/shebang-command/package.json" } ] } }, { "authors": [ { "name": "Eric Ferraiuolo " } ], "group": "", "name": "serialize-javascript", "version": "6.0.2", "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/serialize-javascript@6.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/yahoo/serialize-javascript" }, { "type": "vcs", "url": "git+https://github.com/yahoo/serialize-javascript.git" } ], "type": "library", "bom-ref": "pkg:npm/serialize-javascript@6.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/serialize-javascript/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/serialize-javascript/package.json" } ], "concludedValue": "node_modules/serialize-javascript/package.json" } ] }, "tags": [ "json" ] }, { "authors": [ { "name": "GitHub Inc." } ], "group": "", "name": "semver", "version": "7.7.4", "description": "The semantic version parser used by npm.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/semver@7.7.4", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/npm/node-semver.git" } ], "type": "library", "bom-ref": "pkg:npm/semver@7.7.4", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.2.1", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/safe-buffer@5.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/safe-buffer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/safe-buffer/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "rollup", "version": "4.60.3", "description": "Next-generation ES module bundler", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/rollup@4.60.3", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" }, { "type": "vcs", "url": "git+https://github.com/rollup/rollup.git" } ], "type": "library", "bom-ref": "pkg:npm/rollup@4.60.3", "properties": [ { "name": "SrcFile", "value": "node_modules/rollup/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/rollup/package.json" } ], "concludedValue": "node_modules/rollup/package.json" } ] } }, { "authors": [ { "name": "Troy Goode (http://github.com/troygoode/)" } ], "group": "", "name": "require-directory", "version": "2.1.1", "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/require-directory@2.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/troygoode/node-require-directory/" }, { "type": "vcs", "url": "git://github.com/troygoode/node-require-directory.git" } ], "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/require-directory/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/require-directory/package.json" } ], "concludedValue": "node_modules/require-directory/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (thlorenz.com)" } ], "group": "", "name": "readdirp", "version": "4.1.2", "description": "Recursive version of fs.readdir with small RAM & CPU footprint.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/readdirp@4.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/readdirp" }, { "type": "vcs", "url": "git://github.com/paulmillr/readdirp.git" } ], "type": "library", "bom-ref": "pkg:npm/readdirp@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/readdirp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/readdirp/package.json" } ], "concludedValue": "node_modules/readdirp/package.json" } ] } }, { "group": "", "name": "randombytes", "version": "2.1.0", "description": "random bytes from browserify stand alone", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/randombytes@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/crypto-browserify/randombytes" } ], "type": "library", "bom-ref": "pkg:npm/randombytes@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/randombytes/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/randombytes/package.json" } ], "concludedValue": "node_modules/randombytes/package.json" } ] } }, { "group": "", "name": "pruddy-error", "version": "2.0.2", "description": "Prettify given error object", "scope": "optional", "licenses": [ { "license": { "name": "BSD" } } ], "purl": "pkg:npm/pruddy-error@2.0.2", "type": "library", "bom-ref": "pkg:npm/pruddy-error@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/pruddy-error/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/pruddy-error/package.json" } ], "concludedValue": "node_modules/pruddy-error/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "propget", "version": "1.1.0", "description": "Use dot notation to get properties from deeply nested object and array structures.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/propget@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/bigpipe/propget#readme" }, { "type": "vcs", "url": "git+https://github.com/bigpipe/propget.git" } ], "type": "library", "bom-ref": "pkg:npm/propget@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/propget/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/propget/package.json" } ], "concludedValue": "node_modules/propget/package.json" } ] } }, { "authors": [ { "name": "Jon Schlinkert (https://github.com/jonschlinkert)" } ], "group": "", "name": "picomatch", "version": "4.0.4", "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/picomatch@4.0.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/micromatch/picomatch" } ], "type": "library", "bom-ref": "pkg:npm/picomatch@4.0.4", "properties": [ { "name": "SrcFile", "value": "node_modules/picomatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picomatch/package.json" } ], "concludedValue": "node_modules/picomatch/package.json" } ] } }, { "authors": [ { "name": "Alexey Raspopov" } ], "group": "", "name": "picocolors", "version": "1.1.1", "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/picocolors@1.1.1", "type": "library", "bom-ref": "pkg:npm/picocolors@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/picocolors/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/picocolors/package.json" } ], "concludedValue": "node_modules/picocolors/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me)" } ], "group": "", "name": "path-scurry", "version": "1.11.1", "description": "walk paths fast and efficiently", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/path-scurry@1.11.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/path-scurry" } ], "type": "library", "bom-ref": "pkg:npm/path-scurry@1.11.