{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:1ee4c704-9106-47e4-b5f6-9a4d208ca4fa", "version": 1, "metadata": { "timestamp": "2026-09-24T03:10:11Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "core", "group": "@babel", "version": "7.13.15", "description": "Babel compiler core.", "purl": "pkg:npm/%40babel/core@7.13.15", "bom-ref": "pkg:npm/@babel/core@7.13.15", "author": "Sebastian McKenzie ", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-core" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@babel\\n@types" }, { "name": "cdx:bom:componentSrcFiles", "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/helper-compilation-targets/package.json\\nnode_modules/@babel/helper-module-transforms/node_modules/@babel/helper-module-transforms-BABEL_8_BREAKING-false/package.json\\nnode_modules/@babel/helper-transform-fixture-test-runner/package.json\\nnode_modules/@babel/helpers/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/template/package.json\\nnode_modules/@babel/traverse/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@types/convert-source-map/package.json\\nnode_modules/@types/debug/package.json\\nnode_modules/@types/lodash/package.json\\nnode_modules/@types/resolve/package.json\\nnode_modules/@types/semver/package.json\\nnode_modules/@types/source-map/package.json\\nnode_modules/convert-source-map/node_modules/safe-buffer/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/debug/node_modules/ms/package.json\\nnode_modules/debug/package.json\\nnode_modules/gensync/package.json\\nnode_modules/json5/node_modules/minimist/package.json\\nnode_modules/json5/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-false/node_modules/semver/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-false/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/node_modules/yallist/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/node_modules/lru-cache/node_modules/yallist/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/node_modules/lru-cache/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/package.json\\nnode_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/package.json\\nnode_modules/source-map/package.json" } ] }, "components": [ { "authors": [ { "name": "Nick Fitzgerald " } ], "group": "", "name": "source-map", "version": "0.5.7", "description": "Generates and consumes source maps", "scope": "required", "licenses": [ { "license": { "id": "BSD-3-Clause", "url": "https://opensource.org/licenses/BSD-3-Clause", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/source-map@0.5.7", "externalReferences": [ { "type": "vcs", "url": "https://github.com/mozilla/source-map" }, { "type": "vcs", "url": "http://github.com/mozilla/source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.5.7", "properties": [ { "name": "SrcFile", "value": "node_modules/source-map/package.json" }, { "name": "ImportedModules", "value": "source-map" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/source-map/package.json" } ], "concludedValue": "node_modules/source-map/package.json" } ], "occurrences": [ { "location": "lib/transformation/file/merge-map.js", "line": 8 }, { "location": "src/transformation/file/merge-map.ts", "line": 2 } ] } }, { "group": "", "name": "semver", "version": "7.3.4", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@7.3.4", "type": "library", "bom-ref": "pkg:npm/semver@7.3.4", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/package.json" } ], "occurrences": [ { "location": "lib/config/helpers/config-api.js", "line": 20 }, { "location": "lib/transformation/file/file.js", "line": 62 }, { "location": "src/config/helpers/config-api.ts", "line": 1 }, { "location": "src/config/helpers/config-api.ts", "line": 109 }, { "location": "src/transformation/file/file.ts", "line": 8 }, { "location": "src/transformation/file/file.ts", "line": 169 }, { "location": "src/transformation/file/file.ts", "line": 172 }, { "location": "src/transformation/file/file.ts", "line": 173 } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter " } ], "group": "", "name": "lru-cache", "version": "6.0.0", "description": "A cache object that deletes the least-recently-used items.", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/lru-cache@6.0.0", "type": "library", "bom-ref": "pkg:npm/lru-cache@6.