{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:295a938f-2d9c-4729-8e89-1aa9c1080bcc", "version": 1, "metadata": { "timestamp": "2026-09-26T13:31:55Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "client-web", "group": "@clickhouse", "version": "0.2.10", "description": "Official JS client for ClickHouse DB - Web API implementation", "purl": "pkg:npm/%40clickhouse/client-web@0.2.10", "bom-ref": "pkg:npm/@clickhouse/client-web@0.2.10", "properties": [ { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://clickhouse.com" }, { "type": "vcs", "url": "https://github.com/ClickHouse/clickhouse-js.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@clickhouse" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "@clickhouse", "name": "client-common", "version": "1.23.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "3a4bb13e443ea61f020abb7fe03601be527d0fd43dabb170bcff05770111fbb50334ede337811ee92665f622eea4a248bca7ae4baf3ec7ce99caa16e1dd3cade" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/%40clickhouse/client-common@1.23.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@clickhouse/client-common/-/client-common-1.23.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@clickhouse/client-common@1.23.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@clickhouse/client-common/-/client-common-1.23.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "Deprecated: import from @clickhouse/client or @clickhouse/client-web instead." }, { "name": "ExportedModules", "value": "@clickhouse/client-common,BaseClickHouseClientConfigOptions,@clickhouse/client-common/BaseClickHouseClientConfigOptions,ClickHouseClientConfigOptions,@clickhouse/client-common/ClickHouseClientConfigOptions,BaseQueryParams,@clickhouse/client-common/BaseQueryParams,QueryParams,@clickhouse/client-common/QueryParams,ExecParams,@clickhouse/client-common/ExecParams,InsertParams,@clickhouse/client-common/InsertParams,InsertValues,@clickhouse/client-common/InsertValues,CommandParams,@clickhouse/client-common/CommandParams,CommandResult,@clickhouse/client-common/CommandResult,ExecResult,@clickhouse/client-common/ExecResult,InsertResult,@clickhouse/client-common/InsertResult,DataFormat,@clickhouse/client-common/DataFormat,ErrorLogParams,@clickhouse/client-common/ErrorLogParams,Logger,@clickhouse/client-common/Logger,LogParams,@clickhouse/client-common/LogParams,ClickHouseSettings,@clickhouse/client-common/ClickHouseSettings,MergeTreeSettings,@clickhouse/client-common/MergeTreeSettings,@clickhouse/client-common/Row,ResponseJSON,@clickhouse/client-common/ResponseJSON,InputJSON,@clickhouse/client-common/InputJSON,InputJSONObjectEachRow,@clickhouse/client-common/InputJSONObjectEachRow,BaseResultSet,@clickhouse/client-common/BaseResultSet,PingResult,@clickhouse/client-common/PingResult,ClickHouseError,@clickhouse/client-common/ClickHouseError,ClickHouseLogLevel,@clickhouse/client-common/ClickHouseLogLevel,ClickHouseClient,@clickhouse/client-common/ClickHouseClient,SettingsMap,@clickhouse/client-common/SettingsMap" }, { "name": "ImportedModules", "value": "@clickhouse/client-common,BaseClickHouseClientConfigOptions,@clickhouse/client-common/BaseClickHouseClientConfigOptions,BaseResultSet,@clickhouse/client-common/BaseResultSet,ConnectionParams,@clickhouse/client-common/ConnectionParams,DataFormat,@clickhouse/client-common/DataFormat,InputJSON,@clickhouse/client-common/InputJSON,InputJSONObjectEachRow,@clickhouse/client-common/InputJSONObjectEachRow,InsertParams,@clickhouse/client-common/InsertParams,InsertResult,@clickhouse/client-common/InsertResult,QueryParams,@clickhouse/client-common/QueryParams,@clickhouse/client-common/Row,ClickHouseClient,@clickhouse/client-common/ClickHouseClient,ConnBaseQueryParams,@clickhouse/client-common/ConnBaseQueryParams,Connection,@clickhouse/client-common/Connection,ConnInsertParams,@clickhouse/client-common/ConnInsertParams,ConnInsertResult,@clickhouse/client-common/ConnInsertResult,ConnPingResult,@clickhouse/client-common/ConnPingResult,ConnQueryResult,@clickhouse/client-common/ConnQueryResult,isSuccessfulResponse,@clickhouse/client-common/isSuccessfulResponse,parseError,@clickhouse/client-common/parseError,toSearchParams,@clickhouse/client-common/toSearchParams,transformUrl,@clickhouse/client-common/transformUrl,withCompressionHeaders,@clickhouse/client-common/withCompressionHeaders,withHttpSettings,@clickhouse/client-common/withHttpSettings,decode,@clickhouse/client-common/decode,validateStreamFormat,@clickhouse/client-common/validateStreamFormat,InsertValues,@clickhouse/client-common/InsertValues,ValuesEncoder,@clickhouse/client-common/ValuesEncoder,encodeJSON,@clickhouse/client-common/encodeJSON" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "src/client.ts", "line": 12 }, { "location": "src/client.ts", "line": 13 }, { "location": "src/connection/web_connection.ts", "line": 9 }, { "location": "src/connection/web_connection.ts", "line": 17 }, { "location": "src/connection/web_connection.ts", "line": 46 }, { "location": "src/connection/web_connection.ts", "line": 50 }, { "location": "src/connection/web_connection.ts", "line": 72 }, { "location": "src/connection/web_connection.ts", "line": 94 }, { "location": "src/connection/web_connection.ts", "line": 154 }, { "location": "src/connection/web_connection.ts", "line": 177 }, { "location": "src/connection/web_connection.ts", "line": 190 }, { "location": "src/connection/web_connection.ts", "line": 194 }, { "location": "src/connection/web_connection.ts", "line": 209 }, { "location": "src/index.ts", "line": 33 }, { "location": "src/result_set.ts", "line": 1 }, { "location": "src/result_set.ts", "line": 2 }, { "location": "src/result_set.ts", "line": 20 }, { "location": "src/result_set.ts", "line": 25 }, { "location": "src/result_set.ts", "line": 48 }, { "location": "src/utils/encoder.ts", "line": 5 }, { "location": "src/utils/encoder.ts", "line": 6 }, { "location": "src/utils/encoder.ts", "line": 17 }, { "location": "src/utils/encoder.ts", "line": 21 } ] } } ], "dependencies": [ { "ref": "pkg:npm/@clickhouse/client-common@1.23.0", "dependsOn": [] }, { "ref": "pkg:npm/@clickhouse/client-web@0.2.10", "dependsOn": [ "pkg:npm/@clickhouse/client-common@1.23.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/@clickhouse/client-web@0.2.10" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-26T13:31:55Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, September 26, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'client-web' with version '0.2.10'. The package type in this SBOM is npm with a single purl namespace '@clickhouse' described under components. The components were identified from the source files: package-lock.json." } ] }