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-scurry/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-scurry/package.json" } ], "concludedValue": "node_modules/path-scurry/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-key", "version": "3.1.1", "description": "Get the PATH environment variable key cross-platform", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-key@3.1.1", "type": "library", "bom-ref": "pkg:npm/path-key@3.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/path-key/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-key/package.json" } ], "concludedValue": "node_modules/path-key/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "path-exists", "version": "4.0.0", "description": "Check if a path exists", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/path-exists/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/path-exists/package.json" } ], "concludedValue": "node_modules/path-exists/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://izs.me)" } ], "group": "", "name": "package-json-from-dist", "version": "1.0.1", "description": "Load the local package.json from either src or dist folder", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/package-json-from-dist@1.0.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/package-json-from-dist.git" } ], "type": "library", "bom-ref": "pkg:npm/package-json-from-dist@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/package-json-from-dist/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/package-json-from-dist/package.json" } ], "concludedValue": "node_modules/package-json-from-dist/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-locate", "version": "5.0.0", "description": "Get the first fulfilled promise that satisfies the provided testing function", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/p-locate@5.0.0", "type": "library", "bom-ref": "pkg:npm/p-locate@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-locate/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-locate/package.json" } ], "concludedValue": "node_modules/p-locate/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "p-limit", "version": "3.1.0", "description": "Run multiple promise-returning & async functions with limited concurrency", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/p-limit@3.1.0", "type": "library", "bom-ref": "pkg:npm/p-limit@3.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/p-limit/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/p-limit/package.json" } ], "concludedValue": "node_modules/p-limit/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "object-inspect", "version": "1.13.4", "description": "string representations of objects in node and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/object-inspect@1.13.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/inspect-js/object-inspect" }, { "type": "vcs", "url": "git://github.com/inspect-js/object-inspect.git" } ], "type": "library", "bom-ref": "pkg:npm/object-inspect@1.13.4", "properties": [ { "name": "SrcFile", "value": "node_modules/object-inspect/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/object-inspect/package.json" } ], "concludedValue": "node_modules/object-inspect/package.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ms@2.1.3", "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/ms/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ms/package.json" } ], "concludedValue": "node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "mocha", "version": "11.7.5", "description": "simple, flexible, fun test framework", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/mocha@11.7.5", "externalReferences": [ { "type": "website", "url": "https://mochajs.org/" }, { "type": "vcs", "url": "https://github.com/mochajs/mocha.git" } ], "type": "framework", "bom-ref": "pkg:npm/mocha@11.7.5", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/package.json" } ], "concludedValue": "node_modules/mocha/package.json" } ] }, "tags": [ "framework", "test" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "supports-color", "version": "8.1.1", "description": "Detect whether a terminal supports color", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/supports-color@8.1.1", "type": "library", "bom-ref": "pkg:npm/supports-color@8.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/mocha/node_modules/supports-color/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/mocha/node_modules/supports-color/package.json" } ], "concludedValue": "node_modules/mocha/node_modules/supports-color/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "minipass", "version": "7.1.3", "description": "minimal implementation of a PassThrough stream", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/minipass@7.1.3", "type": "library", "bom-ref": "pkg:npm/minipass@7.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/minipass/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minipass/package.json" } ], "concludedValue": "node_modules/minipass/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me)" } ], "group": "", "name": "minimatch", "version": "9.0.9", "description": "a glob matcher in javascript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/minimatch@9.0.9", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/minimatch.git" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@9.0.9", "properties": [ { "name": "SrcFile", "value": "node_modules/minimatch/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/minimatch/package.json" } ], "concludedValue": "node_modules/minimatch/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "make-dir", "version": "4.0.0", "description": "Make a directory and its parents if needed - Think `mkdir -p`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/make-dir@4.0.0", "type": "library", "bom-ref": "pkg:npm/make-dir@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/make-dir/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/make-dir/package.json" } ], "concludedValue": "node_modules/make-dir/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "magic-string", "version": "0.30.21", "description": "Modify strings, generate sourcemaps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/magic-string@0.30.21", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/Rich-Harris/magic-string.git" } ], "type": "library", "bom-ref": "pkg:npm/magic-string@0.30.21", "properties": [ { "name": "SrcFile", "value": "node_modules/magic-string/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/magic-string/package.json" } ], "concludedValue": "node_modules/magic-string/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "10.4.3", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/lru-cache@10.