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/node_modules/lru-cache/package.json" }, { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/package.json" } ], "concludedValue": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/package.json" } ] } }, { "authors": [ { "name": "Isaac Z. Schlueter (http://blog.izs.me/)" } ], "group": "", "name": "yallist", "version": "4.0.0", "description": "Yet Another Linked List", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/yallist@4.0.0", "externalReferences": [ { "type": "vcs", "url": "git+https://github.com/isaacs/yallist.git" } ], "type": "library", "bom-ref": "pkg:npm/yallist@4.0.0", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/semver/node_modules/lru-cache/node_modules/yallist/package.json" }, { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/node_modules/yallist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/node_modules/yallist/package.json" } ], "concludedValue": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-true/node_modules/lru-cache/node_modules/yallist/package.json" } ] } }, { "group": "", "name": "semver", "version": "6.3.0", "description": "The semantic version parser used by npm.", "scope": "required", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/semver@6.3.0", "type": "library", "bom-ref": "pkg:npm/semver@6.3.0", "properties": [ { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-false/package.json" }, { "name": "ImportedModules", "value": "semver" }, { "name": "SrcFile", "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-false/node_modules/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-false/node_modules/semver/package.json" } ], "concludedValue": "node_modules/semver/node_modules/semver-BABEL_8_BREAKING-false/node_modules/semver/package.json" } ], "occurrences": [ { "location": "lib/config/helpers/config-api.js", "line": 20 }, { "location": "lib/transformation/file/file.js", "line": 62 }, { "location": "src/config/helpers/config-api.ts", "line": 1 }, { "location": "src/config/helpers/config-api.ts", "line": 109 }, { "location": "src/transformation/file/file.ts", "line": 8 }, { "location": "src/transformation/file/file.ts", "line": 169 }, { "location": "src/transformation/file/file.ts", "line": 172 }, { "location": "src/transformation/file/file.ts", "line": 173 } ] } }, { "authors": [ { "name": "Aseem Kishore " } ], "group": "", "name": "json5", "version": "2.1.3", "description": "JSON for humans.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/json5@2.1.3", "externalReferences": [ { "type": "website", "url": "http://json5.org/" }, { "type": "vcs", "url": "git+https://github.com/json5/json5.git" } ], "type": "library", "bom-ref": "pkg:npm/json5@2.1.3", "properties": [ { "name": "SrcFile", "value": "node_modules/json5/package.json" }, { "name": "ImportedModules", "value": "json5" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json5/package.json" } ], "concludedValue": "node_modules/json5/package.json" } ], "occurrences": [ { "location": "lib/config/files/configuration.js", "line": 45 }, { "location": "src/config/files/configuration.ts", "line": 3 }, { "location": "src/config/files/configuration.ts", "line": 262 } ] } }, { "authors": [ { "name": "James Halliday (http://substack.net)" } ], "group": "", "name": "minimist", "version": "1.2.5", "description": "parse argument options", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/minimist@1.2.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/substack/minimist" }, { "type": "vcs", "url": "git://github.com/substack/minimist.git" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.5", "properties": [ { "name": "SrcFile", "value": "node_modules/json5/node_modules/minimist/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/json5/node_modules/minimist/package.json" } ], "concludedValue": "node_modules/json5/node_modules/minimist/package.json" } ] } }, { "authors": [ { "name": "Logan Smyth " } ], "group": "", "name": "gensync", "version": "1.0.0-beta.2", "description": "Allows users to use generators in order to write common functions that can be both sync or async.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/gensync@1.0.0-beta.