{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:4e06c778-0588-41b4-98b5-9c457e4f4203", "version": 1, "metadata": { "timestamp": "2026-08-04T10:41:39Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "inquirer-checkbox-plus-prompt", "group": "", "version": "1.4.2", "description": "Checkbox with autocomplete and other additions for Inquirer", "purl": "pkg:npm/inquirer-checkbox-plus-prompt@1.4.2", "bom-ref": "pkg:npm/inquirer-checkbox-plus-prompt@1.4.2", "author": "Mohammad Fares ", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/faressoft/inquirer-checkbox-plus-prompt.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "yarn.lock" } ] }, "components": [ { "group": "", "name": "ansi-styles", "version": "4.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212" } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "chalk", "version": "4.1.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898" } ], "purl": "pkg:npm/chalk@4.1.2", "type": "library", "bom-ref": "pkg:npm/chalk@4.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "chalk" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 10 } ] } }, { "group": "", "name": "cli-cursor", "version": "3.1.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "23fcc7030b0a7fd16a1a85cce16591002a1bf7e48dba465377de03585e7b138b68a2e46e95b0b171487a44a5043909584c7267ce43ccc92bcf35a6922cd7cb67" } ], "purl": "pkg:npm/cli-cursor@3.1.0", "type": "library", "bom-ref": "pkg:npm/cli-cursor@3.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "cli-cursor" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 12 } ] } }, { "group": "", "name": "color-convert", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529" } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "color-name", "version": "1.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40" } ], "purl": "pkg:npm/color-name@1.1.4", "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16" } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "figures", "version": "3.2.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "c9a76e40544a2d760e1a0127e8065abbdd23de08123b28aa5d4d05f4965f79762135af899385feb38e40db38398e7b3cec60056b7e01066da45f0e17a4d71b76" } ], "purl": "pkg:npm/figures@3.2.0", "type": "library", "bom-ref": "pkg:npm/figures@3.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "figures" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 13 } ] } }, { "group": "", "name": "fuzzy", "version": "0.1.3", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "fe065f7eee3291aacbac288fdd882c6bce94028d44e6f11596f4eba642b2c1749b3fd5e1967de84a9f50495e7b804ab7245169189e0667ee73744a7715c521e3" } ], "purl": "pkg:npm/fuzzy@0.1.3", "type": "library", "bom-ref": "pkg:npm/fuzzy@0.1.3", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ImportedModules", "value": "fuzzy" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "example.js", "line": 8 } ] } }, { "group": "", "name": "has-flag", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d" } ], "purl": "pkg:npm/has-flag@4.0.0", "type": "library", "bom-ref": "pkg:npm/has-flag@4.0.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "lodash", "version": "4.17.21", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a" } ], "purl": "pkg:npm/lodash@4.17.21", "type": "library", "bom-ref": "pkg:npm/lodash@4.17.21", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "lodash" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 9 } ] } }, { "group": "", "name": "mimic-fn", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672" } ], "purl": "pkg:npm/mimic-fn@2.1.0", "type": "library", "bom-ref": "pkg:npm/mimic-fn@2.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "onetime", "version": "5.