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-lru-cache.git" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@10.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/lru-cache/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "log-symbols", "version": "4.1.0", "description": "Colored symbols for various log levels. Example: `✔︎ Success`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/log-symbols@4.1.0", "type": "library", "bom-ref": "pkg:npm/log-symbols@4.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/log-symbols/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/log-symbols/package.json" } ], "concludedValue": "node_modules/log-symbols/package.json" } ] }, "tags": [ "log" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "locate-path", "version": "6.0.0", "description": "Get the first path that exists on disk of multiple paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/locate-path@6.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/locate-path/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/locate-path/package.json" } ], "concludedValue": "node_modules/locate-path/package.json" } ] } }, { "authors": [ { "name": "azer" } ], "group": "", "name": "left-pad", "version": "1.3.0", "description": "String left pad", "scope": "optional", "licenses": [ { "license": { "id": "WTFPL", "url": "https://opensource.org/licenses/WTFPL" } } ], "purl": "pkg:npm/left-pad@1.3.0", "type": "library", "bom-ref": "pkg:npm/left-pad@1.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/left-pad/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/left-pad/package.json" } ], "concludedValue": "node_modules/left-pad/package.json" } ] } }, { "authors": [ { "name": "Vladimir Zapparov " } ], "group": "", "name": "js-yaml", "version": "4.1.1", "description": "YAML 1.2 parser and serializer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/js-yaml@4.1.1", "type": "library", "bom-ref": "pkg:npm/js-yaml@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/js-yaml/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/js-yaml/package.json" } ], "concludedValue": "node_modules/js-yaml/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "jackspeak", "version": "3.4.3", "description": "A very strict and proper argument parser.", "scope": "optional", "licenses": [ { "license": { "id": "BlueOak-1.0.0", "url": "https://opensource.org/licenses/BlueOak-1.0.0" } } ], "purl": "pkg:npm/jackspeak@3.4.3", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/jackspeak.git" } ], "type": "library", "bom-ref": "pkg:npm/jackspeak@3.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/jackspeak/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/jackspeak/package.json" } ], "concludedValue": "node_modules/jackspeak/package.json" } ] } }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-reports", "version": "3.2.0", "description": "istanbul reports", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/istanbul-reports@3.2.0", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-reports@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-reports/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-reports/package.json" } ], "concludedValue": "node_modules/istanbul-reports/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-report", "version": "3.0.1", "description": "Base reporting library for istanbul", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/istanbul-lib-report@3.0.1", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-report/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-report/package.json" } ], "concludedValue": "node_modules/istanbul-lib-report/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Krishnan Anantheswaran " } ], "group": "", "name": "istanbul-lib-coverage", "version": "3.2.2", "description": "Data library for istanbul coverage objects", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/istanbul-lib-coverage@3.2.2", "externalReferences": [ { "type": "website", "url": "https://istanbul.js.org/" }, { "type": "vcs", "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git" } ], "type": "library", "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/istanbul-lib-coverage/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "isexe", "version": "2.0.0", "description": "Minimal module to check if a file is executable.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/isaacs/isexe#readme" }, { "type": "vcs", "url": "git+https://github.com/isaacs/isexe.git" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/isexe/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/isexe/package.json" } ], "concludedValue": "node_modules/isexe/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "is-unicode-supported", "version": "0.1.0", "description": "Detect whether the terminal supports Unicode", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-unicode-supported@0.1.0", "type": "library", "bom-ref": "pkg:npm/is-unicode-supported@0.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-unicode-supported/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-unicode-supported/package.json" } ], "concludedValue": "node_modules/is-unicode-supported/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "is-reference", "version": "1.2.1", "description": "Determine whether an AST node is a reference", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-reference@1.2.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/is-reference#readme" }, { "type": "vcs", "url": "git+https://github.com/Rich-Harris/is-reference.git" } ], "type": "library", "bom-ref": "pkg:npm/is-reference@1.2.