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/loganfsmyth/gensync" }, { "type": "vcs", "url": "https://github.com/loganfsmyth/gensync.git" } ], "type": "library", "bom-ref": "pkg:npm/gensync@1.0.0-beta.2", "properties": [ { "name": "SrcFile", "value": "node_modules/gensync/package.json" }, { "name": "ImportedModules", "value": "gensync,Handler,gensync/Handler,Gensync,gensync/Gensync" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/gensync/package.json" } ], "concludedValue": "node_modules/gensync/package.json" } ], "occurrences": [ { "location": "lib/config/caching.js", "line": 16 }, { "location": "lib/config/config-descriptors.js", "line": 18 }, { "location": "lib/config/files/configuration.js", "line": 47 }, { "location": "lib/config/full.js", "line": 48 }, { "location": "lib/config/index.js", "line": 23 }, { "location": "lib/config/partial.js", "line": 31 }, { "location": "lib/config/printer.js", "line": 8 }, { "location": "lib/gensync-utils/async.js", "line": 11 }, { "location": "lib/gensync-utils/fs.js", "line": 10 }, { "location": "lib/parse.js", "line": 16 }, { "location": "lib/transform-ast.js", "line": 14 }, { "location": "lib/transform-file.js", "line": 20 }, { "location": "lib/transform.js", "line": 14 }, { "location": "src/config/caching.ts", "line": 1 }, { "location": "src/config/caching.ts", "line": 2 }, { "location": "src/config/caching.ts", "line": 32 }, { "location": "src/config/config-chain.ts", "line": 3 }, { "location": "src/config/config-descriptors.ts", "line": 1 }, { "location": "src/config/config-descriptors.ts", "line": 3 }, { "location": "src/config/config-descriptors.ts", "line": 275 }, { "location": "src/config/files/configuration.ts", "line": 4 }, { "location": "src/config/files/configuration.ts", "line": 5 }, { "location": "src/config/files/configuration.ts", "line": 107 }, { "location": "src/config/files/index-browser.ts", "line": 1 }, { "location": "src/config/files/module-types.ts", "line": 2 }, { "location": "src/config/files/package.ts", "line": 2 }, { "location": "src/config/files/plugins.ts", "line": 7 }, { "location": "src/config/files/utils.ts", "line": 1 }, { "location": "src/config/full.ts", "line": 1 }, { "location": "src/config/full.ts", "line": 2 }, { "location": "src/config/full.ts", "line": 51 }, { "location": "src/config/index.ts", "line": 1 }, { "location": "src/config/index.ts", "line": 21 }, { "location": "src/config/index.ts", "line": 27 }, { "location": "src/config/item.ts", "line": 1 }, { "location": "src/config/partial.ts", "line": 2 }, { "location": "src/config/partial.ts", "line": 3 }, { "location": "src/config/partial.ts", "line": 165 }, { "location": "src/config/printer.ts", "line": 1 }, { "location": "src/config/printer.ts", "line": 3 }, { "location": "src/config/printer.ts", "line": 140 }, { "location": "src/gensync-utils/async.ts", "line": 1 }, { "location": "src/gensync-utils/async.ts", "line": 3 }, { "location": "src/gensync-utils/async.ts", "line": 15 }, { "location": "src/gensync-utils/async.ts", "line": 23 }, { "location": "src/gensync-utils/async.ts", "line": 37 }, { "location": "src/gensync-utils/async.ts", "line": 49 }, { "location": "src/gensync-utils/async.ts", "line": 77 }, { "location": "src/gensync-utils/async.ts", "line": 87 }, { "location": "src/gensync-utils/async.ts", "line": 108 }, { "location": "src/gensync-utils/fs.ts", "line": 2 }, { "location": "src/gensync-utils/fs.ts", "line": 4 }, { "location": "src/gensync-utils/fs.ts", "line": 11 }, { "location": "src/gensync-utils/fs.ts", "line": 23 }, { "location": "src/parse.ts", "line": 1 }, { "location": "src/parse.ts", "line": 24 }, { "location": "src/parser/index.ts", "line": 1 }, { "location": "src/transform-ast.ts", "line": 1 }, { "location": "src/transform-ast.ts", "line": 22 }, { "location": "src/transform-file.ts", "line": 1 }, { "location": "src/transform-file.ts", "line": 26 }, { "location": "src/transform.ts", "line": 1 }, { "location": "src/transform.ts", "line": 19 }, { "location": "src/transformation/index.ts", "line": 4 }, { "location": "src/transformation/normalize-file.ts", "line": 4 } ] } }, { "authors": [ { "name": "TJ Holowaychuk " } ], "group": "", "name": "debug", "version": "4.1.1", "description": "small debugging utility", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/debug@4.1.1", "externalReferences": [ { "type": "vcs", "url": "git://github.com/visionmedia/debug.git" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.1.1", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/package.json" }, { "name": "ImportedModules", "value": "debug" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/package.json" } ], "concludedValue": "node_modules/debug/package.json" } ], "occurrences": [ { "location": "lib/config/config-chain.js", "line": 26 }, { "location": "lib/config/files/configuration.js", "line": 41 }, { "location": "lib/config/files/plugins.js", "line": 25 }, { "location": "lib/transformation/normalize-file.js", "line": 34 }, { "location": "src/config/config-chain.ts", "line": 2 }, { "location": "src/config/config-chain.ts", "line": 16 }, { "location": "src/config/files/configuration.ts", "line": 1 }, { "location": "src/config/files/configuration.ts", "line": 21 }, { "location": "src/config/files/plugins.ts", "line": 5 }, { "location": "src/config/files/plugins.ts", "line": 13 }, { "location": "src/transformation/normalize-file.ts", "line": 3 }, { "location": "src/transformation/normalize-file.ts", "line": 13 } ] } }, { "group": "", "name": "ms", "version": "2.1.2", "description": "Tiny millisecond conversion utility", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/ms@2.1.2", "type": "library", "bom-ref": "pkg:npm/ms@2.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/debug/node_modules/ms/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/debug/node_modules/ms/package.json" } ], "concludedValue": "node_modules/debug/node_modules/ms/package.json" } ] } }, { "authors": [ { "name": "Thorsten Lorenz (http://thlorenz.com)" } ], "group": "", "name": "convert-source-map", "version": "1.7.0", "description": "Converts a source-map from/to different formats and allows adding/changing properties.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/convert-source-map@1.7.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/thlorenz/convert-source-map" }, { "type": "vcs", "url": "git://github.com/thlorenz/convert-source-map.git" } ], "type": "library", "bom-ref": "pkg:npm/convert-source-map@1.7.0", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/package.json" }, { "name": "ImportedModules", "value": "convert-source-map,SourceMapConverter,convert-source-map/SourceMapConverter" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/package.json" } ], "concludedValue": "node_modules/convert-source-map/package.json" } ], "occurrences": [ { "location": "lib/transformation/file/generate.js", "line": 22 }, { "location": "lib/transformation/normalize-file.js", "line": 36 }, { "location": "src/transformation/file/generate.ts", "line": 2 }, { "location": "src/transformation/file/generate.ts", "line": 60 }, { "location": "src/transformation/normalize-file.ts", "line": 7 }, { "location": "src/transformation/normalize-file.ts", "line": 8 }, { "location": "src/transformation/normalize-file.ts", "line": 49 }, { "location": "src/transformation/normalize-file.ts", "line": 56 }, { "location": "src/transformation/normalize-file.ts", "line": 77 } ] } }, { "authors": [ { "name": "Feross Aboukhadijeh (http://feross.org)" } ], "group": "", "name": "safe-buffer", "version": "5.1.2", "description": "Safer Node.js Buffer API", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "vcs", "url": "https://github.com/feross/safe-buffer" }, { "type": "vcs", "url": "git://github.com/feross/safe-buffer.git" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "node_modules/convert-source-map/node_modules/safe-buffer/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/convert-source-map/node_modules/safe-buffer/package.json" } ], "concludedValue": "node_modules/convert-source-map/node_modules/safe-buffer/package.json" } ] } }, { "group": "@types", "name": "source-map", "version": "0.5.2", "description": "TypeScript definitions for source-map", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/source-map@0.5.2", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/source-map@0.5.2", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/source-map/package.json" } ], "concludedValue": "node_modules/@types/source-map/package.json" } ] } }, { "group": "@types", "name": "semver", "version": "5.5.0", "description": "TypeScript definitions for semver", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/semver@5.5.0", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/semver@5.5.