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "91ba5a4921894d674063928f55e30e2974ab3edafc0bc0bbc287496dcb1de758d19e60fe199bbc63456853a0e6e59e2f5abd0883fd4d2ae59129fee3e5a6984a" } ], "purl": "pkg:npm/onetime@5.1.2", "type": "library", "bom-ref": "pkg:npm/onetime@5.1.2", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "restore-cursor", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "97eb1279fcc7a63e6a8a6845484e5af27b9f65800cdec05254c00fb589260bee041f66a7486684317483d22cd141bbbd9dfc90f72e49ad59a9ec4f2866b523bc" } ], "purl": "pkg:npm/restore-cursor@3.1.0", "type": "library", "bom-ref": "pkg:npm/restore-cursor@3.1.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "rxjs", "version": "6.6.7", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "853770afeef260d213e67e00318a7ce4a03acb0d956b414b6b7460baf6e96b85b7239c729da059a38d5c3375ccfb843a7d1323dec058211d5502664c5d826f45" } ], "purl": "pkg:npm/rxjs@6.6.7", "type": "library", "bom-ref": "pkg:npm/rxjs@6.6.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" }, { "name": "ImportedModules", "value": "rxjs/operators" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ], "occurrences": [ { "location": "index.js", "line": 11 } ] } }, { "group": "", "name": "signal-exit", "version": "3.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" } ], "purl": "pkg:npm/signal-exit@3.0.7", "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.7", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "supports-color", "version": "7.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047" } ], "purl": "pkg:npm/supports-color@7.2.0", "type": "library", "bom-ref": "pkg:npm/supports-color@7.2.0", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } }, { "group": "", "name": "tslib", "version": "1.14.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126" } ], "purl": "pkg:npm/tslib@1.14.1", "type": "library", "bom-ref": "pkg:npm/tslib@1.14.1", "properties": [ { "name": "SrcFile", "value": "yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "yarn.lock" } ], "concludedValue": "yarn.lock" } ] } } ], "dependencies": [ { "ref": "pkg:npm/ansi-styles@4.3.0", "dependsOn": [ "pkg:npm/color-convert@2.0.1" ] }, { "ref": "pkg:npm/chalk@4.1.2", "dependsOn": [ "pkg:npm/ansi-styles@4.3.0", "pkg:npm/supports-color@7.2.0" ] }, { "ref": "pkg:npm/cli-cursor@3.1.0", "dependsOn": [ "pkg:npm/restore-cursor@3.1.0" ] }, { "ref": "pkg:npm/color-convert@2.0.1", "dependsOn": [ "pkg:npm/color-name@1.1.4" ] }, { "ref": "pkg:npm/color-name@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/figures@3.2.0", "dependsOn": [ "pkg:npm/escape-string-regexp@1.0.5" ] }, { "ref": "pkg:npm/fuzzy@0.1.3", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/lodash@4.17.21", "dependsOn": [] }, { "ref": "pkg:npm/mimic-fn@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/onetime@5.1.2", "dependsOn": [ "pkg:npm/mimic-fn@2.1.0" ] }, { "ref": "pkg:npm/restore-cursor@3.1.0", "dependsOn": [ "pkg:npm/onetime@5.1.2", "pkg:npm/signal-exit@3.0.7" ] }, { "ref": "pkg:npm/rxjs@6.6.7", "dependsOn": [ "pkg:npm/tslib@1.14.1" ] }, { "ref": "pkg:npm/signal-exit@3.0.7", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@7.2.0", "dependsOn": [ "pkg:npm/has-flag@4.0.0" ] }, { "ref": "pkg:npm/tslib@1.14.1", "dependsOn": [] }, { "ref": "pkg:npm/inquirer-checkbox-plus-prompt@1.4.2", "dependsOn": [ "pkg:npm/ansi-styles@4.3.0", "pkg:npm/chalk@4.1.2", "pkg:npm/cli-cursor@3.1.0", "pkg:npm/color-convert@2.0.1", "pkg:npm/color-name@1.1.4", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/figures@3.2.0", "pkg:npm/fuzzy@0.1.3", "pkg:npm/has-flag@4.0.0", "pkg:npm/lodash@4.17.21", "pkg:npm/mimic-fn@2.1.0", "pkg:npm/onetime@5.1.2", "pkg:npm/restore-cursor@3.1.0", "pkg:npm/rxjs@6.6.7", "pkg:npm/signal-exit@3.0.7", "pkg:npm/supports-color@7.2.0", "pkg:npm/tslib@1.14.1" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/inquirer-checkbox-plus-prompt@1.4.2" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.2", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-08-04T10:41:39Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'inquirer-checkbox-plus-prompt' with version '1.4.2'." } ] }