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-reference/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-reference/package.json" } ], "concludedValue": "node_modules/is-reference/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-plain-obj", "version": "2.1.0", "description": "Check if a value is a plain object", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-plain-obj@2.1.0", "type": "library", "bom-ref": "pkg:npm/is-plain-obj@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-plain-obj/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-plain-obj/package.json" } ], "concludedValue": "node_modules/is-plain-obj/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-path-inside", "version": "3.0.3", "description": "Check if a path is inside another path", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-path-inside@3.0.3", "type": "library", "bom-ref": "pkg:npm/is-path-inside@3.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/is-path-inside/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-path-inside/package.json" } ], "concludedValue": "node_modules/is-path-inside/package.json" } ] } }, { "authors": [ { "name": "matthewh (https://matthewhatcher.com/)" } ], "group": "", "name": "is-node", "version": "1.1.1", "description": "Detect if current process is a node application or not.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-node@1.1.1", "externalReferences": [ { "type": "vcs", "url": "https://github.com/MatthewSH/npm-packages" }, { "type": "vcs", "url": "https://github.com/MatthewSH/npm-packages" } ], "type": "library", "bom-ref": "pkg:npm/is-node@1.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/is-node/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-node/package.json" } ], "concludedValue": "node_modules/is-node/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "description": "Check if the character represented by a given Unicode code point is fullwidth", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/is-fullwidth-code-point/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-fullwidth-code-point/package.json" } ], "concludedValue": "node_modules/is-fullwidth-code-point/package.json" } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (https://feross.org)" } ], "group": "", "name": "is-buffer", "version": "2.0.5", "description": "Determine if an object is a Buffer", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/is-buffer@2.0.5", "externalReferences": [ { "type": "vcs", "url": "git://github.com/feross/is-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/is-buffer@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/is-buffer/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/is-buffer/package.json" } ], "concludedValue": "node_modules/is-buffer/package.json" } ] } }, { "authors": [ { "name": "Andrea Giammarchi" } ], "group": "", "name": "html-escaper", "version": "2.0.2", "description": "fast and safe way to escape and unescape &<>'\" chars", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/html-escaper@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper" }, { "type": "vcs", "url": "https://github.com/WebReflection/html-escaper.git" } ], "type": "library", "bom-ref": "pkg:npm/html-escaper@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/html-escaper/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/html-escaper/package.json" } ], "concludedValue": "node_modules/html-escaper/package.json" } ] }, "tags": [ "escape", "unescape" ] }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "he", "version": "1.2.0", "description": "A robust HTML entities encoder/decoder with full Unicode support.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/he@1.2.0", "externalReferences": [ { "type": "website", "url": "https://mths.be/he" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/he.git" } ], "type": "library", "bom-ref": "pkg:npm/he@1.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/he/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/he/package.json" } ], "concludedValue": "node_modules/he/package.json" } ] }, "tags": [ "html" ] }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "has-flag", "version": "4.0.0", "description": "Check if argv has a specific flag", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/has-flag/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/has-flag/package.json" } ], "concludedValue": "node_modules/has-flag/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (https://blog.izs.me/)" } ], "group": "", "name": "glob", "version": "10.5.0", "description": "the most correct and second fastest glob implementation in JavaScript", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/glob@10.5.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/isaacs/node-glob.git" } ], "type": "library", "bom-ref": "pkg:npm/glob@10.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/glob/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/glob/package.json" } ], "concludedValue": "node_modules/glob/package.json" } ] } }, { "authors": [ { "name": "Stefan Penner" } ], "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/get-caller-file@2.0.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/stefanpenner/get-caller-file#readme" }, { "type": "vcs", "url": "git+https://github.com/stefanpenner/get-caller-file.git" } ], "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "node_modules/get-caller-file/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/get-caller-file/package.json" } ], "concludedValue": "node_modules/get-caller-file/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "foreground-child", "version": "3.3.1", "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/foreground-child@3.3.1", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/tapjs/foreground-child.git" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@3.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/foreground-child/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/foreground-child/package.json" } ], "concludedValue": "node_modules/foreground-child/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "fn.name", "version": "1.1.0", "description": "Extract names from functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/fn.name@1.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/3rd-Eden/fn.name" }, { "type": "vcs", "url": "https://github.com/3rd-Eden/fn.name" } ], "type": "library", "bom-ref": "pkg:npm/fn.name@1.