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/semver/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/semver/package.json" } ], "concludedValue": "node_modules/@types/semver/package.json" } ] } }, { "group": "@types", "name": "resolve", "version": "1.20.0", "description": "TypeScript definitions for resolve", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/resolve@1.20.0", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/resolve@1.20.0", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/resolve/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/resolve/package.json" } ], "concludedValue": "node_modules/@types/resolve/package.json" } ] } }, { "group": "@types", "name": "lodash", "version": "4.14.168", "description": "TypeScript definitions for Lo-Dash", "scope": "excluded", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/lodash@4.14.168", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/lodash@4.14.168", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/lodash/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/lodash/package.json" } ], "concludedValue": "node_modules/@types/lodash/package.json" } ] } }, { "group": "@types", "name": "debug", "version": "4.1.5", "description": "TypeScript definitions for debug", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/debug@4.1.5", "externalReferences": [ { "type": "vcs", "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/debug@4.1.5", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/debug/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/debug/package.json" } ], "concludedValue": "node_modules/@types/debug/package.json" } ] } }, { "group": "@types", "name": "convert-source-map", "version": "1.5.1", "description": "TypeScript definitions for convert-source-map", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40types/convert-source-map@1.5.1", "externalReferences": [ { "type": "vcs", "url": "https://www.github.com/DefinitelyTyped/DefinitelyTyped.git" } ], "type": "library", "bom-ref": "pkg:npm/@types/convert-source-map@1.5.1", "properties": [ { "name": "SrcFile", "value": "node_modules/@types/convert-source-map/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@types/convert-source-map/package.json" } ], "concludedValue": "node_modules/@types/convert-source-map/package.json" } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "types", "version": "7.13.14", "description": "Babel Types is a Lodash-esque utility library for AST nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/types@7.13.14", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-types" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/types@7.13.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/types/package.json" }, { "name": "ExportedModules", "value": "@babel/types" }, { "name": "ImportedModules", "value": "@babel/types" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/types/package.json" } ], "concludedValue": "node_modules/@babel/types/package.json" } ], "occurrences": [ { "location": "lib/index.js", "line": 192 }, { "location": "lib/tools/build-external-helpers.js", "line": 39 }, { "location": "lib/transformation/file/file.js", "line": 39 }, { "location": "lib/transformation/normalize-file.js", "line": 9 }, { "location": "src/index.ts", "line": 10 }, { "location": "src/parser/index.ts", "line": 3 }, { "location": "src/tools/build-external-helpers.ts", "line": 4 }, { "location": "src/tools/build-external-helpers.ts", "line": 25 }, { "location": "src/tools/build-external-helpers.ts", "line": 28 }, { "location": "src/tools/build-external-helpers.ts", "line": 30 }, { "location": "src/tools/build-external-helpers.ts", "line": 31 }, { "location": "src/tools/build-external-helpers.ts", "line": 33 }, { "location": "src/tools/build-external-helpers.ts", "line": 34 }, { "location": "src/tools/build-external-helpers.ts", "line": 35 }, { "location": "src/tools/build-external-helpers.ts", "line": 37 }, { "location": "src/tools/build-external-helpers.ts", "line": 38 }, { "location": "src/tools/build-external-helpers.ts", "line": 40 }, { "location": "src/tools/build-external-helpers.ts", "line": 41 }, { "location": "src/tools/build-external-helpers.ts", "line": 43 }, { "location": "src/tools/build-external-helpers.ts", "line": 44 }, { "location": "src/tools/build-external-helpers.ts", "line": 51 }, { "location": "src/tools/build-external-helpers.ts", "line": 52 }, { "location": "src/tools/build-external-helpers.ts", "line": 54 }, { "location": "src/tools/build-external-helpers.ts", "line": 56 }, { "location": "src/tools/build-external-helpers.ts", "line": 57 }, { "location": "src/tools/build-external-helpers.ts", "line": 73 }, { "location": "src/tools/build-external-helpers.ts", "line": 76 }, { "location": "src/tools/build-external-helpers.ts", "line": 81 }, { "location": "src/tools/build-external-helpers.ts", "line": 85 }, { "location": "src/tools/build-external-helpers.ts", "line": 89 }, { "location": "src/tools/build-external-helpers.ts", "line": 90 }, { "location": "src/tools/build-external-helpers.ts", "line": 96 }, { "location": "src/tools/build-external-helpers.ts", "line": 98 }, { "location": "src/tools/build-external-helpers.ts", "line": 99 }, { "location": "src/tools/build-external-helpers.ts", "line": 101 }, { "location": "src/tools/build-external-helpers.ts", "line": 102 }, { "location": "src/tools/build-external-helpers.ts", "line": 104 }, { "location": "src/tools/build-external-helpers.ts", "line": 105 }, { "location": "src/tools/build-external-helpers.ts", "line": 107 }, { "location": "src/tools/build-external-helpers.ts", "line": 113 }, { "location": "src/tools/build-external-helpers.ts", "line": 117 }, { "location": "src/tools/build-external-helpers.ts", "line": 118 }, { "location": "src/tools/build-external-helpers.ts", "line": 121 }, { "location": "src/tools/build-external-helpers.ts", "line": 123 }, { "location": "src/tools/build-external-helpers.ts", "line": 130 }, { "location": "src/tools/build-external-helpers.ts", "line": 131 }, { "location": "src/transform-ast.ts", "line": 6 }, { "location": "src/transformation/file/file.ts", "line": 6 }, { "location": "src/transformation/file/file.ts", "line": 92 }, { "location": "src/transformation/file/file.ts", "line": 179 }, { "location": "src/transformation/index.ts", "line": 2 }, { "location": "src/transformation/normalize-file.ts", "line": 5 }, { "location": "src/transformation/normalize-file.ts", "line": 32 }, { "location": "src/transformation/normalize-file.ts", "line": 120 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "traverse", "version": "7.13.15", "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/traverse@7.13.15", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-traverse" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/traverse@7.13.15", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/traverse/package.json" }, { "name": "ExportedModules", "value": "@babel/traverse" }, { "name": "ImportedModules", "value": "@babel/traverse,NodePath,@babel/traverse/NodePath,Scope,@babel/traverse/Scope,HubInterface,@babel/traverse/HubInterface" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/traverse/package.json" } ], "concludedValue": "node_modules/@babel/traverse/package.json" } ], "occurrences": [ { "location": "lib/config/full.js", "line": 21 }, { "location": "lib/index.js", "line": 219 }, { "location": "lib/transformation/file/file.js", "line": 19 }, { "location": "lib/transformation/index.js", "line": 9 }, { "location": "src/config/full.ts", "line": 16 }, { "location": "src/config/full.ts", "line": 324 }, { "location": "src/index.ts", "line": 13 }, { "location": "src/transformation/file/file.ts", "line": 2 }, { "location": "src/transformation/file/file.ts", "line": 3 }, { "location": "src/transformation/file/file.ts", "line": 5 }, { "location": "src/transformation/file/file.ts", "line": 71 }, { "location": "src/transformation/file/file.ts", "line": 244 }, { "location": "src/transformation/index.ts", "line": 1 }, { "location": "src/transformation/index.ts", "line": 115 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "template", "version": "7.12.13", "description": "Generate an AST from a string template.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/template@7.12.13", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-template" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/template@7.12.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/template/package.json" }, { "name": "ExportedModules", "value": "@babel/template" }, { "name": "ImportedModules", "value": "@babel/template" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/template/package.json" } ], "concludedValue": "node_modules/@babel/template/package.json" } ], "occurrences": [ { "location": "lib/index.js", "line": 229 }, { "location": "lib/tools/build-external-helpers.js", "line": 29 }, { "location": "src/index.ts", "line": 14 }, { "location": "src/tools/build-external-helpers.ts", "line": 3 } ] }, "tags": [ "template" ] }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "parser", "version": "7.13.15", "description": "A