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fn.name/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fn.name/package.json" } ], "concludedValue": "node_modules/fn.name/package.json" } ] } }, { "authors": [ { "name": "Hugh Kennedy (http://hughskennedy.com)" } ], "group": "", "name": "flat", "version": "5.0.2", "description": "Take a nested Javascript object and flatten it, or unflatten an object with delimited keys", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/flat@5.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/hughsk/flat" }, { "type": "vcs", "url": "git://github.com/hughsk/flat.git" } ], "type": "library", "bom-ref": "pkg:npm/flat@5.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/flat/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/flat/package.json" } ], "concludedValue": "node_modules/flat/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "find-up", "version": "5.0.0", "description": "Find a file or directory by walking up parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/find-up@5.0.0", "type": "library", "bom-ref": "pkg:npm/find-up@5.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/find-up/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/find-up/package.json" } ], "concludedValue": "node_modules/find-up/package.json" } ] } }, { "authors": [ { "name": "thecodrr " } ], "group": "", "name": "fdir", "version": "6.5.0", "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/fdir@6.5.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thecodrr/fdir#readme" }, { "type": "vcs", "url": "git+https://github.com/thecodrr/fdir.git" } ], "type": "library", "bom-ref": "pkg:npm/fdir@6.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/fdir/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/fdir/package.json" } ], "concludedValue": "node_modules/fdir/package.json" } ] } }, { "authors": [ { "name": "Rich Harris" } ], "group": "", "name": "estree-walker", "version": "2.0.2", "description": "Traverse an ESTree-compliant AST", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/estree-walker@2.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/Rich-Harris/estree-walker" } ], "type": "library", "bom-ref": "pkg:npm/estree-walker@2.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/estree-walker/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/estree-walker/package.json" } ], "concludedValue": "node_modules/estree-walker/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "escape-string-regexp", "version": "4.0.0", "description": "Escape RegExp special characters", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escape-string-regexp@4.0.0", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escape-string-regexp/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escape-string-regexp/package.json" } ], "concludedValue": "node_modules/escape-string-regexp/package.json" } ] } }, { "authors": [ { "name": "Luke Edwards (https://lukeed.com)" } ], "group": "", "name": "escalade", "version": "3.2.0", "description": "A tiny (183B to 210B) and fast utility to ascend parent directories", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/escalade@3.2.0", "type": "library", "bom-ref": "pkg:npm/escalade@3.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/escalade/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/escalade/package.json" } ], "concludedValue": "node_modules/escalade/package.json" } ] } }, { "authors": [ { "name": "Mathias Bynens (https://mathiasbynens.be/)" } ], "group": "", "name": "emoji-regex", "version": "9.2.2", "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/emoji-regex@9.2.2", "externalReferences": [ { "type": "website", "url": "https://mths.be/emoji-regex" }, { "type": "vcs", "url": "https://github.com/mathiasbynens/emoji-regex.git" } ], "type": "library", "bom-ref": "pkg:npm/emoji-regex@9.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/emoji-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/emoji-regex/package.json" } ], "concludedValue": "node_modules/emoji-regex/package.json" } ] } }, { "authors": [ { "name": "Masaki Komagata" } ], "group": "", "name": "eastasianwidth", "version": "0.2.0", "description": "Get East Asian Width from a character.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/eastasianwidth@0.2.0", "type": "library", "bom-ref": "pkg:npm/eastasianwidth@0.2.0", "properties": [ { "name": "SrcFile", "value": "node_modules/eastasianwidth/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/eastasianwidth/package.json" } ], "concludedValue": "node_modules/eastasianwidth/package.json" } ] } }, { "group": "", "name": "diff", "version": "7.0.0", "description": "A JavaScript text diff implementation.", "scope": "optional", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl": "pkg:npm/diff@7.0.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/kpdecker/jsdiff.git" } ], "type": "library", "bom-ref": "pkg:npm/diff@7.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/diff/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/diff/package.json" } ], "concludedValue": "node_modules/diff/package.json" } ] } }, { "authors": [ { "name": "Jake Luer " } ], "group": "", "name": "deep-eql", "version": "3.0.1", "description": "Improved deep equality testing for Node.js and the browser.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/deep-eql@3.0.1", "type": "library", "bom-ref": "pkg:npm/deep-eql@3.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/deep-eql/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/deep-eql/package.json" } ], "concludedValue": "node_modules/deep-eql/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "decamelize", "version": "4.0.0", "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/decamelize@4.0.0", "type": "library", "bom-ref": "pkg:npm/decamelize@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/decamelize/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/decamelize/package.json" } ], "concludedValue": "node_modules/decamelize/package.json" } ] } }, { "authors": [ { "name": "Josh Junon (https://github.com/qix-)" } ], "group": "", "name": "debug", "version": "4.4.3", "description": "Lightweight debugging utility for Node.js and the browser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "vcs", "url": "git://github.com/debug-js/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ] } }, { "authors": [ { "name": "André Cruz " } ], "group": "", "name": "cross-spawn", "version": "7.0.6", "description": "Cross platform child_process#spawn and child_process#spawnSync", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/cross-spawn@7.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/moxystudio/node-cross-spawn" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@7.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/cross-spawn/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cross-spawn/package.json" } ], "concludedValue": "node_modules/cross-spawn/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "2.0.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/convert-source-map@2.0.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@2.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "commondir", "version": "1.0.1", "description": "compute the closest common parent for file paths", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commondir@1.0.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/substack/node-commondir.git" } ], "type": "library", "bom-ref": "pkg:npm/commondir@1.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/commondir/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commondir/package.json" } ], "concludedValue": "node_modules/commondir/package.json" } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "commander", "version": "2.20.3", "description": "the complete solution for node.js command-line programs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/tj/commander.js.git" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "node_modules/commander/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/commander/package.json" } ], "concludedValue": "node_modules/commander/package.json" } ] } }, { "authors": [ { "name": "DY " } ], "group": "", "name": "color-name", "version": "1.1.4", "description": "A list of color names and its values", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-name@1.1.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/colorjs/color-name" } ], "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "node_modules/color-name/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-name/package.json" } ], "concludedValue": "node_modules/color-name/package.json" } ] } }, { "authors": [ { "name": "Heather Arthur " } ], "group": "", "name": "color-convert", "version": "2.0.1", "description": "Plain color conversion functions", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/color-convert/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/color-convert/package.json" } ], "concludedValue": "node_modules/color-convert/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "cliui", "version": "8.0.1", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/cliui@8.0.1", "type": "library", "bom-ref": "pkg:npm/cliui@8.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/cliui/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/cliui/package.json" } ], "concludedValue": "node_modules/cliui/package.json" } ] } }, { "authors": [ { "name": "Paul Miller (https://paulmillr.com)" } ], "group": "", "name": "chokidar", "version": "4.0.3", "description": "Minimal and efficient cross-platform file watching library", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chokidar@4.0.3", "externalReferences": [ { "type": "vcs", "url": "https://github.com/paulmillr/chokidar" }, { "type": "vcs", "url": "git+https://github.com/paulmillr/chokidar.git" } ], "type": "library", "bom-ref": "pkg:npm/chokidar@4.0.3", "properties": [ { "name": "SrcFile", "value": "node_modules/chokidar/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chokidar/package.json" } ], "concludedValue": "node_modules/chokidar/package.json" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "description": "Terminal string styling done right", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/chalk/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/chalk/package.json" } ], "concludedValue": "node_modules/chalk/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "camelcase", "version": "6.3.0", "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/camelcase@6.3.0", "type": "library", "bom-ref": "pkg:npm/camelcase@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/camelcase/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/camelcase/package.json" } ], "concludedValue": "node_modules/camelcase/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "", "name": "c8", "version": "10.1.3", "description": "output coverage reports using Node.js' built in coverage", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/c8@10.1.3", "type": "library", "bom-ref": "pkg:npm/c8@10.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/c8/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/c8/package.json" } ], "concludedValue": "node_modules/c8/package.json" } ] } }, { "group": "", "name": "buffer-from", "version": "1.1.2", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/buffer-from@1.1.2", "type": "library", "bom-ref": "pkg:npm/buffer-from@1.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/buffer-from/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/buffer-from/package.json" } ], "concludedValue": "node_modules/buffer-from/package.json" } ] } }, { "authors": [ { "name": "kumavis" } ], "group": "", "name": "browser-stdout", "version": "1.3.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/browser-stdout@1.3.1", "externalReferences": [ { "type": "vcs", "url": "http://github.com/kumavis/browser-stdout.git" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.1", "properties": [ { "name": "SrcFile", "value": "node_modules/browser-stdout/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/browser-stdout/package.json" } ], "concludedValue": "node_modules/browser-stdout/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "brace-expansion", "version": "2.1.0", "description": "Brace expansion as known from sh/bash", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/brace-expansion@2.1.