JavaScript parser", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/parser@7.13.15", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-parser" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/parser@7.13.15", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/parser/package.json" }, { "name": "ExportedModules", "value": "@babel/parser" }, { "name": "ImportedModules", "value": "@babel/parser,parse,@babel/parser/parse" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/parser/package.json" } ], "concludedValue": "node_modules/@babel/parser/package.json" } ], "occurrences": [ { "location": "lib/index.js", "line": 209 }, { "location": "lib/parser/index.js", "line": 9 }, { "location": "src/index.ts", "line": 11 }, { "location": "src/parser/index.ts", "line": 2 }, { "location": "src/parser/index.ts", "line": 31 } ] }, "tags": [ "parse" ] }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "helpers", "version": "7.13.10", "description": "Collection of helper functions used by Babel transforms.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helpers@7.13.10", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-helpers" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helpers@7.13.10", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helpers/package.json" }, { "name": "ImportedModules", "value": "@babel/helpers" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helpers/package.json" } ], "concludedValue": "node_modules/@babel/helpers/package.json" } ], "occurrences": [ { "location": "lib/tools/build-external-helpers.js", "line": 9 }, { "location": "lib/transformation/file/file.js", "line": 9 }, { "location": "src/tools/build-external-helpers.ts", "line": 1 }, { "location": "src/tools/build-external-helpers.ts", "line": 140 }, { "location": "src/tools/build-external-helpers.ts", "line": 141 }, { "location": "src/transformation/file/file.ts", "line": 1 }, { "location": "src/transformation/file/file.ts", "line": 143 }, { "location": "src/transformation/file/file.ts", "line": 188 }, { "location": "src/transformation/file/file.ts", "line": 195 }, { "location": "src/transformation/file/file.ts", "line": 199 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "helper-transform-fixture-test-runner", "version": "7.13.15", "description": "Transform test runner for @babel/helper-fixtures module", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-transform-fixture-test-runner@7.13.15", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-helper-transform-fixture-test-runner" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-transform-fixture-test-runner@7.13.15", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-transform-fixture-test-runner/package.json" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-transform-fixture-test-runner/package.json" } ], "concludedValue": "node_modules/@babel/helper-transform-fixture-test-runner/package.json" } ] }, "tags": [ "test" ] }, { "authors": [ { "name": "Logan Smyth " } ], "group": "@babel", "name": "helper-module-transforms", "version": "7.13.14", "description": "Babel helper functions for implementing ES6 module transformations", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-module-transforms@7.13.14", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.13.14", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-module-transforms/node_modules/@babel/helper-module-transforms-BABEL_8_BREAKING-false/package.json" }, { "name": "ImportedModules", "value": "@babel/helper-module-transforms,getModuleName,@babel/helper-module-transforms/getModuleName" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-module-transforms/node_modules/@babel/helper-module-transforms-BABEL_8_BREAKING-false/package.json" } ], "concludedValue": "node_modules/@babel/helper-module-transforms/node_modules/@babel/helper-module-transforms-BABEL_8_BREAKING-false/package.json" } ], "occurrences": [ { "location": "lib/transformation/file/file.js", "line": 49 }, { "location": "src/transformation/file/file.ts", "line": 7 }, { "location": "src/transformation/file/file.ts", "line": 121 } ] } }, { "authors": [ { "name": "The Babel Team (https://babel.dev/team)" } ], "group": "@babel", "name": "helper-compilation-targets", "version": "7.13.13", "description": "Engine compat data used in @babel/preset-env", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/helper-compilation-targets@7.13.13", "externalReferences": [ { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.13.