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/brace-expansion" }, { "type": "vcs", "url": "git://github.com/juliangruber/brace-expansion.git" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@2.1.0", "properties": [ { "name": "SrcFile", "value": "node_modules/brace-expansion/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/brace-expansion/package.json" } ], "concludedValue": "node_modules/brace-expansion/package.json" } ] } }, { "authors": [ { "name": "Julian Gruber (http://juliangruber.com)" } ], "group": "", "name": "balanced-match", "version": "1.0.2", "description": "Match balanced character pairs, like \"{\" and \"}\"", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/juliangruber/balanced-match" }, { "type": "vcs", "url": "git://github.com/juliangruber/balanced-match.git" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/balanced-match/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/balanced-match/package.json" } ], "concludedValue": "node_modules/balanced-match/package.json" } ] } }, { "authors": [ { "name": "Arnout Kazemier" } ], "group": "", "name": "assume", "version": "2.3.0", "description": "Expect-like assertions that works seamlessly in node and browsers", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/assume@2.3.0", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bigpipe/assume.git" } ], "type": "library", "bom-ref": "pkg:npm/assume@2.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/assume/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/assume/package.json" } ], "concludedValue": "node_modules/assume/package.json" } ] } }, { "group": "", "name": "argparse", "version": "2.0.1", "description": "CLI arguments parser. Native port of python's argparse.", "scope": "optional", "licenses": [ { "license": { "id": "Python-2.0", "url": "https://opensource.org/licenses/Python-2.0" } } ], "purl": "pkg:npm/argparse@2.0.1", "type": "library", "bom-ref": "pkg:npm/argparse@2.0.1", "properties": [ { "name": "SrcFile", "value": "node_modules/argparse/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/argparse/package.json" } ], "concludedValue": "node_modules/argparse/package.json" } ] } }, { "authors": [ { "name": "Sindre Sorhus (sindresorhus.com)" } ], "group": "", "name": "ansi-styles", "version": "4.3.0", "description": "ANSI escape codes for styling strings in the terminal", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-styles/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-styles/package.json" } ], "concludedValue": "node_modules/ansi-styles/package.json" } ] }, "tags": [ "escape" ] }, { "authors": [ { "name": "Sindre Sorhus (https://sindresorhus.com)" } ], "group": "", "name": "ansi-regex", "version": "6.2.2", "description": "Regular expression for matching ANSI escape codes", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/ansi-regex@6.2.2", "type": "library", "bom-ref": "pkg:npm/ansi-regex@6.2.2", "properties": [ { "name": "SrcFile", "value": "node_modules/ansi-regex/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/ansi-regex/package.json" } ], "concludedValue": "node_modules/ansi-regex/package.json" } ] }, "tags": [ "escape" ] }, { "group": "", "name": "acorn", "version": "8.16.0", "description": "ECMAScript parser", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/acorn@8.16.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/acornjs/acorn" }, { "type": "vcs", "url": "git+https://github.com/acornjs/acorn.git" } ], "type": "library", "bom-ref": "pkg:npm/acorn@8.16.0", "properties": [ { "name": "SrcFile", "value": "node_modules/acorn/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/acorn/package.json" } ], "concludedValue": "node_modules/acorn/package.json" } ] } }, { "group": "@types", "name": "istanbul-lib-coverage", "version": "2.0.6", "description": "TypeScript definitions for istanbul-lib-coverage", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/istanbul-lib-coverage" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/istanbul-lib-coverage/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/istanbul-lib-coverage/package.json" } ], "concludedValue": "node_modules/@types/istanbul-lib-coverage/package.json" } ] }, "tags": [ "test" ] }, { "group": "@types", "name": "estree", "version": "1.0.8", "description": "TypeScript definitions for estree", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40types/estree@1.0.8", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree" }, { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/estree@1.0.8", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/estree/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/estree/package.json" } ], "concludedValue": "node_modules/@types/estree/package.json" } ] } }, { "authors": [ { "name": "Lukas Taegert-Atkinson" } ], "group": "@rollup", "name": "rollup-linux-x64-gnu", "version": "4.60.3", "description": "Native bindings for Rollup", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.60.3", "externalReferences": [ { "type": "website", "url": "https://rollupjs.org/" }, { "type": "vcs", "url": "git+https://github.com/rollup/rollup.git" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/rollup-linux-x64-gnu@4.60.3", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/rollup-linux-x64-gnu/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/rollup-linux-x64-gnu/package.json" } ], "concludedValue": "node_modules/@rollup/rollup-linux-x64-gnu/package.json" } ] } }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "pluginutils", "version": "5.3.0", "description": "A set of utility functions commonly used by Rollup plugins", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/pluginutils@5.3.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/pluginutils#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/pluginutils@5.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/pluginutils/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/pluginutils/package.json" } ], "concludedValue": "node_modules/@rollup/pluginutils/package.json" } ] } }, { "authors": [ { "name": "Peter Placzek " } ], "group": "@rollup", "name": "plugin-terser", "version": "0.4.4", "description": "Generate minified bundle", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-terser@0.4.4", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/terser#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-terser@0.4.4", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-terser/package.json" }, { "name": "ImportedModules", "value": "@rollup/plugin-terser" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-terser/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-terser/package.json" } ], "occurrences": [ { "location": "rollup.config.mjs#2" } ] } }, { "authors": [ { "name": "Rich Harris " } ], "group": "@rollup", "name": "plugin-commonjs", "version": "29.0.2", "description": "Convert CommonJS modules to ES2015", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40rollup/plugin-commonjs@29.0.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/rollup/plugins/tree/master/packages/commonjs/#readme" } ], "type": "library", "bom-ref": "pkg:npm/@rollup/plugin-commonjs@29.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@rollup/plugin-commonjs/package.json" }, { "name": "ImportedModules", "value": "@rollup/plugin-commonjs" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@rollup/plugin-commonjs/package.json" } ], "concludedValue": "node_modules/@rollup/plugin-commonjs/package.json" } ], "occurrences": [ { "location": "rollup.config.mjs#1" } ] } }, { "group": "@pkgjs", "name": "parseargs", "version": "0.11.0", "description": "Polyfill of future proposal for `util.parseArgs()`", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/pkgjs/parseargs#readme" } ], "type": "library", "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@pkgjs/parseargs/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@pkgjs/parseargs/package.json" } ], "concludedValue": "node_modules/@pkgjs/parseargs/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "trace-mapping", "version": "0.3.31", "description": "Trace the original position through a source map", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/trace-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "sourcemap-codec", "version": "1.5.5", "description": "Encode/decode sourcemap mappings", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/sourcemap-codec/package.json" } ], "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "source-map", "version": "0.3.11", "description": "Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/source-map@0.3.11", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/source-map" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.11", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/source-map/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/source-map/package.json" } ], "concludedValue": "node_modules/@jridgewell/source-map/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "resolve-uri", "version": "3.1.2", "description": "Resolve a URI relative to an optional base URI", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "type": "library", "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/resolve-uri/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/resolve-uri/package.json" } ], "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json" } ] } }, { "authors": [ { "name": "Justin Ridgewell " } ], "group": "@jridgewell", "name": "gen-mapping", "version": "0.3.13", "description": "Generate source maps", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping" }, { "type": "vcs", "url": "git+https://github.com/jridgewell/sourcemaps.git" } ], "type": "library", "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@jridgewell/gen-mapping/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@jridgewell/gen-mapping/package.json" } ], "concludedValue": "node_modules/@jridgewell/gen-mapping/package.json" } ] } }, { "authors": [ { "name": "Corey Farrell" } ], "group": "@istanbuljs", "name": "schema", "version": "0.1.6", "description": "Schemas describing various structures used by nyc and istanbuljs", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40istanbuljs/schema@0.1.6", "externalReferences": [ { "type": "vcs", "url": "https://github.com/istanbuljs/schema#readme" }, { "type": "vcs", "url": "git+https://github.com/istanbuljs/schema.git" } ], "type": "library", "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.6", "properties": [ { "name": "SrcFile", "value": "node_modules/@istanbuljs/schema/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@istanbuljs/schema/package.json" } ], "concludedValue": "node_modules/@istanbuljs/schema/package.json" } ] } }, { "authors": [ { "name": "Ben Coe " } ], "group": "@isaacs", "name": "cliui", "version": "8.0.2", "description": "easily create complex multi-column command-line-interfaces", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC" } } ], "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "type": "library", "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@isaacs/cliui/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@isaacs/cliui/package.json" } ], "concludedValue": "node_modules/@isaacs/cliui/package.json" } ] } }, { "authors": [ { "name": "Charles Samborski (https://demurgos.net)" } ], "group": "@bcoe", "name": "v8-coverage", "version": "1.0.2", "description": "Helper functions for V8 coverage files.", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT" } } ], "purl": "pkg:npm/%40bcoe/v8-coverage@1.0.2", "externalReferences": [ { "type": "vcs", "url": "git://github.com/bcoe/v8-coverage.git" } ], "type": "library", "bom-ref": "pkg:npm/@bcoe/v8-coverage@1.0.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@bcoe/v8-coverage/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@bcoe/v8-coverage/package.json" } ], "concludedValue": "node_modules/@bcoe/v8-coverage/package.json" } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/eventemitter3@5.0.4" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.3.3", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-07-28T16:40:34Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, July 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'eventemitter3' with version '5.0.4'. The package type in this SBOM is npm with 7 purl namespaces described under components. The components were identified from 144 source files." } ] }