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/helper-compilation-targets/package.json" }, { "name": "ImportedModules", "value": "@babel/helper-compilation-targets,Targets,@babel/helper-compilation-targets/Targets,isBrowsersQueryValid,@babel/helper-compilation-targets/isBrowsersQueryValid,TargetNames,@babel/helper-compilation-targets/TargetNames,InputTargets,@babel/helper-compilation-targets/InputTargets" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/helper-compilation-targets/package.json" } ], "concludedValue": "node_modules/@babel/helper-compilation-targets/package.json" } ], "occurrences": [ { "location": "lib/config/resolve-targets-browser.js", "line": 10 }, { "location": "lib/config/resolve-targets.js", "line": 10 }, { "location": "lib/config/validation/option-assertions.js", "line": 28 }, { "location": "src/config/cache-contexts.ts", "line": 1 }, { "location": "src/config/helpers/config-api.ts", "line": 2 }, { "location": "src/config/resolve-targets-browser.ts", "line": 2 }, { "location": "src/config/resolve-targets-browser.ts", "line": 4 }, { "location": "src/config/resolve-targets-browser.ts", "line": 29 }, { "location": "src/config/resolve-targets.ts", "line": 10 }, { "location": "src/config/resolve-targets.ts", "line": 12 }, { "location": "src/config/resolve-targets.ts", "line": 43 }, { "location": "src/config/validation/option-assertions.ts", "line": 4 }, { "location": "src/config/validation/option-assertions.ts", "line": 398 }, { "location": "src/config/validation/option-assertions.ts", "line": 432 }, { "location": "src/config/validation/options.ts", "line": 1 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "generator", "version": "7.13.9", "description": "Turns an AST into code.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/generator@7.13.9", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-generator" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/generator@7.13.9", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/generator/package.json" }, { "name": "ImportedModules", "value": "@babel/generator" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/generator/package.json" } ], "concludedValue": "node_modules/@babel/generator/package.json" } ], "occurrences": [ { "location": "lib/tools/build-external-helpers.js", "line": 19 }, { "location": "lib/transformation/file/generate.js", "line": 9 }, { "location": "src/tools/build-external-helpers.ts", "line": 2 }, { "location": "src/tools/build-external-helpers.ts", "line": 166 }, { "location": "src/transformation/file/generate.ts", "line": 4 }, { "location": "src/transformation/file/generate.ts", "line": 37 } ] } }, { "authors": [ { "name": "Sebastian McKenzie " } ], "group": "@babel", "name": "code-frame", "version": "7.12.13", "description": "Generate errors that contain a code frame that point to source locations.", "scope": "required", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40babel/code-frame@7.12.13", "externalReferences": [ { "type": "website", "url": "https://babel.dev/docs/en/next/babel-code-frame" }, { "type": "vcs", "url": "https://github.com/babel/babel.git" } ], "type": "library", "bom-ref": "pkg:npm/@babel/code-frame@7.12.13", "properties": [ { "name": "SrcFile", "value": "node_modules/@babel/code-frame/package.json" }, { "name": "ImportedModules", "value": "@babel/code-frame,codeFrameColumns,@babel/code-frame/codeFrameColumns" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "node_modules/@babel/code-frame/package.json" } ], "concludedValue": "node_modules/@babel/code-frame/package.json" } ], "occurrences": [ { "location": "lib/parser/index.js", "line": 19 }, { "location": "lib/transformation/file/file.js", "line": 29 }, { "location": "src/parser/index.ts", "line": 4 }, { "location": "src/parser/index.ts", "line": 56 }, { "location": "src/transformation/file/file.ts", "line": 4 }, { "location": "src/transformation/file/file.ts", "line": 259 } ] } } ], "dependencies": [], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@babel/core@7.13.15" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-24T03:10:11Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'core' with version '7.13.15'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 32 source files." } ] }